$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft File: PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json) Hash identifier: EZaSd9mIH0610Oal3cGxtZ/9GXXl9xpJwLO04A5IWJQ= Subject key identifier: C1:86:3C:9E:5F:AB:0A:3A:C9:3A:19:F3:47:A4:6D:58:B4:B7:2A:95 Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft Manifest number: 06E8 Signing time: Sat 04 May 2024 22:57:19 +0000 Manifest this update: Sat 04 May 2024 22:57:19 +0000 Manifest next update: Sat 11 May 2024 22:57:19 +0000 Files and hashes: 1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: kPu8Fkr6X5eDKBOJJ6ezl1ZCv23143Hw6wB8oGUMHxs=) 2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: shD1tJt4HPy3jOKupomkCVdCCSH27mhNKEdGk9N1jYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: May 4 22:57:19 2024 GMT Not After : May 11 22:57:19 2024 GMT Subject: CN=6636bd4f-77c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:b5:5e:e6:f2:6a:66:fd:3a:42:7e:22:94: 27:6c:7e:bf:88:1b:3d:7b:17:01:76:0b:36:f4:8c: 77:f9:46:02:0d:16:5c:f1:bb:c5:65:61:e7:62:32: 01:31:91:86:38:9f:2a:d4:e8:bb:e0:65:c0:62:5d: 81:3a:64:4c:e2:28:71:9c:2b:b0:bc:cd:0f:77:1b: 97:b9:29:70:e7:d2:e7:c6:89:cf:3f:90:2e:4a:a2: da:1c:1e:4a:1f:fd:0e:90:b6:45:da:a4:d7:7f:5c: 58:51:91:69:a3:21:45:69:f7:16:66:72:e8:0e:72: b7:a8:90:f1:a1:a8:ba:b4:fe:00:44:e5:ef:29:e9: 6f:d8:3d:15:1a:1a:f9:c8:be:58:3a:9f:f3:40:9a: 0c:02:ca:fa:4e:df:21:65:f2:da:29:1d:c7:2e:71: 2f:1d:54:43:07:84:9b:6e:0b:2e:ab:bf:68:26:4d: 23:96:8d:af:f4:78:d0:8a:1c:0b:ed:64:8e:6d:2e: 5a:75:b6:9d:72:97:fb:67:0a:bc:1c:a1:f9:88:51: 1d:8d:82:6b:f2:7f:43:78:91:4e:0b:6f:e2:f7:8e: a6:3e:51:f4:78:8d:a6:33:86:be:fe:29:12:84:e1: 71:dc:b7:3e:b8:bf:90:bf:9f:c7:cd:3a:df:47:0a: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:86:3C:9E:5F:AB:0A:3A:C9:3A:19:F3:47:A4:6D:58:B4:B7:2A:95 X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:73:ff:fa:22:6b:78:a1:54:54:8d:87:b0:4d:a2:33:63:b8: 0b:17:68:30:29:cd:4f:3b:ae:14:27:e1:84:00:7e:c1:b3:e3: 3b:8b:9a:08:9a:75:2b:37:53:de:73:e3:63:c8:c3:8d:fb:1a: d7:8a:78:43:6a:b2:bc:06:02:ee:fd:22:16:cf:87:33:ef:49: d5:96:87:72:03:1d:87:cb:f7:c2:55:1c:f7:7c:16:c1:a6:be: 55:9d:d4:ae:5d:65:3b:f8:21:9e:9b:42:7e:44:d3:77:21:03: de:18:62:49:4a:2b:87:28:bf:ee:47:9e:b2:9a:88:69:05:3d: b7:93:69:5b:aa:bb:65:18:1b:36:18:8f:e3:a5:34:65:7e:19: a5:30:24:c6:b4:f3:a7:ae:a9:47:9e:24:06:ef:17:1c:de:86: 9c:ec:de:b0:84:ed:f4:31:ca:c9:84:32:3a:87:bc:b8:0c:10: 81:68:53:ae:95:2b:40:80:d7:46:f3:dd:02:10:5c:58:f3:b4: fb:70:d5:80:b8:1a:02:ef:15:87:51:d8:27:2c:b8:d3:cb:a2: eb:10:1b:6a:b2:2d:45:03:20:8b:85:e9:ac:00:84:61:44:cb: ef:6b:5c:06:66:b7:83:58:fe:8d:f4:a3:2f:60:fc:01:6b:f1: b6:46:b4:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjQwNTA0MjI1NzE5WhcNMjQwNTExMjI1NzE5WjAYMRYwFAYD VQQDEw02NjM2YmQ0Zi03N2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H21Xubyamb9OkJ+IpQnbH6/iBs9excBdgs29Ix3+UYCDRZc8bvFZWHnYjIB MZGGOJ8q1Oi74GXAYl2BOmRM4ihxnCuwvM0PdxuXuSlw59LnxonPP5AuSqLaHB5K H/0OkLZF2qTXf1xYUZFpoyFFafcWZnLoDnK3qJDxoai6tP4AROXvKelv2D0VGhr5 yL5YOp/zQJoMAsr6Tt8hZfLaKR3HLnEvHVRDB4Sbbgsuq79oJk0jlo2v9HjQihwL 7WSObS5adbadcpf7Zwq8HKH5iFEdjYJr8n9DeJFOC2/i946mPlH0eI2mM4a+/ikS hOFx3Lc+uL+Qv5/HzTrfRwrk9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGGPJ5f qwo6yToZ80ekbVi0tyqVMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjE0RS84N0Y2ODQ4Q0ZGODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3 MjlQbFgwd3J6eWpXemRXdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbc//6Imt4oVRUjYewTaIzY7gLF2gwKc1PO64UJ+GEAH7Bs+M7i5oI mnUrN1Pec+NjyMON+xrXinhDarK8BgLu/SIWz4cz70nVlodyAx2Hy/fCVRz3fBbB pr5VndSuXWU7+CGem0J+RNN3IQPeGGJJSiuHKL/uR56ymohpBT23k2lbqrtlGBs2 GI/jpTRlfhmlMCTGtPOnrqlHniQG7xcc3oac7N6whO30McrJhDI6h7y4DBCBaFOu lStAgNdG890CEFxY87T7cNWAuBoC7xWHUdgnLLjTy6LrEBtqsi1FAyCLhemsAIRh RMvva1wGZreDWP6N9KMvYPwBa/G2RrSU -----END CERTIFICATE-----Generated at Sun May 5 00:12:22 2024 by rpki-client on console-fra.rpki-client.org