$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: W9t4BhXu9u5zRsaDTM5uoGh4XwBGAvssp9qFp03w4nI= Subject key identifier: A1:67:88:0F:E5:19:27:FA:83:91:C9:36:EE:E5:D1:4B:04:A2:B1:34 Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 039B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 039B Signing time: Sat 01 Jun 2024 03:42:09 +0000 Manifest this update: Sat 01 Jun 2024 03:42:09 +0000 Manifest next update: Sat 08 Jun 2024 03:42:09 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: UE3xWcJGaBqIoIhehPY0g6uILRxC1nD6KBNkNPSN62M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Jun 1 03:42:09 2024 GMT Not After : Jun 8 03:42:09 2024 GMT Subject: CN=665a9891-b9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:9c:f1:33:4e:61:1b:70:a5:88:97:62:18: fc:58:8d:5d:90:ca:da:a3:55:cd:91:8b:cd:a0:dd: b0:67:ad:56:77:a8:33:54:9e:09:44:6c:86:17:32: 79:80:9f:e3:e4:e9:18:16:b8:60:38:e8:17:bd:80: a0:ed:5c:95:05:8b:15:6b:c1:24:05:50:b3:1e:8f: 47:9a:73:4d:59:d6:59:76:8c:c9:e7:1d:96:77:f6: b5:2a:d9:41:db:d9:cf:ef:45:09:64:4d:bf:b2:60: 41:20:0a:76:9f:34:0a:a5:75:35:7d:b5:7e:f4:c7: 9c:8b:e1:db:7a:40:97:16:15:d0:da:fd:20:05:c3: 6f:3f:2f:65:d7:5f:29:cf:5f:e2:83:1e:d3:80:22: 04:07:f1:55:02:34:a1:b4:48:29:22:44:b6:4f:38: ce:5c:68:59:35:5c:f1:5b:a8:48:9f:71:62:2f:ba: 6d:24:24:12:75:65:2d:ef:bb:a9:f0:a4:df:a5:74: 24:c8:51:c0:92:89:61:96:eb:a6:c4:10:ec:3b:f7: 20:5b:8b:03:a1:fe:9e:f6:59:17:3c:ee:cb:ab:8d: 5e:75:f6:41:bf:ec:33:e1:e1:17:07:6d:15:0f:bb: b3:d7:50:1a:83:08:5c:95:68:37:a5:e2:a5:7e:34: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:67:88:0F:E5:19:27:FA:83:91:C9:36:EE:E5:D1:4B:04:A2:B1:34 X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ae:5e:ec:59:24:c0:9e:34:72:53:59:76:40:53:6c:d2:3b: 32:b4:5e:77:c2:6b:e2:1d:68:e4:62:90:bd:7b:f8:aa:5a:e6: 5c:59:8c:1d:f1:5e:0d:2a:82:51:cb:e6:5f:f1:c6:59:bd:28: 3c:a5:13:ac:c5:34:11:63:3c:58:32:69:60:9e:f7:ba:51:f2: d9:25:0f:13:8d:c1:16:f8:b7:d3:a9:80:f9:b5:cf:b2:1d:93: 75:84:db:46:ce:f3:2d:d5:88:ec:e8:2d:1a:91:ea:61:f6:fd: e3:af:76:40:db:79:ff:d0:2d:98:fa:f8:5a:a3:c3:c8:17:71: ac:a7:45:32:ae:d5:69:c7:a9:b5:9d:7c:8b:7e:20:b9:82:fc: 29:fc:da:b7:f4:b4:de:e9:87:cb:ec:cc:53:32:be:10:71:80: 8e:e6:96:75:3c:73:27:fc:dc:c9:5c:db:4b:8a:61:a6:4d:78: da:fd:1d:74:89:e1:f5:2b:b1:35:61:f4:8b:b6:2c:a3:e1:5f: 6c:42:09:db:aa:82:66:3b:48:d0:5d:fd:f6:38:ef:22:50:c5: ba:ea:8b:5f:d4:7b:fe:80:de:cb:1e:e2:43:98:bd:4d:e3:25: 0b:2e:3f:89:dc:ae:03:b8:8c:84:b2:a9:52:12:82:30:0e:de: 59:82:55:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjQwNjAxMDM0MjA5WhcNMjQwNjA4MDM0MjA5WjAYMRYwFAYD VQQDEw02NjVhOTg5MS1iOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SWc8TNOYRtwpYiXYhj8WI1dkMrao1XNkYvNoN2wZ61Wd6gzVJ4JRGyGFzJ5 gJ/j5OkYFrhgOOgXvYCg7VyVBYsVa8EkBVCzHo9HmnNNWdZZdozJ5x2Wd/a1KtlB 29nP70UJZE2/smBBIAp2nzQKpXU1fbV+9Meci+HbekCXFhXQ2v0gBcNvPy9l118p z1/igx7TgCIEB/FVAjShtEgpIkS2TzjOXGhZNVzxW6hIn3FiL7ptJCQSdWUt77up 8KTfpXQkyFHAkolhluumxBDsO/cgW4sDof6e9lkXPO7Lq41edfZBv+wz4eEXB20V D7uz11AagwhclWg3peKlfjQ9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFniA/l GSf6g5HJNu7l0UsEorE0MB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqrl7sWSTAnjRyU1l2QFNs0jsytF53wmviHWjkYpC9e/iqWuZcWYwd 8V4NKoJRy+Zf8cZZvSg8pROsxTQRYzxYMmlgnve6UfLZJQ8TjcEW+LfTqYD5tc+y HZN1hNtGzvMt1Yjs6C0akeph9v3jr3ZA23n/0C2Y+vhao8PIF3Gsp0UyrtVpx6m1 nXyLfiC5gvwp/Nq39LTe6YfL7MxTMr4QcYCO5pZ1PHMn/NzJXNtLimGmTXja/R10 ieH1K7E1YfSLtiyj4V9sQgnbqoJmO0jQXf32OO8iUMW66otf1Hv+gN7LHuJDmL1N 4yULLj+J3K4DuIyEsqlSEoIwDt5ZglX7 -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:20 2024 by rpki-client on console-ams.rpki-client.org