$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: 5bMhF3v83vIqcc6IFAjvRED7pK0G+BbzW0q8cE6KtW0= Subject key identifier: 41:63:4C:EE:95:F3:AD:07:27:CF:A5:34:D0:44:55:6A:08:A1:42:6C Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 03B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 03B2 Signing time: Sat 27 Apr 2024 02:25:27 +0000 Manifest this update: Sat 27 Apr 2024 02:25:27 +0000 Manifest next update: Sat 04 May 2024 02:25:27 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: 8ZEAM2UxZogX9U/tG1Ym1tW9+/qyW6Duqg3Wgi0Hmw8=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: sZ/qkXfI/QzEcHuKAB37EgGIS5JG5BT8rX82KQYJSHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 949 (0x3b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Apr 27 02:25:27 2024 GMT Not After : May 4 02:25:27 2024 GMT Subject: CN=662c6217-7823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:3c:0a:2a:5e:22:3e:1c:af:ff:12:28:98: 9f:a8:4a:82:00:0d:45:44:81:e4:07:cf:70:1a:37: 89:2e:ef:55:0d:ee:c8:aa:15:db:f8:95:4e:c2:04: 24:73:d5:4e:c0:dd:d8:29:4d:fc:49:02:8c:48:b1: f6:b6:11:10:19:16:e4:a1:10:74:f8:f4:77:ad:5b: 89:cb:32:55:2a:fe:e2:29:ac:ef:cc:ff:27:8a:6e: ff:b7:76:ea:9f:4f:8f:4a:fe:c1:50:3b:f0:bf:da: a1:37:f0:9c:bb:d3:21:74:0d:ae:98:34:b3:4e:01: 11:ab:bd:07:6d:71:c0:28:f6:9d:1c:11:e3:61:0f: 68:91:82:04:02:fb:21:9b:aa:53:a6:50:0c:21:ec: fa:f9:51:cc:55:2c:3d:ec:e8:d2:e2:bb:c5:88:6e: 94:a0:ac:2a:89:b8:84:a3:84:cd:4a:86:aa:fc:42: c4:19:f4:ad:65:72:89:03:e5:af:93:66:44:ed:85: d8:b3:e6:30:f5:5d:61:af:21:db:b1:74:29:8d:1d: e6:7c:c0:db:b3:4c:fa:0c:d8:3b:9b:bf:e0:5b:f4: 3b:18:1a:2e:74:39:c7:98:a8:74:59:3a:6d:2f:2e: 81:16:a1:44:6b:89:7c:66:5d:49:04:d4:d1:55:f2: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:63:4C:EE:95:F3:AD:07:27:CF:A5:34:D0:44:55:6A:08:A1:42:6C X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9f:5b:4c:54:4f:35:ed:16:ac:e8:67:55:67:68:20:8b:5b: 7f:fd:86:73:f3:a9:be:a2:af:ae:87:47:21:eb:a9:ee:e2:01: 96:bb:36:98:39:bd:d2:f2:88:14:21:5a:db:24:44:3a:fb:30: 51:b5:e1:b8:29:8d:b8:b1:cd:98:84:7e:56:4b:d6:e2:f6:8a: a2:a6:8d:fd:0a:e7:c1:0a:61:a4:c8:ce:12:91:6f:99:87:50: e5:ba:c5:f3:ef:97:70:3e:6a:bc:f4:d5:e2:52:f6:c6:55:b1: c6:d8:4c:e6:33:a8:1a:c8:eb:e5:97:76:51:b4:d2:2c:9e:c8: 2d:57:23:60:8e:8c:98:39:74:23:32:0e:e0:66:0e:6e:44:9f: 65:7e:10:6b:b2:e4:b6:6c:34:1f:ae:c5:cd:5e:94:84:f6:56: da:02:18:be:4c:cb:35:67:4b:b6:97:a3:2c:c2:0e:d4:95:d8: 74:63:07:55:98:2e:7b:89:45:24:6f:df:54:f7:95:f4:5c:3e: e2:b8:ca:72:1e:c5:fa:f0:91:9a:29:34:c2:f1:dd:5a:3d:45: 59:cb:08:de:f9:44:e2:6a:e7:f6:87:f4:58:32:59:5d:24:0b: 30:06:dd:0e:6d:c9:96:b1:0e:48:46:c4:75:95:61:e8:79:ea: fa:c7:f4:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjQwNDI3MDIyNTI3WhcNMjQwNTA0MDIyNTI3WjAYMRYwFAYD VQQDEw02NjJjNjIxNy03ODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk88CipeIj4cr/8SKJifqEqCAA1FRIHkB89wGjeJLu9VDe7IqhXb+JVOwgQk c9VOwN3YKU38SQKMSLH2thEQGRbkoRB0+PR3rVuJyzJVKv7iKazvzP8nim7/t3bq n0+PSv7BUDvwv9qhN/Ccu9MhdA2umDSzTgERq70HbXHAKPadHBHjYQ9okYIEAvsh m6pTplAMIez6+VHMVSw97OjS4rvFiG6UoKwqibiEo4TNSoaq/ELEGfStZXKJA+Wv k2ZE7YXYs+Yw9V1hryHbsXQpjR3mfMDbs0z6DNg7m7/gW/Q7GBoudDnHmKh0WTpt Ly6BFqFEa4l8Zl1JBNTRVfKqjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFjTO6V 860HJ8+lNNBEVWoIoUJsMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZn1tMVE817Ras6GdVZ2ggi1t//YZz86m+oq+uh0ch66nu4gGWuzaY Ob3S8ogUIVrbJEQ6+zBRteG4KY24sc2YhH5WS9bi9oqipo39CufBCmGkyM4SkW+Z h1DlusXz75dwPmq89NXiUvbGVbHG2EzmM6gayOvll3ZRtNIsnsgtVyNgjoyYOXQj Mg7gZg5uRJ9lfhBrsuS2bDQfrsXNXpSE9lbaAhi+TMs1Z0u2l6Mswg7Uldh0YwdV mC57iUUkb99U95X0XD7iuMpyHsX68JGaKTTC8d1aPUVZywje+UTiauf2h/RYMlld JAswBt0ObcmWsQ5IRsR1lWHoeer6x/Tk -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:59 2024 by rpki-client on console-ams.rpki-client.org