$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: dagxN/J0Y2KdfpaUAaSrCmTn2BD/X0lAzjEjVSvVFzg= Subject key identifier: C0:EE:96:83:F9:09:EF:29:B3:9B:17:45:59:01:09:DB:EF:C2:EE:5D Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 03CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 03C8 Signing time: Sat 27 Apr 2024 02:22:08 +0000 Manifest this update: Sat 27 Apr 2024 02:22:07 +0000 Manifest next update: Sat 04 May 2024 02:22:07 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: GQkSXZEl1/8T1PdLnMjmSGbpYo4ybTPsQi4tCVdZgKA=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: GcZ/jVmf3aFj/tEn6isaoQpB/Anp8WQjarqO/s3Uu4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: Apr 27 02:22:07 2024 GMT Not After : May 4 02:22:07 2024 GMT Subject: CN=662c6150-6666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:2f:a7:09:6c:39:f8:7d:df:66:3b:30:87: 2e:88:19:c7:3c:29:c6:08:42:7a:ef:91:ed:56:f5: ff:29:fa:18:15:c0:be:e0:17:4c:5a:6c:97:1f:d5: 65:58:a2:a4:b4:97:58:0d:1e:c4:bc:ab:1b:e3:9a: 95:10:2a:10:fb:d0:2c:c7:8a:6d:fd:16:9a:68:b5: 3c:e0:29:70:15:dc:95:72:69:78:fc:df:7c:72:8f: e2:fa:ba:11:3c:ee:8c:f2:d4:2c:aa:e1:93:f0:64: bf:52:aa:e1:67:90:33:30:f3:8b:c5:40:2a:7c:52: c0:f0:f9:d5:28:11:00:22:b3:ea:e9:7e:41:c4:8f: e9:b3:81:99:d6:b0:d8:61:c8:56:d7:eb:f4:39:41: 09:2a:01:c0:ab:4c:1e:67:74:be:39:3d:a7:14:dc: d8:2e:91:5e:db:b4:f3:52:3b:86:07:07:1f:6d:b8: 5d:17:7b:48:23:ae:38:a0:34:65:bb:5c:85:72:20: 23:fd:19:08:72:8b:61:8c:0d:15:f3:95:fe:84:f8: d4:2a:38:2f:51:6a:41:56:24:42:5e:09:c1:16:54: 1b:96:ed:94:65:89:85:a0:2d:0c:d0:d2:28:31:d9: c4:a9:05:e9:19:c6:05:a3:a4:25:99:61:3a:52:c9: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EE:96:83:F9:09:EF:29:B3:9B:17:45:59:01:09:DB:EF:C2:EE:5D X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8f:e6:4a:d2:d1:62:b8:b2:c4:ee:0f:06:52:ba:af:bd:ee: 94:f8:29:37:9e:bd:d4:e6:c0:84:a8:cb:43:ec:2b:6b:e9:9a: 31:20:2d:35:07:a4:f0:91:56:65:e2:77:92:75:e5:1d:29:92: 91:8f:6a:b3:89:1e:75:4e:d7:b5:0c:04:38:42:49:f1:cc:bc: d1:dd:8a:88:12:52:8e:d2:b8:2d:56:29:1b:e2:9b:30:db:e1: bc:fd:aa:5b:33:6e:ca:53:db:26:97:51:c9:96:65:fe:ee:7a: 6d:a5:ce:c8:46:a3:70:55:b1:81:f9:d2:ae:90:82:8d:16:5d: 03:25:29:d6:03:d4:ce:0a:65:15:27:67:4c:d6:1b:f7:f5:ce: 73:c3:d3:f2:2d:27:98:0f:f2:d2:4c:08:1c:d4:e4:b0:fe:3a: 7c:81:26:56:ee:7c:53:d1:da:c1:8a:8d:e5:91:11:90:f0:53: bc:c5:5a:e6:55:ab:7b:11:94:74:cb:e5:00:1d:83:54:69:8a: 1e:be:d5:d3:0d:ad:67:c6:09:d9:91:23:e7:c5:e4:8b:ab:77: dc:a6:68:73:c0:49:42:91:c4:6d:60:ae:c6:7e:58:dc:fb:9a: 6b:b7:01:70:3d:84:fd:22:82:d2:15:43:34:7a:11:76:34:85: 90:6d:8f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjQwNDI3MDIyMjA3WhcNMjQwNTA0MDIyMjA3WjAYMRYwFAYD VQQDEw02NjJjNjE1MC02NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17MvpwlsOfh932Y7MIcuiBnHPCnGCEJ675HtVvX/KfoYFcC+4BdMWmyXH9Vl WKKktJdYDR7EvKsb45qVECoQ+9Asx4pt/RaaaLU84ClwFdyVcml4/N98co/i+roR PO6M8tQsquGT8GS/UqrhZ5AzMPOLxUAqfFLA8PnVKBEAIrPq6X5BxI/ps4GZ1rDY YchW1+v0OUEJKgHAq0weZ3S+OT2nFNzYLpFe27TzUjuGBwcfbbhdF3tII644oDRl u1yFciAj/RkIcothjA0V85X+hPjUKjgvUWpBViRCXgnBFlQblu2UZYmFoC0M0NIo MdnEqQXpGcYFo6QlmWE6UsnSaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDuloP5 Ce8ps5sXRVkBCdvvwu5dMB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5j+ZK0tFiuLLE7g8GUrqvve6U+Ck3nr3U5sCEqMtD7Ctr6ZoxIC01 B6TwkVZl4neSdeUdKZKRj2qziR51Tte1DAQ4QknxzLzR3YqIElKO0rgtVikb4psw 2+G8/apbM27KU9sml1HJlmX+7nptpc7IRqNwVbGB+dKukIKNFl0DJSnWA9TOCmUV J2dM1hv39c5zw9PyLSeYD/LSTAgc1OSw/jp8gSZW7nxT0drBio3lkRGQ8FO8xVrm Vat7EZR0y+UAHYNUaYoevtXTDa1nxgnZkSPnxeSLq3fcpmhzwElCkcRtYK7Gfljc +5prtwFwPYT9IoLSFUM0ehF2NIWQbY+f -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:36 2024 by rpki-client on console-ams.rpki-client.org