$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: cM7kHhJEopVsZxcfqysQ03TK8poKJAuoMG74rtRT2+k= Subject key identifier: D1:67:2D:1D:12:5B:57:F1:B1:8D:75:38:6F:16:C6:14:CB:9E:C7:70 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 06D3 Signing time: Tue 30 Apr 2024 23:17:58 +0000 Manifest this update: Tue 30 Apr 2024 23:17:57 +0000 Manifest next update: Tue 07 May 2024 23:17:57 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: c+ahb8K7nd0f8a3icA7nqEclm2h9XwULSSE3naaWVqs=) 2: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: XWPrKD/1xxhYI9VwKIOui7ymKakHtBgqK+Jl6d5Nc+0=) 3: 407AAAF0F16311EE848EF739C4F9AE02.roa (hash: zwC0dh3a1/ouuLM5MG6/NwQE7APvtGFHp/Q8/BqStX8=) 4: 4BB262B4F16311EEB6481A3AC4F9AE02.roa (hash: 8ekzjDJhWaInROIynyVSCJyEtX2Ohp/vsQShF+f9jjs=) 5: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: pys/sQOmvCqaV53G586jaLiqzsRmV+KQG83GqftinV4=) 6: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: Tk6Wk/iqWFPcN6hygsZMy61QUkDqwzXsqlpySh04aPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Apr 30 23:17:57 2024 GMT Not After : May 7 23:17:57 2024 GMT Subject: CN=66317c25-f2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:57:06:a2:19:53:59:f5:8e:c3:f6:3d:9c: 78:f7:77:22:25:dd:2b:3b:7e:76:e5:c8:7a:8f:a5: 7d:f5:cc:d7:9e:31:8b:80:2f:37:e1:66:02:24:3f: 62:e8:17:ea:f6:6f:fd:78:20:a8:50:b4:8d:b3:40: e0:1e:34:2a:7c:d6:94:3c:74:a5:2f:30:21:a1:88: ed:f4:90:5f:fa:21:7d:98:51:95:c9:63:b1:af:61: 4a:71:db:0e:d7:a5:1f:91:ac:40:55:04:ac:54:bc: 4f:97:3e:23:53:0f:f4:71:73:e6:07:74:ff:44:13: a1:ed:c3:e2:c2:99:d3:c9:4d:01:05:f0:0a:2a:a3: 02:d8:47:6b:43:71:04:9d:b7:49:b1:25:ee:d8:b1: 32:08:93:e1:57:1f:3c:94:c4:17:dd:91:8e:49:ea: 32:c6:87:bc:ce:a1:3c:b7:ad:17:db:cb:87:f5:26: f7:7b:83:77:06:0c:d5:9f:ce:c7:77:41:6c:88:f1: d7:73:46:8f:13:e9:74:6b:d9:c8:17:63:f9:6a:3b: e2:79:46:43:ce:f4:ae:bf:6d:5b:81:6c:56:7f:ed: bd:33:6b:e5:64:ea:68:2c:9e:c9:a5:25:fd:d5:b3: 5e:b8:58:be:76:e9:c9:19:e9:67:93:8a:2d:07:db: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:67:2D:1D:12:5B:57:F1:B1:8D:75:38:6F:16:C6:14:CB:9E:C7:70 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ad:4e:61:6c:ce:07:cf:cc:cd:77:68:31:9a:99:1b:aa:6a: 52:29:82:d9:a0:e5:16:05:a7:c6:33:d1:e8:01:1a:1e:45:68: 00:8c:e4:a1:6f:19:3e:35:0c:43:b0:22:6c:45:e6:c0:f0:c4: 1d:06:cc:61:76:0c:63:57:16:ce:d9:58:4d:45:13:d8:a6:c6: ee:1c:f5:20:85:92:c9:38:59:07:71:8c:4b:3d:b1:e8:19:2d: 07:fa:8f:de:91:27:f7:c4:70:2e:51:07:59:0e:cf:3b:29:b8: 99:b3:41:7c:ef:55:89:e0:de:92:7d:e0:ab:47:b4:c5:76:30: 6d:3b:1d:44:39:9d:13:bc:5f:ec:de:fa:d9:0a:cd:0d:61:f4: 73:c3:08:ef:0c:a9:8f:fc:a3:c0:2a:00:1d:a3:46:21:79:dc: e5:eb:ee:a8:ca:60:59:e7:e0:39:a5:46:3e:b6:8f:2c:ff:08: 51:78:f9:2b:7e:f6:90:93:30:be:7a:12:be:bd:89:75:14:a4: 84:f5:d5:08:c8:32:bf:92:96:0e:be:f9:f7:c7:b5:b0:c0:a9: ce:10:a1:74:7e:c6:e5:48:8a:57:f4:3c:44:54:b7:d3:e8:ee: 6c:07:45:3a:7a:c2:0f:86:26:86:d5:86:18:f6:f0:90:25:75: 2d:a9:8b:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjQwNDMwMjMxNzU3WhcNMjQwNTA3MjMxNzU3WjAYMRYwFAYD VQQDEw02NjMxN2MyNS1mMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7BXBqIZU1n1jsP2PZx493ciJd0rO3525ch6j6V99czXnjGLgC834WYCJD9i 6Bfq9m/9eCCoULSNs0DgHjQqfNaUPHSlLzAhoYjt9JBf+iF9mFGVyWOxr2FKcdsO 16UfkaxAVQSsVLxPlz4jUw/0cXPmB3T/RBOh7cPiwpnTyU0BBfAKKqMC2EdrQ3EE nbdJsSXu2LEyCJPhVx88lMQX3ZGOSeoyxoe8zqE8t60X28uH9Sb3e4N3BgzVn87H d0FsiPHXc0aPE+l0a9nIF2P5ajvieUZDzvSuv21bgWxWf+29M2vlZOpoLJ7JpSX9 1bNeuFi+dunJGelnk4otB9u1kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFnLR0S W1fxsY11OG8WxhTLnsdwMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkrU5hbM4Hz8zNd2gxmpkbqmpSKYLZoOUWBafGM9HoARoeRWgAjOSh bxk+NQxDsCJsRebA8MQdBsxhdgxjVxbO2VhNRRPYpsbuHPUghZLJOFkHcYxLPbHo GS0H+o/ekSf3xHAuUQdZDs87KbiZs0F871WJ4N6SfeCrR7TFdjBtOx1EOZ0TvF/s 3vrZCs0NYfRzwwjvDKmP/KPAKgAdo0Yhedzl6+6oymBZ5+A5pUY+to8s/whRePkr fvaQkzC+ehK+vYl1FKSE9dUIyDK/kpYOvvn3x7WwwKnOEKF0fsblSIpX9DxEVLfT 6O5sB0U6esIPhiaG1YYY9vCQJXUtqYuo -----END CERTIFICATE-----Generated at Wed May 1 00:24:01 2024 by rpki-client on console-fra.rpki-client.org