$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft File: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json) Hash identifier: DmZXpyyyd4TaXhk94w3Nlz3emVgVYAHCi5EmiItEC00= Subject key identifier: 35:A9:82:63:13:18:3D:BB:89:4D:4A:53:87:FE:AF:2C:5C:64:24:F1 Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E Certificate issuer: /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft Manifest number: 0589 Signing time: Sun 05 May 2024 00:43:59 +0000 Manifest this update: Sun 05 May 2024 00:43:59 +0000 Manifest next update: Sun 12 May 2024 00:43:59 +0000 Files and hashes: 1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: XSxteR+GewdvZwFGEUEY/kfN5meCMz18FLBBAbfHxbA=) 2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: AmaUz+EXza9ap5Ndg+GApOzoKeEyWm7IYO9NmvdFo54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Validity Not Before: May 5 00:43:59 2024 GMT Not After : May 12 00:43:59 2024 GMT Subject: CN=6636d64f-ffb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:06:18:8a:61:22:ea:61:1d:d2:3e:09:37: 0d:4a:9e:31:55:19:7a:cc:66:15:05:fa:b7:fa:11: 4a:96:cd:91:8d:73:f4:7a:24:5a:80:b4:69:11:0a: 77:95:f6:1f:29:b7:8a:a9:7e:77:c9:97:0d:03:a1: 3e:a4:2a:04:49:7d:5c:d1:e6:4d:57:e6:6e:80:83: 63:eb:fe:08:79:ee:4e:a4:1d:cd:c3:d6:04:14:71: f8:4c:cf:0f:37:09:25:32:ef:1b:f9:b9:28:73:0e: 51:72:12:f6:01:a2:f3:b6:04:88:1d:66:01:c5:28: c2:20:72:94:d4:f4:a7:80:be:f7:ba:b8:00:7a:e5: 08:b6:a0:89:f6:37:83:d3:bb:bb:28:f3:e0:82:8f: 90:b2:dd:7c:36:a2:59:c4:0c:24:57:79:14:13:73: 8f:09:df:08:16:56:bb:8c:87:98:dc:9a:c9:67:16: 79:64:2c:e8:54:fb:af:5c:3c:24:2d:5e:dd:82:02: e3:ed:2b:d4:77:55:c0:69:2a:ef:d7:df:07:b1:2b: 43:ca:b2:be:78:5c:04:f9:6a:98:24:e3:1e:5f:a3: fb:6f:c4:26:01:4c:4b:d4:a0:80:af:c5:a3:36:2b: e1:5c:a0:36:86:4f:a4:50:8a:14:d1:32:56:1f:94: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A9:82:63:13:18:3D:BB:89:4D:4A:53:87:FE:AF:2C:5C:64:24:F1 X509v3 Authority Key Identifier: keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:4a:69:d1:ca:f5:b8:34:4b:ff:a0:f9:5c:c4:66:b6:a4:5d: 76:63:e7:f2:89:e7:ec:6f:12:4d:66:bd:36:5e:6d:00:11:46: a8:77:92:16:05:2d:32:5b:24:41:46:e4:71:c9:28:b4:89:7a: 62:10:3b:02:a4:32:4a:26:63:58:43:d6:52:6a:b4:3b:88:b5: 36:28:52:02:57:f6:68:97:4a:2e:ef:60:2b:c7:69:ed:39:d0: 5c:70:b6:14:57:21:49:96:14:c1:9b:03:d6:85:81:2f:78:ff: f9:8c:b0:5d:fa:b6:b7:fd:1b:ad:ef:80:12:65:30:ed:73:be: 42:b2:aa:c5:28:41:6c:ed:b7:c7:f6:d1:d3:b1:28:f2:00:29: 65:47:67:71:67:49:91:91:0e:bf:cb:69:bf:a9:f2:87:4f:23: e8:84:c3:3c:f9:0f:dc:0a:25:7d:c6:64:a3:59:a9:27:8f:85: b0:06:da:ea:77:31:a1:55:89:db:b6:a4:b0:f8:de:77:22:02: 30:6c:98:6a:88:73:0a:bc:e0:c8:47:d4:d2:d7:7a:95:00:d7: cf:54:84:c3:4d:82:10:be:ee:58:72:91:8c:d7:91:04:e7:7d: 6d:85:cc:91:0a:a3:ca:91:02:d3:14:1a:f9:8f:cb:b4:3f:44: 41:ed:5a:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCQkExMTAvBgNVBAUTKDNFRDk5RDJBQTY4MDg2MUQwQTdCNTlDNkQxQkIyQTVC RjRDQjJFNkUwHhcNMjQwNTA1MDA0MzU5WhcNMjQwNTEyMDA0MzU5WjAYMRYwFAYD VQQDEw02NjM2ZDY0Zi1mZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdUGGIphIuphHdI+CTcNSp4xVRl6zGYVBfq3+hFKls2RjXP0eiRagLRpEQp3 lfYfKbeKqX53yZcNA6E+pCoESX1c0eZNV+ZugINj6/4Iee5OpB3Nw9YEFHH4TM8P NwklMu8b+bkocw5RchL2AaLztgSIHWYBxSjCIHKU1PSngL73urgAeuUItqCJ9jeD 07u7KPPggo+Qst18NqJZxAwkV3kUE3OPCd8IFla7jIeY3JrJZxZ5ZCzoVPuvXDwk LV7dggLj7SvUd1XAaSrv198HsStDyrK+eFwE+WqYJOMeX6P7b8QmAUxL1KCAr8Wj NivhXKA2hk+kUIoU0TJWH5QCiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWpgmMT GD27iU1KU4f+ryxcZCTxMB8GA1UdIwQYMBaAFD7ZnSqmgIYdCntZxtG7Klv0yy5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJCQS9CREZFQ0RDMjhE NzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWhoMEtlMW5HMGJzcVdfVExM bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B0bWRLcWFBaGgwS2UxbkcwYnNxV19UTExtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJCQS9CREZFQ0RDMjhENzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWho MEtlMW5HMGJzcVdfVExMbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjSmnRyvW4NEv/oPlcxGa2pF12Y+fyiefsbxJNZr02Xm0AEUaod5IW BS0yWyRBRuRxySi0iXpiEDsCpDJKJmNYQ9ZSarQ7iLU2KFICV/Zol0ou72Arx2nt OdBccLYUVyFJlhTBmwPWhYEveP/5jLBd+ra3/Rut74ASZTDtc75CsqrFKEFs7bfH 9tHTsSjyACllR2dxZ0mRkQ6/y2m/qfKHTyPohMM8+Q/cCiV9xmSjWaknj4WwBtrq dzGhVYnbtqSw+N53IgIwbJhqiHMKvODIR9TS13qVANfPVITDTYIQvu5YcpGM15EE 531thcyRCqPKkQLTFBr5j8u0P0RB7VrZ -----END CERTIFICATE-----Generated at Sun May 5 01:22:23 2024 by rpki-client on console-fra.rpki-client.org