$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: mNO3aObEsphIlXRJtrdUMSAzXfeJORbEBf7imjfQ8XE= Subject key identifier: 54:64:6F:26:46:61:17:32:1B:91:03:0F:5E:66:34:6C:81:09:36:01 Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 084E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 083D Signing time: Sat 04 May 2024 21:54:17 +0000 Manifest this update: Sat 04 May 2024 21:54:17 +0000 Manifest next update: Sat 11 May 2024 21:54:17 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: Z9a1yfWHhcnlYNonm2xQltEA1vwIT9UiHmxB4h7XDaw=) 2: 525850829D5111EC9F57A656C4F9AE02.roa (hash: KLi+RuL0kWYsQutlxJmXaGEc3B/mauom1PQZyGoffTY=) 3: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: w96M/Nc+tM6pTDQFnBUKox1nfLql7f3VRNZAPQQAgkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: May 4 21:54:17 2024 GMT Not After : May 11 21:54:17 2024 GMT Subject: CN=6636ae89-49ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:35:72:39:fb:04:23:08:62:f1:de:0e:88: cc:da:66:3d:82:c5:2a:e4:1e:53:76:31:04:90:88: ae:3e:59:ad:7f:7c:73:10:61:f8:04:24:55:13:d1: a5:2a:51:38:86:a0:35:a2:5e:dc:f7:a4:9d:25:e8: d4:aa:1a:81:64:c7:b5:b4:68:0f:25:9c:cb:3c:45: 0d:08:1a:5c:4e:8e:55:10:f1:e9:59:e6:67:0e:44: 85:ef:b9:15:cc:1a:c0:2e:9b:74:d4:22:10:73:d9: 6c:de:51:6d:1b:39:ae:0c:c9:f5:a1:92:82:a0:54: 62:b1:6d:59:6e:1b:54:bf:76:4d:0a:8a:a3:2d:5e: bc:5b:30:31:cd:0c:e7:b2:44:5d:a1:3e:87:8f:66: a7:0f:72:15:f3:76:93:b7:7a:05:c3:38:1f:b8:c2: af:8d:44:b3:0d:10:04:12:74:0a:d1:c4:dc:45:dc: 55:cf:f2:f3:f2:bf:5e:d1:de:50:b2:7d:8a:c9:4e: b1:4a:aa:89:a0:62:83:60:77:e7:ee:bf:96:ce:48: 32:f7:a2:91:ab:7f:df:d9:98:bb:cb:e2:ff:61:a4: 21:28:ec:8a:44:2c:cc:a5:80:ed:1b:9a:11:51:c1: 9a:af:f4:38:a8:d3:21:02:b5:50:92:4b:3e:09:2d: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:64:6F:26:46:61:17:32:1B:91:03:0F:5E:66:34:6C:81:09:36:01 X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ff:c5:f4:cb:e3:97:58:8f:d9:5b:8e:1e:25:d3:da:5b:84: ef:b7:b8:b5:da:55:92:15:c4:21:e2:1e:70:ae:c6:38:01:f7: db:d4:f4:a8:85:66:c0:c4:00:7a:be:98:eb:85:a3:7c:63:a1: e9:a6:8d:11:22:7c:05:10:35:1a:ca:e2:27:93:ed:b6:28:cf: ce:ac:6b:34:56:ed:57:96:c5:bd:20:a3:37:cb:73:26:80:a7: 85:ed:6b:8d:e4:bf:7f:b2:4d:8d:e9:53:da:b8:c6:2b:8e:37: 9b:90:3b:33:6b:19:ba:ac:a4:50:1e:2b:f9:a4:92:20:fc:4c: 88:e2:b0:08:02:34:35:94:d4:5e:74:f2:46:8e:9d:53:fa:14: 7b:6b:af:5a:19:4b:ca:ee:00:f7:d6:56:62:d0:6c:89:40:8c: 81:a4:50:65:cc:ca:33:13:f1:ee:e1:3b:7f:7e:70:44:2d:1d: 80:3c:64:89:d8:81:dd:35:62:12:e5:98:96:ce:c2:1b:94:7e: 4b:1b:f9:62:e5:46:49:de:53:cd:dc:67:b3:2a:44:1c:e9:d8: 74:f1:90:85:44:f1:57:1d:3c:34:9a:7e:90:1f:1b:a6:ba:ab: 34:3c:80:04:c7:5c:55:8e:e5:2a:cd:43:c8:f5:ea:c6:95:52: 7b:f4:08:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjQwNTA0MjE1NDE3WhcNMjQwNTExMjE1NDE3WjAYMRYwFAYD VQQDEw02NjM2YWU4OS00OWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOs1cjn7BCMIYvHeDojM2mY9gsUq5B5TdjEEkIiuPlmtf3xzEGH4BCRVE9Gl KlE4hqA1ol7c96SdJejUqhqBZMe1tGgPJZzLPEUNCBpcTo5VEPHpWeZnDkSF77kV zBrALpt01CIQc9ls3lFtGzmuDMn1oZKCoFRisW1ZbhtUv3ZNCoqjLV68WzAxzQzn skRdoT6Hj2anD3IV83aTt3oFwzgfuMKvjUSzDRAEEnQK0cTcRdxVz/Lz8r9e0d5Q sn2KyU6xSqqJoGKDYHfn7r+Wzkgy96KRq3/f2Zi7y+L/YaQhKOyKRCzMpYDtG5oR UcGar/Q4qNMhArVQkks+CS3w/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRkbyZG YRcyG5EDD15mNGyBCTYBMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD/8X0y+OXWI/ZW44eJdPaW4Tvt7i12lWSFcQh4h5wrsY4Affb1PSo hWbAxAB6vpjrhaN8Y6Hppo0RInwFEDUayuInk+22KM/OrGs0Vu1XlsW9IKM3y3Mm gKeF7WuN5L9/sk2N6VPauMYrjjebkDszaxm6rKRQHiv5pJIg/EyI4rAIAjQ1lNRe dPJGjp1T+hR7a69aGUvK7gD31lZi0GyJQIyBpFBlzMozE/Hu4Tt/fnBELR2APGSJ 2IHdNWIS5ZiWzsIblH5LG/li5UZJ3lPN3GezKkQc6dh08ZCFRPFXHTw0mn6QHxum uqs0PIAEx1xVjuUqzUPI9erGlVJ79AjN -----END CERTIFICATE-----Generated at Sun May 5 00:12:24 2024 by rpki-client on console-fra.rpki-client.org