$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: PGq4l70M2Bitv7fZ5R0x7cMi0kbxSoAGqbGGKA82MGU= Subject key identifier: FE:5E:45:42:9D:5F:D9:4B:D3:B4:CB:22:28:5F:CC:39:BD:24:86:75 Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 02A8 Signing time: Sun 05 May 2024 03:42:28 +0000 Manifest this update: Sun 05 May 2024 03:42:28 +0000 Manifest next update: Sun 12 May 2024 03:42:28 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: LCPdUfz0giIxZbRe5ohIjJmMSZmxZHE+jQcjYr4WkQE=) 2: 82230EB20A7211EE8FA2CD58C4F9AE02.roa (hash: DojsyZiVttqXkieBD3qbPMFe5H86ir3g9f5y1h/taV4=) 3: 80FAEBF40A7211EE8FA2CD58C4F9AE02.roa (hash: A7uIhpqNyjUY8khg5v/itaW8CRUTGtbJz+8SsZL+ZKc=) 4: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: mektjZh5BPj05o+N5jFGzlPkU8vLXkg5GwNb8tpp2CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: May 5 03:42:28 2024 GMT Not After : May 12 03:42:28 2024 GMT Subject: CN=66370024-052e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:11:87:b5:8e:e8:64:3a:19:41:4f:b8:4b: e7:d4:f3:65:b1:b1:3b:7a:8d:dd:a5:8e:ca:18:eb: 1c:9e:3c:a6:a5:f2:2c:64:25:ca:85:6b:0c:f9:1f: f6:92:fe:21:e4:81:51:67:ed:44:5f:9f:1c:ab:e2: 7b:17:9d:a8:5e:ac:1e:36:9c:8f:41:9c:76:3e:f3: 1d:78:11:72:e5:15:7f:bc:1d:bb:9a:ae:bf:8a:41: 36:10:9d:39:da:34:1f:72:98:7c:c0:ad:d1:8c:5f: 3f:f1:4f:21:9e:ab:59:c4:00:4b:87:8c:13:83:d4: 2e:95:32:94:4d:0e:e5:dc:10:c5:90:aa:f3:33:a6: 8f:be:d9:3a:7f:b2:19:4e:c6:8a:a1:3b:e9:4b:c2: e1:25:fa:68:10:bc:47:b3:f5:94:d8:0e:3f:03:1c: 05:77:dd:c9:81:5f:aa:68:4c:f9:13:99:b4:c8:79: 60:20:91:66:28:6f:4c:84:dc:d4:2e:14:ce:65:33: 17:f9:36:cf:c6:c8:57:52:c4:8c:9e:15:6d:dd:c7: 78:9f:65:34:74:57:ec:a4:67:20:8f:f5:ce:10:07: 3f:c6:da:17:e0:80:04:60:38:42:f6:fb:aa:84:17: 92:b8:1f:4c:b3:58:38:11:e9:7d:16:9f:ed:ec:7e: 49:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5E:45:42:9D:5F:D9:4B:D3:B4:CB:22:28:5F:CC:39:BD:24:86:75 X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:46:2d:39:00:0d:84:de:3a:fa:f3:96:1b:f0:f5:8e:61:99: c9:06:04:1f:c1:1a:be:7a:34:4f:a8:17:a6:90:cb:e5:ad:69: 12:b9:d0:bc:4c:d0:e4:81:6d:b9:f3:39:99:f5:1a:2d:15:64: 15:47:15:e4:af:a6:bc:c6:35:41:ea:7a:8f:23:d7:b9:38:6c: bf:b2:76:18:cc:8a:34:25:26:2f:8f:a0:e9:4a:95:13:65:32: 51:57:b7:8b:3e:61:f8:53:bb:dd:eb:f1:ca:6e:e5:f6:1f:14: f3:a2:fd:0a:ae:c2:93:dd:99:17:4e:fd:90:29:10:0f:07:48: f8:2b:f9:c5:41:3a:31:c7:1d:d5:92:c1:5c:c1:67:eb:9d:f1: f5:e0:31:db:50:30:9d:11:d8:db:ba:a9:a0:3f:bf:f2:d8:19: e5:2f:06:6d:51:1d:08:e9:d1:50:c0:28:5e:1e:d0:54:be:92: 2b:a3:e1:17:a9:35:e4:e9:03:af:df:5a:55:6d:c5:5b:d6:51: 3f:b3:c5:25:7f:7d:5a:54:6a:1a:8c:f1:05:43:ef:e2:65:9b: 78:17:b1:b6:e8:fa:e7:a1:b1:f7:40:4a:4a:d5:0c:48:a1:1b: d9:11:23:2f:88:96:95:69:cc:06:bb:b2:42:29:09:92:4b:33: 91:b3:e0:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjQwNTA1MDM0MjI4WhcNMjQwNTEyMDM0MjI4WjAYMRYwFAYD VQQDEw02NjM3MDAyNC0wNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx8Rh7WO6GQ6GUFPuEvn1PNlsbE7eo3dpY7KGOscnjympfIsZCXKhWsM+R/2 kv4h5IFRZ+1EX58cq+J7F52oXqweNpyPQZx2PvMdeBFy5RV/vB27mq6/ikE2EJ05 2jQfcph8wK3RjF8/8U8hnqtZxABLh4wTg9QulTKUTQ7l3BDFkKrzM6aPvtk6f7IZ TsaKoTvpS8LhJfpoELxHs/WU2A4/AxwFd93JgV+qaEz5E5m0yHlgIJFmKG9MhNzU LhTOZTMX+TbPxshXUsSMnhVt3cd4n2U0dFfspGcgj/XOEAc/xtoX4IAEYDhC9vuq hBeSuB9Ms1g4Eel9Fp/t7H5JOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5eRUKd X9lL07TLIihfzDm9JIZ1MB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSRi05AA2E3jr685Yb8PWOYZnJBgQfwRq+ejRPqBemkMvlrWkSudC8 TNDkgW258zmZ9RotFWQVRxXkr6a8xjVB6nqPI9e5OGy/snYYzIo0JSYvj6DpSpUT ZTJRV7eLPmH4U7vd6/HKbuX2HxTzov0KrsKT3ZkXTv2QKRAPB0j4K/nFQToxxx3V ksFcwWfrnfH14DHbUDCdEdjbuqmgP7/y2BnlLwZtUR0I6dFQwCheHtBUvpIro+EX qTXk6QOv31pVbcVb1lE/s8Ulf31aVGoajPEFQ+/iZZt4F7G26PrnobH3QEpK1QxI oRvZESMviJaVacwGu7JCKQmSSzORs+AX -----END CERTIFICATE-----Generated at Sun May 5 04:39:57 2024 by rpki-client on console-ams.rpki-client.org