$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft File: dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json) Hash identifier: pa55MfYjHG7YkwVaLzfOURjIwBjOW1K+28BbGZ9a+rc= Subject key identifier: F4:0E:BF:9C:92:44:41:A0:45:FE:52:0C:B7:57:6F:47:C2:59:6B:86 Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45 Certificate issuer: /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft Manifest number: 10 Signing time: Sun 19 May 2024 08:49:31 +0000 Manifest this update: Sun 19 May 2024 08:49:31 +0000 Manifest next update: Sun 26 May 2024 08:49:31 +0000 Files and hashes: 1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: EIungbkFb6ykN2ECxXKeN89X4xiVf+O81uEycCAYnP0=) 2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: 4MRjAqtj8SdaNUfco1nvvVlq6uYqCFQr7QTIgswP50M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145 Validity Not Before: May 19 08:49:31 2024 GMT Not After : May 26 08:49:31 2024 GMT Subject: CN=6649bd1b-ef08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:45:47:7a:3c:da:c0:61:51:1d:42:0e:17: 2d:70:71:aa:d8:4d:73:e9:44:9d:c2:2a:5a:4e:fb: 13:79:ca:c2:5a:d8:0c:5f:0b:ad:b0:08:d5:2c:c7: 44:d2:80:77:5c:36:9f:ec:ea:3b:f7:79:30:9b:d6: 32:6e:3b:e9:62:4c:92:5c:93:51:d4:0d:8b:a7:41: cc:ee:d0:d2:7b:f0:b2:ea:44:c0:de:b7:31:e9:40: 79:af:4e:08:5a:63:12:80:70:24:de:63:1a:67:81: 54:67:47:84:db:f0:eb:28:f3:3a:40:8e:40:b7:4b: 28:21:ea:c9:a1:49:31:42:5c:dc:89:bc:17:65:bf: f4:d8:a9:0b:10:27:f4:34:a1:d5:e8:f8:54:bf:92: 35:73:a2:18:ad:e6:a9:95:e8:40:1c:36:d4:88:b4: 9f:3a:37:3b:74:d6:f7:cc:22:eb:18:c4:ba:c7:3b: 61:59:13:20:b9:6b:23:c1:0a:d8:f9:8f:82:5a:8d: e2:6f:6b:c1:b9:4d:7c:15:33:f4:e8:f4:a5:d9:c9: 63:e2:28:6c:f2:12:f7:41:9c:d7:04:30:bb:ba:b9: a0:df:5e:67:98:71:bc:f3:e0:9c:f0:05:40:cb:17: da:33:fb:10:e7:65:78:b5:32:0f:a7:2b:30:02:af: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0E:BF:9C:92:44:41:A0:45:FE:52:0C:B7:57:6F:47:C2:59:6B:86 X509v3 Authority Key Identifier: keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:12:25:ae:a9:7e:40:0b:02:42:a4:e3:89:2e:34:28:3a:08: 90:07:19:4d:fa:52:c4:42:9d:5c:b3:45:42:65:e4:b1:7d:0d: fd:8a:6c:fd:b6:fe:4d:f0:6e:8b:1d:e3:15:3d:47:41:c3:5f: 96:5f:b5:e4:73:cc:89:04:a1:5a:a6:20:97:cf:0b:2b:b6:41: 58:7e:2c:3d:29:46:1f:25:90:6d:36:6f:73:7c:8c:99:88:68: 67:1a:8f:bc:a3:b5:90:c5:f4:c3:f9:2b:48:33:45:d4:05:43: a5:ba:ec:1f:84:eb:27:f8:7e:e3:07:ac:f0:99:4f:34:41:d6: b1:8a:25:a3:ba:43:fd:06:bc:32:b4:3b:d5:01:97:e1:57:ea: b2:55:09:6e:f2:3b:41:ed:4c:03:3c:8b:79:e8:37:05:7e:b6: f5:18:1c:6a:60:a3:dc:aa:b7:68:b5:1c:ef:29:ca:38:e9:21: 6f:2d:40:bd:9e:53:68:26:24:63:df:c2:85:55:17:e2:31:1e: ce:0f:b7:f0:da:52:19:5f:0f:9c:ff:b6:3d:cb:5c:c8:38:8b: 4d:9b:ff:01:41:a4:81:5b:08:ea:e0:b7:d6:ab:34:07:40:6c: e3:f4:a0:3f:f3:49:f5:b3:07:7c:8f:84:dc:ae:00:db:c6:7f: fd:d5:4e:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNzY5NTM2ODM0MDIwOTM0OTUyMjk3RUJEQjc4MTg5MzU3 QjEzQTE0NTAeFw0yNDA1MTkwODQ5MzFaFw0yNDA1MjYwODQ5MzFaMBgxFjAUBgNV BAMTDTY2NDliZDFiLWVmMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk+UVHejzawGFRHUIOFy1wcarYTXPpRJ3CKlpO+xN5ysJa2AxfC62wCNUsx0TS gHdcNp/s6jv3eTCb1jJuO+liTJJck1HUDYunQczu0NJ78LLqRMDetzHpQHmvTgha YxKAcCTeYxpngVRnR4Tb8Oso8zpAjkC3Sygh6smhSTFCXNyJvBdlv/TYqQsQJ/Q0 odXo+FS/kjVzohit5qmV6EAcNtSItJ86Nzt01vfMIusYxLrHO2FZEyC5ayPBCtj5 j4JajeJva8G5TXwVM/To9KXZyWPiKGzyEvdBnNcEMLu6uaDfXmeYcbzz4JzwBUDL F9oz+xDnZXi1Mg+nKzACrwgzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9A6/nJJE QaBF/lIMt1dvR8JZa4YwHwYDVR0jBBgwFoAUdpU2g0Agk0lSKX69t4GJNXsToUUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzUwQUQwNzE4RkQ0 NTExRUVBQjNBRDcxQkM0RjlBRTAyL2RwVTJnMEFnazBsU0tYNjl0NEdKTlhzVG9V VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZHBVMmcwQWdrMGxTS1g2OXQ0R0pOWHNUb1VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx NjIzLzUwQUQwNzE4RkQ0NTExRUVBQjNBRDcxQkM0RjlBRTAyL2RwVTJnMEFnazBs U0tYNjl0NEdKTlhzVG9VVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEMSJa6pfkALAkKk44kuNCg6CJAHGU36UsRCnVyzRUJl5LF9Df2KbP22 /k3wbosd4xU9R0HDX5ZfteRzzIkEoVqmIJfPCyu2QVh+LD0pRh8lkG02b3N8jJmI aGcaj7yjtZDF9MP5K0gzRdQFQ6W67B+E6yf4fuMHrPCZTzRB1rGKJaO6Q/0GvDK0 O9UBl+FX6rJVCW7yO0HtTAM8i3noNwV+tvUYHGpgo9yqt2i1HO8pyjjpIW8tQL2e U2gmJGPfwoVVF+IxHs4Pt/DaUhlfD5z/tj3LXMg4i02b/wFBpIFbCOrgt9arNAdA bOP0oD/zSfWzB3yPhNyuANvGf/3VTmg= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org