$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json) Hash identifier: wm67Ea/1FVPuME9mWAPd1vJn2Rd8YQ7lH9xngDvrPn8= Subject key identifier: AB:B3:4E:97:EF:E5:89:A0:42:6A:EC:4A:C1:89:6E:D3:AE:ED:A3:93 Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft Manifest number: E7 Signing time: Fri 03 May 2024 06:03:44 +0000 Manifest this update: Fri 03 May 2024 06:03:43 +0000 Manifest next update: Fri 10 May 2024 06:03:43 +0000 Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: 8E8ZYa7XDmUd31VLRPswWUbwPAM0kt3WALeULaUa6BA=) 2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: SXnWNfTC9vuEnxWX/nt/qOR6dl/eGcQ4vRTb1i6hIAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Validity Not Before: May 3 06:03:43 2024 GMT Not After : May 10 06:03:43 2024 GMT Subject: CN=66347e40-b4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8c:ff:36:e8:b2:b0:5f:48:75:46:ee:90:a7: cc:f7:7f:92:2d:74:68:c7:53:bd:47:de:7b:6c:97: 8f:ae:04:ab:b4:7b:ee:79:ca:19:b4:1a:00:45:bb: 2b:e4:12:3c:a0:7c:08:09:45:33:5a:4c:ea:ee:83: b2:77:7e:45:22:c9:f7:4e:c1:51:b5:32:4f:95:67: c1:2b:1f:9e:c6:49:e7:70:65:c3:9a:97:11:86:ec: 41:07:20:65:37:bc:42:f2:8a:19:af:ae:c3:9e:01: d0:33:5f:3f:67:7f:4c:ee:e0:b7:46:72:28:b3:9f: bc:9b:17:4a:ce:59:e6:4f:54:6c:b0:0b:e7:8c:e7: e7:93:ec:31:07:76:1f:ef:9b:6f:1c:72:cb:d4:32: f1:5b:ad:4a:0e:7c:26:c4:de:db:6d:54:1d:09:c9: 76:de:69:aa:76:b1:9f:4e:b2:3c:fa:51:bc:9d:8f: e7:c0:35:22:ec:3e:1f:b5:cf:d6:60:fa:bf:35:52: 41:b2:44:4e:3b:f4:36:34:fe:9e:ff:a1:95:ef:84: b7:21:f8:c5:3d:e8:0d:37:cb:3c:80:86:46:ee:d6: f6:7c:1d:a7:e5:05:6a:40:e6:7c:f5:ab:86:80:21: c2:3e:5d:9a:f8:c8:6a:7e:ce:86:fd:be:40:f8:c0: 8d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B3:4E:97:EF:E5:89:A0:42:6A:EC:4A:C1:89:6E:D3:AE:ED:A3:93 X509v3 Authority Key Identifier: keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f0:c1:a5:bd:dc:cd:cc:89:a8:07:a2:37:ef:ba:83:77:fa: bc:9e:8f:0b:c7:a5:f0:cd:d4:2f:fd:d8:d6:05:55:af:43:df: de:8c:d4:ce:71:e6:e1:fe:a1:f8:4d:7f:3e:df:b5:b7:d5:0c: f9:8f:fd:61:ba:33:45:e2:14:84:86:c0:ac:5d:90:78:7c:d8: fe:0f:74:a2:60:d1:6b:8a:26:be:8c:07:8b:49:c7:1f:29:15: a8:e6:6a:e1:de:ef:89:64:f1:02:0b:b9:59:e4:cf:51:99:38: 5c:31:36:73:8f:6c:64:d8:4c:c0:04:83:13:1d:a8:1f:e3:3a: f3:cc:8f:42:69:8c:ab:20:f3:05:ff:f8:0f:bf:be:f7:df:e7: 8a:e4:e1:9f:cf:b8:c3:b6:a0:fc:2e:77:a1:ac:56:6b:42:47: aa:19:fb:5f:bc:97:b7:02:7f:c2:d9:dc:d5:6f:11:57:43:81: 23:a4:88:49:f7:68:d4:6a:65:ee:53:f4:bd:8e:49:b2:cc:e4: 3c:f8:a0:7c:51:14:9b:ee:33:2c:8c:ed:c5:78:b1:11:6e:68: b5:e4:58:c0:0d:d3:95:31:79:ac:51:3d:1d:cb:83:1b:3c:23: 0e:e7:b5:6d:f3:25:10:8f:00:6c:91:00:a2:d9:92:8e:68:5b: 44:e0:71:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx QjQ4RkI3QzUwHhcNMjQwNTAzMDYwMzQzWhcNMjQwNTEwMDYwMzQzWjAYMRYwFAYD VQQDEw02NjM0N2U0MC1iNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA84z/NuiysF9IdUbukKfM93+SLXRox1O9R957bJePrgSrtHvuecoZtBoARbsr 5BI8oHwICUUzWkzq7oOyd35FIsn3TsFRtTJPlWfBKx+exknncGXDmpcRhuxBByBl N7xC8ooZr67DngHQM18/Z39M7uC3RnIos5+8mxdKzlnmT1RssAvnjOfnk+wxB3Yf 75tvHHLL1DLxW61KDnwmxN7bbVQdCcl23mmqdrGfTrI8+lG8nY/nwDUi7D4ftc/W YPq/NVJBskROO/Q2NP6e/6GV74S3IfjFPegNN8s8gIZG7tb2fB2n5QVqQOZ89auG gCHCPl2a+Mhqfs6G/b5A+MCN/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuzTpfv 5YmgQmrsSsGJbtOu7aOTMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq VU5Icy03cG15cjBiU1B0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr8MGlvdzNzImoB6I377qDd/q8no8Lx6XwzdQv/djWBVWvQ9/ejNTO cebh/qH4TX8+37W31Qz5j/1hujNF4hSEhsCsXZB4fNj+D3SiYNFriia+jAeLSccf KRWo5mrh3u+JZPECC7lZ5M9RmThcMTZzj2xk2EzABIMTHagf4zrzzI9CaYyrIPMF //gPv7733+eK5OGfz7jDtqD8LnehrFZrQkeqGftfvJe3An/C2dzVbxFXQ4EjpIhJ 92jUamXuU/S9jkmyzOQ8+KB8URSb7jMsjO3FeLERbmi15FjADdOVMXmsUT0dy4Mb PCMO57Vt8yUQjwBskQCi2ZKOaFtE4HFC -----END CERTIFICATE-----Generated at Fri May 3 08:21:08 2024 by rpki-client on console-ams.rpki-client.org