$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json) Hash identifier: ymwSD/I418xRTgNfEqPsdJ5U28Y2/l7+n1SCCgf5AOA= Subject key identifier: 03:99:A9:5F:C6:48:BA:F5:54:57:DB:87:49:C2:A1:B1:5A:D0:78:CF Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft Manifest number: 72 Signing time: Fri 17 May 2024 07:34:27 +0000 Manifest this update: Fri 17 May 2024 07:34:26 +0000 Manifest next update: Fri 24 May 2024 07:34:26 +0000 Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: XJ8x00avmABPyL9leEBbLC3B8ABg7iDG0ZpQCwrJwYw=) 2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: c9GNR8NeMbVcrDhg97LAFKm5i+SYI0xZQAH5pfSpcg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Validity Not Before: May 17 07:34:26 2024 GMT Not After : May 24 07:34:26 2024 GMT Subject: CN=66470883-4bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:6d:83:27:15:66:0b:28:2b:3f:31:a0:1d: 1b:34:7a:12:5d:93:7c:a7:84:b0:d7:5d:f3:7a:77: a9:36:c8:54:d6:e7:fe:19:ff:73:e0:d9:fc:9b:7f: e0:a7:dd:48:61:55:d0:54:64:19:83:87:63:b0:75: 33:91:91:98:8c:16:44:83:51:79:13:53:ba:b9:ad: 33:37:8b:79:de:77:bd:40:0d:85:18:5a:e0:9a:98: 02:9d:57:18:2f:a2:22:4f:61:d3:85:7b:ba:df:63: 0d:3c:e1:3e:82:65:17:d5:44:da:2f:7e:74:77:0e: ba:0a:ac:53:0d:19:ce:c4:e1:c0:0e:34:e9:ae:5d: 07:3d:66:d2:c0:d3:df:9f:68:8d:f4:66:f6:1d:b3: 32:80:43:b5:8b:e8:ec:5b:1a:67:77:52:a0:66:5d: de:08:43:01:08:ed:33:9a:55:6d:1f:0f:d5:a3:20: b0:81:d5:bd:33:98:a9:1b:a1:cd:96:ec:13:bf:46: 74:17:34:1a:9f:12:a1:8e:a7:d8:4b:e4:8d:9b:a4: 3c:72:9d:4c:c2:ea:cd:93:f2:45:bf:02:b4:41:b8: 1e:42:9a:cb:19:80:00:a4:09:97:ac:3e:1f:e6:e7: 0e:b9:c1:a6:be:6d:14:fa:42:c4:02:b5:a9:65:d5: 56:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:99:A9:5F:C6:48:BA:F5:54:57:DB:87:49:C2:A1:B1:5A:D0:78:CF X509v3 Authority Key Identifier: keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:88:25:16:44:23:32:81:f3:2d:2a:af:e6:e7:f2:c4:11:72: d3:a0:23:9d:75:82:40:ca:83:32:fb:2e:54:0b:24:00:94:b0: 63:82:f1:ab:6e:a0:ed:8e:91:6e:ef:30:14:04:47:8c:d9:eb: 00:18:19:df:29:0f:89:84:b9:54:a5:2f:5c:d0:01:47:4c:27: 19:f8:39:15:b4:73:ae:38:05:0f:46:3b:67:40:0c:6b:94:18: 2b:4d:11:eb:a9:23:58:b9:90:e4:70:2f:1f:5e:f8:ff:67:f5: f8:61:b3:81:2a:c4:3d:7d:a3:ac:fd:5f:38:2d:00:82:02:2a: 88:5d:16:ee:06:ff:ec:3a:3c:86:40:ef:71:d9:3d:fe:24:5e: 06:36:a6:b1:ec:d5:e9:5e:0c:76:1c:e3:d6:15:8f:94:42:b0: 18:62:d6:20:22:87:67:c2:65:0e:63:c1:3a:b6:f7:aa:c6:19: c9:e0:f4:af:1f:a3:e3:1b:13:19:ed:d7:25:79:87:d7:37:cb: 67:50:59:a2:3c:e0:27:7c:50:2e:64:08:d9:78:39:e9:11:81: 6c:aa:c8:c4:c9:52:3f:a3:57:d2:0d:df:3d:9e:8a:97:b9:3c: 1d:71:f6:6a:af:ce:a0:f9:2a:3e:92:1a:e1:1f:54:ac:82:f5: f2:58:a3:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTBFMDExMC8GA1UEBRMoM0YyMEMyOUUxRDdFNTE1REYzRTNEODVBQTQ0RTc1MUY4 MTcyNzMxQTAeFw0yNDA1MTcwNzM0MjZaFw0yNDA1MjQwNzM0MjZaMBgxFjAUBgNV BAMTDTY2NDcwODgzLTRiZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8q22DJxVmCygrPzGgHRs0ehJdk3ynhLDXXfN6d6k2yFTW5/4Z/3Pg2fybf+Cn 3UhhVdBUZBmDh2OwdTORkZiMFkSDUXkTU7q5rTM3i3ned71ADYUYWuCamAKdVxgv oiJPYdOFe7rfYw084T6CZRfVRNovfnR3DroKrFMNGc7E4cAONOmuXQc9ZtLA09+f aI30ZvYdszKAQ7WL6OxbGmd3UqBmXd4IQwEI7TOaVW0fD9WjILCB1b0zmKkboc2W 7BO/RnQXNBqfEqGOp9hL5I2bpDxynUzC6s2T8kW/ArRBuB5CmssZgACkCZesPh/m 5w65waa+bRT6QsQCtall1VanAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA5mpX8ZI uvVUV9uHScKhsVrQeM8wHwYDVR0jBBgwFoAUPyDCnh1+UV3z49hapE51H4Fycxow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxMEUwLzNFQjEwQzlBNkQ5 ODExRUVBQTJBQTM2QUM0RjlBRTAyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHlEQ25oMS1VVjN6NDloYXBFNTFINEZ5Y3hvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx MEUwLzNFQjEwQzlBNkQ5ODExRUVBQTJBQTM2QUM0RjlBRTAyL1B5RENuaDEtVVYz ejQ5aGFwRTUxSDRGeWN4by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACmIJRZEIzKB8y0qr+bn8sQRctOgI511gkDKgzL7LlQLJACUsGOC8atu oO2OkW7vMBQER4zZ6wAYGd8pD4mEuVSlL1zQAUdMJxn4ORW0c644BQ9GO2dADGuU GCtNEeupI1i5kORwLx9e+P9n9fhhs4EqxD19o6z9XzgtAIICKohdFu4G/+w6PIZA 73HZPf4kXgY2prHs1eleDHYc49YVj5RCsBhi1iAih2fCZQ5jwTq296rGGcng9K8f o+MbExnt1yV5h9c3y2dQWaI84Cd8UC5kCNl4OekRgWyqyMTJUj+jV9IN3z2eipe5 PB1x9mqvzqD5Kj6SGuEfVKyC9fJYo1E= -----END CERTIFICATE-----Generated at Fri May 17 08:52:45 2024 by rpki-client on console-ams.rpki-client.org