$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft File: PudBKv6HPx1FurYUcUoyAeNilpE.mft (raw, json) Hash identifier: y5HJ2kMCWlMTCiCPocU4nqz1FFIfXWLCT6KFUNH79M8= Subject key identifier: BD:3E:11:B6:17:25:08:98:50:1A:62:6E:86:37:4F:40:AC:23:BF:0B Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 Certificate issuer: /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft Manifest number: 04EF Signing time: Fri 03 May 2024 01:22:59 +0000 Manifest this update: Fri 03 May 2024 01:22:59 +0000 Manifest next update: Fri 10 May 2024 01:22:59 +0000 Files and hashes: 1: PudBKv6HPx1FurYUcUoyAeNilpE.crl (hash: ofMy7EvIi5dYQ6QpuS7BYclcsTUJa/h0/0hpX8P8i+I=) 2: B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (hash: kQoNfY9NY1p6Tem92hVpBTIkm9OijRbDFq9a0ttmNzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Validity Not Before: May 3 01:22:59 2024 GMT Not After : May 10 01:22:59 2024 GMT Subject: CN=66343c73-83d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:c8:07:56:fe:7e:f4:5e:76:fc:ba:d3:58: ab:4e:25:93:ab:13:cb:77:b0:13:62:88:72:95:18: 33:36:8d:08:69:59:48:09:44:5a:2e:1c:cc:7e:86: e5:14:af:cd:9b:e3:60:03:51:61:80:3d:72:2c:ca: 74:71:ae:38:4b:cd:52:ab:70:5a:76:ed:0b:61:8e: 91:d0:52:b4:55:bb:5c:99:74:54:d9:16:55:94:88: 0f:93:42:8e:42:e1:bf:01:fc:c5:31:ed:47:15:89: 09:a6:ed:83:24:2a:ed:12:96:87:fd:94:1f:b4:8f: e6:b9:80:3b:00:78:f2:72:36:3e:74:6b:25:0f:29: c2:3c:32:24:e9:3a:6c:0c:6e:89:7a:5a:ad:48:16: f3:a3:61:c1:a6:f3:e2:4a:ba:a4:19:c7:7e:4d:22: 29:6e:aa:f9:54:9b:03:18:f1:31:23:35:0b:34:40: f1:71:75:86:06:93:55:14:db:b3:86:6a:cb:9e:1b: ed:87:19:ad:d9:49:b8:d0:47:89:81:8d:2e:22:de: ab:53:a2:c1:e2:e0:63:98:42:09:8c:46:a0:60:d2: 72:fc:a4:b2:5b:f9:e4:c4:70:e4:6c:b7:9c:05:34: 27:84:44:98:34:23:29:f5:53:ff:72:5a:5f:49:e5: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3E:11:B6:17:25:08:98:50:1A:62:6E:86:37:4F:40:AC:23:BF:0B X509v3 Authority Key Identifier: keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:13:99:6b:61:f2:54:54:88:8c:fa:d2:d0:91:db:89:7f:39: 48:94:b9:0d:01:bd:ff:d5:6d:e3:88:a1:48:3d:ca:61:0d:4f: 9f:ea:55:8b:45:47:4f:2a:04:57:ee:8c:2b:0e:81:b2:69:4d: 36:59:b4:a4:c4:82:2e:1c:7a:2d:4d:40:03:5c:8b:08:b0:cb: dc:b4:ad:7a:b3:2d:05:b8:61:41:a1:b4:5a:3e:63:12:d2:af: da:d1:49:75:ba:10:fb:b1:31:49:e2:5b:b3:67:14:cc:29:79: aa:71:a3:79:11:af:2d:40:0e:61:2b:4f:ec:ca:26:17:2f:82: 7f:e9:ff:f1:9f:2b:3b:34:fe:b7:f5:de:15:95:4e:2e:df:db: c6:7f:d5:84:2a:94:0a:25:98:d4:a7:ee:df:fe:a5:86:24:db: 71:20:d7:ef:aa:40:8e:69:9a:3d:67:e1:36:62:68:37:e0:cf: 45:ce:47:16:71:b8:8c:78:96:a4:37:51:ba:46:4b:b2:63:24: 93:02:37:86:a6:2f:59:2a:d3:25:82:29:43:3d:17:d1:be:f1: fd:56:a9:08:fa:fb:0e:28:aa:ac:33:2f:8a:67:10:30:d1:d5: e6:45:9a:d0:b8:f5:a9:e3:0b:b8:4d:cf:62:35:d1:0d:9f:ee: 8b:e2:f9:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2ODAxMTAvBgNVBAUTKDNFRTc0MTJBRkU4NzNGMUQ0NUJBQjYxNDcxNEEzMjAx RTM2Mjk2OTEwHhcNMjQwNTAzMDEyMjU5WhcNMjQwNTEwMDEyMjU5WjAYMRYwFAYD VQQDEw02NjM0M2M3My04M2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAjIB1b+fvRedvy601irTiWTqxPLd7ATYohylRgzNo0IaVlICURaLhzMfobl FK/Nm+NgA1FhgD1yLMp0ca44S81Sq3Badu0LYY6R0FK0VbtcmXRU2RZVlIgPk0KO QuG/AfzFMe1HFYkJpu2DJCrtEpaH/ZQftI/muYA7AHjycjY+dGslDynCPDIk6Tps DG6JelqtSBbzo2HBpvPiSrqkGcd+TSIpbqr5VJsDGPExIzULNEDxcXWGBpNVFNuz hmrLnhvthxmt2Um40EeJgY0uIt6rU6LB4uBjmEIJjEagYNJy/KSyW/nkxHDkbLec BTQnhESYNCMp9VP/clpfSeWjfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0+EbYX JQiYUBpiboY3T0CsI78LMB8GA1UdIwQYMBaAFD7nQSr+hz8dRbq2FHFKMgHjYpaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzY4MC9ENDk5MTg2MkM1 QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4MUZ1cllVY1VveUFlTmls cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1ZEJLdjZIUHgxRnVyWVVjVW95QWVOaWxwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzY4MC9ENDk5MTg2MkM1QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4 MUZ1cllVY1VveUFlTmlscEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOE5lrYfJUVIiM+tLQkduJfzlIlLkNAb3/1W3jiKFIPcphDU+f6lWL RUdPKgRX7owrDoGyaU02WbSkxIIuHHotTUADXIsIsMvctK16sy0FuGFBobRaPmMS 0q/a0Ul1uhD7sTFJ4luzZxTMKXmqcaN5Ea8tQA5hK0/syiYXL4J/6f/xnys7NP63 9d4VlU4u39vGf9WEKpQKJZjUp+7f/qWGJNtxINfvqkCOaZo9Z+E2Ymg34M9FzkcW cbiMeJakN1G6RkuyYySTAjeGpi9ZKtMlgilDPRfRvvH9VqkI+vsOKKqsMy+KZxAw 0dXmRZrQuPWp4wu4Tc9iNdENn+6L4vlq -----END CERTIFICATE-----Generated at Fri May 3 03:10:57 2024 by rpki-client on console-ams.rpki-client.org