$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft File: pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft (raw, json) Hash identifier: Ye3ryy49CpsEEv1qkX/yOO7oJ3DZ/GVYxnZ4URdZduo= Subject key identifier: 27:0B:D8:65:A0:43:82:6C:0D:F7:78:F7:BF:5E:57:44:B9:F4:B0:04 Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft Manifest number: B8 Signing time: Sun 19 May 2024 06:28:09 +0000 Manifest this update: Sun 19 May 2024 06:28:09 +0000 Manifest next update: Sun 26 May 2024 06:28:09 +0000 Files and hashes: 1: pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl (hash: uBMca5GJccAxByss+i2zUo/PtSHnsyYRcofwo3peh+k=) 2: C5CD32AAE5DC11EE867C6F21C4F9AE02.roa (hash: 4AIgr5Ud5ti0oSHDBktujDNDac4fUeyWdMEfk5EvX6c=) 3: C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (hash: rXva0zw9zpysL9/iIPRFRWMSmLFREnrMEPdU1Wc84aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE Validity Not Before: May 19 06:28:09 2024 GMT Not After : May 26 06:28:09 2024 GMT Subject: CN=66499bf9-3f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:41:32:6d:36:46:5f:25:7e:66:df:1a:37:8c: dd:c0:36:47:10:43:30:2a:a6:be:3d:60:91:6b:b6: e9:1e:d5:f1:62:38:7c:a0:24:3e:1f:b2:bc:9f:39: 5a:4c:77:02:35:20:a3:d5:06:4f:5b:d9:c7:90:f4: 31:74:b6:cb:36:ed:d2:12:e6:ad:b4:76:3f:82:7a: d1:80:d6:01:b7:40:ec:9f:84:48:5e:98:a5:bb:46: 79:33:64:04:01:4f:58:17:ee:10:85:34:69:41:87: 5e:63:33:70:a4:55:41:18:7b:d6:c3:07:2b:50:96: 85:e8:fa:e8:a8:a2:7a:5b:64:f0:fb:f3:d0:36:dd: 3e:66:24:45:78:5b:68:6b:85:2c:59:cb:39:1d:23: 68:13:76:26:ae:98:83:5e:ca:da:43:bc:5c:e3:21: bb:26:4f:f5:02:28:5f:59:46:35:f3:79:6f:8f:a4: 92:63:da:8b:1d:c3:5a:97:bb:26:de:bc:90:3f:33: 55:b5:2b:62:8d:2b:05:c7:45:71:a9:77:34:21:db: 68:c4:10:41:61:58:cf:91:5f:dd:3a:c9:a8:27:e6: a7:4b:b7:b0:89:d3:97:3f:59:5e:ec:46:fb:ba:1c: 78:1a:8d:b9:a1:8e:4d:fa:d8:fd:ca:f0:07:08:b9: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:D8:65:A0:43:82:6C:0D:F7:78:F7:BF:5E:57:44:B9:F4:B0:04 X509v3 Authority Key Identifier: keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6f:f0:2f:38:af:00:72:e2:4f:7f:84:bd:a6:58:4c:19:bc: 90:57:71:9d:0b:ae:61:54:d2:49:3f:4a:2f:65:bf:ca:2d:2f: 26:7e:06:fe:b8:bd:26:8c:f6:af:01:97:20:49:b0:d8:85:d8: d2:b8:1c:59:1c:c6:f0:0f:97:b9:4a:03:f8:57:4b:3f:46:38: 62:ca:8b:da:30:60:32:a0:de:9c:5b:dc:da:29:4c:f6:a0:dc: 96:f0:9f:54:2e:c8:2b:f2:5c:46:e2:90:46:9f:07:b0:e0:0b: cd:42:aa:29:77:1f:3e:e7:68:9b:9f:91:79:b5:0b:1b:09:68: a5:76:4c:40:47:9a:a5:04:b3:a9:15:8c:65:79:f4:2a:9b:80: c4:05:f6:9a:a6:30:01:13:d8:4a:dd:14:fd:8c:b7:87:78:a4: 19:49:75:ce:8f:e2:8a:aa:f1:0f:13:76:a3:5a:3e:c8:67:d2: fc:01:d8:42:f9:51:ee:b6:1e:06:fa:5e:de:9c:99:b2:76:37: 56:ba:64:65:bc:5d:ff:06:0f:df:3a:bd:65:36:4b:a5:01:fe: f7:0f:31:8b:fb:cb:2c:fc:06:67:3f:8d:58:51:94:3c:5e:41: 02:1f:52:88:f8:c7:51:3f:05:c7:fb:57:ce:da:88:fb:1a:15: ac:ec:d2:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM5RkUxMTAvBgNVBAUTKEE1RDlDNkE2Rjk2NzVCOTFDRTU0RDExNUY4OEM5NDEw RjE4RjkwRkUwHhcNMjQwNTE5MDYyODA5WhcNMjQwNTI2MDYyODA5WjAYMRYwFAYD VQQDEw02NjQ5OWJmOS0zZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UEybTZGXyV+Zt8aN4zdwDZHEEMwKqa+PWCRa7bpHtXxYjh8oCQ+H7K8nzla THcCNSCj1QZPW9nHkPQxdLbLNu3SEuattHY/gnrRgNYBt0Dsn4RIXpilu0Z5M2QE AU9YF+4QhTRpQYdeYzNwpFVBGHvWwwcrUJaF6ProqKJ6W2Tw+/PQNt0+ZiRFeFto a4UsWcs5HSNoE3YmrpiDXsraQ7xc4yG7Jk/1AihfWUY183lvj6SSY9qLHcNal7sm 3ryQPzNVtStijSsFx0VxqXc0IdtoxBBBYVjPkV/dOsmoJ+anS7ewidOXP1le7Eb7 uhx4Go25oY5N+tj9yvAHCLmEvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcL2GWg Q4JsDfd4979eV0S59LAEMB8GA1UdIwQYMBaAFKXZxqb5Z1uRzlTRFfiMlBDxj5D+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzlGRS81M0NCNjkwQ0ZE RTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1SE9WTkVWLUl5VUVQR1Br UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BkbkdwdmxuVzVIT1ZORVYtSXlVRVBHUGtQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzlGRS81M0NCNjkwQ0ZERTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1 SE9WTkVWLUl5VUVQR1BrUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLb/AvOK8AcuJPf4S9plhMGbyQV3GdC65hVNJJP0ovZb/KLS8mfgb+ uL0mjPavAZcgSbDYhdjSuBxZHMbwD5e5SgP4V0s/RjhiyovaMGAyoN6cW9zaKUz2 oNyW8J9ULsgr8lxG4pBGnwew4AvNQqopdx8+52ibn5F5tQsbCWildkxAR5qlBLOp FYxlefQqm4DEBfaapjABE9hK3RT9jLeHeKQZSXXOj+KKqvEPE3ajWj7IZ9L8AdhC +VHuth4G+l7enJmydjdWumRlvF3/Bg/fOr1lNkulAf73DzGL+8ss/AZnP41YUZQ8 XkECH1KI+MdRPwXH+1fO2oj7GhWs7NJf -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org