$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json) Hash identifier: cuiWGQaagYGuK4dIxJAeTGpAI7rfxP2ftAwekrT7uBc= Subject key identifier: D4:B2:98:28:93:F4:9D:A0:B7:8B:5F:F9:62:94:D0:E3:D6:41:42:DD Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft Manifest number: 0699 Signing time: Mon 06 May 2024 23:24:45 +0000 Manifest this update: Mon 06 May 2024 23:24:45 +0000 Manifest next update: Mon 13 May 2024 23:24:45 +0000 Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: iNZtvK5FhqomMXWUb+rOg2azHkVt4GH0gkv1m4Ooius=) 2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: ebNeLW0EQd5j9i9mFWYfA/lc3enK3rlGGUazkEOZjZc=) 3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: /GtxOnDeziIDDP1H37kSVjJNNo/6F1o0ugOAiFIHVrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Validity Not Before: May 6 23:24:45 2024 GMT Not After : May 13 23:24:45 2024 GMT Subject: CN=663966bd-c5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:6c:4f:3a:fe:7d:5a:ef:a2:a4:3e:54:95: b5:b7:34:2c:50:ff:e0:85:5d:9e:29:16:82:95:e0: 1b:3b:34:fe:9b:5f:bc:8b:2b:b8:5b:eb:3c:e6:f7: 28:70:a3:ea:44:20:bf:e2:99:4f:34:00:2d:6c:08: f3:19:bc:43:3a:a3:d0:71:e1:6f:3f:60:71:aa:08: 7c:db:3e:9a:20:8a:2d:86:ed:3c:30:d9:cb:17:3c: 2c:e9:64:dd:21:74:e9:71:72:0d:f8:d7:9b:c3:b4: d2:f6:76:60:6b:68:a5:11:b6:70:a9:fa:1c:e4:71: a6:a3:78:36:22:f2:4b:ef:bd:e7:a0:5e:3d:4a:68: 77:11:32:a4:17:ec:66:31:bb:a9:c6:34:2a:06:51: bc:98:25:63:ab:57:8f:07:5f:df:9d:1c:58:d6:db: 63:d3:24:b6:1a:b7:c3:31:e7:e0:ab:17:e0:ef:57: e3:2b:b6:53:b0:a2:ca:c9:11:0f:aa:f4:d2:01:75: d7:d1:bf:10:96:c2:bd:f1:1e:46:52:e5:bb:4a:1d: da:d8:96:67:43:03:cf:65:3f:2a:b8:80:2d:32:7d: 4f:7d:48:45:1d:e9:3a:6d:e4:34:ce:b4:8b:1d:4e: b3:42:df:71:c8:75:58:4e:61:b7:fc:8c:83:48:cc: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B2:98:28:93:F4:9D:A0:B7:8B:5F:F9:62:94:D0:E3:D6:41:42:DD X509v3 Authority Key Identifier: keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c4:4f:a0:1a:61:4a:23:fd:f0:a2:44:d8:1e:f8:11:52:9c: 4e:1a:fd:14:f8:a2:c9:f1:f4:02:59:7b:34:91:5a:30:54:dd: 50:99:21:0a:2e:59:ce:de:2b:8f:11:fa:ac:c0:ba:c5:a1:2c: 7f:06:70:b3:12:72:ce:72:9f:6a:5a:df:bf:bf:50:79:be:18: 7e:18:8a:ee:4e:26:3a:b6:e7:fc:b7:74:ec:33:cc:11:57:b5: 1a:d0:cb:a5:c3:0b:40:3b:e7:7f:7e:e1:98:2d:b5:14:ee:3e: 52:fc:6e:4d:34:66:17:f3:2c:e8:14:21:e3:b3:ea:82:44:46: b3:b7:67:e4:74:a6:26:47:f5:3b:28:e9:5d:8f:e0:5e:01:08: f9:71:d6:19:ae:ba:1a:c1:37:b9:82:36:62:5b:fa:ae:57:24: 7d:c6:06:d7:03:4e:1d:fe:e7:2a:bd:c9:93:e1:b8:8a:87:e5: f3:ed:e5:e1:ae:de:00:d4:c8:fd:80:a6:0d:4f:96:e8:c3:8c: fa:9d:ad:81:2b:db:2b:4c:5d:81:05:a7:f5:03:33:79:5d:6d: 7e:1d:a9:f5:36:b6:40:55:4e:77:92:0e:55:df:0c:c1:02:66: 2a:cd:72:ef:5c:df:5c:45:07:88:0a:7d:5a:78:6b:f8:fd:a5: 04:56:de:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy NjdFQkFFRUMwHhcNMjQwNTA2MjMyNDQ1WhcNMjQwNTEzMjMyNDQ1WjAYMRYwFAYD VQQDEw02NjM5NjZiZC1jNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWJsTzr+fVrvoqQ+VJW1tzQsUP/ghV2eKRaCleAbOzT+m1+8iyu4W+s85vco cKPqRCC/4plPNAAtbAjzGbxDOqPQceFvP2Bxqgh82z6aIIothu08MNnLFzws6WTd IXTpcXIN+Nebw7TS9nZga2ilEbZwqfoc5HGmo3g2IvJL773noF49Smh3ETKkF+xm MbupxjQqBlG8mCVjq1ePB1/fnRxY1ttj0yS2GrfDMefgqxfg71fjK7ZTsKLKyREP qvTSAXXX0b8QlsK98R5GUuW7Sh3a2JZnQwPPZT8quIAtMn1PfUhFHek6beQ0zrSL HU6zQt9xyHVYTmG3/IyDSMyvTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSymCiT 9J2gt4tf+WKU0OPWQULdMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy b0Rra1lXalRKNHNtZnJydXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHxE+gGmFKI/3wokTYHvgRUpxOGv0U+KLJ8fQCWXs0kVowVN1QmSEK LlnO3iuPEfqswLrFoSx/BnCzEnLOcp9qWt+/v1B5vhh+GIruTiY6tuf8t3TsM8wR V7Ua0MulwwtAO+d/fuGYLbUU7j5S/G5NNGYX8yzoFCHjs+qCREazt2fkdKYmR/U7 KOldj+BeAQj5cdYZrroawTe5gjZiW/quVyR9xgbXA04d/ucqvcmT4biKh+Xz7eXh rt4A1Mj9gKYNT5bow4z6na2BK9srTF2BBaf1AzN5XW1+Han1NrZAVU53kg5V3wzB AmYqzXLvXN9cRQeICn1aeGv4/aUEVt7F -----END CERTIFICATE-----Generated at Tue May 7 01:58:16 2024 by rpki-client on console-fra.rpki-client.org