$ rpki-client -vvf rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft File: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft (raw, json) Hash identifier: F0filqNVKqjPqbBgorduHakKgiNkaFW5WOgvQsk7p08= Subject key identifier: 82:22:75:EC:B2:0D:D3:75:26:E3:D1:9B:A8:29:5A:33:E3:3F:F3:10 Authority key identifier: 0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4 Certificate issuer: /CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4 Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft Manifest number: 0651 Signing time: Fri 31 May 2024 00:07:34 +0000 Manifest this update: Fri 31 May 2024 00:07:33 +0000 Manifest next update: Fri 07 Jun 2024 00:07:33 +0000 Files and hashes: 1: DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl (hash: kNZgB5DON5Q++JyfIS8Ke6+vA4rLnzsBCrAIGIwnytk=) 2: 511EBFFE3E7E11EB979F564CC4F9AE02.roa (hash: klZ7hdJGu3FLMWpo3fpqUcfgY2aa8dCrj9r2T0XQLGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 00:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112BDE/serialNumber=0D0346C8A266BE6ADCE4B7E83950AF5FE1EBE5C4 Validity Not Before: May 31 00:07:33 2024 GMT Not After : Jun 7 00:07:33 2024 GMT Subject: CN=665914c6-08c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dc:20:27:19:bc:7e:01:a6:a0:5b:93:69:a0: a1:be:c2:be:e5:c2:fb:86:5e:14:b2:c0:96:99:cf: 50:4d:17:18:94:31:3b:6a:a2:8c:03:2a:25:31:83: f2:47:07:9c:78:53:06:68:6a:e1:39:77:84:85:41: 8b:3a:e4:1f:21:d7:2c:93:8e:e1:95:67:5f:9d:40: d9:8b:62:68:6f:eb:24:ca:b6:3e:d4:26:02:e9:ff: 16:f1:4e:5c:67:ee:76:20:e4:f7:25:cd:34:7f:4f: 25:6c:4a:2f:b2:e2:1b:a2:c2:01:50:7f:23:9f:4e: 95:d6:26:37:a7:3b:37:87:27:be:7d:6f:3d:13:ca: 18:40:bc:10:24:ff:de:df:5d:86:2f:1c:9f:4d:0b: 2c:e4:60:08:6b:f3:d6:58:f1:96:aa:c8:c7:b1:51: bb:69:ef:ec:b7:fb:f2:c1:e0:b4:51:10:72:07:cc: 33:aa:51:65:7b:f3:32:c5:73:b0:39:90:21:73:e6: 3a:6e:1f:08:c9:6a:fe:cd:16:3d:15:2b:c8:73:f7: 12:00:8d:5b:79:2f:40:9d:7f:82:88:0c:22:9f:ea: 6f:91:e5:a1:19:de:86:c4:d6:b5:2f:0f:59:e7:50: 2c:43:0a:c9:60:22:ab:c0:65:a2:7c:11:33:f7:16: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:22:75:EC:B2:0D:D3:75:26:E3:D1:9B:A8:29:5A:33:E3:3F:F3:10 X509v3 Authority Key Identifier: keyid:0D:03:46:C8:A2:66:BE:6A:DC:E4:B7:E8:39:50:AF:5F:E1:EB:E5:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112BDE/5E128FFC3E7D11EBBBEF274CC4F9AE02/DQNGyKJmvmrc5LfoOVCvX-Hr5cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:59:b0:6d:3f:56:2f:94:0f:49:63:dd:d2:95:b0:78:2a:16: 1d:f4:9d:7b:01:ba:7c:92:29:27:bc:b3:4b:d5:f6:00:24:2a: e2:e5:bf:0c:76:6d:d6:30:f9:2b:fe:8f:6b:ed:c3:6f:8a:3e: c6:3e:5f:a4:7e:2a:fa:fd:4c:f8:18:d5:9a:7e:f0:96:d6:fa: ac:08:bb:b0:2a:77:d1:23:4e:c7:e7:7d:c8:d1:7a:b4:85:d5: b6:61:86:6c:c9:38:ed:85:cd:af:05:7d:ac:a3:ab:23:6a:b7: 3b:64:b5:c7:58:e0:30:e3:21:d0:2c:91:33:49:06:af:38:ef: f1:a7:b3:fb:95:5b:ea:c2:62:b2:7b:bf:df:e7:48:b8:73:6d: 49:9e:9e:45:dc:ac:84:55:c0:c9:c8:df:9c:97:72:a5:99:96: 4a:5c:48:b8:03:a7:c7:46:33:b9:4e:86:53:d8:70:ce:ee:43: d8:40:08:14:89:84:6d:d5:12:49:a4:90:56:0f:13:3f:ea:0d: aa:64:9c:19:30:4e:eb:e3:f9:6f:eb:21:b7:60:fb:a3:1f:33: 57:bb:c4:37:49:d1:4c:5c:d2:9b:34:b3:63:2a:07:d9:19:92: 17:9a:99:fd:da:6c:72:35:bc:38:3c:c3:2f:ca:d5:17:ac:4a: 14:f5:36:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJCREUxMTAvBgNVBAUTKDBEMDM0NkM4QTI2NkJFNkFEQ0U0QjdFODM5NTBBRjVG RTFFQkU1QzQwHhcNMjQwNTMxMDAwNzMzWhcNMjQwNjA3MDAwNzMzWjAYMRYwFAYD VQQDEw02NjU5MTRjNi0wOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dwgJxm8fgGmoFuTaaChvsK+5cL7hl4UssCWmc9QTRcYlDE7aqKMAyolMYPy RweceFMGaGrhOXeEhUGLOuQfIdcsk47hlWdfnUDZi2Job+skyrY+1CYC6f8W8U5c Z+52IOT3Jc00f08lbEovsuIbosIBUH8jn06V1iY3pzs3hye+fW89E8oYQLwQJP/e 312GLxyfTQss5GAIa/PWWPGWqsjHsVG7ae/st/vyweC0URByB8wzqlFle/MyxXOw OZAhc+Y6bh8IyWr+zRY9FSvIc/cSAI1beS9AnX+CiAwin+pvkeWhGd6GxNa1Lw9Z 51AsQwrJYCKrwGWifBEz9xYpiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIideyy DdN1JuPRm6gpWjPjP/MQMB8GA1UdIwQYMBaAFA0DRsiiZr5q3OS36DlQr1/h6+XE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkJERS81RTEyOEZGQzNF N0QxMUVCQkJFRjI3NENDNEY5QUUwMi9EUU5HeUtKbXZtcmM1TGZvT1ZDdlgtSHI1 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RRTkd5S0ptdm1yYzVMZm9PVkN2WC1IcjVjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkJERS81RTEyOEZGQzNFN0QxMUVCQkJFRjI3NENDNEY5QUUwMi9EUU5HeUtKbXZt cmM1TGZvT1ZDdlgtSHI1Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhWbBtP1YvlA9JY93SlbB4KhYd9J17Abp8kiknvLNL1fYAJCri5b8M dm3WMPkr/o9r7cNvij7GPl+kfir6/Uz4GNWafvCW1vqsCLuwKnfRI07H533I0Xq0 hdW2YYZsyTjthc2vBX2so6sjarc7ZLXHWOAw4yHQLJEzSQavOO/xp7P7lVvqwmKy e7/f50i4c21Jnp5F3KyEVcDJyN+cl3KlmZZKXEi4A6fHRjO5ToZT2HDO7kPYQAgU iYRt1RJJpJBWDxM/6g2qZJwZME7r4/lv6yG3YPujHzNXu8Q3SdFMXNKbNLNjKgfZ GZIXmpn92mxyNbw4PMMvytUXrEoU9TYn -----END CERTIFICATE-----Generated at Fri May 31 01:33:46 2024 by rpki-client on console-ams.rpki-client.org