$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: a23OOq9j769tv7/IH4q2A4m7j3COycKYusorlF8/elI= Subject key identifier: 53:35:AF:AF:50:DA:00:2E:6E:EB:76:A9:35:A7:A0:7A:53:50:5A:E8 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: F2 Signing time: Sat 27 Apr 2024 05:40:45 +0000 Manifest this update: Sat 27 Apr 2024 05:40:44 +0000 Manifest next update: Sat 04 May 2024 05:40:44 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: RLvE73o+mMSmxlcCkw3JSJZV8wFD1tSVnDvAVl5dhxQ=) 2: 14BB63805EC111EEBE63A109C4F9AE02.roa (hash: LAZ+vxPxEiGrZJLl8ywMAh3pLnZsqfIjoFLKBGbQiz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Apr 27 05:40:44 2024 GMT Not After : May 4 05:40:44 2024 GMT Subject: CN=662c8fdd-93f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d1:65:80:a3:86:2e:9e:fd:7c:6f:ee:b5:ec: 79:45:09:89:33:62:2d:4e:05:2d:39:2d:a9:17:c8: 89:c4:74:c4:55:01:6a:95:f5:a0:f2:dd:c0:48:c8: 28:d3:ed:75:b1:6c:2e:3b:5b:0a:4c:74:dc:06:7f: 56:a9:8d:c0:12:50:54:be:21:75:73:66:f5:ab:0e: b8:68:c4:07:ea:27:8c:ed:3e:7a:ba:b5:8b:44:c1: cc:ef:7c:5e:e6:4a:9d:09:6a:96:79:7d:33:85:30: 60:57:e5:6f:86:45:c3:76:7c:74:c6:0f:8d:fb:92: 36:7d:10:2c:62:96:ae:6a:aa:16:60:5f:ef:2e:cb: 0f:d4:a8:3f:01:b8:e2:9e:25:a2:bf:72:ee:bb:84: 72:5d:95:c6:91:79:b7:e8:ad:99:a8:27:98:9e:7a: 4e:97:e1:3a:84:d1:ee:77:93:6c:d7:ad:74:c6:bb: 02:75:26:e6:18:47:9c:79:3e:51:7f:21:a1:1d:da: c7:90:d4:31:df:c2:a9:da:7b:7a:08:b7:a7:c7:27: 97:93:8b:99:2f:6d:4c:3a:be:c0:3b:3d:8b:95:ab: cc:b0:9a:08:de:6f:37:47:64:ab:92:bd:f8:46:16: f7:07:20:c3:5a:7c:2f:43:2c:38:09:e0:77:e7:76: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:35:AF:AF:50:DA:00:2E:6E:EB:76:A9:35:A7:A0:7A:53:50:5A:E8 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:0e:d3:0c:10:20:53:f5:7e:e0:5c:ff:65:81:cb:21:53:31: b7:fd:21:1b:0f:89:ad:d1:78:56:4c:2d:16:a8:fb:a7:28:7a: 18:2a:7f:09:73:bb:37:44:3b:58:21:30:3c:43:f0:13:9e:ba: 12:41:44:f1:34:30:10:98:97:3e:77:d8:09:4e:3c:18:ac:62: 8d:4b:29:09:20:cf:90:6d:ac:e5:8b:dd:5e:e1:e4:c2:ac:5b: ad:b3:11:38:99:ea:54:9e:6e:99:45:38:0d:2a:c2:d9:7c:10: c5:d3:5d:ab:25:31:03:51:19:02:c0:b8:d9:64:97:97:04:dc: 7b:3c:70:0e:d6:7a:ab:30:63:2b:34:47:8e:28:77:d1:64:52: 42:ea:9d:02:34:ff:e7:82:e0:78:46:9f:18:a2:56:f0:2e:28: c4:4d:5b:3f:53:f5:85:e8:80:c4:d6:69:a7:a9:e5:3b:a8:b8: 2a:4e:49:2e:6a:a3:fc:33:83:27:ae:bc:92:29:e1:53:c1:6f: 0c:bd:cf:10:d5:d5:01:fe:ea:0a:de:62:3e:3f:3a:77:0a:e2: 55:24:e4:dc:5e:86:36:92:ec:32:8a:63:09:c4:83:7c:58:8c: 1b:37:1f:cf:ad:bc:58:7e:6c:d5:3d:88:79:a6:de:d0:0b:ca: b0:1d:04:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjQwNDI3MDU0MDQ0WhcNMjQwNTA0MDU0MDQ0WjAYMRYwFAYD VQQDEw02NjJjOGZkZC05M2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9tFlgKOGLp79fG/utex5RQmJM2ItTgUtOS2pF8iJxHTEVQFqlfWg8t3ASMgo 0+11sWwuO1sKTHTcBn9WqY3AElBUviF1c2b1qw64aMQH6ieM7T56urWLRMHM73xe 5kqdCWqWeX0zhTBgV+VvhkXDdnx0xg+N+5I2fRAsYpauaqoWYF/vLssP1Kg/Abji niWiv3Luu4RyXZXGkXm36K2ZqCeYnnpOl+E6hNHud5Ns1610xrsCdSbmGEeceT5R fyGhHdrHkNQx38Kp2nt6CLenxyeXk4uZL21MOr7AOz2LlavMsJoI3m83R2Srkr34 Rhb3ByDDWnwvQyw4CeB353bgIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM1r69Q 2gAubut2qTWnoHpTUFroMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0DtMMECBT9X7gXP9lgcshUzG3/SEbD4mt0XhWTC0WqPunKHoYKn8J c7s3RDtYITA8Q/ATnroSQUTxNDAQmJc+d9gJTjwYrGKNSykJIM+Qbazli91e4eTC rFutsxE4mepUnm6ZRTgNKsLZfBDF012rJTEDURkCwLjZZJeXBNx7PHAO1nqrMGMr NEeOKHfRZFJC6p0CNP/nguB4Rp8YolbwLijETVs/U/WF6IDE1mmnqeU7qLgqTkku aqP8M4MnrrySKeFTwW8Mvc8Q1dUB/uoK3mI+Pzp3CuJVJOTcXoY2kuwyimMJxIN8 WIwbNx/PrbxYfmzVPYh5pt7QC8qwHQTO -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:39 2024 by rpki-client on console-ams.rpki-client.org