$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft File: PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json) Hash identifier: dOKaI6eTJRUodWX+vBwKo11AgF5DAFGFY1mvKwn/Ym4= Subject key identifier: C8:4F:96:98:C4:DE:5B:35:1B:81:E4:35:E5:60:5E:AA:C8:23:E7:C0 Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC Certificate issuer: /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft Manifest number: 01AE Signing time: Wed 01 May 2024 04:50:54 +0000 Manifest this update: Wed 01 May 2024 04:50:53 +0000 Manifest next update: Wed 08 May 2024 04:50:53 +0000 Files and hashes: 1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: EOr4DiqEkNhPtlbgEzjeze+Y1mc6cqBGdLDOHcm/SNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC Validity Not Before: May 1 04:50:53 2024 GMT Not After : May 8 04:50:53 2024 GMT Subject: CN=6631ca2e-eb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:ed:61:97:4c:1b:10:c0:a9:00:fb:81:36: e9:8d:a4:45:47:99:8d:da:a5:8b:5e:76:b3:77:cc: 7d:de:ea:96:fd:f8:fb:41:78:d3:51:bd:d9:dc:4c: bd:70:ff:56:57:de:0d:ea:23:2c:45:60:32:53:ad: d1:5c:ca:13:8e:bd:db:e2:d9:9b:3e:cb:4e:4f:51: 54:44:ff:17:2c:95:31:6a:7e:03:0a:b6:94:32:7b: 69:ad:4a:9a:d9:8d:92:7e:91:48:d6:00:6a:8b:ed: ae:65:c7:bc:8e:e8:4e:0a:4d:95:60:41:c1:b7:63: 8e:54:67:7d:40:be:30:c9:1e:b0:57:76:47:19:43: 2d:43:9b:85:e8:d6:a0:71:21:bc:11:b1:15:ed:af: 4e:e8:7f:20:b2:f7:7e:18:8a:91:61:7b:67:48:60: 80:6f:71:8c:4e:46:84:99:e0:eb:7e:db:23:fd:56: 65:64:e5:52:f3:66:2f:94:42:c8:c0:62:e6:0f:f1: dd:a0:ff:13:85:08:ca:bb:c1:8b:78:e6:70:d3:cf: 11:40:99:0b:fc:36:0c:2c:ba:c3:92:e8:bb:b3:d3: 7b:4f:57:4e:0a:d3:ec:70:88:95:1d:1b:57:84:60: 10:6c:3c:5e:9a:4b:2c:64:ad:e7:a6:e4:28:3b:19: 40:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4F:96:98:C4:DE:5B:35:1B:81:E4:35:E5:60:5E:AA:C8:23:E7:C0 X509v3 Authority Key Identifier: keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:18:e7:c3:13:58:96:e7:df:4e:3a:24:0b:87:7a:68:2d:83: ba:2a:34:4c:08:63:91:a1:6b:9c:4b:52:ba:f5:60:45:0b:12: 1a:57:36:60:ae:44:e1:26:46:2b:de:84:14:90:74:84:b1:0b: 89:55:25:48:63:2c:35:67:bb:51:e5:05:ea:01:21:ee:2c:b1: aa:88:9e:d2:0e:f7:36:e3:7b:72:b5:78:ea:8b:4f:75:ac:c6: 3d:26:cd:89:c7:1e:28:c5:99:64:84:1d:d3:ed:c3:ce:a0:1b: 2e:e7:21:0f:b9:1d:19:a0:b0:a4:3e:1a:9c:c1:15:2b:ca:47: 24:2c:26:d9:3d:5c:6e:0b:68:18:b0:af:6d:6c:85:10:90:09: 26:67:43:f3:32:dd:ff:57:d4:bd:db:32:95:47:a3:bc:9e:06: c2:b3:c2:2f:5d:e0:ea:d5:17:67:ed:2a:db:1a:0f:92:5f:f4: 09:ee:38:70:80:02:6b:2b:c3:ca:19:e1:81:9c:e2:dc:46:d8: dd:bc:89:1e:11:14:3b:bf:1b:3f:96:6a:99:a4:9d:b8:cf:db: 79:ce:c4:18:ea:1c:4d:82:f4:a4:83:e7:68:42:d9:da:87:5f: a4:dc:44:40:17:cd:72:50:05:ae:1c:ec:c6:01:c1:d2:69:80: d6:92:be:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKDNEQzI5ODJDQjM5MEJGREE4NjlBRURCNzUzNTNGRTRC Qjk3MEExQkMwHhcNMjQwNTAxMDQ1MDUzWhcNMjQwNTA4MDQ1MDUzWjAYMRYwFAYD VQQDEw02NjMxY2EyZS1lYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpXtYZdMGxDAqQD7gTbpjaRFR5mN2qWLXnazd8x93uqW/fj7QXjTUb3Z3Ey9 cP9WV94N6iMsRWAyU63RXMoTjr3b4tmbPstOT1FURP8XLJUxan4DCraUMntprUqa 2Y2SfpFI1gBqi+2uZce8juhOCk2VYEHBt2OOVGd9QL4wyR6wV3ZHGUMtQ5uF6Nag cSG8EbEV7a9O6H8gsvd+GIqRYXtnSGCAb3GMTkaEmeDrftsj/VZlZOVS82YvlELI wGLmD/HdoP8ThQjKu8GLeOZw088RQJkL/DYMLLrDkui7s9N7T1dOCtPscIiVHRtX hGAQbDxemkssZK3npuQoOxlAJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhPlpjE 3ls1G4HkNeVgXqrII+fAMB8GA1UdIwQYMBaAFD3CmCyzkL/ahprtt1NT/ku5cKG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC83QjkyRUY5QTBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5cUdtdTIzVTFQLVM3bHdv YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BjS1lMTE9RdjlxR211MjNVMVAtUzdsd29idy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC83QjkyRUY5QTBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi9QY0tZTExPUXY5 cUdtdTIzVTFQLVM3bHdvYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnGOfDE1iW599OOiQLh3poLYO6KjRMCGORoWucS1K69WBFCxIaVzZg rkThJkYr3oQUkHSEsQuJVSVIYyw1Z7tR5QXqASHuLLGqiJ7SDvc243tytXjqi091 rMY9Js2Jxx4oxZlkhB3T7cPOoBsu5yEPuR0ZoLCkPhqcwRUrykckLCbZPVxuC2gY sK9tbIUQkAkmZ0PzMt3/V9S92zKVR6O8ngbCs8IvXeDq1Rdn7SrbGg+SX/QJ7jhw gAJrK8PKGeGBnOLcRtjdvIkeERQ7vxs/lmqZpJ24z9t5zsQY6hxNgvSkg+doQtna h1+k3ERAF81yUAWuHOzGAcHSaYDWkr5J -----END CERTIFICATE-----Generated at Wed May 1 05:59:03 2024 by rpki-client on console-fra.rpki-client.org