$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json) Hash identifier: AkyuyqpsT7s+puDdx27NRJJTt5NguNeSs/4SD5fNPdA= Subject key identifier: 60:D1:97:67:50:93:62:72:3F:CB:FB:9C:E3:97:A6:F6:DC:63:04:F6 Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Certificate serial: 33CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft Manifest number: 33BF Signing time: Fri 26 Apr 2024 15:20:49 +0000 Manifest this update: Fri 26 Apr 2024 15:20:49 +0000 Manifest next update: Fri 03 May 2024 15:20:49 +0000 Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: QM2VOxJLm0Bs7K+n/tAlHvv655tcJv1WFguoZpK+Tng=) 2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: DRUXY6EDR5aQGwAatv1Kh5wCzrVWZy0qZ/UuTnFEN3o=) 3: E73006AA682811EB8D635520C4F9AE02.roa (hash: ZNofJJyV32x048IIAwL342hD68XT9y4Jhxi+r+3WXTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13258 (0x33ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Validity Not Before: Apr 26 15:20:49 2024 GMT Not After : May 3 15:20:49 2024 GMT Subject: CN=662bc651-e723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:14:c4:bc:6a:30:ae:5c:6a:3f:fa:c6:fe: af:1c:17:f3:7a:6b:1f:0f:c2:f7:41:69:86:d8:3b: 98:16:bd:b6:71:a9:ba:a3:d3:08:52:05:0e:6c:4d: b1:54:c9:bc:0b:70:f3:3e:da:41:d5:9c:34:38:90: 11:01:3e:62:22:74:af:a9:7c:a7:46:5a:5b:a3:0d: 03:da:66:f6:15:8d:23:c1:a1:48:7b:f2:c4:64:3d: bb:ca:84:98:19:ce:1e:7b:40:92:d4:66:74:85:69: 7d:06:6d:46:48:53:df:db:f1:ae:5c:c9:86:dd:64: 4f:08:15:f9:31:90:0d:c5:aa:c4:7f:74:02:2d:23: f3:c6:1b:79:70:13:db:70:db:2c:93:cd:4e:fa:42: 80:36:07:6a:1c:65:22:cc:9f:86:fd:3e:e7:c4:8a: 37:10:67:1f:fc:c7:16:b9:78:fa:b8:2e:57:c3:c5: 54:ef:9e:5d:ae:b4:b4:3f:77:10:f4:24:4d:7f:d2: db:7f:cd:9b:ff:73:38:8b:fd:e3:e1:6c:46:70:9b: 77:63:76:ff:c2:bd:1a:e1:e3:ff:90:18:fc:70:3a: 0f:66:c1:68:21:00:2d:12:e7:6f:22:a8:7b:5c:66: 51:c5:dc:ac:7d:de:88:36:2d:6b:f9:a6:b7:40:8d: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:97:67:50:93:62:72:3F:CB:FB:9C:E3:97:A6:F6:DC:63:04:F6 X509v3 Authority Key Identifier: keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:9f:b3:07:6d:0b:b4:d5:fa:84:8c:c8:f3:ee:41:0d:1f:c2: ad:ce:22:61:87:07:3e:50:bb:cc:48:96:d2:b8:1a:56:43:64: 1e:bd:d4:84:ff:c0:ae:84:aa:15:2a:29:cd:f5:25:8d:8c:d0: 42:12:ab:fe:ee:18:7b:81:bc:06:1c:f1:c8:00:12:c0:08:d9: cb:8b:a2:dd:ab:5f:94:52:34:5a:8d:e1:1e:7d:13:df:b2:02: c0:43:e6:73:8b:58:c4:4b:c2:fc:ac:56:08:79:74:cd:d1:4d: 40:30:ab:62:b7:38:af:82:85:a8:24:40:d1:ab:d7:22:92:9e: 08:34:5f:14:a8:a4:c1:f9:f1:66:30:9e:4e:7a:1a:54:53:34: 4c:63:1a:53:c1:7d:59:4b:94:5c:14:60:aa:9a:d5:03:1c:70: 5a:6d:fb:d5:80:8c:71:f2:42:78:eb:b0:5d:25:e4:0f:53:28: 34:b3:84:f9:a3:dc:41:12:76:40:97:29:eb:00:22:93:31:f4: a1:4c:a1:d2:c4:bb:17:67:0e:4c:c3:0d:1b:f6:b3:75:0d:72: 65:34:f8:87:62:4c:f5:33:24:51:38:56:01:f0:a3:4c:12:c3: 8d:8e:74:55:e1:21:9e:f3:fc:c8:2e:b1:a2:5c:3a:2e:23:52: 3d:b3:8d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1 QzA3QkJBNjIwHhcNMjQwNDI2MTUyMDQ5WhcNMjQwNTAzMTUyMDQ5WjAYMRYwFAYD VQQDEw02NjJiYzY1MS1lNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyREUxLxqMK5caj/6xv6vHBfzemsfD8L3QWmG2DuYFr22cam6o9MIUgUObE2x VMm8C3DzPtpB1Zw0OJARAT5iInSvqXynRlpbow0D2mb2FY0jwaFIe/LEZD27yoSY Gc4ee0CS1GZ0hWl9Bm1GSFPf2/GuXMmG3WRPCBX5MZANxarEf3QCLSPzxht5cBPb cNssk81O+kKANgdqHGUizJ+G/T7nxIo3EGcf/McWuXj6uC5Xw8VU755drrS0P3cQ 9CRNf9Lbf82b/3M4i/3j4WxGcJt3Y3b/wr0a4eP/kBj8cDoPZsFoIQAtEudvIqh7 XGZRxdysfd6INi1r+aa3QI0bYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDRl2dQ k2JyP8v7nOOXpvbcYwT2MB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1 bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2 bVJRTUE3MTJJUlJjQjd1bUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZn7MHbQu01fqEjMjz7kENH8KtziJhhwc+ULvMSJbSuBpWQ2QevdSE /8CuhKoVKinN9SWNjNBCEqv+7hh7gbwGHPHIABLACNnLi6Ldq1+UUjRajeEefRPf sgLAQ+Zzi1jES8L8rFYIeXTN0U1AMKtitzivgoWoJEDRq9cikp4INF8UqKTB+fFm MJ5OehpUUzRMYxpTwX1ZS5RcFGCqmtUDHHBabfvVgIxx8kJ467BdJeQPUyg0s4T5 o9xBEnZAlynrACKTMfShTKHSxLsXZw5Mww0b9rN1DXJlNPiHYkz1MyRROFYB8KNM EsONjnRV4SGe8/zILrGiXDouI1I9s42N -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:56 2024 by rpki-client on console-ams.rpki-client.org