$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft File: plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json) Hash identifier: O6GDQ+DtPDvGFJBBctPT9WR/KS1FDZh0Z6Q/zYYHgLs= Subject key identifier: E9:34:B0:3E:D6:3C:FB:F4:6B:3F:20:81:64:40:D7:23:B0:47:48:62 Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 Certificate issuer: /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Certificate serial: 0F9C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft Manifest number: 0F95 Signing time: Fri 24 May 2024 18:12:58 +0000 Manifest this update: Fri 24 May 2024 18:12:58 +0000 Manifest next update: Fri 31 May 2024 18:12:58 +0000 Files and hashes: 1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: ByWbZZ3R7S0/7f9L1UA6l5LfhsLXMnCO5+2P6pcvuc4=) 2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: Veb9qfrlSwHQ9I85TnEhels8U8n0szaoX7AXNaR/TjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3996 (0xf9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58 Validity Not Before: May 24 18:12:58 2024 GMT Not After : May 31 18:12:58 2024 GMT Subject: CN=6650d8aa-35be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:34:12:72:af:eb:d8:f1:9a:43:73:ba:66: 23:a7:48:69:38:60:43:6f:a0:99:54:68:61:72:5e: 2e:16:bb:b7:27:95:10:c4:cf:78:9f:6e:27:26:87: f8:fb:72:ea:c6:c1:01:78:10:5d:9e:eb:a8:6e:15: 30:a6:ce:eb:d4:ca:62:d0:26:da:36:70:37:0d:03: de:af:ae:1b:92:c6:f9:b8:51:cd:ff:e9:f2:9b:7c: 01:10:35:1f:ca:10:4f:a0:3f:15:7c:e8:1f:0c:1b: 32:27:80:13:6f:1d:a2:03:e8:64:5a:e7:a7:7e:5e: b6:72:60:4c:4c:71:d0:e1:ad:9a:c5:44:d5:96:14: 84:a9:7f:12:86:3d:3c:19:c3:93:71:5e:d9:99:67: b3:64:9b:f2:d3:bb:e8:b0:ca:56:0c:b7:da:f7:23: 0b:9a:81:96:83:51:e8:84:fe:bd:f2:0f:22:f2:c5: b5:bc:12:74:c2:2f:2a:d4:0f:8b:af:e9:ec:aa:41: 1d:8e:8a:44:b3:73:2c:90:ec:25:b0:6b:19:44:bc: 21:f8:8f:33:9a:96:c3:f6:8e:0b:96:44:59:fb:84: 51:a6:d4:0d:d9:86:b1:0f:13:c5:50:90:e7:9d:87: ec:4d:9c:3b:d1:73:fb:e8:52:c0:43:5d:1f:ec:59: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:34:B0:3E:D6:3C:FB:F4:6B:3F:20:81:64:40:D7:23:B0:47:48:62 X509v3 Authority Key Identifier: keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:bf:05:7f:8b:10:16:db:69:68:08:91:9e:df:46:ea:37:d0: 01:4d:06:db:c0:12:39:c7:1d:93:a8:33:57:3e:2d:d4:66:a3: 6f:f5:07:99:6b:f4:e3:57:f0:d2:90:15:53:cb:fb:00:0d:2f: 77:15:c7:44:26:cb:69:36:2b:e5:63:de:ef:8c:b2:13:d1:33: 80:d6:a6:c6:c3:5f:c0:91:db:7b:f8:79:0f:19:ae:51:7b:01: 54:ed:c7:38:e8:42:d0:db:ad:e8:e0:01:d7:0f:9e:94:ee:e4: 3d:c5:0e:61:d3:42:3a:45:c8:71:1e:d9:bc:22:a7:ed:7d:4b: 07:e7:04:de:67:a3:06:ab:dd:de:d8:bd:b0:b4:d6:be:14:0b: 12:7a:18:bd:91:6a:03:f1:63:56:be:d5:1e:93:3d:d6:00:e2: d9:50:f0:d7:55:3e:48:fd:57:46:cb:ed:f1:31:b0:29:35:26: 9f:2a:5f:a1:fc:27:98:c9:95:0c:28:aa:47:51:7e:bb:72:59: 66:1f:e2:d1:ef:b3:34:b0:4a:d1:6d:ab:1d:1f:b1:20:c4:8c: a5:f0:23:79:69:35:4b:46:a4:d7:d4:de:3e:ba:d4:43:c8:7d: 95:d5:66:24:81:9a:ef:90:67:66:81:dd:75:fc:44:30:3b:9f: 5b:38:11:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEE2NTEwNERDNzZBOEUwRTZBM0Q5MjE0Njc4OTY4MEI3 M0RERTVGNTgwHhcNMjQwNTI0MTgxMjU4WhcNMjQwNTMxMTgxMjU4WjAYMRYwFAYD VQQDEw02NjUwZDhhYS0zNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLk0EnKv69jxmkNzumYjp0hpOGBDb6CZVGhhcl4uFru3J5UQxM94n24nJof4 +3LqxsEBeBBdnuuobhUwps7r1Mpi0CbaNnA3DQPer64bksb5uFHN/+nym3wBEDUf yhBPoD8VfOgfDBsyJ4ATbx2iA+hkWuenfl62cmBMTHHQ4a2axUTVlhSEqX8Shj08 GcOTcV7ZmWezZJvy07vosMpWDLfa9yMLmoGWg1HohP698g8i8sW1vBJ0wi8q1A+L r+nsqkEdjopEs3MskOwlsGsZRLwh+I8zmpbD9o4LlkRZ+4RRptQN2YaxDxPFUJDn nYfsTZw70XP76FLAQ10f7Fk5eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk0sD7W PPv0az8ggWRA1yOwR0hiMB8GA1UdIwQYMBaAFKZRBNx2qODmo9khRniWgLc93l9Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC8wMzMyNDBDMDNB NEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRPYWoyU0ZHZUphQXR6M2VY MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BsRUUzSGFvNE9hajJTRkdlSmFBdHozZVgxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC8wMzMyNDBDMDNBNEExMUU5OTQwRjJEMTZDNEY5QUUwMi9wbEVFM0hhbzRP YWoyU0ZHZUphQXR6M2VYMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCvwV/ixAW22loCJGe30bqN9ABTQbbwBI5xx2TqDNXPi3UZqNv9QeZ a/TjV/DSkBVTy/sADS93FcdEJstpNivlY97vjLIT0TOA1qbGw1/Akdt7+HkPGa5R ewFU7cc46ELQ263o4AHXD56U7uQ9xQ5h00I6RchxHtm8IqftfUsH5wTeZ6MGq93e 2L2wtNa+FAsSehi9kWoD8WNWvtUekz3WAOLZUPDXVT5I/VdGy+3xMbApNSafKl+h /CeYyZUMKKpHUX67cllmH+LR77M0sErRbasdH7EgxIyl8CN5aTVLRqTX1N4+utRD yH2V1WYkgZrvkGdmgd11/EQwO59bOBFp -----END CERTIFICATE-----Generated at Fri May 24 21:42:58 2024 by rpki-client on console-ams.rpki-client.org