$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json) Hash identifier: 2Rr644o2xv7j3K9rbg2f2nCQUx7ek6TCKn+zRBS4P0E= Subject key identifier: 4B:F1:03:8B:FC:5F:75:5C:66:4C:80:C4:D2:0E:13:9F:30:F8:F6:B8 Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft Manifest number: BC Signing time: Wed 01 May 2024 06:43:28 +0000 Manifest this update: Wed 01 May 2024 06:43:28 +0000 Manifest next update: Wed 08 May 2024 06:43:28 +0000 Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: DxV9XAqo9XJTby1ISHhQrZSAeAg7aFXpkd+vDUmDbnQ=) 2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: 4YTkIvynJ9nOrrUxdprSixi1+madWttV9gDLYZ8NR0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Validity Not Before: May 1 06:43:28 2024 GMT Not After : May 8 06:43:28 2024 GMT Subject: CN=6631e490-e2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cd:2b:ca:ca:36:4e:67:9f:53:1f:96:e0:f5: ae:d0:0d:8b:5f:4d:58:b2:99:0c:9e:f8:fc:1c:47: 20:43:29:4d:d8:7c:2a:51:3a:09:e8:b4:66:2e:3f: df:54:d3:35:d5:60:04:2f:d8:34:fd:f5:48:95:17: 0a:db:c4:b5:21:3d:b9:fe:36:dd:be:ea:b1:e6:de: 24:93:67:52:c4:87:6b:ae:12:5e:24:75:46:a2:ee: 30:c0:40:e7:e6:66:77:2c:1a:3c:53:c5:fc:36:04: d1:ba:37:92:86:f4:65:ad:6f:6c:33:b9:7e:54:2d: 36:26:2a:fe:82:ff:a0:fd:b8:7a:9c:0e:4d:f5:f7: 54:b0:c2:05:0b:9b:ba:5a:fc:32:b6:50:a4:ce:95: 89:93:bd:a6:74:ca:d1:d8:f9:dd:81:a2:7d:63:e1: 0c:2d:e3:7e:d7:7b:36:ab:3f:34:36:a9:06:d1:9a: 4c:af:1e:c5:17:4f:fb:05:ce:c2:cd:63:8f:b7:14: 91:81:10:d2:94:ea:a4:b8:c8:1c:6d:22:13:07:7f: 26:73:dd:30:a2:62:5f:99:27:62:66:5f:92:08:ab: 1a:f7:b0:f9:8c:4b:d9:d6:16:e0:fd:7c:80:cb:e9: cd:6e:0f:1d:03:c1:c1:c6:35:23:4f:7f:84:22:2c: b0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F1:03:8B:FC:5F:75:5C:66:4C:80:C4:D2:0E:13:9F:30:F8:F6:B8 X509v3 Authority Key Identifier: keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ea:25:a3:e4:7c:c8:3e:90:36:1c:fd:1a:9a:43:1f:ff:5b: f6:c2:de:e3:ce:65:a3:16:94:95:8a:3b:07:ca:7d:2b:5d:ee: dc:ac:d5:bd:cd:a9:17:9b:0d:33:84:2f:df:4d:fe:0f:0a:a1: 06:d0:c7:97:96:0e:ac:37:2a:5a:51:b2:47:e0:be:3c:ce:53: 62:8c:98:5c:8e:a0:4f:94:8b:55:5b:9c:2f:17:1a:fe:3a:e0: d8:c2:5e:b5:94:80:4f:ca:57:45:e2:0d:45:91:c9:64:f3:ad: bc:ce:a1:ce:06:6f:87:f5:6e:4d:f5:3d:fa:5b:83:f6:85:63: 6d:74:dc:e0:8f:28:cb:65:34:b2:ee:10:45:3e:95:6f:7b:fb: fc:49:3b:3f:f2:67:46:04:96:da:5e:83:ec:e5:06:a4:8c:82: 34:15:fc:43:91:59:db:0e:51:4b:2a:15:93:92:50:2d:7b:6f: 2a:8c:c3:24:e3:de:3f:bc:fa:c7:ab:f4:95:4d:64:d7:7a:b6: 31:a6:7b:33:f2:bf:17:a8:f1:b4:af:93:6a:60:95:19:a4:e7: d0:de:25:d9:2f:11:db:71:74:a9:74:94:f1:14:de:22:ec:fd: 98:ea:3a:2d:8b:b7:2a:d8:84:a8:49:0f:7e:38:51:b9:f8:ee: fc:0b:d4:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD NDVDNDJDQkMwHhcNMjQwNTAxMDY0MzI4WhcNMjQwNTA4MDY0MzI4WjAYMRYwFAYD VQQDEw02NjMxZTQ5MC1lMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6s0ryso2TmefUx+W4PWu0A2LX01YspkMnvj8HEcgQylN2HwqUToJ6LRmLj/f VNM11WAEL9g0/fVIlRcK28S1IT25/jbdvuqx5t4kk2dSxIdrrhJeJHVGou4wwEDn 5mZ3LBo8U8X8NgTRujeShvRlrW9sM7l+VC02Jir+gv+g/bh6nA5N9fdUsMIFC5u6 WvwytlCkzpWJk72mdMrR2PndgaJ9Y+EMLeN+13s2qz80NqkG0ZpMrx7FF0/7Bc7C zWOPtxSRgRDSlOqkuMgcbSITB38mc90womJfmSdiZl+SCKsa97D5jEvZ1hbg/XyA y+nNbg8dA8HBxjUjT3+EIiywlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvxA4v8 X3VcZkyAxNIOE58w+Pa4MB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5 NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI1RS9GODcyM0ZFNEU5NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENG OElJYlRjQnFrYW5FWEVMTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc6iWj5HzIPpA2HP0amkMf/1v2wt7jzmWjFpSVijsHyn0rXe7crNW9 zakXmw0zhC/fTf4PCqEG0MeXlg6sNypaUbJH4L48zlNijJhcjqBPlItVW5wvFxr+ OuDYwl61lIBPyldF4g1Fkclk8628zqHOBm+H9W5N9T36W4P2hWNtdNzgjyjLZTSy 7hBFPpVve/v8STs/8mdGBJbaXoPs5QakjII0FfxDkVnbDlFLKhWTklAte28qjMMk 494/vPrHq/SVTWTXerYxpnsz8r8XqPG0r5NqYJUZpOfQ3iXZLxHbcXSpdJTxFN4i 7P2Y6joti7cq2ISoSQ9+OFG5+O78C9QV -----END CERTIFICATE-----Generated at Wed May 1 07:55:40 2024 by rpki-client on console-fra.rpki-client.org