$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: H06dsrdOL+lfEyQZ94XL3x3Jjqge/8kCTzkFrtq9bAs= Subject key identifier: 5E:3F:1D:47:CB:58:B8:C9:12:54:10:D3:C4:45:20:26:62:93:F6:F2 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 6E Signing time: Sun 19 May 2024 07:48:26 +0000 Manifest this update: Sun 19 May 2024 07:48:26 +0000 Manifest next update: Sun 26 May 2024 07:48:26 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: Vu6i57WSLhGYbhMAHlhtvWPnXKghzSJsp/Er64kPFsI=) 2: FCE438F0DBB511EEB746FC2CC4F9AE02.roa (hash: 2BzVaWBA1pmBmFQTr1qCQwYwNNkhHiw4IUQUp6Xn1vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: May 19 07:48:26 2024 GMT Not After : May 26 07:48:26 2024 GMT Subject: CN=6649aeca-1a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:a1:f2:a8:b6:28:75:71:39:f6:f5:75:0f: cb:2b:24:60:0e:2f:76:70:fc:5a:49:2e:73:02:41: b9:b9:ad:4c:84:b0:9c:e3:ba:07:1d:ff:8f:0c:00: 69:b5:4a:fd:e9:cc:f2:06:fb:72:46:ea:70:4d:8f: a0:e4:cd:94:5a:25:3d:fb:a2:32:17:5a:ca:24:ea: a8:b2:41:13:c6:da:c9:93:5b:36:ad:a6:75:dc:6c: ed:b4:85:3c:dc:3e:26:55:23:82:8e:cc:91:28:7e: f2:e0:09:31:ca:24:35:aa:2e:3a:7e:a1:2f:c7:3e: a0:b6:6b:0c:11:55:03:07:70:1d:b9:30:b6:20:53: 88:7b:bc:93:2b:af:48:c7:82:e4:45:6e:cf:2c:2e: 28:9d:7f:f8:5d:c8:2c:1b:06:9e:9b:7a:6c:a2:63: 9d:16:fe:0d:da:e2:e3:ea:0a:17:d3:60:55:6c:1d: 93:5a:fd:b4:7d:c5:33:08:fb:7c:22:0e:ed:0c:e7: e8:01:a2:58:e3:54:31:35:33:d6:c3:63:03:53:dc: 97:ba:5d:0d:0e:07:b9:7b:96:6a:8e:67:58:1c:21: 35:2a:3f:ec:4a:02:48:4f:70:5d:06:78:c7:72:16: a2:b0:2d:39:d1:1e:0e:ee:c5:59:3b:dc:aa:37:35: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3F:1D:47:CB:58:B8:C9:12:54:10:D3:C4:45:20:26:62:93:F6:F2 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0e:73:2c:45:56:96:cc:cb:50:c3:13:16:ed:3f:ad:6c:58: 54:30:1b:b9:23:41:84:80:eb:12:15:46:fc:7f:7b:23:56:4d: a4:60:dd:5a:4d:fc:be:cc:2f:98:d2:f1:64:04:9a:8a:50:a0: cb:31:d2:c8:ab:dc:85:80:45:0e:6d:22:05:c0:a8:11:88:6e: 84:0b:c6:84:d2:dc:90:af:24:7b:f2:e7:a9:ff:fb:46:cd:f7: a4:9a:60:ba:85:f4:51:51:fe:7c:3e:ab:56:3d:99:06:5c:4d: f3:58:56:b4:65:cf:a9:ca:86:01:0c:ee:35:03:3d:3b:22:15: 4a:e3:c4:1b:58:3f:ee:c8:94:80:03:d8:d2:64:ab:4d:d6:66: 11:92:d9:d5:bd:8f:ce:56:6b:85:6d:d5:d4:5a:ef:13:4d:ec: 7b:62:b8:97:89:68:59:0f:17:7f:d3:56:a6:0c:00:32:36:a2: 23:1c:b4:1c:7c:50:5b:62:38:24:0b:e7:8e:29:b4:3c:30:97: 8c:57:57:3e:f6:c3:9d:10:5e:99:88:ff:12:91:8f:32:d2:e7: a0:12:4e:a4:ef:ff:26:a8:73:10:b4:13:7a:f2:0f:83:7d:da: 5c:43:05:f0:69:bf:aa:d1:da:45:57:02:8c:35:e3:5b:ca:0a: ae:28:d9:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjQwNTE5MDc0ODI2WhcNMjQwNTI2MDc0ODI2WjAYMRYwFAYD VQQDEw02NjQ5YWVjYS0xYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRGh8qi2KHVxOfb1dQ/LKyRgDi92cPxaSS5zAkG5ua1MhLCc47oHHf+PDABp tUr96czyBvtyRupwTY+g5M2UWiU9+6IyF1rKJOqoskETxtrJk1s2raZ13GzttIU8 3D4mVSOCjsyRKH7y4AkxyiQ1qi46fqEvxz6gtmsMEVUDB3AduTC2IFOIe7yTK69I x4LkRW7PLC4onX/4XcgsGwaem3psomOdFv4N2uLj6goX02BVbB2TWv20fcUzCPt8 Ig7tDOfoAaJY41QxNTPWw2MDU9yXul0NDge5e5ZqjmdYHCE1Kj/sSgJIT3BdBnjH chaisC050R4O7sVZO9yqNzVDvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4/HUfL WLjJElQQ08RFICZik/byMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAADnMsRVaWzMtQwxMW7T+tbFhUMBu5I0GEgOsSFUb8f3sjVk2kYN1a Tfy+zC+Y0vFkBJqKUKDLMdLIq9yFgEUObSIFwKgRiG6EC8aE0tyQryR78uep//tG zfekmmC6hfRRUf58PqtWPZkGXE3zWFa0Zc+pyoYBDO41Az07IhVK48QbWD/uyJSA A9jSZKtN1mYRktnVvY/OVmuFbdXUWu8TTex7YriXiWhZDxd/01amDAAyNqIjHLQc fFBbYjgkC+eOKbQ8MJeMV1c+9sOdEF6ZiP8SkY8y0uegEk6k7/8mqHMQtBN68g+D fdpcQwXwab+q0dpFVwKMNeNbygquKNkp -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org