$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: dg/YmEcoXnnlWjE7Okr5NyrB0juY3k9d3dCOiNpFHBA= Subject key identifier: DF:95:7A:7A:9C:34:3E:D2:3D:B2:A8:32:EC:04:EE:16:D0:B3:01:33 Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 0667 Signing time: Fri 17 May 2024 01:07:52 +0000 Manifest this update: Fri 17 May 2024 01:07:51 +0000 Manifest next update: Fri 24 May 2024 01:07:51 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: NQRUQaDoHs4pi1sBxSbR4JeMd1cg9rP8zpw49BRk+z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: May 17 01:07:51 2024 GMT Not After : May 24 01:07:51 2024 GMT Subject: CN=6646ade8-a5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:15:04:12:44:60:17:06:6a:ab:69:e8:8d: c2:96:da:09:67:f9:58:ce:91:76:9c:29:b3:1e:81: 0c:9b:d5:b6:f9:7e:84:1c:bd:f5:65:36:82:12:ba: 7f:d4:b9:d4:89:68:61:d1:6e:6b:5b:f1:ca:e1:d1: e3:a4:6b:9f:86:af:0e:eb:a1:8c:83:8c:95:0b:34: db:ee:4b:bc:29:28:dd:89:cf:7a:9a:b6:2e:a1:cd: bb:38:6f:cf:39:70:29:f8:dc:5d:60:ef:31:bb:7e: 03:79:5e:80:a2:ff:5c:27:83:f8:4a:38:b1:e0:c8: f8:6e:14:a8:5f:40:a4:16:1c:5f:8a:66:95:c2:ca: b5:6a:df:26:6f:7a:f4:b2:fe:d4:5f:65:99:b0:56: c4:34:2d:59:5b:13:02:5b:ff:54:50:ba:e3:cb:47: f9:41:f9:4d:4a:d6:93:c8:9c:11:70:20:a9:db:40: a8:80:b5:88:1a:fb:d0:eb:b4:1f:14:66:1d:4d:79: 41:52:73:a4:ab:ab:7d:36:74:1f:47:b6:f3:60:5c: ed:63:68:a3:47:e1:a4:9e:4d:8b:d0:93:1a:2d:36: 48:9e:a8:5f:ff:94:32:77:d0:51:3c:d2:77:d8:94: 66:bb:6e:81:06:41:f2:1d:4a:e3:21:f5:db:91:6d: b2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:95:7A:7A:9C:34:3E:D2:3D:B2:A8:32:EC:04:EE:16:D0:B3:01:33 X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:2f:03:9f:b1:d0:bc:f4:a9:fc:63:16:36:f0:21:b9:9f: 19:65:7b:8a:de:20:70:d7:3e:1e:c5:8d:20:20:b7:23:60:84: 74:0e:aa:87:76:ae:9c:88:e3:80:fb:a3:2d:03:40:ea:26:f3: 89:04:e2:3a:a9:9d:f2:03:ca:63:ab:99:fd:67:e0:26:31:ae: a1:67:a6:87:58:4e:1b:23:b4:13:36:3b:94:51:b8:0e:ec:6b: 05:b8:3b:d6:44:19:0b:d9:c6:a9:6a:29:e1:16:0a:6f:87:43: 98:49:89:6a:4c:9e:e2:c0:20:d7:4f:c2:b0:bc:83:ef:41:42: 21:d6:b4:05:96:dd:91:28:3a:9c:8d:f9:b0:84:b6:ca:9c:a2: 49:07:d9:ef:04:5c:50:97:0e:58:75:ad:57:ef:83:92:45:18: 3d:66:f1:7b:e5:0e:14:78:e5:96:00:4c:db:15:89:80:56:06: 3a:bf:2a:f3:27:56:c5:87:02:4f:b7:8b:c9:ff:d4:40:f1:41: 18:61:3c:2c:ba:fa:1f:e6:d9:ca:77:f2:b6:cd:6c:83:87:13: d4:fe:e4:65:a1:fb:3c:ab:0a:da:08:3b:eb:70:2e:67:fd:6c: 80:88:69:70:d2:e6:42:60:ca:84:73:ed:82:37:41:f9:95:b8: 50:1b:38:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjQwNTE3MDEwNzUxWhcNMjQwNTI0MDEwNzUxWjAYMRYwFAYD VQQDEw02NjQ2YWRlOC1hNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRsVBBJEYBcGaqtp6I3CltoJZ/lYzpF2nCmzHoEMm9W2+X6EHL31ZTaCErp/ 1LnUiWhh0W5rW/HK4dHjpGufhq8O66GMg4yVCzTb7ku8KSjdic96mrYuoc27OG/P OXAp+NxdYO8xu34DeV6Aov9cJ4P4Sjix4Mj4bhSoX0CkFhxfimaVwsq1at8mb3r0 sv7UX2WZsFbENC1ZWxMCW/9UULrjy0f5QflNStaTyJwRcCCp20CogLWIGvvQ67Qf FGYdTXlBUnOkq6t9NnQfR7bzYFztY2ijR+Gknk2L0JMaLTZInqhf/5Qyd9BRPNJ3 2JRmu26BBkHyHUrjIfXbkW2ymQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+Venqc ND7SPbKoMuwE7hbQswEzMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5AC8Dn7HQvPSp/GMWNvAhuZ8ZZXuK3iBw1z4exY0gILcjYIR0DqqH dq6ciOOA+6MtA0DqJvOJBOI6qZ3yA8pjq5n9Z+AmMa6hZ6aHWE4bI7QTNjuUUbgO 7GsFuDvWRBkL2capainhFgpvh0OYSYlqTJ7iwCDXT8KwvIPvQUIh1rQFlt2RKDqc jfmwhLbKnKJJB9nvBFxQlw5Yda1X74OSRRg9ZvF75Q4UeOWWAEzbFYmAVgY6vyrz J1bFhwJPt4vJ/9RA8UEYYTwsuvof5tnKd/K2zWyDhxPU/uRlofs8qwraCDvrcC5n /WyAiGlw0uZCYMqEc+2CN0H5lbhQGzjC -----END CERTIFICATE-----Generated at Fri May 17 01:47:17 2024 by rpki-client on console-fra.rpki-client.org