$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: Evaf/fxqf5bKR3+39P1wva6kNJrR+1VikymrwAFMfm0= Subject key identifier: E1:70:37:0B:81:84:EA:5A:E1:2F:6E:D6:1B:04:D4:13:1B:92:3D:6F Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 0111 Signing time: Sun 19 May 2024 05:25:45 +0000 Manifest this update: Sun 19 May 2024 05:25:45 +0000 Manifest next update: Sun 26 May 2024 05:25:45 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: B3F9r4/G5wsM+A1eWIdhdsJwJ7dP/OOpFw8Slun08M4=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: PRlgeU9l97eXnXg8cbyi2HDfwXPS3np14g8ZcLj+7FY=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: G06FvFoAJ5h41BcLQmGwH2tbR32/ZGzMoGbsCmnNNC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: May 19 05:25:45 2024 GMT Not After : May 26 05:25:45 2024 GMT Subject: CN=66498d59-59d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:0b:9b:58:be:d5:da:3b:8b:20:53:70:32: be:76:40:45:1c:dc:e9:7a:86:f8:f0:4d:dc:f7:ea: 71:32:73:1c:05:d2:cf:09:3c:9e:bc:3e:2e:12:36: 79:87:31:bd:d6:34:02:ca:37:a1:eb:78:fc:13:e9: 53:fc:fe:88:00:cc:91:1f:93:98:89:a8:96:7c:0e: ae:e0:84:f1:21:a4:ab:2d:3a:be:b6:62:77:db:73: 61:66:9f:f0:5e:b6:aa:97:d7:08:2e:aa:dc:c5:55: c9:8d:ca:d6:26:7f:fa:6a:c8:a6:8e:8c:e8:36:70: 4e:21:f6:58:e1:a4:54:18:36:40:a0:71:9f:13:5e: 4b:dc:35:50:e0:f2:d0:ff:ef:68:f7:29:b7:7b:bf: 02:e7:b5:18:98:51:82:51:3d:d8:99:21:30:e7:91: c5:1b:cd:6b:0a:df:9d:f1:0d:58:a5:2a:9d:87:b4: 94:3c:4b:15:ec:13:45:59:dc:1f:9c:80:da:8f:af: 48:4a:73:90:d6:a1:50:dc:58:e6:c3:75:8b:40:cb: 29:79:15:99:05:ae:05:f5:1f:34:22:63:ca:37:61: 25:0a:67:33:40:d5:9d:ae:c6:ff:b1:f5:57:c2:3b: 02:54:c9:75:e3:c6:e6:ce:91:2b:2a:9f:98:1a:06: 63:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:70:37:0B:81:84:EA:5A:E1:2F:6E:D6:1B:04:D4:13:1B:92:3D:6F X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:4e:14:85:d7:78:09:4d:e5:67:cb:7b:68:32:59:8f:58:dd: 0a:cf:aa:4c:b1:5d:8a:b3:96:2f:f3:fb:90:54:fb:56:bb:47: d8:51:dd:c3:67:cb:63:40:ba:9d:23:95:93:60:c0:d9:c1:b1: db:46:63:65:cd:9e:94:9e:91:46:1f:30:59:f6:7b:bd:a3:0f: f5:b5:ba:ac:8c:39:3d:ca:8f:a5:da:05:0b:9a:3a:93:63:a2: 36:a2:74:ec:bc:77:60:fb:00:08:51:56:29:79:0d:89:50:8e: 8e:c0:f6:43:e5:7d:c6:ce:ee:0a:cb:9d:32:e4:10:3c:a9:c4: 0e:81:09:9a:d2:fd:64:11:43:ef:1c:3e:09:eb:8b:50:1e:96: 1c:0a:c6:05:87:90:e3:76:1c:10:76:93:b4:da:93:93:af:87: 77:0a:45:fa:6f:be:c1:da:cf:1d:bc:40:1f:cd:29:ec:f4:3c: 88:01:c2:c7:79:c8:8b:5e:31:50:2b:77:77:1d:c2:ba:30:45: 3e:eb:f4:bb:20:8f:e2:6f:b1:bc:56:a1:1d:72:34:87:eb:7c: 48:a0:c5:62:d0:aa:70:3b:ca:42:ef:d1:53:90:77:2b:3c:8c: 59:04:22:16:3b:a1:37:5d:65:6a:53:a5:b5:c3:05:4e:de:45: 9c:57:4d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjQwNTE5MDUyNTQ1WhcNMjQwNTI2MDUyNTQ1WjAYMRYwFAYD VQQDEw02NjQ5OGQ1OS01OWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQsLm1i+1do7iyBTcDK+dkBFHNzpeob48E3c9+pxMnMcBdLPCTyevD4uEjZ5 hzG91jQCyjeh63j8E+lT/P6IAMyRH5OYiaiWfA6u4ITxIaSrLTq+tmJ323NhZp/w Xraql9cILqrcxVXJjcrWJn/6asimjozoNnBOIfZY4aRUGDZAoHGfE15L3DVQ4PLQ /+9o9ym3e78C57UYmFGCUT3YmSEw55HFG81rCt+d8Q1YpSqdh7SUPEsV7BNFWdwf nIDaj69ISnOQ1qFQ3Fjmw3WLQMspeRWZBa4F9R80ImPKN2ElCmczQNWdrsb/sfVX wjsCVMl148bmzpErKp+YGgZjAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFwNwuB hOpa4S9u1hsE1BMbkj1vMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFThSF13gJTeVny3toMlmPWN0Kz6pMsV2Ks5Yv8/uQVPtWu0fYUd3D Z8tjQLqdI5WTYMDZwbHbRmNlzZ6UnpFGHzBZ9nu9ow/1tbqsjDk9yo+l2gULmjqT Y6I2onTsvHdg+wAIUVYpeQ2JUI6OwPZD5X3Gzu4Ky50y5BA8qcQOgQma0v1kEUPv HD4J64tQHpYcCsYFh5DjdhwQdpO02pOTr4d3CkX6b77B2s8dvEAfzSns9DyIAcLH eciLXjFQK3d3HcK6MEU+6/S7II/ib7G8VqEdcjSH63xIoMVi0KpwO8pC79FTkHcr PIxZBCIWO6E3XWVqU6W1wwVO3kWcV01q -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org