$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft File: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json) Hash identifier: NJRM1+Xq3KlNcWCGKYjOX3sxkMMqD/BEmhK6OLh3IFA= Subject key identifier: DD:7F:12:06:42:E1:75:AF:17:E1:A3:5B:83:D6:07:3A:92:0A:95:EE Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft Manifest number: 0133 Signing time: Sun 19 May 2024 05:08:24 +0000 Manifest this update: Sun 19 May 2024 05:08:23 +0000 Manifest next update: Sun 26 May 2024 05:08:23 +0000 Files and hashes: 1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: UwCM0SYYg8wDJlb/1u4zP19VhnpHyqFJMsmTdOxNaoA=) 2: 18687FD8C0C111EE84A55128C4F9AE02.roa (hash: 33VPtYqR4VA5V8XxZp6BT3nVhvsp+2n4LwXDmiIXwLE=) 3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: P+yqljjpe1fvx7lvKYfPctOMPdEH2QLndIYK3rf1zVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5 Validity Not Before: May 19 05:08:23 2024 GMT Not After : May 26 05:08:23 2024 GMT Subject: CN=66498948-0ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:71:be:ad:65:1e:30:42:f7:80:09:3f:af: 0f:dd:70:56:68:14:19:a7:1b:fa:21:9b:25:0e:69: fd:23:97:54:95:fa:f7:be:9a:48:64:9a:5f:45:7d: e5:14:83:25:08:4f:32:ee:c5:e9:af:a9:e2:da:58: 35:9c:51:56:b9:dd:7c:e7:ce:71:8d:cd:a5:1c:91: 8b:16:1f:f9:cd:05:4a:62:50:ef:8c:dc:6a:2e:d7: 62:19:14:7d:94:53:55:a5:6e:7a:95:c3:59:d6:c6: 3f:b0:5d:35:2e:9d:09:79:d1:56:f8:b8:a7:cf:83: 9c:39:02:52:77:7e:1b:e6:f2:6f:c0:71:62:1d:33: 1c:02:7c:27:28:f5:2b:91:38:cd:cb:54:c9:21:3c: 70:b0:55:3e:37:e2:0d:77:bc:32:88:d6:bc:09:01: b6:99:f6:c4:80:35:0b:c3:8d:b2:e6:b8:3f:b4:23: e0:43:05:e0:45:fa:28:ab:85:40:60:6c:a4:92:fe: d3:a5:78:26:2e:d4:e8:ab:ba:1e:c8:73:cf:ca:1c: c6:2b:fb:62:ef:7d:46:74:b2:e2:a0:63:b1:dc:f4: ac:9e:14:53:47:f7:66:39:95:19:78:88:97:20:89: 81:42:73:8c:fc:67:22:33:ef:96:32:bd:19:ac:be: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7F:12:06:42:E1:75:AF:17:E1:A3:5B:83:D6:07:3A:92:0A:95:EE X509v3 Authority Key Identifier: keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e5:19:4e:19:3f:58:cb:21:e7:49:0a:df:50:58:ac:81:2c: 6f:21:fc:a2:6b:d7:fe:a2:1a:19:0e:1c:3f:44:36:39:76:e7: 77:41:f1:eb:8a:9b:61:30:03:b7:db:cd:8a:be:33:14:dc:2a: 23:96:00:36:79:9c:5a:8f:27:55:91:b6:59:2e:c5:c3:f2:09: 7e:ac:71:f8:85:6e:8a:22:b2:a0:58:8c:cf:b5:fc:9a:73:d0: 7f:f5:53:a4:ad:13:55:80:64:91:36:c4:4f:ec:e8:16:4f:83: 0c:53:05:54:08:57:e8:a0:06:51:03:04:b2:3e:c4:63:ac:f1: 48:57:ec:cf:51:44:8f:c4:34:aa:3f:0c:e4:b9:8f:5c:d6:d8: 2a:b1:14:1f:1e:2d:4d:2b:74:3a:70:4d:53:ec:22:55:3f:e3: 18:47:4f:77:4c:6e:6d:9f:26:07:cf:d4:e1:a4:03:f6:7a:55: ed:61:03:82:c1:0b:08:a4:af:c5:d6:21:e2:ac:fb:fc:11:9a: ff:7c:7a:f5:0d:97:9e:52:23:aa:11:9a:e6:ca:26:c4:d8:65: 3f:6a:b9:58:c8:41:09:15:e8:8d:73:48:dd:da:48:1d:66:97: de:40:d3:ed:81:c0:1d:d1:78:d1:3e:3d:9a:0b:61:0d:5a:99: 1c:d3:8b:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5NzExMTAvBgNVBAUTKDc2NEQxQ0U2NzI3RDMxQkQ4RjM5NjYyRTIwMDRDNDY4 OURBNkI3RTUwHhcNMjQwNTE5MDUwODIzWhcNMjQwNTI2MDUwODIzWjAYMRYwFAYD VQQDEw02NjQ5ODk0OC0wZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw21xvq1lHjBC94AJP68P3XBWaBQZpxv6IZslDmn9I5dUlfr3vppIZJpfRX3l FIMlCE8y7sXpr6ni2lg1nFFWud18585xjc2lHJGLFh/5zQVKYlDvjNxqLtdiGRR9 lFNVpW56lcNZ1sY/sF01Lp0JedFW+Linz4OcOQJSd34b5vJvwHFiHTMcAnwnKPUr kTjNy1TJITxwsFU+N+INd7wyiNa8CQG2mfbEgDULw42y5rg/tCPgQwXgRfooq4VA YGykkv7TpXgmLtToq7oeyHPPyhzGK/ti731GdLLioGOx3PSsnhRTR/dmOZUZeIiX IImBQnOM/GciM++WMr0ZrL7lfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1/EgZC 4XWvF+GjW4PWBzqSCpXuMB8GA1UdIwQYMBaAFHZNHOZyfTG9jzlmLiAExGidprfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDk3MS9ERTI1Qjg2ODU2 QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1iMlBPV1l1SUFURWFKMm10 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrMGM1bko5TWIyUE9XWXVJQVRFYUoybXQtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDk3MS9ERTI1Qjg2ODU2QTQxMUVEQThDMDBDM0VDNEY5QUUwMi9kazBjNW5KOU1i MlBPV1l1SUFURWFKMm10LVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW5RlOGT9YyyHnSQrfUFisgSxvIfyia9f+ohoZDhw/RDY5dud3QfHr ipthMAO3282KvjMU3CojlgA2eZxajydVkbZZLsXD8gl+rHH4hW6KIrKgWIzPtfya c9B/9VOkrRNVgGSRNsRP7OgWT4MMUwVUCFfooAZRAwSyPsRjrPFIV+zPUUSPxDSq PwzkuY9c1tgqsRQfHi1NK3Q6cE1T7CJVP+MYR093TG5tnyYHz9ThpAP2elXtYQOC wQsIpK/F1iHirPv8EZr/fHr1DZeeUiOqEZrmyibE2GU/arlYyEEJFeiNc0jd2kgd ZpfeQNPtgcAd0XjRPj2aC2ENWpkc04vn -----END CERTIFICATE-----Generated at Sun May 19 05:48:49 2024 by rpki-client on console-fra.rpki-client.org