$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json) Hash identifier: jUoaZE5lENEUNhLhEa/S0gl+Fom3vKoTLFMVi8FFlI8= Subject key identifier: 3A:3B:91:95:99:A9:43:10:B7:9C:EF:2B:46:02:E8:E8:B9:C9:62:DB Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft Manifest number: 02C5 Signing time: Sun 05 May 2024 03:37:08 +0000 Manifest this update: Sun 05 May 2024 03:37:08 +0000 Manifest next update: Sun 12 May 2024 03:37:08 +0000 Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: z1tIxD86dV0RRYhfHUzPwq2BkOf3UJE9xXWtiky2Fo0=) 2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: WlaAdt0tWyriCM17MB7ECN82tv16qv0i9sR7gFyO56U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: May 5 03:37:08 2024 GMT Not After : May 12 03:37:08 2024 GMT Subject: CN=6636fee4-6b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:fc:d5:11:54:b9:e4:89:72:50:8e:65:7f: 25:c0:ef:7e:b9:31:d2:62:e2:fc:0b:60:9a:ff:e6: 20:ef:ed:5f:3b:78:ab:28:c1:8b:60:81:57:15:c8: 42:b2:6d:30:51:29:71:84:aa:ef:9f:f5:80:9f:85: 6a:6f:64:42:34:cd:fe:cd:fb:99:ed:42:a1:1b:2e: 63:06:c1:f4:be:c2:fc:cc:6c:02:33:57:cc:5f:60: c6:4c:52:c0:07:c1:e0:19:52:a6:96:af:52:4a:dd: d9:da:34:83:10:93:52:55:9c:22:be:b1:56:55:bc: 32:a8:90:f9:ad:0c:44:c6:0e:21:89:dc:ec:4d:c4: fb:e9:ca:8a:ee:0e:a7:2e:d4:33:86:d2:1a:df:7a: a4:27:8a:ab:08:e7:73:e0:e2:1b:b5:7a:4a:6c:60: 43:07:01:f3:61:28:73:88:ca:9f:d8:26:a5:79:a7: 74:e7:4a:a5:f3:17:4f:38:63:a0:91:db:c6:c7:11: d1:98:34:46:d7:6b:13:77:03:23:fe:9a:65:18:d2: 3c:fc:ad:99:69:7e:b2:f5:a2:40:b2:a8:b5:ab:2f: b4:23:96:ab:1e:11:16:cd:93:ee:bb:67:8d:b9:63: 3a:41:c3:9b:3d:bd:24:96:a9:4e:23:25:9a:1a:2a: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3B:91:95:99:A9:43:10:B7:9C:EF:2B:46:02:E8:E8:B9:C9:62:DB X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:50:86:bc:fe:c3:a5:c1:cb:dc:e7:d6:af:d5:ff:5d:b4:72: 48:36:a7:6d:12:36:9d:14:1a:fd:4d:90:84:7e:49:58:45:f3: 0d:a2:57:fa:fe:79:a0:61:98:22:a0:60:e3:79:8a:fc:e2:4b: 02:07:3d:0f:82:e6:a5:28:16:5b:71:10:18:62:79:bf:2e:5c: b1:88:bc:c7:a4:73:72:55:16:f1:d9:a6:90:73:9b:aa:f6:e7: 30:06:3c:00:91:4b:1b:1e:d8:87:1f:16:59:29:a0:9e:73:ee: 0e:85:ca:21:62:51:72:76:e8:78:b8:00:c3:80:d2:a1:8b:a8: 0b:05:23:74:12:fd:84:36:45:9d:ef:f7:66:68:5f:5a:e9:33: b2:86:19:b7:10:24:63:01:44:4b:21:70:d7:4f:ca:8b:2f:50: 79:50:24:69:29:02:f6:c7:8a:92:3a:eb:df:1e:11:f7:af:00: bc:ed:95:76:1b:3c:f9:92:44:a8:df:94:66:40:d8:be:af:46: cb:de:c0:6b:43:15:69:c2:37:20:e3:b9:84:ae:59:36:8f:28: 11:7a:8f:e7:07:0d:b9:1f:bb:d6:8f:43:8a:df:30:57:84:59: 0e:a5:1f:f8:e1:ff:93:2c:82:4a:70:15:a0:8a:b1:3a:5a:52: db:24:27:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjQwNTA1MDMzNzA4WhcNMjQwNTEyMDMzNzA4WjAYMRYwFAYD VQQDEw02NjM2ZmVlNC02YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOb81RFUueSJclCOZX8lwO9+uTHSYuL8C2Ca/+Yg7+1fO3irKMGLYIFXFchC sm0wUSlxhKrvn/WAn4Vqb2RCNM3+zfuZ7UKhGy5jBsH0vsL8zGwCM1fMX2DGTFLA B8HgGVKmlq9SSt3Z2jSDEJNSVZwivrFWVbwyqJD5rQxExg4hidzsTcT76cqK7g6n LtQzhtIa33qkJ4qrCOdz4OIbtXpKbGBDBwHzYShziMqf2Calead050ql8xdPOGOg kdvGxxHRmDRG12sTdwMj/pplGNI8/K2ZaX6y9aJAsqi1qy+0I5arHhEWzZPuu2eN uWM6QcObPb0klqlOIyWaGirldwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo7kZWZ qUMQt5zvK0YC6Oi5yWLbMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz Vmp0a0psSmlpUjFOcEdwNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAUIa8/sOlwcvc59av1f9dtHJINqdtEjadFBr9TZCEfklYRfMNolf6 /nmgYZgioGDjeYr84ksCBz0PgualKBZbcRAYYnm/LlyxiLzHpHNyVRbx2aaQc5uq 9ucwBjwAkUsbHtiHHxZZKaCec+4OhcohYlFyduh4uADDgNKhi6gLBSN0Ev2ENkWd 7/dmaF9a6TOyhhm3ECRjAURLIXDXT8qLL1B5UCRpKQL2x4qSOuvfHhH3rwC87ZV2 Gzz5kkSo35RmQNi+r0bL3sBrQxVpwjcg47mErlk2jygReo/nBw25H7vWj0OK3zBX hFkOpR/44f+TLIJKcBWgirE6WlLbJCcn -----END CERTIFICATE-----Generated at Sun May 5 04:40:00 2024 by rpki-client on console-ams.rpki-client.org