$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: JG2Z/jlG3GWyWMpXK1lc60Xs8O5/7h37QzdbpFmiKYY= Subject key identifier: C7:A4:AA:BD:78:F2:81:D6:FF:A8:2F:BC:D8:2D:ED:D2:A4:14:86:6A Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0A48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0A41 Signing time: Sat 04 May 2024 20:39:31 +0000 Manifest this update: Sat 04 May 2024 20:39:30 +0000 Manifest next update: Sat 11 May 2024 20:39:30 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: BV/X+A+aWGB1WdCd5NoXEwS8mfkp2z+31/TSmnbQN4s=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 0iqs/HxuwqHawKwVtyf9NZs5o720KQbaDZmDxQoYfvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2632 (0xa48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: May 4 20:39:30 2024 GMT Not After : May 11 20:39:30 2024 GMT Subject: CN=66369d03-7d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:48:96:5a:73:86:d9:fc:37:68:2c:d4:51: bf:45:4d:88:d6:47:7a:79:c1:48:08:74:96:4d:f7: 15:57:d2:1e:a9:6a:aa:c2:ea:c2:52:86:18:78:1c: d9:b4:39:c4:4b:2d:7d:a0:31:8f:f2:08:21:74:aa: 34:22:d8:ec:b6:d9:4e:29:f8:cb:80:4d:ed:36:77: 3e:dc:15:db:a7:98:04:8f:43:51:26:7e:76:e9:f3: f3:79:06:d9:d4:d5:d5:75:51:2a:00:6b:ac:22:dd: a6:0f:1b:1f:ec:59:15:bc:ca:d5:50:3b:06:a0:ac: 6a:b2:af:12:43:65:61:a2:fb:22:e8:d9:dc:96:dd: db:4a:6e:9e:c0:b1:da:c1:30:a0:98:72:66:34:d7: 0e:4e:d1:f2:32:a5:58:1c:b8:6f:49:fd:60:9c:49: e7:94:65:2c:bf:d9:3d:da:f4:bf:c9:60:73:52:08: 6d:c8:6c:10:1f:0d:32:a6:4a:a1:76:75:6c:fd:de: 51:96:74:91:fe:44:9d:1d:0d:ac:39:7b:ad:5e:37: 24:c9:a9:b7:da:9f:66:96:a8:42:52:f3:57:bf:8e: 41:2a:cf:00:86:61:ff:c0:ed:4a:0f:85:27:c7:0a: d2:c3:31:a9:c2:24:01:b8:57:d6:90:f9:3b:a4:cb: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A4:AA:BD:78:F2:81:D6:FF:A8:2F:BC:D8:2D:ED:D2:A4:14:86:6A X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:8f:14:53:d6:bb:82:b8:dc:8f:ab:42:61:ca:e6:e1:ef:70: b6:09:bf:01:a8:9f:4e:50:e5:53:3a:58:03:5f:a4:3f:2a:69: 00:6c:9e:e6:ad:8b:e7:b5:b7:05:7f:49:f0:87:44:5d:f1:16: 9a:1c:1b:42:91:25:8f:f3:c5:35:69:ca:da:5f:22:78:46:54: 13:57:c1:e7:60:86:3b:a5:1d:11:39:62:da:74:3e:92:ca:9a: fc:98:b0:57:14:ea:d3:7e:0f:9d:2d:bf:6e:dd:a8:4f:4a:a4: a0:7f:79:e7:ac:31:e9:db:df:bb:e1:fa:2e:53:58:b7:85:20: c3:52:96:b5:e0:ce:79:94:c4:a8:5a:cd:82:3b:84:9c:ab:e5: f3:33:98:44:cc:4b:ce:0e:47:d9:9a:a0:87:6c:a2:58:b0:27: 04:90:ba:2b:4c:29:38:ef:3e:6a:30:fb:e2:11:0e:67:90:2b: 5d:4a:84:87:e3:df:28:81:13:bd:89:b4:91:e4:b1:d1:74:f4: 27:ea:d8:e6:c4:a1:b6:2d:ab:05:42:4c:fa:94:ef:37:5a:64: 89:66:b2:5e:58:b5:db:b5:0e:1c:27:34:74:54:7d:39:56:3c: 01:cf:38:6b:47:a5:70:c2:0a:37:20:44:98:9e:3c:53:e3:8f: 09:b3:20:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjQwNTA0MjAzOTMwWhcNMjQwNTExMjAzOTMwWjAYMRYwFAYD VQQDEw02NjM2OWQwMy03ZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTtIllpzhtn8N2gs1FG/RU2I1kd6ecFICHSWTfcVV9IeqWqqwurCUoYYeBzZ tDnESy19oDGP8gghdKo0ItjsttlOKfjLgE3tNnc+3BXbp5gEj0NRJn526fPzeQbZ 1NXVdVEqAGusIt2mDxsf7FkVvMrVUDsGoKxqsq8SQ2Vhovsi6Nnclt3bSm6ewLHa wTCgmHJmNNcOTtHyMqVYHLhvSf1gnEnnlGUsv9k92vS/yWBzUghtyGwQHw0ypkqh dnVs/d5RlnSR/kSdHQ2sOXutXjckyam32p9mlqhCUvNXv45BKs8AhmH/wO1KD4Un xwrSwzGpwiQBuFfWkPk7pMtYQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMekqr14 8oHW/6gvvNgt7dKkFIZqMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhjxRT1ruCuNyPq0Jhyubh73C2Cb8BqJ9OUOVTOlgDX6Q/KmkAbJ7m rYvntbcFf0nwh0Rd8RaaHBtCkSWP88U1acraXyJ4RlQTV8HnYIY7pR0ROWLadD6S ypr8mLBXFOrTfg+dLb9u3ahPSqSgf3nnrDHp29+74fouU1i3hSDDUpa14M55lMSo Ws2CO4Scq+XzM5hEzEvODkfZmqCHbKJYsCcEkLorTCk47z5qMPviEQ5nkCtdSoSH 498ogRO9ibSR5LHRdPQn6tjmxKG2LasFQkz6lO83WmSJZrJeWLXbtQ4cJzR0VH05 VjwBzzhrR6Vwwgo3IESYnjxT448JsyDX -----END CERTIFICATE-----Generated at Sat May 4 21:33:00 2024 by rpki-client on console-fra.rpki-client.org