$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: 0u2ACh8mtrTbgYnuoD8D6eP566dyVkliteo+rkgo9n0= Subject key identifier: 86:F5:35:0F:E7:A1:0B:35:87:FE:1C:5C:E9:22:23:D6:01:93:0F:1F Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 0245 Signing time: Sun 19 May 2024 03:56:53 +0000 Manifest this update: Sun 19 May 2024 03:56:52 +0000 Manifest next update: Sun 26 May 2024 03:56:52 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: zkinAIuI0sSV9+UUM6svVaHDUqNDfuBq5ttFRRseMLw=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: o8+kpkkcUlfY/bs7XStrTS+t+OkNW4hpa6KuuucmgCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: May 19 03:56:52 2024 GMT Not After : May 26 03:56:52 2024 GMT Subject: CN=66497885-46aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:e2:0e:80:66:ef:e3:03:41:e3:0d:5d:d8: 1b:3f:e7:88:23:ca:04:55:59:a8:0a:66:64:77:85: 0b:05:27:b9:ee:17:c8:41:e3:ab:3d:35:7d:bb:91: 68:82:84:63:ea:01:f0:59:01:08:07:de:9d:0e:54: b8:c2:9a:e0:d3:68:44:55:cd:c7:78:f1:e9:a0:b3: 39:63:b0:2a:88:dc:5e:91:a3:8b:f6:01:c2:2d:77: 88:b1:57:14:f3:5e:b5:6c:a1:6d:97:28:9c:2d:c1: 64:e6:45:c4:dc:27:d9:17:b2:d7:68:8c:74:db:0e: 6a:f8:c4:b2:f2:e0:2b:36:72:c8:8d:a5:90:75:db: 93:5a:f1:f7:d6:8f:be:34:dd:bc:06:3d:7e:6a:61: 38:85:8a:21:a9:ef:c6:07:33:12:70:a7:85:a2:13: e8:77:a5:b3:c8:81:fb:87:23:29:42:c1:75:2b:d0: ac:83:5a:b2:63:a4:38:1b:4c:85:00:3d:1a:c5:87: 0f:ba:9c:c2:69:c7:0b:b5:b0:66:41:a9:0a:53:c6: 5c:d2:5c:1c:78:5d:f9:61:6e:b6:e8:29:3a:7d:13: a1:73:64:77:4d:fa:e9:47:9c:3e:ed:57:c0:67:d2: de:90:96:74:79:71:e2:64:50:7c:95:51:a5:65:c2: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F5:35:0F:E7:A1:0B:35:87:FE:1C:5C:E9:22:23:D6:01:93:0F:1F X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1d:09:45:7d:65:9f:40:1b:1c:2d:92:b2:46:ad:6e:f2:27: 8c:84:6d:f5:d9:1e:13:09:70:78:61:7c:2e:54:fe:fa:02:3c: 44:9b:5d:07:4f:60:c7:f1:e3:1b:8e:64:30:ec:45:60:e1:11: 84:2c:4c:03:e2:a1:9e:ed:a9:ed:08:f5:f1:24:96:25:59:3c: ae:4e:2f:50:87:29:3c:b1:f3:9b:fb:dc:a3:6a:09:d0:af:b9: 69:ca:8e:5e:b3:77:18:6c:b9:5d:f7:27:0e:26:fd:9c:7f:ef: 9c:d6:f9:93:62:58:b6:2a:9f:2c:2e:43:d0:25:d3:74:2f:98: 54:41:a4:ac:65:5c:09:0a:ce:7f:43:4d:d3:50:89:d4:5b:9c: 4c:d1:2c:72:24:a9:bc:2e:bf:a0:f2:e0:07:bc:b2:26:75:82: 1f:49:87:50:d0:dd:57:07:76:eb:8d:40:a0:51:a9:3d:65:07: 25:12:1b:27:c9:15:ab:56:0f:fe:3a:30:7a:f2:d8:7f:a2:c1: 05:89:3a:e1:79:12:df:8a:3e:b1:7c:0e:ab:d0:04:ab:ae:e4: b9:06:56:88:0a:8a:78:c9:db:0f:4b:15:35:77:06:a6:0e:ff: 16:66:3c:61:2c:e3:e6:42:fd:d5:02:bd:9d:14:87:f6:46:1b: 3c:f9:ba:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjQwNTE5MDM1NjUyWhcNMjQwNTI2MDM1NjUyWjAYMRYwFAYD VQQDEw02NjQ5Nzg4NS00NmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9TiDoBm7+MDQeMNXdgbP+eII8oEVVmoCmZkd4ULBSe57hfIQeOrPTV9u5Fo goRj6gHwWQEIB96dDlS4wprg02hEVc3HePHpoLM5Y7AqiNxekaOL9gHCLXeIsVcU 8161bKFtlyicLcFk5kXE3CfZF7LXaIx02w5q+MSy8uArNnLIjaWQdduTWvH31o++ NN28Bj1+amE4hYohqe/GBzMScKeFohPod6WzyIH7hyMpQsF1K9Csg1qyY6Q4G0yF AD0axYcPupzCaccLtbBmQakKU8Zc0lwceF35YW626Ck6fROhc2R3TfrpR5w+7VfA Z9LekJZ0eXHiZFB8lVGlZcLmowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb1NQ/n oQs1h/4cXOkiI9YBkw8fMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXHQlFfWWfQBscLZKyRq1u8ieMhG312R4TCXB4YXwuVP76AjxEm10H T2DH8eMbjmQw7EVg4RGELEwD4qGe7antCPXxJJYlWTyuTi9Qhyk8sfOb+9yjagnQ r7lpyo5es3cYbLld9ycOJv2cf++c1vmTYli2Kp8sLkPQJdN0L5hUQaSsZVwJCs5/ Q03TUInUW5xM0SxyJKm8Lr+g8uAHvLImdYIfSYdQ0N1XB3brjUCgUak9ZQclEhsn yRWrVg/+OjB68th/osEFiTrheRLfij6xfA6r0ASrruS5BlaICop4ydsPSxU1dwam Dv8WZjxhLOPmQv3VAr2dFIf2Rhs8+bpT -----END CERTIFICATE-----Generated at Sun May 19 05:08:07 2024 by rpki-client on console-ams.rpki-client.org