$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json) Hash identifier: hPBJaonaEun1EsYYY/LqNNiOtekfskJO8NthurwVDWY= Subject key identifier: 32:52:3A:8B:BC:A8:BE:A6:46:A7:C7:3F:B4:AA:81:26:62:36:C4:E3 Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Certificate serial: 15FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft Manifest number: 1E31 Signing time: Mon 06 May 2024 17:17:49 +0000 Manifest this update: Mon 06 May 2024 17:17:49 +0000 Manifest next update: Mon 13 May 2024 17:17:49 +0000 Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: 7N1CTfi1iGQ3xNZjYjMwlR0+WFHctmGLfvAehyAtON0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5629 (0x15fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Validity Not Before: May 6 17:17:49 2024 GMT Not After : May 13 17:17:49 2024 GMT Subject: CN=663910bd-fcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:bc:a1:a2:80:3a:50:32:db:e2:3e:7e:ba: 4f:13:e8:d0:12:cf:0a:7a:51:8a:b9:3e:94:82:8d: 38:3f:a7:1a:4f:07:13:c3:65:f9:0a:bc:ee:d0:9e: 75:b9:24:74:dd:07:63:c0:b5:37:4b:63:26:42:ea: 80:04:9c:45:df:14:9b:58:bd:c5:13:c4:02:25:d4: 2c:e2:0a:0b:9a:de:dd:b3:a2:b3:1d:dd:3d:00:43: 41:6a:e6:7c:22:22:07:4d:46:5e:e4:47:13:ff:63: 52:36:6c:b0:66:12:c2:ad:f7:6f:20:18:21:77:bf: ec:27:bf:91:34:41:4c:5a:dd:71:68:1f:77:8f:ba: 59:53:79:cd:97:1b:bc:8e:4c:c4:ee:47:1a:7d:39: c4:74:97:1d:e3:1e:f9:f8:c8:bb:f6:e9:07:00:fd: 9c:56:a6:7c:11:a6:fd:1c:aa:bb:ca:30:a0:9a:44: 0d:17:cd:51:88:67:5e:8d:5c:c8:96:85:fc:32:8a: 55:c0:a3:14:eb:b8:10:46:d0:3f:cf:29:8d:63:85: 35:49:72:a7:4c:09:65:63:86:6e:96:96:5f:cd:97: 69:f2:e1:8d:02:32:27:ce:84:d1:57:ba:f4:f4:6a: f5:cd:3b:ad:a9:b5:6c:01:75:07:b7:c5:86:b5:dc: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:52:3A:8B:BC:A8:BE:A6:46:A7:C7:3F:B4:AA:81:26:62:36:C4:E3 X509v3 Authority Key Identifier: keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bf:81:eb:8c:4e:82:6a:01:6c:5c:b9:fa:c9:a5:73:e3:07: ce:67:55:41:68:a7:34:f9:14:c4:c3:55:fa:6e:3c:44:fe:21: db:33:6d:63:0b:86:10:f3:c0:37:8c:2c:69:4c:9a:14:3e:43: 34:4c:49:01:03:a8:1b:ec:53:e0:9a:3d:79:a8:92:8c:7c:c4: f0:71:37:e2:eb:b6:8e:9e:cc:b0:7d:30:ca:01:ce:52:a9:78: 05:ad:5f:56:9d:89:e5:88:25:e1:4d:8f:e7:68:29:57:23:01: 72:01:e7:46:1d:86:4f:27:de:78:af:35:8e:e5:26:2e:9d:e1: 3f:c2:45:4f:1c:a9:89:ad:7e:11:11:7b:bc:71:e3:96:02:ed: ca:2a:56:00:d7:43:af:f7:5e:54:66:77:49:de:0a:e5:27:09: b5:39:51:f6:60:fd:a9:a0:d3:4c:93:ae:87:b0:7a:95:42:5e: 9b:ba:31:6c:75:63:74:4c:71:e2:34:59:d7:e2:0b:31:9e:e4: 15:96:02:df:1d:74:87:04:09:b1:da:b3:9b:c5:07:db:54:a6: 1b:c8:4a:5d:e5:65:4c:cb:bd:f9:cb:73:e1:58:cb:e8:65:82: 64:59:ce:67:c9:65:88:91:26:3e:06:3e:ba:30:9b:1d:85:fd: ee:e1:b5:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0 MEEyRDVBNjYwHhcNMjQwNTA2MTcxNzQ5WhcNMjQwNTEzMTcxNzQ5WjAYMRYwFAYD VQQDEw02NjM5MTBiZC1mY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4i8oaKAOlAy2+I+frpPE+jQEs8KelGKuT6Ugo04P6caTwcTw2X5Crzu0J51 uSR03QdjwLU3S2MmQuqABJxF3xSbWL3FE8QCJdQs4goLmt7ds6KzHd09AENBauZ8 IiIHTUZe5EcT/2NSNmywZhLCrfdvIBghd7/sJ7+RNEFMWt1xaB93j7pZU3nNlxu8 jkzE7kcafTnEdJcd4x75+Mi79ukHAP2cVqZ8Eab9HKq7yjCgmkQNF81RiGdejVzI loX8MopVwKMU67gQRtA/zymNY4U1SXKnTAllY4ZulpZfzZdp8uGNAjInzoTRV7r0 9Gr1zTutqbVsAXUHt8WGtdxpjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJSOou8 qL6mRqfHP7SqgSZiNsTjMB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO VTZaNm1MZG5HV3hBb3RXbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8v4HrjE6CagFsXLn6yaVz4wfOZ1VBaKc0+RTEw1X6bjxE/iHbM21j C4YQ88A3jCxpTJoUPkM0TEkBA6gb7FPgmj15qJKMfMTwcTfi67aOnsywfTDKAc5S qXgFrV9WnYnliCXhTY/naClXIwFyAedGHYZPJ954rzWO5SYuneE/wkVPHKmJrX4R EXu8ceOWAu3KKlYA10Ov915UZndJ3grlJwm1OVH2YP2poNNMk66HsHqVQl6bujFs dWN0THHiNFnX4gsxnuQVlgLfHXSHBAmx2rObxQfbVKYbyEpd5WVMy735y3PhWMvo ZYJkWc5nyWWIkSY+Bj66MJsdhf3u4bVE -----END CERTIFICATE-----Generated at Mon May 6 20:19:45 2024 by rpki-client on console-ams.rpki-client.org