$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft File: Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json) Hash identifier: ZOd7KJVJA5h0/OdmkQ1eO8XfUq7yriWoRR4J8FYpOpI= Subject key identifier: 25:B3:F3:6E:92:5E:EA:EA:24:D2:79:AE:BB:71:64:5B:B4:82:77:0A Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft Manifest number: 052A Signing time: Wed 01 May 2024 01:20:42 +0000 Manifest this update: Wed 01 May 2024 01:20:41 +0000 Manifest next update: Wed 08 May 2024 01:20:41 +0000 Files and hashes: 1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: QMkyep8e+1AE+JNymaWNyCrGyzarVK5gQHXycPhROuY=) 2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: WJyfu5rloud4g1tWUexr17hivm8d1zYiub4ff246Cbo=) 3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: Xhfz37O5A0Ri5EAkcYwFw6SvIHvNcQCKgk+Fc14BheQ=) 4: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: 0kX7U249SIUh/HJN7c/AiJHZs64Z43yJ5lc7dVnigu4=) 5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: Eextjyq4m4XrBQbc9sqdVIrIRNghOanKtGAN2eFXxR4=) 6: 0D55A972AF0311EB96FC344BC4F9AE02.roa (hash: CBbqvgRwYWSYme4+k1ebNPFhjVrrqfMJPTXhxjCxtjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: May 1 01:20:41 2024 GMT Not After : May 8 01:20:41 2024 GMT Subject: CN=663198ea-4fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:c1:30:10:c0:a9:38:d0:ad:57:17:6a:44: 87:6e:dc:ca:72:70:c1:87:8c:bb:20:28:37:a4:34: d4:34:77:a4:c4:1c:63:22:ec:7e:87:69:ad:18:06: 3f:23:a4:7a:24:fd:f8:df:7b:78:ef:9b:fd:0b:27: 28:9d:08:2d:5f:90:36:5d:3f:bd:3b:8f:a7:49:8c: d8:55:be:57:eb:4e:27:69:1f:95:8a:fc:b7:8b:d6: 78:28:a7:6c:39:cd:5f:08:cb:9e:5d:df:6f:50:df: 01:b6:e5:b1:f3:0b:23:a9:61:b8:99:4f:3f:60:e7: d3:2d:4d:11:8d:92:c1:b3:b4:e3:06:0a:0b:32:08: 4a:71:f7:99:9b:77:04:70:7f:5d:00:b7:04:d5:3c: 3b:3d:54:e1:5a:63:1f:a5:6d:d2:7e:5d:0c:8b:2a: be:48:57:27:aa:a4:46:af:37:cf:54:7d:28:74:1c: 94:a1:5d:1d:d9:d5:8d:7c:06:32:20:57:1f:52:75: c5:9f:72:02:fb:81:3e:15:61:a8:f2:44:d4:66:19: 5e:1b:f2:60:0e:f9:e3:f3:f1:09:55:6b:aa:6d:ca: e8:77:1c:51:ae:4f:31:c8:6c:1c:64:17:7a:3e:24: 00:8b:ee:7c:d2:83:6d:eb:8a:7f:16:c3:02:f6:6e: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B3:F3:6E:92:5E:EA:EA:24:D2:79:AE:BB:71:64:5B:B4:82:77:0A X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:05:11:5c:62:9f:aa:bb:b0:76:a7:71:b9:84:10:f3:60:e3: 09:5b:62:d2:ac:15:e5:c4:7e:ba:2c:70:56:fe:76:de:36:b0: 4f:34:e6:be:a1:03:56:f8:3a:b9:35:58:f2:18:75:37:72:e8: 34:e3:d7:5b:9c:99:1b:01:85:a2:2d:11:cb:c6:97:26:82:2e: 36:16:e4:1f:d4:89:9b:bf:7a:5c:8c:fd:ed:e5:5d:4e:a8:b9: db:a4:4e:52:e6:a3:2b:1a:0e:86:7e:d6:f8:24:19:04:f3:cf: 41:54:ed:b6:e2:a7:f4:48:47:b7:02:9b:81:4b:b9:c2:a4:b9: 42:0c:6c:8d:e7:94:57:6b:01:60:d0:2d:98:a2:02:99:e0:29: 59:a5:c7:d1:be:fe:0b:5a:f6:55:48:b9:7c:66:55:26:6d:03: 47:7c:85:cb:cc:ee:37:49:d8:e7:fe:0b:45:4d:e6:96:7c:80: 14:e3:6f:80:44:6a:5b:5c:26:1f:64:6c:ec:be:a9:b8:d8:b3: 0b:fb:a8:f8:5b:1e:de:c8:0f:4d:80:63:0f:a4:b6:9d:f6:98: c9:5a:34:bc:79:bc:4d:a9:b7:0b:80:5a:47:c1:64:6c:c7:79: b0:a7:25:3e:2c:5b:f1:85:49:4f:b9:63:ad:84:51:3e:72:16: a0:fa:87:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjQwNTAxMDEyMDQxWhcNMjQwNTA4MDEyMDQxWjAYMRYwFAYD VQQDEw02NjMxOThlYS00ZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2/BMBDAqTjQrVcXakSHbtzKcnDBh4y7ICg3pDTUNHekxBxjIux+h2mtGAY/ I6R6JP3433t475v9CyconQgtX5A2XT+9O4+nSYzYVb5X604naR+Vivy3i9Z4KKds Oc1fCMueXd9vUN8BtuWx8wsjqWG4mU8/YOfTLU0RjZLBs7TjBgoLMghKcfeZm3cE cH9dALcE1Tw7PVThWmMfpW3Sfl0Miyq+SFcnqqRGrzfPVH0odByUoV0d2dWNfAYy IFcfUnXFn3IC+4E+FWGo8kTUZhleG/JgDvnj8/EJVWuqbcrodxxRrk8xyGwcZBd6 PiQAi+580oNt64p/FsMC9m7o0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWz826S XurqJNJ5rrtxZFu0gncKMB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUI1MC9DNkMwNDlCMkFFRkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2Ukxw XzgwcUxnMlNDT3ZKbHdteUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfBRFcYp+qu7B2p3G5hBDzYOMJW2LSrBXlxH66LHBW/nbeNrBPNOa+ oQNW+Dq5NVjyGHU3cug049dbnJkbAYWiLRHLxpcmgi42FuQf1Imbv3pcjP3t5V1O qLnbpE5S5qMrGg6Gftb4JBkE889BVO224qf0SEe3ApuBS7nCpLlCDGyN55RXawFg 0C2YogKZ4ClZpcfRvv4LWvZVSLl8ZlUmbQNHfIXLzO43Sdjn/gtFTeaWfIAU42+A RGpbXCYfZGzsvqm42LML+6j4Wx7eyA9NgGMPpLad9pjJWjS8ebxNqbcLgFpHwWRs x3mwpyU+LFvxhUlPuWOthFE+chag+odv -----END CERTIFICATE-----Generated at Wed May 1 02:46:19 2024 by rpki-client on console-ams.rpki-client.org