$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: JVWs+sUMDbJhxhH/szYs1CfZWVuy3+fToGkt3MkWZVA= Subject key identifier: 89:F0:BC:59:E6:69:BC:4A:4D:30:8C:5A:F9:15:C3:00:28:9B:66:C4 Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: D9 Signing time: Sat 01 Jun 2024 07:31:44 +0000 Manifest this update: Sat 01 Jun 2024 07:31:43 +0000 Manifest next update: Sat 08 Jun 2024 07:31:43 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: 3LN920QnyJg0VPml/twwYP/8OhtQc/l5w5E4T3bHQHM=) 2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: A1/zPNq14u99ArX0Q61KCnQwIFfKUwlpWUZD/5n5WfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Jun 1 07:31:43 2024 GMT Not After : Jun 8 07:31:43 2024 GMT Subject: CN=665ace5f-38e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:04:0e:c1:9c:6e:5c:28:86:04:2a:28:cb: 52:ea:e6:18:70:91:c0:0b:ed:2d:37:20:ce:0f:d9: df:c1:b4:66:b0:72:e8:e3:36:17:f2:03:5e:bd:8b: 79:5d:d3:6f:dc:75:7f:63:9c:7c:ca:bc:d5:9e:92: 47:b6:9f:1b:d6:4c:40:ac:27:95:70:9c:f7:32:84: 8d:03:5d:3f:6f:91:80:43:75:1e:d6:96:54:66:1c: bc:0a:b4:cb:96:86:49:d9:a4:07:bd:12:03:48:c8: 86:7b:07:67:fa:ea:b8:fe:18:13:be:00:5e:28:b5: 61:b3:45:c5:4e:6f:2d:06:3e:54:9e:1a:ed:05:31: 55:5d:61:7f:e7:5c:22:3c:00:90:b2:11:7b:36:6f: 31:f3:c1:8e:ec:cf:d8:5d:12:71:c8:a7:db:ab:84: a4:0e:fa:28:40:00:0b:ec:1d:96:77:07:b4:ae:c7: 83:93:53:b5:cb:ca:56:bf:d4:16:c2:9c:5f:fd:06: e3:a2:79:8f:9a:b1:ce:84:80:20:f8:33:87:d5:43: 07:6d:22:98:61:e8:7a:85:84:f5:2b:8c:aa:db:dc: eb:6e:c6:ec:f4:2f:36:1b:90:4e:b7:f7:a9:d6:2e: 42:35:fd:93:64:53:5f:25:c6:08:e0:0a:6f:5a:85: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F0:BC:59:E6:69:BC:4A:4D:30:8C:5A:F9:15:C3:00:28:9B:66:C4 X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:48:bf:d9:4a:2e:00:d9:4d:8e:05:e8:34:2d:4c:91:ef:b8: da:7b:b3:3e:16:7c:4b:03:6a:9a:a5:1c:5d:a0:44:a5:73:03: 2b:86:b9:d8:8d:e8:c0:89:60:51:dd:8d:59:85:03:5b:6a:1e: ed:94:3d:4e:9a:e3:46:87:b9:9d:ba:08:b0:fd:a7:93:ad:b4: 6b:13:5c:3d:bc:9d:7e:fc:85:ca:a5:9a:54:77:90:54:ef:45: ce:10:5b:49:6a:32:21:60:6c:8f:46:b4:92:e1:7f:d6:db:bd: 59:d3:8d:74:ad:c5:50:36:c5:30:cb:f2:db:d0:7b:78:97:b9: f9:2b:8f:29:c0:2b:6b:c7:5f:4c:3d:ba:4b:60:43:00:b7:eb: ff:b7:86:bf:b7:36:47:fc:a5:44:6e:3d:f8:97:60:f6:5c:52: 93:47:6d:7f:0d:b8:80:f5:9b:a7:77:8c:43:5c:e9:04:bb:bb: ea:21:7f:5a:c3:2e:0c:be:d4:db:64:cc:c5:fc:51:72:b6:9d: 18:c1:20:89:a2:7a:6d:10:4d:d1:5e:4e:d3:ed:19:8c:e1:30: 1b:17:6f:32:d7:74:85:bd:fa:85:4f:c7:7d:90:3d:f6:0b:7d: 13:58:ed:c4:56:3a:a5:d7:51:88:da:81:a8:0c:37:5a:46:ec: be:89:21:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjQwNjAxMDczMTQzWhcNMjQwNjA4MDczMTQzWjAYMRYwFAYD VQQDEw02NjVhY2U1Zi0zOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwn8EDsGcblwohgQqKMtS6uYYcJHAC+0tNyDOD9nfwbRmsHLo4zYX8gNevYt5 XdNv3HV/Y5x8yrzVnpJHtp8b1kxArCeVcJz3MoSNA10/b5GAQ3Ue1pZUZhy8CrTL loZJ2aQHvRIDSMiGewdn+uq4/hgTvgBeKLVhs0XFTm8tBj5UnhrtBTFVXWF/51wi PACQshF7Nm8x88GO7M/YXRJxyKfbq4SkDvooQAAL7B2Wdwe0rseDk1O1y8pWv9QW wpxf/QbjonmPmrHOhIAg+DOH1UMHbSKYYeh6hYT1K4yq29zrbsbs9C82G5BOt/ep 1i5CNf2TZFNfJcYI4ApvWoVezwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInwvFnm abxKTTCMWvkVwwAom2bEMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJSL/ZSi4A2U2OBeg0LUyR77jae7M+FnxLA2qapRxdoESlcwMrhrnY jejAiWBR3Y1ZhQNbah7tlD1OmuNGh7mdugiw/aeTrbRrE1w9vJ1+/IXKpZpUd5BU 70XOEFtJajIhYGyPRrSS4X/W271Z0410rcVQNsUwy/Lb0Ht4l7n5K48pwCtrx19M PbpLYEMAt+v/t4a/tzZH/KVEbj34l2D2XFKTR21/DbiA9Zund4xDXOkEu7vqIX9a wy4MvtTbZMzF/FFytp0YwSCJonptEE3RXk7T7RmM4TAbF28y13SFvfqFT8d9kD32 C30TWO3EVjql11GI2oGoDDdaRuy+iSHD -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:28 2024 by rpki-client on console-fra.rpki-client.org