$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json) Hash identifier: cr3QgvoIi1FnYpcFE7XhAja5Tx5GtS+ak6l+fkzX5w0= Subject key identifier: 4A:3A:AF:21:3F:B9:85:27:36:E1:51:25:3B:C3:F0:8F:0F:B5:7D:48 Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Certificate serial: 07C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft Manifest number: 07C1 Signing time: Mon 06 May 2024 22:08:06 +0000 Manifest this update: Mon 06 May 2024 22:08:06 +0000 Manifest next update: Mon 13 May 2024 22:08:06 +0000 Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: 8pI0aojOyv8Nv6A3T1TOq6bFbzoBjlpgveS0wF9CR3M=) 2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 9wXMOm9fVh9YiiXGFKNsgIYR+u452tjlEUQ6Zp2HaJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1990 (0x7c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Validity Not Before: May 6 22:08:06 2024 GMT Not After : May 13 22:08:06 2024 GMT Subject: CN=663954c6-bb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:c0:5a:42:3e:80:3a:30:b5:b3:a9:30:2a: 65:16:a8:6c:a0:8f:74:99:31:56:b7:60:19:84:8d: df:2c:97:23:b6:aa:92:cb:e2:9c:e9:00:54:4d:72: dd:b3:17:54:55:51:d5:ea:64:7c:db:09:aa:68:8d: 43:43:64:9e:31:67:88:b0:d1:82:41:48:cf:a4:b0: 6d:00:78:ba:2a:f2:0e:4c:ca:a5:b6:0d:bf:39:25: 8b:15:54:d4:15:db:29:07:94:c0:9a:46:de:bb:1d: 49:bd:43:2f:4f:93:02:14:d5:a9:69:d9:34:51:74: 3b:51:a3:47:e5:bf:96:42:ca:0d:d7:54:4c:11:30: e8:87:d6:f2:42:c9:e4:57:bc:b4:ec:4c:e8:5c:0c: 98:b4:47:d6:aa:f9:ec:19:dc:c7:76:39:0d:9b:ee: df:af:82:af:c2:86:5b:11:da:f3:42:f3:db:02:6c: 23:0d:17:b2:e2:70:a1:1a:33:ec:2b:64:e2:bf:43: 26:ac:00:bc:94:af:ae:18:a4:cf:de:65:25:82:72: 37:59:56:87:70:d3:0f:b4:5f:37:c7:5a:1c:29:50: 86:68:9f:04:ad:af:34:9c:89:fc:66:02:1c:b3:dd: 80:f8:da:1a:a9:52:bd:e6:80:4d:38:f1:8e:12:39: eb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3A:AF:21:3F:B9:85:27:36:E1:51:25:3B:C3:F0:8F:0F:B5:7D:48 X509v3 Authority Key Identifier: keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ae:d5:8a:68:a2:9c:1f:1c:23:12:c5:08:78:33:73:f7:00: 99:50:e1:21:f4:ef:56:0b:99:77:8e:ca:9b:98:15:a8:b6:68: 4b:81:25:81:e5:be:94:e3:18:dd:04:64:e7:28:62:86:78:85: 83:2e:3f:c7:c5:c0:08:cf:86:0d:ee:d9:1c:ad:ce:c3:74:4a: b8:72:f8:1b:fa:08:5e:7b:0e:2f:76:35:42:09:6b:2c:4d:4c: 0a:cb:0d:9d:01:1b:a0:9f:4a:82:e1:3e:6e:76:7e:88:69:40: 81:3c:e8:8b:74:9c:f4:32:6f:68:83:10:c3:15:7b:1a:c6:5a: 5e:85:33:07:aa:ca:fa:ff:49:a4:5e:45:d9:fc:e0:0e:e6:2b: 0e:a1:6f:9e:dc:7b:09:90:65:72:6f:10:98:a2:cf:79:7f:13: cf:d3:22:77:77:c8:fa:b2:80:7b:c4:04:bc:5b:f4:2c:3e:ea: d1:1f:2f:76:d9:a5:58:74:3d:3f:05:4e:5a:52:e0:4f:a1:80: f4:04:f1:ca:29:c8:e5:86:6d:4e:39:cc:73:5d:96:ed:24:e2: 6a:11:ca:88:78:91:2e:0c:f4:2c:af:c7:bb:89:87:21:e9:73: 33:70:40:ad:aa:e2:91:09:7c:e1:11:41:f0:a6:c5:71:3e:2f: d8:4f:58:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzM0MxMTAvBgNVBAUTKEE2Mzk4NDk4QkRGRDgxQjlENjUxQjUxMkUwRTlGMDQ1 N0FGQTREMjgwHhcNMjQwNTA2MjIwODA2WhcNMjQwNTEzMjIwODA2WjAYMRYwFAYD VQQDEw02NjM5NTRjNi1iYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIrAWkI+gDowtbOpMCplFqhsoI90mTFWt2AZhI3fLJcjtqqSy+Kc6QBUTXLd sxdUVVHV6mR82wmqaI1DQ2SeMWeIsNGCQUjPpLBtAHi6KvIOTMqltg2/OSWLFVTU FdspB5TAmkbeux1JvUMvT5MCFNWpadk0UXQ7UaNH5b+WQsoN11RMETDoh9byQsnk V7y07EzoXAyYtEfWqvnsGdzHdjkNm+7fr4KvwoZbEdrzQvPbAmwjDRey4nChGjPs K2Tiv0MmrAC8lK+uGKTP3mUlgnI3WVaHcNMPtF83x1ocKVCGaJ8Era80nIn8ZgIc s92A+NoaqVK95oBNOPGOEjnrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEo6ryE/ uYUnNuFRJTvD8I8PtX1IMB8GA1UdIwQYMBaAFKY5hJi9/YG51lG1EuDp8EV6+k0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzMzQy85Qjc5QThGRUJG MzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdibldVYlVTNE9ud1JYcjZU U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqbUVtTDM5Z2JuV1ViVVM0T253UlhyNlRTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzMzQy85Qjc5QThGRUJGMzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdi bldVYlVTNE9ud1JYcjZUU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhrtWKaKKcHxwjEsUIeDNz9wCZUOEh9O9WC5l3jsqbmBWotmhLgSWB 5b6U4xjdBGTnKGKGeIWDLj/HxcAIz4YN7tkcrc7DdEq4cvgb+gheew4vdjVCCWss TUwKyw2dARugn0qC4T5udn6IaUCBPOiLdJz0Mm9ogxDDFXsaxlpehTMHqsr6/0mk XkXZ/OAO5isOoW+e3HsJkGVybxCYos95fxPP0yJ3d8j6soB7xAS8W/QsPurRHy92 2aVYdD0/BU5aUuBPoYD0BPHKKcjlhm1OOcxzXZbtJOJqEcqIeJEuDPQsr8e7iYch 6XMzcECtquKRCXzhEUHwpsVxPi/YT1hl -----END CERTIFICATE-----Generated at Mon May 6 23:05:41 2024 by rpki-client on console-fra.rpki-client.org