$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft File: PitYQ36GJEE5rkzQPZf0A0KFBzY.mft (raw, json) Hash identifier: FO8KRx7+vp5m6b+ZbEZWSc+j2MP257JiPQXY2tBTcLg= Subject key identifier: D8:E1:36:2E:B2:7B:E7:16:75:C0:58:F0:F4:0C:17:EB:6B:9A:2E:41 Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Certificate serial: 2614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft Manifest number: 25F4 Signing time: Thu 02 May 2024 16:01:25 +0000 Manifest this update: Thu 02 May 2024 16:01:25 +0000 Manifest next update: Thu 09 May 2024 16:01:25 +0000 Files and hashes: 1: PitYQ36GJEE5rkzQPZf0A0KFBzY.crl (hash: R/5kHU7A+OV1uXFdtfYqXoaflATqdi0CTAVGEtdxOyM=) 2: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (hash: v59KDUhh58OVJHG3KXNm3s11s6PHTCbDBKRWT/77Fak=) 3: 7E75C196B10C11E5BB6B2A16C4F9AE02.roa (hash: sPTylHB0iBDOx3OUDN6R3nG798vv7YVV9q0LgZUPoEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9748 (0x2614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Validity Not Before: May 2 16:01:25 2024 GMT Not After : May 9 16:01:25 2024 GMT Subject: CN=6633b8d5-21ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:e7:22:41:1a:af:5d:5e:06:9f:5e:37:75: 66:81:fe:9d:8f:69:ae:38:94:2d:45:e7:76:26:08: 8a:94:a7:d9:63:85:1b:7a:b4:9b:e7:53:f4:bb:28: 4a:35:f6:1c:d0:0a:8e:e5:b4:dd:40:d8:8e:e1:73: 91:ca:7e:a9:87:e8:00:b7:24:54:f6:21:5c:39:3d: aa:0f:34:40:4c:41:47:d0:0f:50:c1:14:a0:76:44: 53:4c:92:b5:b4:07:61:36:fd:cf:06:56:9e:12:58: 69:f5:cf:0c:33:7d:91:95:01:64:b0:61:31:b6:9d: de:4e:93:46:3c:f5:1b:d0:90:61:88:da:06:17:72: 49:5a:ca:1f:3d:95:9a:53:b5:e3:bb:2c:ae:0c:ef: 39:ba:2b:2a:49:ff:69:fa:b5:7e:51:3d:d9:dc:ea: 37:2e:cc:64:9f:8b:86:24:5c:d0:c0:a5:0f:87:b5: f6:cb:34:c6:27:fc:65:04:ac:25:11:61:51:92:32: ba:d7:7d:a6:d7:c7:aa:a4:ed:04:43:29:d5:0e:3b: 12:55:41:ea:fb:3a:bb:82:d0:11:8a:52:b7:47:c5: bd:a7:4b:ea:41:06:0b:99:e6:7f:dd:dc:4d:6f:ba: 9b:e9:b8:df:d1:68:71:6e:75:b7:40:3c:dc:f8:ec: 0d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E1:36:2E:B2:7B:E7:16:75:C0:58:F0:F4:0C:17:EB:6B:9A:2E:41 X509v3 Authority Key Identifier: keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:55:e3:1d:f8:56:3f:72:ec:f9:4a:cb:ae:dc:20:65:2b:51: 47:89:f9:04:b1:a4:af:af:df:2d:23:19:4c:f0:f5:a1:fb:5b: 56:9d:ba:f1:8e:b1:c5:b1:96:2d:f6:53:b8:65:42:bc:d2:14: e0:36:5d:d1:51:8e:85:6a:02:b3:6e:93:0f:4f:22:50:98:c4: 09:68:da:f2:63:69:c5:c4:63:5e:03:95:e7:b2:50:6b:54:16: 44:b5:13:79:ed:fd:b6:a7:b7:d5:08:c9:6e:12:91:d7:af:c3: 4c:13:5c:55:51:98:26:3b:a4:98:dd:b4:4f:85:27:99:0d:23: 0a:d4:93:1b:fd:a5:01:e9:ab:bd:04:92:4d:ef:3e:46:7e:6e: 19:26:05:83:92:5e:45:b3:62:56:bb:9d:8b:39:b9:ed:70:26: 9e:eb:72:64:66:65:fa:e2:06:d9:74:43:de:7b:ff:f7:10:67: cc:b2:d0:0c:6f:de:57:8a:f7:3a:26:1e:76:59:59:32:5f:bf: db:4b:9e:61:6d:05:b9:22:a1:dd:bb:00:cb:36:cc:b7:7c:f6: d1:7f:e4:7a:86:88:51:38:54:0c:f3:75:b4:ee:e1:46:84:01: 00:c1:95:b6:45:36:ae:8c:2d:a6:4e:16:77:81:d7:82:56:87: 27:b8:92:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFMEMxMTAvBgNVBAUTKDNFMkI1ODQzN0U4NjI0NDEzOUFFNENEMDNEOTdGNDAz NDI4NTA3MzYwHhcNMjQwNTAyMTYwMTI1WhcNMjQwNTA5MTYwMTI1WjAYMRYwFAYD VQQDEw02NjMzYjhkNS0yMWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0fnIkEar11eBp9eN3Vmgf6dj2muOJQtRed2JgiKlKfZY4UberSb51P0uyhK NfYc0AqO5bTdQNiO4XORyn6ph+gAtyRU9iFcOT2qDzRATEFH0A9QwRSgdkRTTJK1 tAdhNv3PBlaeElhp9c8MM32RlQFksGExtp3eTpNGPPUb0JBhiNoGF3JJWsofPZWa U7XjuyyuDO85uisqSf9p+rV+UT3Z3Oo3Lsxkn4uGJFzQwKUPh7X2yzTGJ/xlBKwl EWFRkjK6132m18eqpO0EQynVDjsSVUHq+zq7gtARilK3R8W9p0vqQQYLmeZ/3dxN b7qb6bjf0WhxbnW3QDzc+OwNuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjhNi6y e+cWdcBY8PQMF+trmi5BMB8GA1UdIwQYMBaAFD4rWEN+hiRBOa5M0D2X9ANChQc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUUwQy8yMkQ1MzY1MkQ2 NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pFRTVya3pRUFpmMEEwS0ZC elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BpdFlRMzZHSkVFNXJrelFQWmYwQTBLRkJ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUUwQy8yMkQ1MzY1MkQ2NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pF RTVya3pRUFpmMEEwS0ZCelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfVeMd+FY/cuz5Ssuu3CBlK1FHifkEsaSvr98tIxlM8PWh+1tWnbrx jrHFsZYt9lO4ZUK80hTgNl3RUY6FagKzbpMPTyJQmMQJaNryY2nFxGNeA5XnslBr VBZEtRN57f22p7fVCMluEpHXr8NME1xVUZgmO6SY3bRPhSeZDSMK1JMb/aUB6au9 BJJN7z5Gfm4ZJgWDkl5Fs2JWu52LObntcCae63JkZmX64gbZdEPee//3EGfMstAM b95Xivc6Jh52WVkyX7/bS55hbQW5IqHduwDLNsy3fPbRf+R6hohROFQM83W07uFG hAEAwZW2RTaujC2mThZ3gdeCVocnuJIo -----END CERTIFICATE-----Generated at Thu May 2 17:43:07 2024 by rpki-client on console-fra.rpki-client.org