$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: sJiFAZCQM56fvdSqm5IN35n7U+cUL8/QdZAK7rTSTfY= Subject key identifier: F0:65:BB:CB:91:52:0B:C8:87:B3:38:A5:1E:DF:DE:03:00:BC:3B:59 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0AA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0A9C Signing time: Sun 28 Apr 2024 20:10:55 +0000 Manifest this update: Sun 28 Apr 2024 20:10:55 +0000 Manifest next update: Sun 05 May 2024 20:10:55 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: LAqEgq+Yh1e70k5416/NFabKWrejSePZTKrnESgi3xQ=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: srngKCvCTPzqPpXVhQZStb9pHyQ+liVATuRoyPsZWjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 18:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2721 (0xaa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Apr 28 20:10:55 2024 GMT Not After : May 5 20:10:55 2024 GMT Subject: CN=662ead4f-372c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:96:bf:83:e1:28:18:a9:e7:b1:03:b8:25: cb:ae:26:52:06:60:d7:5a:61:29:22:c9:c0:ec:64: a5:ad:cc:38:34:52:68:8e:5b:50:94:02:e9:a2:63: 86:2b:35:d5:86:31:d8:40:f9:63:a9:5a:01:8a:61: 97:41:52:bb:6c:4b:00:8c:27:fd:1a:39:87:84:63: 41:2d:a3:3a:4b:98:9d:3c:62:6a:19:80:ac:6a:11: 71:3f:e6:6a:15:8c:6d:24:dd:ce:37:bf:3e:b2:86: 2b:f7:4f:9c:3d:98:e2:b8:0b:02:51:9d:55:ec:8f: 49:61:4b:11:50:1f:26:00:5f:8b:69:87:bd:a4:2d: a4:ba:c6:0c:12:80:ec:ee:4e:13:14:10:e5:ac:2e: ab:9c:0c:0f:a1:68:d2:54:d2:2c:1f:d9:b6:d3:0e: 62:18:86:b6:58:1c:e1:61:b4:8e:0c:ae:44:93:50: 4d:6d:b1:bc:aa:de:87:1e:16:1a:3a:b0:4b:8f:ae: 23:6c:a9:2c:53:10:7c:6a:b1:a9:8a:f2:16:05:23: 3f:bf:f7:70:c1:27:b5:a9:e6:ed:fc:5a:64:58:e4: 59:65:b1:eb:1c:a3:ea:b9:d5:e5:63:8a:cd:f7:00: 7d:8b:00:46:bf:90:f2:fb:86:10:d9:6e:71:ab:5c: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:65:BB:CB:91:52:0B:C8:87:B3:38:A5:1E:DF:DE:03:00:BC:3B:59 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5e:a7:59:3a:3f:3a:61:be:e2:13:c1:e9:b0:4a:7d:5d:8b: b1:89:68:74:b0:06:cf:aa:ab:61:72:81:f2:51:1a:d1:20:07: 04:a7:55:6c:a5:c2:18:fa:5c:72:3b:83:df:71:87:20:c6:02: 51:34:63:1c:75:4f:f0:65:06:e5:0c:c9:63:38:5e:14:ec:70: 37:56:a6:63:3b:6c:e6:60:8a:15:54:49:24:b7:58:58:92:bc: 21:04:74:52:68:d4:b1:d1:90:ce:06:93:7b:13:51:4b:a0:bd: ec:14:57:00:2a:ff:be:04:b3:8b:0d:1a:57:54:f3:1f:d6:69: a6:cd:91:6c:81:7c:9f:06:9e:68:b7:0b:c6:e7:e4:1e:aa:42: 53:38:8d:c1:d2:c5:73:f4:7b:7e:9d:04:d8:c8:dd:9c:b0:ad: ca:51:f0:37:fd:04:4f:fb:5c:18:2d:8d:41:ed:d9:fe:9d:1e: 77:f4:f9:7b:a1:d1:85:6c:69:b9:c4:52:70:32:cd:b9:de:45: ac:0f:45:86:e0:4c:80:78:0e:22:7e:bd:82:49:e5:68:68:2e: a6:98:74:13:30:f5:91:b6:74:ed:49:07:23:cb:6d:97:6d:e9: c1:58:1d:76:b4:e0:26:59:d0:53:53:d3:b7:b9:67:e1:36:c1: 64:4b:d4:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjQwNDI4MjAxMDU1WhcNMjQwNTA1MjAxMDU1WjAYMRYwFAYD VQQDEw02NjJlYWQ0Zi0zNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WyWv4PhKBip57EDuCXLriZSBmDXWmEpIsnA7GSlrcw4NFJojltQlALpomOG KzXVhjHYQPljqVoBimGXQVK7bEsAjCf9GjmHhGNBLaM6S5idPGJqGYCsahFxP+Zq FYxtJN3ON78+soYr90+cPZjiuAsCUZ1V7I9JYUsRUB8mAF+LaYe9pC2kusYMEoDs 7k4TFBDlrC6rnAwPoWjSVNIsH9m20w5iGIa2WBzhYbSODK5Ek1BNbbG8qt6HHhYa OrBLj64jbKksUxB8arGpivIWBSM/v/dwwSe1qebt/FpkWORZZbHrHKPqudXlY4rN 9wB9iwBGv5Dy+4YQ2W5xq1y3zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBlu8uR UgvIh7M4pR7f3gMAvDtZMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChXqdZOj86Yb7iE8HpsEp9XYuxiWh0sAbPqqthcoHyURrRIAcEp1Vs pcIY+lxyO4PfcYcgxgJRNGMcdU/wZQblDMljOF4U7HA3VqZjO2zmYIoVVEkkt1hY krwhBHRSaNSx0ZDOBpN7E1FLoL3sFFcAKv++BLOLDRpXVPMf1mmmzZFsgXyfBp5o twvG5+QeqkJTOI3B0sVz9Ht+nQTYyN2csK3KUfA3/QRP+1wYLY1B7dn+nR539Pl7 odGFbGm5xFJwMs253kWsD0WG4EyAeA4ifr2CSeVoaC6mmHQTMPWRtnTtSQcjy22X benBWB12tOAmWdBTU9O3uWfhNsFkS9SC -----END CERTIFICATE-----Generated at Sun Apr 28 20:49:33 2024 by rpki-client on console-ams.rpki-client.org