$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: +gLCBtZUUP8z2E1fTzKaD9cSv0gWM4DJjtfh5bp2K9Q= Subject key identifier: FA:08:70:A1:7C:A0:30:61:71:93:4E:53:E1:7A:40:0B:E6:91:D1:41 Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0D79 Signing time: Mon 06 May 2024 23:08:23 +0000 Manifest this update: Mon 06 May 2024 23:08:23 +0000 Manifest next update: Mon 13 May 2024 23:08:23 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: w3ATtx79LpAiQEIlX//9YGnvCU9I1E865ZuT0UUPaYc=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: iMCCO68A+xFPuTceoqybbjqBZn+lCWKxuzNQ0n+JIxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: May 6 23:08:23 2024 GMT Not After : May 13 23:08:23 2024 GMT Subject: CN=663962e7-c2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:a4:a4:89:93:88:8f:b7:85:7f:05:e4:c8: 8b:0a:cd:b9:98:d8:94:16:dc:47:d4:76:c8:ea:b0: a8:cd:d0:66:68:e1:c2:c4:03:56:c5:7d:31:4d:45: 25:d8:49:83:d2:7a:7a:43:aa:fb:2a:9c:da:4b:89: d2:29:86:25:0b:2e:df:da:a5:b4:89:a9:b1:9b:8f: d0:36:37:c9:83:91:f3:ca:84:6f:50:fa:03:b9:70: 53:c5:92:9e:49:9c:0e:93:f3:01:9b:df:6d:1d:65: 87:5e:ac:9b:03:51:b0:f5:ab:b3:75:25:6e:59:fc: 56:cb:3f:6f:8f:e3:d1:c7:e2:6c:64:79:4d:d4:b8: be:4c:c6:b8:e7:2b:50:5d:7f:bc:1a:97:e9:4f:ba: 6e:21:85:48:25:32:cd:8a:66:09:4e:ad:26:57:16: 87:d3:00:b7:48:3f:46:0b:5a:83:a0:76:30:59:f2: 85:d8:98:d7:22:a6:41:dc:ac:ac:96:55:b4:72:3f: d8:a2:2a:93:16:75:15:aa:d2:d0:d1:16:fc:a9:95: a9:71:2d:dc:bd:4b:b2:7c:2f:b7:8f:0a:5c:39:2d: c2:0c:4b:14:a1:03:ee:48:dd:f3:77:1f:5b:88:8d: 34:0e:d5:26:87:49:95:55:68:aa:a5:ba:02:e3:fb: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:08:70:A1:7C:A0:30:61:71:93:4E:53:E1:7A:40:0B:E6:91:D1:41 X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c8:03:ef:dd:ef:18:df:1e:84:27:e6:d0:9f:86:f4:06:4d: 6d:4f:86:e1:82:e8:03:35:9c:45:ec:59:ef:25:8f:5d:46:a2: 8d:80:4a:84:c6:bb:91:13:63:b9:99:e6:8e:5f:33:fa:b7:dd: 3b:77:bd:19:20:5a:15:83:4c:05:f1:bf:0b:9b:ba:fe:69:57: 83:46:2f:95:c3:d7:42:2d:0e:7b:6d:d7:d3:1e:22:2f:77:da: da:e9:78:f4:2a:35:f6:42:98:8b:ec:ae:4d:d6:53:4f:08:40: bc:1d:aa:f3:37:f2:f4:2d:af:dd:4d:71:25:c4:18:00:05:7c: d5:e8:19:9e:2c:fa:e6:22:8e:8b:a3:73:41:b8:fb:1b:4c:ba: 46:74:70:b6:5b:4f:52:7b:23:61:67:aa:c0:5f:6f:b5:5d:c7: b0:89:1d:4e:30:65:89:a8:ac:75:05:32:71:56:87:4f:b3:dd: e5:2c:21:cf:7e:b8:b4:74:4a:6e:8c:3a:7f:dc:00:36:0b:2a: c5:9b:b4:5e:a4:02:22:c3:98:25:b1:d3:96:25:44:21:5a:6b: 25:c1:13:fc:00:c2:b3:99:01:67:25:25:6c:36:d1:c6:e2:45: 6d:65:83:a8:79:9d:63:06:0e:f3:98:b1:0c:ad:20:c9:3f:77: 41:6a:af:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjQwNTA2MjMwODIzWhcNMjQwNTEzMjMwODIzWjAYMRYwFAYD VQQDEw02NjM5NjJlNy1jMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6SkpImTiI+3hX8F5MiLCs25mNiUFtxH1HbI6rCozdBmaOHCxANWxX0xTUUl 2EmD0np6Q6r7KpzaS4nSKYYlCy7f2qW0iamxm4/QNjfJg5HzyoRvUPoDuXBTxZKe SZwOk/MBm99tHWWHXqybA1Gw9auzdSVuWfxWyz9vj+PRx+JsZHlN1Li+TMa45ytQ XX+8GpfpT7puIYVIJTLNimYJTq0mVxaH0wC3SD9GC1qDoHYwWfKF2JjXIqZB3Kys llW0cj/YoiqTFnUVqtLQ0Rb8qZWpcS3cvUuyfC+3jwpcOS3CDEsUoQPuSN3zdx9b iI00DtUmh0mVVWiqpboC4/u6GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoIcKF8 oDBhcZNOU+F6QAvmkdFBMB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNyAPv3e8Y3x6EJ+bQn4b0Bk1tT4bhgugDNZxF7FnvJY9dRqKNgEqE xruRE2O5meaOXzP6t907d70ZIFoVg0wF8b8Lm7r+aVeDRi+Vw9dCLQ57bdfTHiIv d9ra6Xj0KjX2QpiL7K5N1lNPCEC8HarzN/L0La/dTXElxBgABXzV6BmeLPrmIo6L o3NBuPsbTLpGdHC2W09SeyNhZ6rAX2+1XcewiR1OMGWJqKx1BTJxVodPs93lLCHP fri0dEpujDp/3AA2CyrFm7RepAIiw5glsdOWJUQhWmslwRP8AMKzmQFnJSVsNtHG 4kVtZYOoeZ1jBg7zmLEMrSDJP3dBaq84 -----END CERTIFICATE-----Generated at Tue May 7 01:58:23 2024 by rpki-client on console-fra.rpki-client.org