$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft File: PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json) Hash identifier: 3RgL7PiqcQ90ToMnJMzByU7WvdsP/02NmldImAo2yjs= Subject key identifier: ED:C5:F6:BB:55:E8:2A:34:44:55:07:F4:98:EA:13:62:AC:A8:CD:37 Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF Certificate issuer: /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Certificate serial: 0AD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft Manifest number: 0ACD Signing time: Tue 30 Apr 2024 20:25:06 +0000 Manifest this update: Tue 30 Apr 2024 20:25:05 +0000 Manifest next update: Tue 07 May 2024 20:25:05 +0000 Files and hashes: 1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: PwKCEdLJHQXUMmunY5nxrL7qPQ/OZvvrNEca6EAoewg=) 2: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: da31GsEC+QXAR1NhCyrS8hR1/Qp4j1jpxG9YymRCGbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2770 (0xad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF Validity Not Before: Apr 30 20:25:05 2024 GMT Not After : May 7 20:25:05 2024 GMT Subject: CN=663153a2-ce3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fb:75:f4:42:9b:aa:73:a5:26:ee:d2:1b:eb: 5b:96:47:28:97:6b:05:eb:33:b4:cd:2d:05:12:ca: 9a:c0:d3:af:e6:58:81:dd:5d:63:3e:1a:6b:ac:dd: 4e:1e:fe:82:21:65:4c:b0:aa:2e:3d:c4:3d:81:60: 69:49:20:7d:e0:06:90:cc:96:95:1f:2a:f0:24:bb: 25:cc:dc:33:4f:ec:e0:05:b6:82:f1:92:f5:43:2e: 68:50:ac:3d:03:6c:19:fd:01:51:f9:dc:aa:f1:64: 04:85:d1:dd:7d:92:4c:3a:e8:74:b3:ab:61:bd:cb: 80:a4:45:6d:d5:4e:f9:89:d9:e5:9d:b8:dd:13:25: 83:ed:46:5a:2b:de:b2:8e:2a:28:cd:6f:9d:69:f0: 0d:0b:2a:30:27:52:ae:c9:c5:9b:5b:b0:4c:5b:e2: d2:76:c2:56:a8:4a:a0:df:f3:38:e5:7f:0f:76:6f: 3c:ca:4e:c9:0d:d0:74:76:db:37:69:59:77:bb:aa: 11:04:8d:a0:b5:a9:22:21:11:dd:19:d5:fa:e7:93: c0:67:09:c2:8c:38:2a:0f:e2:1f:3c:4d:60:0d:2a: a6:d7:6d:74:60:50:1d:77:8e:51:9c:30:8d:fb:6e: 01:21:e9:92:76:96:8b:49:09:e7:7d:cf:e9:1f:36: 43:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:F6:BB:55:E8:2A:34:44:55:07:F4:98:EA:13:62:AC:A8:CD:37 X509v3 Authority Key Identifier: keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f1:4a:54:e1:62:de:62:83:8e:96:8f:b6:c6:58:34:be:68: 12:f6:34:d5:e4:db:ff:59:66:5c:d5:c7:8d:37:ea:65:bf:a8: e3:76:d8:c4:bd:06:9b:88:8d:25:8e:ba:03:75:bd:ec:a8:00: 97:06:dc:7d:17:1a:c5:27:7f:3f:e1:4c:fb:68:4f:b1:75:66: a3:26:cf:a2:0f:a9:2e:e7:bc:c3:0a:3e:29:92:6a:e0:16:0d: 4f:b3:68:6b:5a:b4:29:e0:b7:90:2c:28:6d:c6:76:e4:be:a4: 43:df:66:21:8c:73:a8:f2:8e:09:44:7f:9d:80:46:cf:cd:1d: e1:0f:9c:7b:8c:b4:78:13:fd:7b:bb:84:b6:c4:52:af:24:47: 7c:c2:58:3b:ce:95:5a:54:4c:85:58:97:a1:2a:d4:82:85:fd: 02:a0:e1:94:67:1e:a9:41:0c:3d:a8:eb:58:63:25:45:67:f8: 2b:cb:7c:38:ad:c0:b4:78:6c:2c:4f:ba:e6:7e:e5:2f:1c:bd: 85:53:d0:93:7a:c3:34:c2:82:ae:0e:45:85:60:18:ab:c4:af: f5:00:e1:e9:73:9f:9c:cb:85:2b:38:ee:03:3c:10:24:ce:b9: 22:90:af:e1:b3:6f:03:7e:27:d1:70:51:43:28:a6:f1:00:16: e2:fb:c8:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZGMEUxMTAvBgNVBAUTKDNENDVDNUEzM0JGOURENEQzQTFFREE3RUQyNjQwNjU4 RTFGODMxRkYwHhcNMjQwNDMwMjAyNTA1WhcNMjQwNTA3MjAyNTA1WjAYMRYwFAYD VQQDEw02NjMxNTNhMi1jZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/t19EKbqnOlJu7SG+tblkcol2sF6zO0zS0FEsqawNOv5liB3V1jPhprrN1O Hv6CIWVMsKouPcQ9gWBpSSB94AaQzJaVHyrwJLslzNwzT+zgBbaC8ZL1Qy5oUKw9 A2wZ/QFR+dyq8WQEhdHdfZJMOuh0s6thvcuApEVt1U75idnlnbjdEyWD7UZaK96y jioozW+dafANCyowJ1KuycWbW7BMW+LSdsJWqEqg3/M45X8Pdm88yk7JDdB0dts3 aVl3u6oRBI2gtakiIRHdGdX655PAZwnCjDgqD+IfPE1gDSqm1210YFAdd45RnDCN +24BIemSdpaLSQnnfc/pHzZD7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3F9rtV 6Co0RFUH9JjqE2KsqM03MB8GA1UdIwQYMBaAFD1FxaM7+d1NOh7aftJkBljh+DH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkYwRS8xQTc1OEIwRTI2 MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNVMDZIdHAtMG1RR1dPSDRN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVWEZvenY1M1UwNkh0cC0wbVFHV09INE1mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkYwRS8xQTc1OEIwRTI2MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNV MDZIdHAtMG1RR1dPSDRNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW8UpU4WLeYoOOlo+2xlg0vmgS9jTV5Nv/WWZc1ceNN+plv6jjdtjE vQabiI0ljroDdb3sqACXBtx9FxrFJ38/4Uz7aE+xdWajJs+iD6ku57zDCj4pkmrg Fg1Ps2hrWrQp4LeQLChtxnbkvqRD32YhjHOo8o4JRH+dgEbPzR3hD5x7jLR4E/17 u4S2xFKvJEd8wlg7zpVaVEyFWJehKtSChf0CoOGUZx6pQQw9qOtYYyVFZ/gry3w4 rcC0eGwsT7rmfuUvHL2FU9CTesM0woKuDkWFYBirxK/1AOHpc5+cy4UrOO4DPBAk zrkikK/hs28DfifRcFFDKKbxABbi+8jO -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:56 2024 by rpki-client on console-ams.rpki-client.org