$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: AVmDDV0B5xBaPhM8k7sYJNTaw6C9O4iqKaftQ3rLQYA= Subject key identifier: 09:F5:68:5B:E6:10:C4:EA:6F:86:18:2D:B8:CF:57:F2:A1:BB:7B:41 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 6C Signing time: Wed 15 May 2024 07:54:46 +0000 Manifest this update: Wed 15 May 2024 07:54:45 +0000 Manifest next update: Wed 22 May 2024 07:54:45 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: wX/50qJP17ZYu+ic0XVUe7jHgqo4R8XbJBNS6FYZuYc=) 2: FCE438F0DBB511EEB746FC2CC4F9AE02.roa (hash: 2BzVaWBA1pmBmFQTr1qCQwYwNNkhHiw4IUQUp6Xn1vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: May 15 07:54:45 2024 GMT Not After : May 22 07:54:45 2024 GMT Subject: CN=66446a46-f05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:ca:b4:2a:85:52:ee:fb:28:f0:ec:53:1f: 91:12:a0:38:48:ac:18:4f:f5:c1:55:4c:52:bd:47: a2:7c:d0:a7:69:66:91:c4:f6:84:30:d4:32:cc:50: 7d:27:37:e8:c6:e8:fb:c9:ba:b2:0a:31:df:53:db: 04:9e:9e:16:07:31:4d:c7:90:5e:e2:9e:d3:16:a7: d9:a8:48:ca:7b:7f:e2:44:6f:f7:dd:f7:f1:a9:ca: b1:62:71:1c:1b:4d:eb:e8:8a:3e:17:64:d2:bc:af: 19:0f:49:d4:eb:bf:27:a2:91:d7:9f:2b:6a:d8:ed: 33:2e:64:66:7c:a2:2e:cb:ea:dd:1d:24:36:64:96: 27:88:cd:6c:c4:a8:77:14:65:67:fe:e1:5f:29:f2: da:a6:18:9a:96:93:92:13:b7:ef:78:fe:b4:29:be: 39:50:a6:21:83:74:90:0f:1e:ca:18:fb:52:75:bb: 06:99:cc:00:5c:12:e7:3e:e4:e4:87:63:eb:28:dc: 77:5a:d1:df:dc:cc:bc:14:93:57:eb:19:25:3b:e6: d0:6a:86:9e:62:4f:6a:c5:f2:7e:26:b4:08:8b:4e: 8d:ae:20:77:cd:8a:d6:d8:88:a0:96:e7:04:92:1d: 04:10:b9:0e:61:a0:8e:b8:b2:e4:6b:1c:5c:e3:e9: c3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F5:68:5B:E6:10:C4:EA:6F:86:18:2D:B8:CF:57:F2:A1:BB:7B:41 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c9:ea:43:3c:4d:93:45:b1:73:96:89:8a:3b:21:6d:98:54: 65:61:1f:ea:b9:7a:69:54:3d:d3:b3:3f:5d:d2:28:8d:fe:31: 8a:0f:9f:0e:c0:44:92:5a:47:bd:33:57:f6:91:7f:fc:57:f1: 69:33:02:ee:73:e4:26:28:de:84:9d:ca:62:2b:9e:32:a6:d0: 68:96:26:56:3c:4f:d5:6c:b5:d4:da:eb:06:f6:72:3c:15:9c: 55:b5:00:ab:dd:d6:cf:c4:ef:e5:dd:9e:5e:0b:bf:bc:ef:46: 24:86:fd:f2:4e:d5:f1:66:28:11:7a:71:20:6e:bb:e1:34:59: 0b:84:8f:e5:e7:fa:26:d3:d1:3a:98:eb:f6:51:6c:4d:48:c8: fe:f2:32:7a:96:4e:c9:de:74:aa:17:6d:2f:cd:87:5a:92:10: 9a:ea:56:09:77:5b:53:e6:58:5a:f1:18:b9:8e:33:90:9d:6a: 78:56:49:58:23:98:9a:7e:91:4e:5f:ae:f5:da:3e:3c:13:3d: 24:ab:54:d8:b5:bc:f0:10:d8:ff:ab:d3:99:a0:1c:78:46:3b: 32:63:b5:2b:10:cb:47:89:35:3b:54:5d:4d:5e:59:b3:65:17: c1:fe:46:52:b0:0a:be:7d:de:a3:a9:d4:9e:a7:a6:77:eb:4b: 5a:e6:aa:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTA5QzExMC8GA1UEBRMoM0M2OUI5QjYwMUQyQzlGMkEzOTE1QTZGRkJDQTNEQUQ2 MkU5OTI0NTAeFw0yNDA1MTUwNzU0NDVaFw0yNDA1MjIwNzU0NDVaMBgxFjAUBgNV BAMTDTY2NDQ2YTQ2LWYwNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCakcq0KoVS7vso8OxTH5ESoDhIrBhP9cFVTFK9R6J80KdpZpHE9oQw1DLMUH0n N+jG6PvJurIKMd9T2wSenhYHMU3HkF7intMWp9moSMp7f+JEb/fd9/GpyrFicRwb Tevoij4XZNK8rxkPSdTrvyeikdefK2rY7TMuZGZ8oi7L6t0dJDZklieIzWzEqHcU ZWf+4V8p8tqmGJqWk5ITt+94/rQpvjlQpiGDdJAPHsoY+1J1uwaZzABcEuc+5OSH Y+so3Hda0d/czLwUk1frGSU75tBqhp5iT2rF8n4mtAiLTo2uIHfNitbYiKCW5wSS HQQQuQ5hoI64suRrHFzj6cPFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCfVoW+YQ xOpvhhgtuM9X8qG7e0EwHwYDVR0jBBgwFoAUPGm5tgHSyfKjkVpv+8o9rWLpkkUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFMDlDL0VFRjc2MkMwOTA3 NTExRUU4N0QyNjY4MEM0RjlBRTAyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtr VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEdtNXRnSFN5Zktqa1Zwdi04bzlyV0xwa2tVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF MDlDL0VFRjc2MkMwOTA3NTExRUU4N0QyNjY4MEM0RjlBRTAyL1BHbTV0Z0hTeWZL amtWcHYtOG85cldMcGtrVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjJ6kM8TZNFsXOWiYo7IW2YVGVhH+q5emlUPdOzP13SKI3+MYoPnw7A RJJaR70zV/aRf/xX8WkzAu5z5CYo3oSdymIrnjKm0GiWJlY8T9VstdTa6wb2cjwV nFW1AKvd1s/E7+Xdnl4Lv7zvRiSG/fJO1fFmKBF6cSBuu+E0WQuEj+Xn+ibT0TqY 6/ZRbE1IyP7yMnqWTsnedKoXbS/Nh1qSEJrqVgl3W1PmWFrxGLmOM5CdanhWSVgj mJp+kU5frvXaPjwTPSSrVNi1vPAQ2P+r05mgHHhGOzJjtSsQy0eJNTtUXU1eWbNl F8H+RlKwCr593qOp1J6npnfrS1rmqkk= -----END CERTIFICATE-----Generated at Wed May 15 09:04:46 2024 by rpki-client on console-ams.rpki-client.org