$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json) Hash identifier: 10roZ5FrtpPpknI3boRtuM5aa2BU4Y4ht8OVN1APRcs= Subject key identifier: B1:C7:44:63:4E:2F:3F:BF:92:F5:A9:67:9D:F5:15:C9:63:62:00:B4 Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Certificate serial: 1284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft Manifest number: 127A Signing time: Thu 02 May 2024 17:42:24 +0000 Manifest this update: Thu 02 May 2024 17:42:23 +0000 Manifest next update: Thu 09 May 2024 17:42:23 +0000 Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: qWnJ3mBH3tICDMVqd/d/0jvSi+IzhAqHublGSuf+ztI=) 2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: vl7ru7jGeXouITslQ3P7oElUqX5fMm8OE7sy4pQtZjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4740 (0x1284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714 Validity Not Before: May 2 17:42:23 2024 GMT Not After : May 9 17:42:23 2024 GMT Subject: CN=6633d080-56a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:5e:87:64:7e:03:f8:54:1c:c4:e8:f7:c2: 6b:3f:50:44:33:6f:22:98:53:86:1f:94:f2:8c:95: 47:63:91:76:40:fb:a3:e4:0a:32:9e:f3:18:d9:cc: e1:db:d4:5c:46:44:20:94:65:7f:5f:1a:e3:05:55: 1c:1c:25:ad:3e:b8:cf:0a:66:b7:16:ea:63:00:a4: e9:82:fd:46:b9:59:32:fb:6a:51:19:44:4f:2f:28: 07:dd:a3:61:00:a8:d0:55:4d:12:ee:0a:37:3e:12: 20:8a:4e:a7:91:6d:0e:bb:8e:d5:8c:b9:3b:98:d0: bf:f5:64:18:14:41:b2:cc:6b:f2:3c:d2:b0:8a:27: 0f:24:b7:19:36:ae:5b:8e:d9:96:88:85:84:bd:33: f3:38:61:0b:a4:f1:c1:8a:38:cb:1e:00:05:00:9a: 17:5e:bf:75:f1:2a:28:46:90:79:6f:58:92:b1:fc: 8e:b5:ef:a2:a9:a8:c4:c7:47:af:02:14:4a:0a:1b: f4:b1:70:ca:47:35:2b:5e:9c:bb:99:70:af:48:2d: 13:c3:51:5a:d9:67:70:73:6a:7e:98:29:85:88:52: cf:84:95:72:af:22:31:d7:e6:51:d4:bb:15:47:b9: 18:a8:1e:a3:6f:be:84:96:92:d5:36:8c:c3:49:bb: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C7:44:63:4E:2F:3F:BF:92:F5:A9:67:9D:F5:15:C9:63:62:00:B4 X509v3 Authority Key Identifier: keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:92:ad:e7:ef:1e:8d:02:38:33:c5:d9:c6:0c:c3:64:d3:82: 5a:d3:9c:39:1a:b4:c3:d5:06:32:01:43:3f:52:bc:7b:a4:03: 3e:46:b0:1f:38:f5:39:04:5f:e0:8c:b0:20:8b:43:44:0d:b5: 82:89:8f:91:ef:0f:1a:79:9e:5c:f4:9b:2e:96:3d:b1:8e:2e: 9e:0d:41:69:e2:cf:c2:d5:43:a4:fe:c6:6e:23:a1:68:97:10: 8b:81:6b:2c:19:ad:04:08:32:76:f0:f7:7e:1d:5a:48:5e:38: 39:34:b0:d9:48:fb:1c:de:6e:a7:86:35:f2:6e:f1:cc:76:ca: 3b:e4:97:2a:1d:37:b4:72:23:e7:07:8e:d5:c8:0b:e5:76:7b: 09:8e:af:c0:3d:27:36:97:ac:a9:47:9d:5d:ed:33:c5:0d:94: b6:0c:08:58:8b:39:2c:99:f9:4d:d8:1e:84:ea:63:28:0f:de: ff:b1:08:d5:c5:5f:48:c2:6d:80:9d:40:18:18:07:df:dc:2a: c6:b7:c6:33:ca:bd:1f:6a:ca:75:55:d5:05:a2:9f:26:1b:ae: ac:22:7a:f4:31:c3:ed:5d:8f:bb:92:2b:5a:58:61:b6:0e:2b: 64:b3:2a:c0:49:a8:0a:1b:3e:cc:45:21:dc:34:73:cc:ba:ec: d1:e7:45:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4 MkU3RTM3MTQwHhcNMjQwNTAyMTc0MjIzWhcNMjQwNTA5MTc0MjIzWjAYMRYwFAYD VQQDEw02NjMzZDA4MC01NmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/xeh2R+A/hUHMTo98JrP1BEM28imFOGH5TyjJVHY5F2QPuj5AoynvMY2czh 29RcRkQglGV/XxrjBVUcHCWtPrjPCma3FupjAKTpgv1GuVky+2pRGURPLygH3aNh AKjQVU0S7go3PhIgik6nkW0Ou47VjLk7mNC/9WQYFEGyzGvyPNKwiicPJLcZNq5b jtmWiIWEvTPzOGELpPHBijjLHgAFAJoXXr918SooRpB5b1iSsfyOte+iqajEx0ev AhRKChv0sXDKRzUrXpy7mXCvSC0Tw1Fa2Wdwc2p+mCmFiFLPhJVyryIx1+ZR1LsV R7kYqB6jb76ElpLVNozDSbshYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHHRGNO Lz+/kvWpZ531FcljYgC0MB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1 QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7kq3n7x6NAjgzxdnGDMNk04Ja05w5GrTD1QYyAUM/Urx7pAM+RrAf OPU5BF/gjLAgi0NEDbWCiY+R7w8aeZ5c9Jsulj2xji6eDUFp4s/C1UOk/sZuI6Fo lxCLgWssGa0ECDJ28Pd+HVpIXjg5NLDZSPsc3m6nhjXybvHMdso75JcqHTe0ciPn B47VyAvldnsJjq/APSc2l6ypR51d7TPFDZS2DAhYizksmflN2B6E6mMoD97/sQjV xV9Iwm2AnUAYGAff3CrGt8Yzyr0fasp1VdUFop8mG66sInr0McPtXY+7kitaWGG2 DitksyrASagKGz7MRSHcNHPMuuzR50X/ -----END CERTIFICATE-----Generated at Thu May 2 20:04:51 2024 by rpki-client on console-ams.rpki-client.org