$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json) Hash identifier: FOiHmpL56dqtwt+/bzEV2s9mvRC2cebsKzSStI8Dj8U= Subject key identifier: FA:41:06:BA:C2:90:60:D9:77:E2:1B:45:5C:AA:6F:5B:C4:20:DC:5E Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft Manifest number: 46 Signing time: Fri 17 May 2024 08:09:16 +0000 Manifest this update: Fri 17 May 2024 08:09:15 +0000 Manifest next update: Fri 24 May 2024 08:09:15 +0000 Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: GKdow8V1OKO5KSKKk6Kbt8yQXq8eoBKg5emLe+kaBUw=) 2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: Kfpmzio926KrwrXS9ARoXX7rw2DWUze5A4CZAJAWeqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Validity Not Before: May 17 08:09:15 2024 GMT Not After : May 24 08:09:15 2024 GMT Subject: CN=664710ab-de0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:d9:5b:75:d1:ca:8d:02:fd:bf:62:79:0e: a0:d9:20:b3:bb:7e:9d:45:dc:67:90:6b:9e:a1:36: d2:05:61:ca:cd:a4:49:1e:05:83:08:90:92:fc:5c: 36:31:86:eb:1b:18:76:cd:aa:0e:85:fe:4f:f0:1a: 9a:ea:21:54:eb:9d:be:10:fb:99:95:33:d8:61:a6: ce:fb:33:28:36:40:f6:6c:89:e7:40:ca:eb:8c:71: 4f:8a:58:9c:dc:cf:9e:c9:40:d3:30:78:88:41:75: 80:07:21:1d:68:38:db:a2:9e:1d:a6:50:ef:92:8b: 35:08:71:32:98:a0:a2:2b:6d:0d:36:50:a3:64:e7: 01:db:fe:30:0e:34:d2:b2:84:09:ed:a3:ec:f0:8e: fe:6a:97:eb:b3:0c:e6:fc:25:58:a3:29:1f:b5:32: 0e:54:29:db:fb:b3:4f:bc:8b:e8:bc:a6:b4:7d:27: c8:51:f4:a6:d5:56:81:a2:ad:5f:c1:89:0d:f2:45: 0d:b5:fd:2f:dd:0d:ef:4b:00:53:10:6b:ac:26:67: c4:d8:ca:98:d2:c4:fa:a8:f2:ce:d1:66:f2:67:59: 48:f6:86:b9:26:7a:7a:ac:31:78:b6:ed:6a:42:2a: b0:c9:c2:16:27:23:cb:c1:c8:11:6f:b7:c0:eb:3d: cd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:41:06:BA:C2:90:60:D9:77:E2:1B:45:5C:AA:6F:5B:C4:20:DC:5E X509v3 Authority Key Identifier: keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:44:5f:5a:fa:b5:7e:e2:c4:e6:c3:05:d2:55:9e:e3:b6:22: c8:c0:36:18:5d:a5:be:e4:5a:c4:23:10:5e:3f:07:f4:a7:6f: 35:cf:55:de:a5:2b:0e:63:78:ef:76:55:dc:cc:17:0f:d7:9d: 7f:3b:d5:0c:9b:31:0f:01:83:8a:59:a5:07:57:99:1d:39:b7: b2:57:05:09:a6:b3:e1:a2:c5:cb:e4:55:9d:b0:1f:e4:4e:21: 7a:7c:f3:06:b1:42:b7:15:30:9a:40:90:62:b6:0e:e9:25:61: e1:5f:fe:9c:9a:6a:2e:67:70:e0:04:cb:5c:14:9f:59:16:cb: 00:f3:50:1e:46:56:98:38:ef:33:b5:fc:02:69:5a:0d:f9:f7: e5:fb:f8:b7:56:bb:1b:22:6c:e1:f2:0d:95:0b:43:03:34:76: 26:52:63:51:77:07:8a:b2:d9:34:27:d3:08:18:8c:5b:a9:bd: 5f:42:72:e7:5f:78:72:3d:2c:fe:67:95:77:a7:9f:2a:da:33: f3:c9:7e:62:da:87:8f:55:b0:dd:17:9c:1e:33:27:bc:83:9b: 73:8b:8b:c3:1b:d9:e6:6e:a6:3b:f6:da:b5:03:40:14:6f:54: 0a:93:ec:1e:1c:98:a3:f0:1f:60:4d:df:c3:e9:47:8f:8e:52: 32:14:88:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUQzMDExMC8GA1UEBRMoM0UwQ0RGODgyQUVFOEM3MjIxRDU4OEEzQzUyNjAxOEUx RDY0Qzk2ODAeFw0yNDA1MTcwODA5MTVaFw0yNDA1MjQwODA5MTVaMBgxFjAUBgNV BAMTDTY2NDcxMGFiLWRlMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFKtlbddHKjQL9v2J5DqDZILO7fp1F3GeQa56hNtIFYcrNpEkeBYMIkJL8XDYx husbGHbNqg6F/k/wGprqIVTrnb4Q+5mVM9hhps77Myg2QPZsiedAyuuMcU+KWJzc z57JQNMweIhBdYAHIR1oONuinh2mUO+SizUIcTKYoKIrbQ02UKNk5wHb/jAONNKy hAnto+zwjv5ql+uzDOb8JVijKR+1Mg5UKdv7s0+8i+i8prR9J8hR9KbVVoGirV/B iQ3yRQ21/S/dDe9LAFMQa6wmZ8TYypjSxPqo8s7RZvJnWUj2hrkmenqsMXi27WpC KrDJwhYnI8vByBFvt8DrPc21AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+kEGusKQ YNl34htFXKpvW8Qg3F4wHwYDVR0jBBgwFoAUPgzfiCrujHIh1YijxSYBjh1kyWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRDMwL0JFODBDNkE2QUUx RTExRUVBN0VBMEE3N0M0RjlBRTAyL1BnemZpQ3J1akhJaDFZaWp4U1lCamgxa3lX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUGd6ZmlDcnVqSEloMVlpanhTWUJqaDFreVdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RDMwL0JFODBDNkE2QUUxRTExRUVBN0VBMEE3N0M0RjlBRTAyL1BnemZpQ3J1akhJ aDFZaWp4U1lCamgxa3lXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHFEX1r6tX7ixObDBdJVnuO2IsjANhhdpb7kWsQjEF4/B/SnbzXPVd6l Kw5jeO92VdzMFw/XnX871QybMQ8Bg4pZpQdXmR05t7JXBQmms+GixcvkVZ2wH+RO IXp88waxQrcVMJpAkGK2DuklYeFf/pyaai5ncOAEy1wUn1kWywDzUB5GVpg47zO1 /AJpWg359+X7+LdWuxsibOHyDZULQwM0diZSY1F3B4qy2TQn0wgYjFupvV9Ccudf eHI9LP5nlXennyraM/PJfmLah49VsN0XnB4zJ7yDm3OLi8Mb2eZupjv22rUDQBRv VAqT7B4cmKPwH2BN38PpR4+OUjIUiO4= -----END CERTIFICATE-----Generated at Fri May 17 10:10:52 2024 by rpki-client on console-fra.rpki-client.org