$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json) Hash identifier: i38Nv3cc65bdoLXbYWJAUK0iCN/mXYltx4c5unmjpUU= Subject key identifier: 35:DF:3E:F7:4B:AA:F6:F1:C7:C2:36:D6:FB:13:3C:F0:BE:6D:D5:D8 Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft Manifest number: 2BC8 Signing time: Fri 26 Apr 2024 15:49:34 +0000 Manifest this update: Fri 26 Apr 2024 15:49:33 +0000 Manifest next update: Fri 03 May 2024 15:49:33 +0000 Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: Ytz+Gsp2BzFZShvem/Io3qRH6zlq0rnU3mvfBiN8X2Y=) 2: 14820EDE248611EEB600357DC4F9AE02.roa (hash: 0/4blx4DV4o0XHT92JvfQApnCqJsED9XF07o3w0iEXQ=) 3: 5F2A9412249D11EEBA491E2FC4F9AE02.roa (hash: GPXB7cVru2oyiYFgoIb+7WIPpfAo3MZHDKwGOMmrhAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11244 (0x2bec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: Apr 26 15:49:33 2024 GMT Not After : May 3 15:49:33 2024 GMT Subject: CN=662bcd0e-0e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:03:52:ec:4a:51:d5:08:c4:7c:99:83:df: d7:8c:0a:0d:7b:1f:4c:fa:43:df:5e:c5:5c:3a:04: 85:ee:e5:01:8f:27:1f:79:65:ed:48:44:54:59:ce: f6:bd:b3:c7:dd:c7:fd:92:0a:37:ef:73:00:33:9b: fc:b3:e7:78:e7:67:07:46:64:62:e5:f8:25:af:cc: fe:f5:da:64:2e:06:ec:1c:41:d4:4d:ad:60:b1:e4: fb:ab:d4:a2:c3:24:6a:86:82:fd:f7:13:ae:54:bd: 9e:28:09:42:8a:c0:7f:b6:f1:61:f4:28:c9:82:a6: bc:e2:cc:c9:c2:16:54:52:a4:84:7a:63:97:d7:cf: d4:36:ba:63:30:01:56:07:92:2a:e5:f2:46:f9:97: f9:14:38:2b:54:77:ae:e1:da:ec:09:15:d1:3b:c1: 30:11:27:1a:c8:31:1f:f0:25:49:43:2f:5f:a5:3b: dc:0e:04:c7:ed:21:5c:20:8b:21:30:b4:4b:77:85: e6:57:4a:ad:8d:dc:e0:27:18:5a:92:f5:62:0a:2b: 3a:8d:1b:34:6c:bc:f6:de:98:36:4a:df:c6:ca:08: d4:e2:1d:64:6c:36:8b:3d:d7:13:58:12:af:09:07: 45:bc:1d:9a:b0:b4:a8:10:87:bb:91:95:64:ed:25: f0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DF:3E:F7:4B:AA:F6:F1:C7:C2:36:D6:FB:13:3C:F0:BE:6D:D5:D8 X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cf:71:de:9b:c8:f8:57:88:78:47:01:c1:a4:c5:bc:16:98: fe:97:a4:9e:e1:ea:c4:26:80:d7:da:79:e3:46:77:f8:7a:aa: 05:61:64:30:37:c3:7f:ac:68:30:08:a7:a4:f0:b3:a0:cd:64: 2d:04:a0:9c:43:87:47:33:98:78:0b:1e:e8:75:80:f1:15:af: ce:a5:26:9c:e9:70:1e:3a:07:5e:7f:50:ed:2d:9f:bc:c9:8c: a0:4c:29:09:10:e9:8b:b3:4a:e0:0c:2d:45:f5:20:fe:e2:94: 74:63:f0:3a:df:10:fe:19:d9:3d:aa:5d:7b:17:5c:99:76:c1: cc:7d:ea:d7:76:42:92:89:33:52:ef:f6:1d:ce:d7:c9:b1:25: a1:1d:d1:cc:b3:02:12:d4:e2:22:b0:8b:37:54:a3:31:79:d6: b4:f4:eb:cc:fc:5b:8d:7c:97:5b:d1:8f:bd:52:1d:2c:a3:a9: bf:03:06:bb:d5:fc:8f:f6:7f:0f:bc:45:da:29:70:8e:3d:f9: 4f:43:da:e0:60:05:cd:10:e5:37:0a:31:c5:4c:63:ac:a1:b2: bf:a6:b8:86:17:61:52:6d:db:60:f3:21:c2:68:eb:c0:3d:4b: 4a:14:ac:26:1e:aa:86:fd:89:f6:f2:3d:8c:10:99:ae:65:91: 3a:3e:45:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjQwNDI2MTU0OTMzWhcNMjQwNTAzMTU0OTMzWjAYMRYwFAYD VQQDEw02NjJiY2QwZS0wZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqgDUuxKUdUIxHyZg9/XjAoNex9M+kPfXsVcOgSF7uUBjycfeWXtSERUWc72 vbPH3cf9kgo373MAM5v8s+d452cHRmRi5fglr8z+9dpkLgbsHEHUTa1gseT7q9Si wyRqhoL99xOuVL2eKAlCisB/tvFh9CjJgqa84szJwhZUUqSEemOX18/UNrpjMAFW B5Iq5fJG+Zf5FDgrVHeu4drsCRXRO8EwEScayDEf8CVJQy9fpTvcDgTH7SFcIIsh MLRLd4XmV0qtjdzgJxhakvViCis6jRs0bLz23pg2St/GygjU4h1kbDaLPdcTWBKv CQdFvB2asLSoEIe7kZVk7SXwUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXfPvdL qvbxx8I21vsTPPC+bdXYMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTJENS81Rjg2MUVFNkI4OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWdu S1dOcThQT2pkZE9SQ1EtU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOz3Hem8j4V4h4RwHBpMW8Fpj+l6Se4erEJoDX2nnjRnf4eqoFYWQw N8N/rGgwCKek8LOgzWQtBKCcQ4dHM5h4Cx7odYDxFa/OpSac6XAeOgdef1DtLZ+8 yYygTCkJEOmLs0rgDC1F9SD+4pR0Y/A63xD+Gdk9ql17F1yZdsHMferXdkKSiTNS 7/YdztfJsSWhHdHMswIS1OIisIs3VKMxeda09OvM/FuNfJdb0Y+9Uh0so6m/Awa7 1fyP9n8PvEXaKXCOPflPQ9rgYAXNEOU3CjHFTGOsobK/priGF2FSbdtg8yHCaOvA PUtKFKwmHqqG/Yn28j2MEJmuZZE6PkU8 -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:39 2024 by rpki-client on console-ams.rpki-client.org