$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft File: PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json) Hash identifier: eSOsJtStZ2MqlRRCm/+n47o1D2M65C1eThd2JQKM+mw= Subject key identifier: 99:5E:32:A9:54:CA:86:31:B7:B8:A7:89:34:93:88:3F:91:93:56:F9 Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft Manifest number: 0153 Signing time: Sat 23 Nov 2024 02:36:16 +0000 Manifest this update: Sat 23 Nov 2024 02:36:16 +0000 Manifest next update: Sat 30 Nov 2024 02:36:15 +0000 Files and hashes: 1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: C05jX8m9GkH4CpR6YHZerfOgZP8jPIrZ4ZXfYAGUFqo=) 2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: c1Daig7TyrV0vZ0j79IrCiKW1T1CwI19KHOBVkJ0bXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Validity Not Before: Nov 23 02:36:16 2024 GMT Not After : Nov 30 02:36:15 2024 GMT Subject: CN=67413fa0-90d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:59:a9:b7:93:37:a3:8e:33:07:be:fe:33: da:ed:03:b4:5e:55:dd:76:eb:fc:31:22:b1:b7:8b: 35:e3:4a:29:0d:e7:e0:36:ba:b5:09:11:df:3e:41: 3e:98:4d:f8:b3:01:77:e9:a8:e7:c4:ce:5f:f5:23: 41:58:46:ff:d8:c0:06:db:b6:23:90:af:34:85:46: f5:23:3e:5b:e4:c6:29:b1:df:0c:cf:13:21:5e:e3: 48:fe:d3:f9:16:ad:03:00:60:a9:21:6e:40:fe:6b: 3f:90:94:82:52:ec:3d:70:2c:0e:91:be:e7:c4:e3: 5c:1a:df:4e:26:45:e5:a9:fc:df:f9:95:cf:c1:43: f2:23:f4:57:26:0b:7f:bb:a0:93:32:c4:16:8e:da: db:55:46:e7:b7:71:a9:2b:e0:78:13:59:81:90:63: 1d:da:d5:34:c2:89:4f:2b:a2:52:2e:ef:fc:aa:d0: de:98:84:0e:ba:6f:73:65:c5:11:ec:f9:89:f2:81: 39:75:65:da:40:aa:ac:25:55:1e:8d:0e:38:b0:ff: 48:fe:bb:3c:53:54:fb:ea:d6:2b:eb:11:72:71:99: 38:0b:ad:de:16:a4:9c:68:90:10:33:d1:33:5b:61: a7:bf:2c:ff:2a:5a:dd:a1:be:2d:13:f6:9f:28:7b: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5E:32:A9:54:CA:86:31:B7:B8:A7:89:34:93:88:3F:91:93:56:F9 X509v3 Authority Key Identifier: keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:64:45:46:b9:9d:a4:df:c7:eb:3c:79:d8:c9:9a:3e:bc:b1: 8f:54:f8:ed:f1:66:9b:c3:fb:0d:60:f0:ae:7e:4c:20:d5:bf: 84:ee:53:8d:ec:63:40:e7:ac:98:4e:38:d2:1a:e5:7d:42:0f: c8:ad:38:4f:10:0a:4a:11:9a:dc:f4:cf:a4:b4:7a:32:b0:5a: 2d:83:d4:99:75:0e:1e:a4:fb:b5:7b:fd:20:89:0c:d4:72:bb: f9:03:2a:30:2e:da:b1:ad:41:78:02:ea:2d:35:34:5a:be:f1: ff:07:2d:9e:af:a0:61:9f:b7:b2:a3:31:a2:70:5f:92:63:c4: 3b:37:f8:7b:fc:0d:5e:68:43:cd:00:fe:fd:33:ab:4b:f3:d3: c2:1f:be:12:eb:40:95:33:e7:37:19:35:81:d0:5d:c5:6c:ee: bb:f7:a9:46:46:93:7f:1f:73:fd:1e:83:a6:51:a7:48:bb:a2: 4d:42:db:88:f9:bb:fd:62:e8:c8:83:4e:fb:1a:f3:2e:c1:95: 95:f4:18:28:8e:74:69:a9:4c:cb:40:32:40:46:f6:7c:5c:3b: b1:c2:b4:75:74:19:66:d5:4f:fe:c1:a2:33:6c:d1:39:a9:cc: 50:51:ce:08:50:90:c8:86:32:69:50:00:19:e5:f9:a5:16:65: 82:92:c5:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx QjQ4RkI3QzUwHhcNMjQxMTIzMDIzNjE2WhcNMjQxMTMwMDIzNjE1WjAYMRYwFAYD VQQDEw02NzQxM2ZhMC05MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx55ZqbeTN6OOMwe+/jPa7QO0XlXdduv8MSKxt4s140opDefgNrq1CRHfPkE+ mE34swF36ajnxM5f9SNBWEb/2MAG27YjkK80hUb1Iz5b5MYpsd8MzxMhXuNI/tP5 Fq0DAGCpIW5A/ms/kJSCUuw9cCwOkb7nxONcGt9OJkXlqfzf+ZXPwUPyI/RXJgt/ u6CTMsQWjtrbVUbnt3GpK+B4E1mBkGMd2tU0wolPK6JSLu/8qtDemIQOum9zZcUR 7PmJ8oE5dWXaQKqsJVUejQ44sP9I/rs8U1T76tYr6xFycZk4C63eFqScaJAQM9Ez W2Gnvyz/Klrdob4tE/afKHv+LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJleMqlU yoYxt7iniTSTiD+Rk1b5MB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq VU5Icy03cG15cjBiU1B0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACZEVGuZ2k38frPHnYyZo+vLGPVPjt8Wabw/sNYPCufkwg1b+E7lON 7GNA56yYTjjSGuV9Qg/IrThPEApKEZrc9M+ktHoysFotg9SZdQ4epPu1e/0giQzU crv5AyowLtqxrUF4AuotNTRavvH/By2er6Bhn7eyozGicF+SY8Q7N/h7/A1eaEPN AP79M6tL89PCH74S60CVM+c3GTWB0F3FbO6796lGRpN/H3P9HoOmUadIu6JNQtuI +bv9YujIg077GvMuwZWV9BgojnRpqUzLQDJARvZ8XDuxwrR1dBlm1U/+waIzbNE5 qcxQUc4IUJDIhjJpUAAZ5fmlFmWCksVi -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org