$ rpki-client -vvf rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft File: PdeY67rvfndLLyx3rvsipM171oY.mft (raw, json) Hash identifier: 8MkHeIQtw1B3E1Xjy6tCkUO+XmPjNxn5GxTivUgmkTg= Subject key identifier: 1A:1F:8E:7D:52:0A:63:E1:EA:51:B7:0C:6F:1D:53:FF:CC:31:A3:17 Authority key identifier: 3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 Certificate issuer: /CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Certificate serial: 0630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft Manifest number: 0626 Signing time: Fri 26 Apr 2024 23:44:29 +0000 Manifest this update: Fri 26 Apr 2024 23:44:29 +0000 Manifest next update: Fri 03 May 2024 23:44:29 +0000 Files and hashes: 1: PdeY67rvfndLLyx3rvsipM171oY.crl (hash: SmUYiiS3YcFOs6FZEar6eGBCGXATN4qtt9uVhUQLeTI=) 2: 23D40B5049BC11EB98F78F66C4F9AE02.roa (hash: kpB95K4qHI4l0tvIJAO0uC6IfH9Xie8cZdzl8Ew5UCk=) 3: 246D53F049BC11EB98F78F66C4F9AE02.roa (hash: xY1WqwDewRwzlD4qXf5hbGAS9KLjfg4UZ9/Wz9PDhEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C0AE/serialNumber=3DD798EBBAEF7E774B2F2C77AEFB22A4CD7BD686 Validity Not Before: Apr 26 23:44:29 2024 GMT Not After : May 3 23:44:29 2024 GMT Subject: CN=662c3c5d-214f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:ce:11:86:02:92:9e:88:4c:86:6d:c6:51: 23:e1:9a:fc:6b:ac:65:dd:e2:7a:49:9b:ec:84:ef: d8:ad:21:ae:9a:60:5f:db:44:65:78:69:f6:82:91: fd:c6:d9:c3:f4:f8:2c:c2:37:b1:6e:1c:c2:58:24: 5b:57:af:e7:34:00:4d:be:b7:65:1c:52:6e:99:f1: 4d:ff:d0:b0:35:d3:c6:51:b1:05:2c:f2:08:1d:08: d2:30:e5:27:87:e2:ae:11:26:5c:f3:db:b6:13:21: 39:97:e1:80:76:79:82:31:74:df:a7:c5:a7:93:76: 7c:b6:28:21:45:98:7f:0b:7e:7b:73:6a:50:10:df: 3b:4e:87:7b:be:98:38:5d:5a:d8:87:a0:b7:95:85: db:29:63:d4:ec:07:bb:59:70:df:db:1a:87:ec:26: 4d:2a:2a:cd:85:21:04:91:41:8e:ef:6f:8b:db:f3: e2:06:87:64:99:9a:0d:ae:3d:2b:4f:3d:84:33:5f: 20:a1:0d:51:33:bd:10:f8:11:fb:08:b0:69:00:a1: 82:f4:99:77:d8:c0:5f:b8:7a:04:88:11:9c:6a:82: d2:41:18:9a:d7:5c:d4:1a:89:21:c2:c6:06:92:b1: b6:a1:3f:b6:44:3d:65:93:d6:e1:f6:e4:63:41:4c: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1F:8E:7D:52:0A:63:E1:EA:51:B7:0C:6F:1D:53:FF:CC:31:A3:17 X509v3 Authority Key Identifier: keyid:3D:D7:98:EB:BA:EF:7E:77:4B:2F:2C:77:AE:FB:22:A4:CD:7B:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdeY67rvfndLLyx3rvsipM171oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C0AE/01F0059A49BA11EB9C11D463C4F9AE02/PdeY67rvfndLLyx3rvsipM171oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2c:e9:16:dd:04:15:5d:6a:ba:8e:ae:a4:68:05:13:8e:a8: 7e:68:6e:5a:4d:e3:dd:5a:21:07:7b:80:bb:16:cd:34:29:83: 47:33:20:a6:3a:ed:94:c6:ed:37:84:e7:22:03:54:b6:53:c3: bc:9b:e8:bf:f6:f4:0a:43:6f:8e:b6:4a:41:f6:c3:98:8d:23: b4:5c:b4:ed:f4:5e:03:d4:da:ad:48:6c:f8:be:56:30:e2:14: 8e:58:63:6d:fb:92:a3:3d:3b:c8:25:4c:77:50:5e:32:f1:4a: dc:ab:06:56:69:3b:fa:f3:61:0e:ed:19:3f:0d:5f:1c:49:c0: ea:fa:2b:32:e8:78:73:b7:70:ed:1d:89:ec:b6:21:cd:83:c9: cc:f3:26:d1:13:fe:e9:51:7f:ff:5a:3c:51:df:67:ee:fa:1d: ee:c7:53:f9:fe:d8:b9:3c:c5:fb:56:73:04:fa:1e:a4:02:dc: bb:f6:3d:d2:85:93:fc:e0:ed:1c:f4:58:8c:79:b5:a8:e8:56: aa:a2:a3:8f:47:09:77:26:ff:a4:51:0f:c9:29:1b:22:27:44: c4:b9:59:ea:b4:3a:89:ff:94:e4:da:0a:c8:ac:7a:dd:bf:f7: 5b:ea:33:32:e1:7d:e5:de:90:65:57:97:ea:b6:b6:8e:cd:96: 85:3e:4d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMwQUUxMTAvBgNVBAUTKDNERDc5OEVCQkFFRjdFNzc0QjJGMkM3N0FFRkIyMkE0 Q0Q3QkQ2ODYwHhcNMjQwNDI2MjM0NDI5WhcNMjQwNTAzMjM0NDI5WjAYMRYwFAYD VQQDEw02NjJjM2M1ZC0yMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwunOEYYCkp6ITIZtxlEj4Zr8a6xl3eJ6SZvshO/YrSGummBf20RleGn2gpH9 xtnD9PgswjexbhzCWCRbV6/nNABNvrdlHFJumfFN/9CwNdPGUbEFLPIIHQjSMOUn h+KuESZc89u2EyE5l+GAdnmCMXTfp8Wnk3Z8tighRZh/C357c2pQEN87Tod7vpg4 XVrYh6C3lYXbKWPU7Ae7WXDf2xqH7CZNKirNhSEEkUGO72+L2/PiBodkmZoNrj0r Tz2EM18goQ1RM70Q+BH7CLBpAKGC9Jl32MBfuHoEiBGcaoLSQRia11zUGokhwsYG krG2oT+2RD1lk9bh9uRjQUynnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBofjn1S CmPh6lG3DG8dU//MMaMXMB8GA1UdIwQYMBaAFD3XmOu67353Sy8sd677IqTNe9aG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzBBRS8wMUYwMDU5QTQ5 QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZuZExMeXgzcnZzaXBNMTcx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkZVk2N3J2Zm5kTEx5eDNydnNpcE0xNzFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzBBRS8wMUYwMDU5QTQ5QkExMUVCOUMxMUQ0NjNDNEY5QUUwMi9QZGVZNjdydmZu ZExMeXgzcnZzaXBNMTcxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPLOkW3QQVXWq6jq6kaAUTjqh+aG5aTePdWiEHe4C7Fs00KYNHMyCm Ou2Uxu03hOciA1S2U8O8m+i/9vQKQ2+OtkpB9sOYjSO0XLTt9F4D1NqtSGz4vlYw 4hSOWGNt+5KjPTvIJUx3UF4y8UrcqwZWaTv682EO7Rk/DV8cScDq+isy6Hhzt3Dt HYnstiHNg8nM8ybRE/7pUX//WjxR32fu+h3ux1P5/ti5PMX7VnME+h6kAty79j3S hZP84O0c9FiMebWo6FaqoqOPRwl3Jv+kUQ/JKRsiJ0TEuVnqtDqJ/5Tk2grIrHrd v/db6jMy4X3l3pBlV5fqtraOzZaFPk3O -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:24 2024 by rpki-client on console-ams.rpki-client.org