$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: 3dgNsLddw9/luVXSk6HRuXvWq3Xx13YzzP/KclAwzWg= Subject key identifier: 9D:B0:8B:F2:98:76:26:CF:FC:C1:FB:FD:D9:78:E4:F8:9F:6F:08:93 Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 33BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 33BD Signing time: Tue 30 Apr 2024 14:39:42 +0000 Manifest this update: Tue 30 Apr 2024 14:39:41 +0000 Manifest next update: Tue 07 May 2024 14:39:41 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: Ru0SkS0BYi7T+DVbr2X2ZbB7dwLxMcWKSKjyi3fsmYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13245 (0x33bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Apr 30 14:39:41 2024 GMT Not After : May 7 14:39:41 2024 GMT Subject: CN=663102ad-7740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:85:62:fe:d7:2a:34:03:c8:8e:36:7b:de:90: 77:ff:ea:3a:77:9b:6b:b3:9e:be:a2:0b:95:18:fc: 78:28:bc:76:1e:23:d5:d7:63:7f:f0:b6:5e:5a:9a: 0e:6c:1a:3f:a8:7a:dd:42:6a:11:fd:a1:70:22:00: 79:94:ad:0a:f5:3a:eb:6b:ee:98:8f:40:bd:12:7b: 7d:67:48:6a:c5:7b:07:4a:73:b8:1a:cc:4d:1b:a5: c1:a1:0e:c9:b3:e8:d0:f1:df:fc:0c:68:76:c4:bd: 29:2f:54:26:1a:1d:ec:e3:61:e8:b7:2f:66:ba:51: 80:02:dc:19:1c:f3:53:55:a2:e3:e1:be:6c:c7:fe: b2:f3:6b:37:96:f7:6b:25:4a:b3:93:1b:d7:ee:47: bc:91:bd:65:2f:97:d1:db:0f:b9:1b:8f:44:f9:3c: e9:49:f1:26:ee:42:4c:a5:5c:68:44:df:7e:4f:d1: d5:93:02:9d:84:c1:60:b1:a4:d3:e8:79:43:1b:a3: ce:93:26:3e:cf:9f:92:7b:46:b5:d5:5b:3b:88:5d: 4c:82:a3:24:b1:1e:9c:ca:2d:ea:96:a7:c2:1e:a9: 1c:d1:cf:66:b5:cb:e3:7a:73:bc:45:a9:d7:a7:5c: 83:07:5b:c4:c8:9a:37:99:d4:61:c2:13:49:80:9f: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:8B:F2:98:76:26:CF:FC:C1:FB:FD:D9:78:E4:F8:9F:6F:08:93 X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b7:e6:ec:6b:a7:05:75:f0:58:50:0b:b3:33:94:06:7a:99: 29:a7:56:42:7c:82:7e:d5:04:d3:77:b8:15:8f:3a:21:8f:29: d2:a0:4f:90:41:22:b1:e5:37:5c:0e:a2:f3:94:d0:6e:e0:49: 9c:69:fe:0c:f1:13:93:ae:52:9b:a8:3f:7f:f4:91:8d:f1:47: 6b:aa:4e:97:98:49:bd:70:15:54:c2:c4:50:ea:1a:e3:7f:a5: 60:9f:3c:42:54:20:f1:8c:5b:df:d4:e9:93:e4:55:95:73:38: 44:54:73:0f:ce:50:17:8e:72:c9:37:4b:4f:c2:c0:26:63:98: c0:ba:56:81:b4:d6:2c:60:5a:02:5d:6e:56:be:4c:77:89:c9: ec:d0:1c:54:72:47:c4:20:c6:de:14:02:dc:79:84:3b:c3:9f: b8:07:d7:bf:cf:0e:d7:37:4e:6e:91:65:cf:e6:8b:8e:37:82: 8d:eb:50:c4:2c:61:8f:6a:0f:5e:b5:db:d5:d6:3e:a3:a7:0e: 22:3d:8d:60:c3:07:25:a3:f8:39:c6:4d:fc:66:87:f3:c1:be: 49:1d:30:98:9d:43:e9:7e:88:a7:93:05:87:00:9f:42:b2:4d: b8:3d:70:c9:99:3b:d3:8f:a5:58:6d:d9:7a:7f:cc:11:dd:01: cf:22:16:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjQwNDMwMTQzOTQxWhcNMjQwNTA3MTQzOTQxWjAYMRYwFAYD VQQDEw02NjMxMDJhZC03NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YVi/tcqNAPIjjZ73pB3/+o6d5trs56+oguVGPx4KLx2HiPV12N/8LZeWpoO bBo/qHrdQmoR/aFwIgB5lK0K9Trra+6Yj0C9Ent9Z0hqxXsHSnO4GsxNG6XBoQ7J s+jQ8d/8DGh2xL0pL1QmGh3s42Hoty9mulGAAtwZHPNTVaLj4b5sx/6y82s3lvdr JUqzkxvX7ke8kb1lL5fR2w+5G49E+TzpSfEm7kJMpVxoRN9+T9HVkwKdhMFgsaTT 6HlDG6POkyY+z5+Se0a11Vs7iF1MgqMksR6cyi3qlqfCHqkc0c9mtcvjenO8RanX p1yDB1vEyJo3mdRhwhNJgJ8mXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2wi/KY dibP/MH7/dl45PifbwiTMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjt+bsa6cFdfBYUAuzM5QGepkpp1ZCfIJ+1QTTd7gVjzohjynSoE+Q QSKx5TdcDqLzlNBu4Emcaf4M8ROTrlKbqD9/9JGN8Udrqk6XmEm9cBVUwsRQ6hrj f6VgnzxCVCDxjFvf1OmT5FWVczhEVHMPzlAXjnLJN0tPwsAmY5jAulaBtNYsYFoC XW5Wvkx3icns0BxUckfEIMbeFALceYQ7w5+4B9e/zw7XN05ukWXP5ouON4KN61DE LGGPag9etdvV1j6jpw4iPY1gwwclo/g5xk38Zofzwb5JHTCYnUPpfoinkwWHAJ9C sk24PXDJmTvTj6VYbdl6f8wR3QHPIhZ8 -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:49 2024 by rpki-client on console-ams.rpki-client.org