$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json) Hash identifier: CSSRM4Mlkx15F4KBPgTHhNq2OYYmqVarzC8vw+wfUOg= Subject key identifier: 65:60:AD:CD:C5:B7:D8:26:01:DD:EA:59:D3:02:3D:7F:48:71:28:83 Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft Manifest number: 0B40 Signing time: Sat 18 May 2024 19:45:24 +0000 Manifest this update: Sat 18 May 2024 19:45:23 +0000 Manifest next update: Sat 25 May 2024 19:45:23 +0000 Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: laEapVN26kqWtD/X5IClNhYQ8IzwIjBZ+kYnrlNcQOw=) 2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: Dg1teGxb/7J+RLEhdLIJJbvbaUjJVyctMJV2awJCf2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Validity Not Before: May 18 19:45:23 2024 GMT Not After : May 25 19:45:23 2024 GMT Subject: CN=66490554-fe95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:77:58:02:d8:53:7a:8e:28:b7:ef:5b:5d: a9:f3:cc:32:94:3b:2e:1a:d0:df:4f:96:11:e2:62: 36:05:e9:07:b1:b9:bb:b1:ba:46:08:b4:26:2a:83: c9:8f:60:3e:71:36:90:93:f2:dd:84:5c:80:64:fc: 17:b0:59:9c:d9:e6:ef:17:77:ba:66:78:5d:fc:f0: e2:7c:ec:e8:f4:d4:67:a6:78:70:50:03:85:c3:d2: 07:aa:2c:52:b9:c8:22:26:0d:ba:f9:0e:ac:86:e0: a2:85:d5:fa:cc:e3:00:34:d6:5e:20:a9:92:0d:2c: 46:f7:11:dd:70:11:86:b4:d2:c6:fb:6b:47:49:56: ff:86:00:74:fa:d6:dc:d0:30:f2:30:fb:9b:9c:a6: e3:14:d7:7c:03:67:f7:b7:db:fa:e0:21:51:42:f5: 15:b9:d7:4b:bd:64:81:e8:ce:c2:f4:1f:25:4b:63: bb:c5:03:a8:41:1b:b9:83:3f:07:56:63:08:f4:6b: a5:87:fe:ad:c1:47:e9:b6:8f:fb:2b:b5:c7:e2:55: 05:5b:3e:57:a9:29:5d:cb:29:c6:c4:4e:3d:44:af: 31:9d:9b:1b:d7:35:1d:91:f9:c2:67:b3:b6:f0:18: 7c:f0:d2:3a:4c:b8:99:9a:fc:02:d9:55:aa:d3:cf: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:60:AD:CD:C5:B7:D8:26:01:DD:EA:59:D3:02:3D:7F:48:71:28:83 X509v3 Authority Key Identifier: keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:5f:cb:33:71:73:33:f3:b7:7a:5d:6e:59:6b:85:79:d7:61: 4e:c0:22:18:e8:06:0b:d3:3b:88:19:4e:0e:69:69:10:f6:00: 6c:0f:f0:7f:54:67:bc:5b:f2:07:af:f4:50:9f:2c:f0:29:9c: ed:d3:8e:03:9b:ff:4a:84:54:52:eb:73:a6:e3:8f:86:3a:4a: 2d:5a:e2:0a:c2:92:fc:a9:8e:ea:00:47:1a:30:71:95:bf:33: 26:7c:c5:01:ff:4d:0f:8a:6f:31:c2:62:1c:f9:74:b6:b3:97: 9f:74:21:dc:95:b7:20:f8:eb:1a:33:aa:14:b7:35:59:00:a3: bb:04:01:f3:8f:fd:d5:e1:c2:2c:ea:a4:09:24:65:9d:3f:6e: 74:17:f9:22:e8:32:40:79:0b:ef:4f:86:f4:7d:b8:08:f8:f7: b2:0b:75:b5:56:5a:fd:a8:42:38:3f:42:a9:68:0e:a5:f3:9c: 2d:a0:41:b4:d8:6f:8a:2f:cc:5a:1c:51:f9:76:5d:bc:a2:49: 51:91:5c:50:be:77:2b:cf:f7:b5:90:17:34:05:50:06:1b:72: 1d:89:ff:d6:9d:fd:97:e6:ad:3e:46:91:5a:eb:e7:44:04:40: 5b:aa:a6:95:66:1f:78:43:e0:4e:ab:3e:f9:91:d5:9d:91:c0: 59:a6:84:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB QUZCNzc2Q0MwHhcNMjQwNTE4MTk0NTIzWhcNMjQwNTI1MTk0NTIzWjAYMRYwFAYD VQQDEw02NjQ5MDU1NC1mZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweV3WALYU3qOKLfvW12p88wylDsuGtDfT5YR4mI2BekHsbm7sbpGCLQmKoPJ j2A+cTaQk/LdhFyAZPwXsFmc2ebvF3e6Znhd/PDifOzo9NRnpnhwUAOFw9IHqixS ucgiJg26+Q6shuCihdX6zOMANNZeIKmSDSxG9xHdcBGGtNLG+2tHSVb/hgB0+tbc 0DDyMPubnKbjFNd8A2f3t9v64CFRQvUVuddLvWSB6M7C9B8lS2O7xQOoQRu5gz8H VmMI9Gulh/6twUfpto/7K7XH4lUFWz5XqSldyynGxE49RK8xnZsb1zUdkfnCZ7O2 8Bh88NI6TLiZmvwC2VWq08+P3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVgrc3F t9gmAd3qWdMCPX9IcSiDMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm VXhfMVlUSHJoRldxLTNkc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDX8szcXMz87d6XW5Za4V512FOwCIY6AYL0zuIGU4OaWkQ9gBsD/B/ VGe8W/IHr/RQnyzwKZzt044Dm/9KhFRS63Om44+GOkotWuIKwpL8qY7qAEcaMHGV vzMmfMUB/00Pim8xwmIc+XS2s5efdCHclbcg+OsaM6oUtzVZAKO7BAHzj/3V4cIs 6qQJJGWdP250F/ki6DJAeQvvT4b0fbgI+PeyC3W1Vlr9qEI4P0KpaA6l85wtoEG0 2G+KL8xaHFH5dl28oklRkVxQvncrz/e1kBc0BVAGG3Idif/Wnf2X5q0+RpFa6+dE BEBbqqaVZh94Q+BOqz75kdWdkcBZpoQ4 -----END CERTIFICATE-----Generated at Sat May 18 21:31:25 2024 by rpki-client on console-ams.rpki-client.org