$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft File: PDml0ZGM9lqyVjMi8PXxQwmme48.mft (raw, json) Hash identifier: RrZ7G/759/aCQcKiANdd+ohMTkzC6wLEYGLh12rK+b8= Subject key identifier: 83:BC:BB:3E:56:EB:31:9B:8C:68:2C:F4:5F:A6:B3:0C:69:E2:95:AB Authority key identifier: 3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F Certificate issuer: /CN=A91E2F2C/serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft Manifest number: 08B0 Signing time: Sat 18 May 2024 21:32:52 +0000 Manifest this update: Sat 18 May 2024 21:32:51 +0000 Manifest next update: Sat 25 May 2024 21:32:51 +0000 Files and hashes: 1: PDml0ZGM9lqyVjMi8PXxQwmme48.crl (hash: 4bgmE19ljrvry5GrB2dEmXIoT2yKkpe/ND9GdQgTXPs=) 2: DE07328A778911ECBD9C7748C4F9AE02.roa (hash: mdoKa+ieW/3WtLg8rKPDysDH2Y4w89IP4YZyJeqI3ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F2C/serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F Validity Not Before: May 18 21:32:51 2024 GMT Not After : May 25 21:32:51 2024 GMT Subject: CN=66491e83-cc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:6a:ad:2b:b5:b9:bb:f8:5d:87:cf:c7:3f: 3b:4b:84:03:f8:69:fc:dd:6b:6c:4d:c3:67:01:bc: 0b:d9:65:94:3d:15:13:94:59:b6:db:44:fe:b1:0e: dd:3a:0f:78:e0:4d:18:9a:98:3f:69:75:d9:c0:be: ca:3a:90:c4:b6:a2:12:33:ef:14:ae:74:bf:eb:e0: 0a:27:ff:33:7b:3e:5a:45:29:6a:88:4d:d3:80:d0: f7:b5:d5:54:a7:90:d9:9a:e7:dd:83:ce:7c:54:28: 6a:c5:dd:6d:f1:0a:59:28:29:96:a9:7e:04:57:46: 84:1c:56:bc:d0:1f:1d:01:b8:e5:9f:af:41:b5:52: 64:dd:3c:a2:b3:35:6e:f5:d3:55:3c:24:26:21:49: 34:20:40:86:cd:d5:b7:f3:aa:dd:00:b7:e6:17:f1: 8b:46:0a:e0:7c:21:ed:82:db:39:d9:38:90:00:a8: 0c:b9:0b:29:68:01:da:4b:33:9a:7b:72:c7:16:99: 28:ef:fb:45:3d:1c:fc:9e:d3:0d:99:9d:0e:49:b1: 6e:0f:a0:51:ed:f7:e8:f9:28:67:01:8c:a6:99:1d: fe:87:e2:e2:46:e7:c3:e2:af:7b:0b:33:3c:8c:46: 65:c0:15:c1:50:15:79:e7:15:83:0c:12:15:18:05: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BC:BB:3E:56:EB:31:9B:8C:68:2C:F4:5F:A6:B3:0C:69:E2:95:AB X509v3 Authority Key Identifier: keyid:3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:bf:cb:96:ee:dd:cf:57:19:76:b0:13:9a:b0:81:22:89:ab: 35:16:e5:b1:16:ef:bc:fd:1c:c3:3b:ac:21:14:3d:c6:2b:b2: f6:6d:5f:51:e7:05:bc:b7:d9:bb:c3:f1:88:4d:c5:93:5b:b0: 2c:45:ca:0b:a9:e4:40:ae:47:d1:96:74:30:ac:fc:93:c4:81: f7:3c:f3:4a:dd:04:aa:c0:ec:2d:9e:38:dc:b8:32:e7:f7:6b: 45:bc:c7:30:c0:10:e1:02:02:0a:f6:48:77:df:27:1a:ae:36: 06:56:eb:a8:78:7e:54:c8:b6:28:43:9e:de:4d:ec:1b:8e:4a: 1a:9b:ac:0d:e1:64:c8:44:37:6d:27:30:48:fc:76:50:fd:f2: e5:dd:bb:21:60:08:c6:22:3c:75:da:14:f4:cd:c5:f1:97:91: cd:46:02:7c:5c:94:1d:61:24:76:a1:f6:1a:54:2e:30:e9:2b: e5:36:f9:57:02:fa:bd:38:00:e3:4c:12:ec:70:5f:bd:a6:db: 9d:04:cd:d2:0f:82:04:48:a1:14:96:b4:ed:44:a4:0b:3a:0d: 43:c4:37:27:19:15:34:97:21:1e:92:b3:09:c7:89:81:56:ec: 58:cd:55:7c:56:d8:d7:9f:d3:7f:15:b8:5d:97:8f:02:92:7a: ef:5b:0c:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGMkMxMTAvBgNVBAUTKDNDMzlBNUQxOTE4Q0Y2NUFCMjU2MzMyMkYwRjVGMTQz MDlBNjdCOEYwHhcNMjQwNTE4MjEzMjUxWhcNMjQwNTI1MjEzMjUxWjAYMRYwFAYD VQQDEw02NjQ5MWU4My1jYzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40FqrSu1ubv4XYfPxz87S4QD+Gn83WtsTcNnAbwL2WWUPRUTlFm220T+sQ7d Og944E0Ympg/aXXZwL7KOpDEtqISM+8UrnS/6+AKJ/8zez5aRSlqiE3TgND3tdVU p5DZmufdg858VChqxd1t8QpZKCmWqX4EV0aEHFa80B8dAbjln69BtVJk3TyiszVu 9dNVPCQmIUk0IECGzdW386rdALfmF/GLRgrgfCHtgts52TiQAKgMuQspaAHaSzOa e3LHFpko7/tFPRz8ntMNmZ0OSbFuD6BR7ffo+ShnAYymmR3+h+LiRufD4q97CzM8 jEZlwBXBUBV55xWDDBIVGAXysQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIO8uz5W 6zGbjGgs9F+mswxp4pWrMB8GA1UdIwQYMBaAFDw5pdGRjPZaslYzIvD18UMJpnuP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkYyQy9GRkI3NjFGQTk2 NzgxMUVBODQwRjAwMjlDNEY5QUUwMi9QRG1sMFpHTTlscXlWak1pOFBYeFF3bW1l NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BEbWwwWkdNOWxxeVZqTWk4UFh4UXdtbWU0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkYyQy9GRkI3NjFGQTk2NzgxMUVBODQwRjAwMjlDNEY5QUUwMi9QRG1sMFpHTTls cXlWak1pOFBYeFF3bW1lNDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXv8uW7t3PVxl2sBOasIEiias1FuWxFu+8/RzDO6whFD3GK7L2bV9R 5wW8t9m7w/GITcWTW7AsRcoLqeRArkfRlnQwrPyTxIH3PPNK3QSqwOwtnjjcuDLn 92tFvMcwwBDhAgIK9kh33ycarjYGVuuoeH5UyLYoQ57eTewbjkoam6wN4WTIRDdt JzBI/HZQ/fLl3bshYAjGIjx12hT0zcXxl5HNRgJ8XJQdYSR2ofYaVC4w6SvlNvlX Avq9OADjTBLscF+9ptudBM3SD4IESKEUlrTtRKQLOg1DxDcnGRU0lyEekrMJx4mB VuxYzVV8VtjXn9N/Fbhdl48CknrvWwzG -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org