$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: sAgkONkTZSnt2alzU//v2vw9nFJeqQr4j6oFRy85UZ4= Subject key identifier: B5:90:E9:94:25:31:CD:0C:45:AA:F7:DA:77:01:F8:46:25:18:84:2C Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 48 Signing time: Fri 17 May 2024 08:13:26 +0000 Manifest this update: Fri 17 May 2024 08:13:26 +0000 Manifest next update: Fri 24 May 2024 08:13:26 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: NPuAAxcWKPyTHQTWhXYBeYsWS6YKGzDHn2QriPCPGZE=) 2: 78321A66068D11EF92608943C4F9AE02.roa (hash: blVnz565/hVxOKVO1xLhYGke1dIuGSft6BcnljQwFaw=) 3: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: mLl/OI3EV7/JM4Fr1G9RnDxTwZqnfUJgsg+LaOLb7Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: May 17 08:13:26 2024 GMT Not After : May 24 08:13:26 2024 GMT Subject: CN=664711a6-bfd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:f9:e7:df:9e:1e:be:17:d0:2f:a1:fb:9d: 60:be:1c:fa:0c:da:5a:05:58:b8:92:d2:0a:ae:83: 64:be:c7:ae:ba:96:b2:50:78:37:77:13:5c:ef:24: 07:8a:c7:e1:d8:84:65:f8:d4:e3:dc:91:73:f3:95: 36:f8:9d:be:77:24:7f:ee:63:bb:72:01:dd:f8:b1: 8f:62:e6:ab:00:25:f5:d8:71:3d:7f:51:10:cd:af: ab:7a:c7:9b:ee:6f:42:c7:9c:43:67:3e:89:50:a1: 0c:8f:f2:20:dd:2c:37:4e:07:f6:07:3d:1c:11:6c: ea:d2:2a:41:b3:02:50:61:54:8d:b1:84:83:95:11: 83:0b:7f:f4:a1:cb:66:9d:bc:5a:43:93:3e:b2:92: f9:26:22:a7:42:27:9b:7d:64:af:87:31:d8:db:9e: 97:76:2d:07:06:a0:e3:b1:31:b6:79:a4:3f:08:b4: 19:28:14:30:37:45:c0:3d:01:01:3e:50:2a:85:0f: b9:15:38:1a:80:4a:84:98:e7:b2:9c:1b:b9:ec:20: ec:3c:04:3d:5b:cf:f1:95:33:a9:5e:0a:f3:7c:7a: f7:eb:9c:ad:5c:6a:ba:26:55:38:7b:8a:4e:9f:66: 03:3a:b9:94:58:bd:cb:80:44:d9:50:89:5a:15:5e: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:90:E9:94:25:31:CD:0C:45:AA:F7:DA:77:01:F8:46:25:18:84:2C X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:38:cc:c5:99:6a:5c:86:12:d2:15:8b:0b:82:28:d8:0d:08: d0:29:24:5d:ba:80:1d:93:a2:24:db:f5:02:30:38:d9:6a:a9: 94:14:c2:41:39:f9:4a:32:e4:89:ec:0d:fb:d0:c6:27:8a:73: ce:85:3e:d9:40:86:56:60:3f:a7:db:45:25:ad:d9:98:35:17: 3c:0e:eb:3e:6f:0d:02:9d:b0:e5:f1:51:17:3b:6a:2d:6a:77: 90:a5:d1:fd:6a:a7:a5:6e:e5:fc:ee:8b:12:9d:00:56:07:fb: f5:4c:13:07:d5:69:34:68:2e:14:44:b1:1a:78:06:5c:19:e2: 31:78:a1:af:aa:75:6d:5b:48:47:26:4e:59:4e:a6:3a:2f:66: 87:bb:57:a9:bc:e1:14:e5:66:c6:1f:57:e0:ed:29:fc:5a:81: c9:5d:c7:70:33:f6:d5:8e:53:97:61:05:ec:b2:02:b2:9c:b3: f9:a3:3e:24:b6:09:51:7e:c5:f0:9c:a9:99:c9:08:94:a1:0b: 7a:0a:53:82:ae:6a:a6:7d:9e:21:ec:bd:16:c2:02:5f:1d:a1: 86:90:79:e6:70:2f:50:9f:97:e1:ee:a0:f7:2d:d5:4e:d4:d1: c4:61:da:74:48:9f:4d:f4:0c:21:cf:b5:d7:52:0d:9c:ac:6d: 46:3c:c9:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkJEMzExMC8GA1UEBRMoM0Q3RkVBQ0I2MzNBNkI4MjkzMjNCMUU5OTQ0RDRBRjk4 REREQTM3MjAeFw0yNDA1MTcwODEzMjZaFw0yNDA1MjQwODEzMjZaMBgxFjAUBgNV BAMTDTY2NDcxMWE2LWJmZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7m/nn354evhfQL6H7nWC+HPoM2loFWLiS0gqug2S+x666lrJQeDd3E1zvJAeK x+HYhGX41OPckXPzlTb4nb53JH/uY7tyAd34sY9i5qsAJfXYcT1/URDNr6t6x5vu b0LHnENnPolQoQyP8iDdLDdOB/YHPRwRbOrSKkGzAlBhVI2xhIOVEYMLf/Shy2ad vFpDkz6ykvkmIqdCJ5t9ZK+HMdjbnpd2LQcGoOOxMbZ5pD8ItBkoFDA3RcA9AQE+ UCqFD7kVOBqASoSY57KcG7nsIOw8BD1bz/GVM6leCvN8evfrnK1caromVTh7ik6f ZgM6uZRYvcuARNlQiVoVXj5xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtZDplCUx zQxFqvfadwH4RiUYhCwwHwYDVR0jBBgwFoAUPX/qy2M6a4KTI7HplE1K+Y3do3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQkQzLzY0QkZGMTRFQjNG NzExRUU5MkE0NzcxN0M0RjlBRTAyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8z SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFhfcXkyTTZhNEtUSTdIcGxFMUstWTNkbzNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy QkQzLzY0QkZGMTRFQjNGNzExRUU5MkE0NzcxN0M0RjlBRTAyL1BYX3F5Mk02YTRL VEk3SHBsRTFLLVkzZG8zSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIs4zMWZalyGEtIViwuCKNgNCNApJF26gB2ToiTb9QIwONlqqZQUwkE5 +Uoy5InsDfvQxieKc86FPtlAhlZgP6fbRSWt2Zg1FzwO6z5vDQKdsOXxURc7ai1q d5Cl0f1qp6Vu5fzuixKdAFYH+/VMEwfVaTRoLhREsRp4BlwZ4jF4oa+qdW1bSEcm TllOpjovZoe7V6m84RTlZsYfV+DtKfxagcldx3Az9tWOU5dhBeyyArKcs/mjPiS2 CVF+xfCcqZnJCJShC3oKU4KuaqZ9niHsvRbCAl8doYaQeeZwL1Cfl+HuoPct1U7U 0cRh2nRIn030DCHPtddSDZysbUY8yew= -----END CERTIFICATE-----Generated at Fri May 17 08:52:49 2024 by rpki-client on console-ams.rpki-client.org