$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json) Hash identifier: dWjz0k2JF1o3t8P3d/+VngF6LBWZSkcwLMO0in/ehEQ= Subject key identifier: BB:28:BA:9A:DA:B7:32:40:A8:CE:23:D1:B7:C1:88:35:3D:4E:98:DB Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft Manifest number: 022D Signing time: Wed 01 May 2024 04:21:24 +0000 Manifest this update: Wed 01 May 2024 04:21:23 +0000 Manifest next update: Wed 08 May 2024 04:21:23 +0000 Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: GM76TlqMGNac2HJ4cIPRUAXHFRyzOjH0Jfbg9nV5ddw=) 2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: lQI+FDVmwoNnrFBqPr06uC9Po++2p2Q/5lMnyqMNj28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Validity Not Before: May 1 04:21:23 2024 GMT Not After : May 8 04:21:23 2024 GMT Subject: CN=6631c343-2b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:2b:51:43:68:22:e8:06:16:93:d9:0e:f0: 21:60:74:da:28:04:67:e4:bc:cc:c0:82:43:ff:f0: 05:71:55:a5:c5:84:f8:1b:02:15:ed:26:bb:12:b6: 76:cb:df:97:6b:fb:1e:a6:dc:2d:93:21:62:1d:5b: 45:a7:0f:d4:05:ce:f5:b8:71:3e:b5:e5:1d:5e:d1: b5:b4:a5:96:ef:cc:42:47:4b:81:bd:aa:80:09:d6: 15:43:24:06:b5:33:28:d7:8b:16:bc:8b:e0:a0:3b: a1:ce:e8:e4:32:2d:57:fe:f8:69:64:cf:e4:9c:d5: 8b:d6:d1:8c:fd:84:4d:e2:d3:d0:fe:ef:a9:27:7d: 36:be:91:5a:c7:a0:4e:f1:6e:e9:1b:c2:a0:50:b3: a1:f4:ce:0e:70:e4:99:5e:78:a4:3f:3b:ca:62:3a: 90:e2:13:88:8b:a7:94:f6:dc:e9:8f:7b:65:98:73: b6:32:56:21:11:24:4b:e6:43:6c:68:a3:c9:e5:ed: 60:5d:ad:85:08:42:e5:ed:9b:2d:09:63:4b:84:6b: 1d:e1:58:ae:0f:62:2c:32:64:41:27:b5:30:19:f8: 0c:86:e6:23:22:2b:35:f1:09:c3:1e:c4:76:c7:c2: 65:dc:7d:0c:bf:13:55:bb:a8:7f:5e:46:56:d3:d9: f2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:28:BA:9A:DA:B7:32:40:A8:CE:23:D1:B7:C1:88:35:3D:4E:98:DB X509v3 Authority Key Identifier: keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d3:31:be:eb:da:0d:c1:c4:bb:19:71:c9:f8:12:ca:2d:f7: 28:9d:36:a2:15:c3:cf:ad:45:0d:d6:81:3f:ca:38:8f:43:c8: dc:00:bc:cd:f4:02:61:0e:1c:0d:2d:05:f9:61:fc:48:7f:0a: 56:4e:cf:a6:16:22:21:08:92:ac:28:67:fa:eb:c4:6b:e5:56: 1d:db:31:b9:61:b4:d9:bb:81:53:e1:61:5c:e4:62:5e:36:25: f9:03:a7:5e:21:e6:aa:3b:53:11:dd:1f:ae:0f:14:ab:05:76: fe:03:23:7f:b2:0f:43:4a:db:8b:b4:b8:77:9c:3e:73:41:cb: d4:62:03:a6:7b:6a:ae:72:e4:06:5f:3a:f9:7b:22:2f:08:f8: 92:25:31:93:d6:3b:ae:9b:a8:1b:d0:b3:28:bd:67:ca:eb:32: 92:fb:15:15:1c:08:9a:59:16:c3:ad:01:5e:51:b8:90:2e:d9: 55:68:13:b0:90:d4:19:5a:f5:8b:ab:02:90:a8:ae:8e:5d:ab: f4:20:95:7b:80:41:a1:6c:83:a1:08:83:3e:fd:e3:2e:fe:19: 07:65:45:de:a4:12:63:37:84:ff:fb:4f:73:b7:c8:af:7c:ad: 6b:db:55:b1:62:3a:df:49:a9:f2:96:08:f2:53:94:59:02:46: 48:cf:4a:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw MDE4RkRGMDYwHhcNMjQwNTAxMDQyMTIzWhcNMjQwNTA4MDQyMTIzWjAYMRYwFAYD VQQDEw02NjMxYzM0My0yYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7orUUNoIugGFpPZDvAhYHTaKARn5LzMwIJD//AFcVWlxYT4GwIV7Sa7ErZ2 y9+Xa/septwtkyFiHVtFpw/UBc71uHE+teUdXtG1tKWW78xCR0uBvaqACdYVQyQG tTMo14sWvIvgoDuhzujkMi1X/vhpZM/knNWL1tGM/YRN4tPQ/u+pJ302vpFax6BO 8W7pG8KgULOh9M4OcOSZXnikPzvKYjqQ4hOIi6eU9tzpj3tlmHO2MlYhESRL5kNs aKPJ5e1gXa2FCELl7ZstCWNLhGsd4ViuD2IsMmRBJ7UwGfgMhuYjIis18QnDHsR2 x8Jl3H0MvxNVu6h/XkZW09nytwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsoupra tzJAqM4j0bfBiDU9TpjbMB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf0zG+69oNwcS7GXHJ+BLKLfconTaiFcPPrUUN1oE/yjiPQ8jcALzN 9AJhDhwNLQX5YfxIfwpWTs+mFiIhCJKsKGf668Rr5VYd2zG5YbTZu4FT4WFc5GJe NiX5A6deIeaqO1MR3R+uDxSrBXb+AyN/sg9DStuLtLh3nD5zQcvUYgOme2qucuQG Xzr5eyIvCPiSJTGT1juum6gb0LMovWfK6zKS+xUVHAiaWRbDrQFeUbiQLtlVaBOw kNQZWvWLqwKQqK6OXav0IJV7gEGhbIOhCIM+/eMu/hkHZUXepBJjN4T/+09zt8iv fK1r21WxYjrfSanylgjyU5RZAkZIz0ok -----END CERTIFICATE-----Generated at Wed May 1 05:59:07 2024 by rpki-client on console-fra.rpki-client.org