$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json) Hash identifier: hKVdRAVOLB1y5vwvajjv1kezXvoaLhpNlyqxxjcRlD0= Subject key identifier: 84:D3:A9:C5:70:73:08:89:7B:53:48:A3:39:57:11:8C:1C:87:FA:F1 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft Manifest number: FF Signing time: Sun 19 May 2024 05:57:36 +0000 Manifest this update: Sun 19 May 2024 05:57:36 +0000 Manifest next update: Sun 26 May 2024 05:57:36 +0000 Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: W22ZS5ZW5dA0At/wcb3tyZ8eYsupSo6PYHBqW0E8kyE=) 2: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: uOAiYpwbbvL4fZznGzXOIEEK20Lqgdb1amlkQot8pvE=) 3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: 9rCzWJoqB8zLTHBszI+xvdoV3LA827g7Jcq2ndkCo9A=) 4: 758221AAFDE911EEB42ED448C4F9AE02.roa (hash: 4ELjEf2vBJo0tvZhX+Grbe3CSQWFAytRCQmbhQUmvUU=) 5: 7476B58CFDE911EEB42ED448C4F9AE02.roa (hash: ZDmNlrK+cbChgn/pdCbnWgfz43Isdmo9AVKwIYFtURA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: May 19 05:57:36 2024 GMT Not After : May 26 05:57:36 2024 GMT Subject: CN=664994d0-b7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:cd:1c:7b:e7:2b:1d:72:64:3c:e3:f6:7c: fe:30:51:19:02:4c:cf:17:98:bd:b8:31:7f:cb:c1: 72:e3:33:7a:20:4a:02:20:fc:44:ee:6d:8b:7e:41: 19:1f:3e:7e:db:ce:d5:4f:6b:be:96:be:af:6d:b9: d6:c1:a2:b9:9b:2b:6e:68:89:01:2e:9e:87:90:13: 39:8f:b1:e2:2a:11:26:27:f1:99:4d:06:58:94:53: 82:ed:48:25:df:c4:c2:0d:ad:98:1b:d8:29:52:44: 3b:13:ac:f1:27:a4:67:95:87:2a:c2:31:e9:93:10: f2:fd:a1:29:1f:05:b4:67:da:84:23:5e:9c:c9:bc: 53:f2:93:30:5b:f4:15:a1:ad:1c:9b:34:90:37:a0: 08:c1:d0:60:d9:29:3e:96:d8:a5:1d:3e:24:6b:b4: cd:4e:de:e9:88:23:e7:12:ea:32:c0:a0:ab:29:85: c3:27:6b:40:02:78:8c:4a:38:4a:a8:f7:d4:c5:c7: 80:21:3b:29:5c:20:35:22:87:aa:34:52:d2:f8:5b: d7:08:77:dd:b4:90:d5:03:ca:9f:94:f8:e1:73:b0: 51:e2:b5:65:9b:35:1a:47:fe:5f:06:30:50:82:3a: b0:1e:bb:af:f3:8e:7b:21:fa:f0:05:dc:32:62:04: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D3:A9:C5:70:73:08:89:7B:53:48:A3:39:57:11:8C:1C:87:FA:F1 X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:89:12:40:ed:b9:7b:6f:2a:8f:d1:91:5b:06:e4:27:be:0d: ce:e1:a8:a6:d2:04:a7:7c:72:79:95:41:af:77:55:e7:0d:a6: 2b:68:30:73:b1:55:d8:7e:ef:50:e5:39:0d:e9:ce:13:38:1a: be:e7:1f:81:4d:e6:c0:fa:48:3f:9f:e4:06:fd:3f:ac:25:3c: a7:e8:26:ba:c9:96:a8:e3:53:67:af:50:ae:bf:12:b6:a5:e1: d2:92:47:72:85:ea:96:51:8e:e8:1d:23:75:38:44:06:cb:4f: 35:9f:74:f3:25:63:7b:69:57:31:cb:18:78:3b:66:10:54:68: 21:ce:0f:da:bd:de:e6:df:c6:1b:13:6a:8e:54:94:6b:98:43: 55:03:69:ff:14:6c:b4:a4:22:fe:10:5e:ac:c4:29:e4:72:2b: 15:12:86:0d:20:84:03:80:93:7e:e3:c8:bf:f3:d8:af:2d:8d: b8:d6:fa:87:68:01:19:2c:15:01:64:db:27:79:c8:f0:30:96: 59:85:a3:1b:7a:d5:88:ba:fc:d6:81:eb:42:96:17:da:ed:f4: 86:41:57:e4:a6:cf:5d:17:ea:5b:e1:ca:81:e1:b3:ad:ba:98: df:73:2c:8e:c3:f4:65:c3:7d:1e:a4:23:98:54:f3:0d:ff:71: 38:0e:95:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjQwNTE5MDU1NzM2WhcNMjQwNTI2MDU1NzM2WjAYMRYwFAYD VQQDEw02NjQ5OTRkMC1iN2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqPNHHvnKx1yZDzj9nz+MFEZAkzPF5i9uDF/y8Fy4zN6IEoCIPxE7m2LfkEZ Hz5+287VT2u+lr6vbbnWwaK5mytuaIkBLp6HkBM5j7HiKhEmJ/GZTQZYlFOC7Ugl 38TCDa2YG9gpUkQ7E6zxJ6RnlYcqwjHpkxDy/aEpHwW0Z9qEI16cybxT8pMwW/QV oa0cmzSQN6AIwdBg2Sk+ltilHT4ka7TNTt7piCPnEuoywKCrKYXDJ2tAAniMSjhK qPfUxceAITspXCA1IoeqNFLS+FvXCHfdtJDVA8qflPjhc7BR4rVlmzUaR/5fBjBQ gjqwHruv8457IfrwBdwyYgQz5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITTqcVw cwiJe1NIozlXEYwch/rxMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo WlFOaWxENXRfdmxSdVhkX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1iRJA7bl7byqP0ZFbBuQnvg3O4aim0gSnfHJ5lUGvd1XnDaYraDBz sVXYfu9Q5TkN6c4TOBq+5x+BTebA+kg/n+QG/T+sJTyn6Ca6yZao41Nnr1CuvxK2 peHSkkdyheqWUY7oHSN1OEQGy081n3TzJWN7aVcxyxh4O2YQVGghzg/avd7m38Yb E2qOVJRrmENVA2n/FGy0pCL+EF6sxCnkcisVEoYNIIQDgJN+48i/89ivLY241vqH aAEZLBUBZNsnecjwMJZZhaMbetWIuvzWgetClhfa7fSGQVfkps9dF+pb4cqB4bOt upjfcyyOw/Rlw30epCOYVPMN/3E4DpVY -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org