$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json) Hash identifier: xaomgL9sIxHvAFuJDGdIcV7xGVK5sh0ik5a3WnG+64c= Subject key identifier: 89:F1:5D:DB:C7:B5:61:49:66:52:7C:CB:A6:16:7C:94:0C:11:58:16 Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft Manifest number: 02D1 Signing time: Sun 19 May 2024 03:24:15 +0000 Manifest this update: Sun 19 May 2024 03:24:15 +0000 Manifest next update: Sun 26 May 2024 03:24:15 +0000 Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: yiZGdcc6VmoRKqBLs06HDhRYX2qvYbV7qpnRcE9BR9s=) 2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: cRibNPJM0oziCi5gTyLkkOA1GmdRwoOWdhdIN3I1xvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Validity Not Before: May 19 03:24:15 2024 GMT Not After : May 26 03:24:15 2024 GMT Subject: CN=664970df-2267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:2d:97:1e:83:bc:0e:58:ea:08:e4:a3:e9: 4b:ce:e4:1d:22:1f:1a:84:1b:78:88:eb:18:26:da: 35:8c:b1:38:92:4a:47:b9:e7:e7:15:44:71:e9:f3: 46:47:15:7b:5d:84:62:b6:3f:22:2e:c0:44:6f:f1: d4:dc:fd:91:09:94:5f:c4:cd:cc:9f:c5:85:94:96: bf:03:eb:75:cb:0a:d8:86:96:ad:8b:75:00:7e:b5: 10:21:87:b0:eb:33:74:a6:cd:e0:41:79:8d:a5:bb: 4e:39:fd:bb:81:07:85:a9:e0:d8:8d:27:b6:38:c2: 99:51:f9:c5:67:5a:4c:36:d7:5a:85:82:2f:10:b7: d7:74:07:95:cc:cc:b7:14:68:af:9a:fe:c4:90:4a: 41:41:15:96:d7:d7:28:6d:64:f5:a6:53:2a:1b:90: 5e:19:00:e7:1d:30:93:c9:f3:2f:65:43:60:53:31: 54:5c:60:cd:a3:35:d7:3e:8c:b6:c4:79:97:98:0b: 76:a7:d6:37:f9:c1:c1:03:a6:a7:63:92:6e:62:aa: 5b:0f:9b:10:00:f8:b0:39:10:ef:67:6d:2d:e5:94: 8f:a5:42:da:69:78:f9:6e:ba:42:61:f9:53:62:c5: a3:21:25:14:ce:44:86:85:99:82:0e:ac:b1:a8:5e: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F1:5D:DB:C7:B5:61:49:66:52:7C:CB:A6:16:7C:94:0C:11:58:16 X509v3 Authority Key Identifier: keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:12:13:ca:8d:05:85:bb:d9:f4:85:6b:5f:92:f2:66:9d:01: c2:a2:f0:41:3e:cc:e6:8c:58:6c:1b:82:ca:48:d2:34:cf:b6: fe:04:83:45:82:b1:41:b5:bc:d5:65:00:29:e6:ef:0e:e3:2e: 98:96:c1:5e:c9:9e:62:12:0f:2c:4a:1f:3f:cd:0a:ff:fd:4b: 2a:b6:e6:11:75:53:85:43:0c:93:52:03:9c:cd:58:71:cd:6e: 19:57:f6:89:1c:6a:b5:6d:1c:7d:58:57:4d:ec:94:6b:f9:8d: c0:15:45:38:82:ee:38:23:8a:95:18:2c:29:ce:bf:3d:e8:e4: 19:0a:85:1a:78:92:b5:67:ca:51:02:f1:d6:d8:0a:ed:01:bc: aa:a0:7c:1b:2d:f8:0d:88:1a:9d:36:84:b7:e4:d0:c3:89:ed: bd:6f:16:a3:21:eb:a7:13:48:6e:29:ce:01:49:98:ba:8f:a9: 8d:b5:17:44:19:f5:29:52:b6:7f:57:16:df:a9:a5:38:e8:b7: 02:d1:68:9c:66:ea:cc:de:9c:21:a5:a7:80:22:8a:33:14:f8: d1:17:f0:0b:a8:b8:4b:67:22:de:df:b0:aa:8b:4f:d7:ac:a2: d7:8c:48:8a:7a:ac:de:59:51:4a:e0:a0:b9:82:71:2f:c7:51: dc:69:8f:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2M0Y1ODZDQjBF NjY3NjA0MDIwHhcNMjQwNTE5MDMyNDE1WhcNMjQwNTI2MDMyNDE1WjAYMRYwFAYD VQQDEw02NjQ5NzBkZi0yMjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti8tlx6DvA5Y6gjko+lLzuQdIh8ahBt4iOsYJto1jLE4kkpHuefnFURx6fNG RxV7XYRitj8iLsBEb/HU3P2RCZRfxM3Mn8WFlJa/A+t1ywrYhpati3UAfrUQIYew 6zN0ps3gQXmNpbtOOf27gQeFqeDYjSe2OMKZUfnFZ1pMNtdahYIvELfXdAeVzMy3 FGivmv7EkEpBQRWW19cobWT1plMqG5BeGQDnHTCTyfMvZUNgUzFUXGDNozXXPoy2 xHmXmAt2p9Y3+cHBA6anY5JuYqpbD5sQAPiwORDvZ20t5ZSPpULaaXj5brpCYflT YsWjISUUzkSGhZmCDqyxqF7xvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInxXdvH tWFJZlJ8y6YWfJQMEVgWMB8GA1UdIwQYMBaAFD5bPKufFBoG64MuY/WGyw5mdgQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDZGQy9BRUYyMzBFMjlF RUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdnYnJneTVqOVliTERtWjJC QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BsczhxNThVR2dicmd5NWo5WWJMRG1aMkJBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4VUdn YnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDEhPKjQWFu9n0hWtfkvJmnQHCovBBPszmjFhsG4LKSNI0z7b+BINF grFBtbzVZQAp5u8O4y6YlsFeyZ5iEg8sSh8/zQr//UsqtuYRdVOFQwyTUgOczVhx zW4ZV/aJHGq1bRx9WFdN7JRr+Y3AFUU4gu44I4qVGCwpzr896OQZCoUaeJK1Z8pR AvHW2ArtAbyqoHwbLfgNiBqdNoS35NDDie29bxajIeunE0huKc4BSZi6j6mNtRdE GfUpUrZ/VxbfqaU46LcC0WicZurM3pwhpaeAIoozFPjRF/ALqLhLZyLe37Cqi0/X rKLXjEiKeqzeWVFK4KC5gnEvx1HcaY9w -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org