$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft File: DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json) Hash identifier: /EXWi7/BwNcCkf3iIwd8t1quoXzZr0lcBNZz/3eNTZo= Subject key identifier: 71:C3:A0:17:03:F4:DC:9C:97:14:E2:18:49:75:A9:12:5B:E3:7A:DE Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft Manifest number: 083C Signing time: Sat 18 May 2024 21:43:18 +0000 Manifest this update: Sat 18 May 2024 21:43:17 +0000 Manifest next update: Sat 25 May 2024 21:43:17 +0000 Files and hashes: 1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: zkg8KIMHuFKAZKK4UQpf5vos5DHA8bJwXVEeA1Sx+M8=) 2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: k0bqnFEQ7zHA/CEuw/ns0UItLaD/wwB6kXZVqIRsW2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47 Validity Not Before: May 18 21:43:17 2024 GMT Not After : May 25 21:43:17 2024 GMT Subject: CN=664920f5-b66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:2c:4d:4d:93:d6:07:52:39:a9:0c:d3:6b: 2a:9a:a1:7f:26:cd:6a:e8:6e:5c:fb:f7:11:b0:da: 7a:5d:d9:b0:a0:55:cd:c4:7f:79:b6:cf:be:9a:2d: 71:9c:12:a7:9e:2f:77:a3:60:57:71:6f:40:66:2f: 85:0f:2e:12:7f:8a:d6:23:26:be:60:90:10:13:c4: 08:0b:f5:90:30:c5:71:e9:9d:e8:a1:10:5f:51:42: c4:84:db:18:06:eb:40:88:0d:f3:df:48:98:34:13: 98:7c:e4:6c:2a:8e:83:18:4e:e1:a9:52:3a:37:85: cb:e5:a7:ff:15:1a:70:31:57:d0:e4:dd:13:b3:f8: 71:74:02:86:04:b1:23:ae:b8:f7:34:c1:a5:2f:ec: c0:d5:0f:c2:c7:65:0a:c2:c9:88:31:17:ff:3c:8a: 1f:0e:a4:4f:14:c1:06:bc:fc:99:70:69:10:73:ec: e3:d3:b4:6d:ac:7a:b8:93:81:fa:92:4f:bb:bf:ce: 6d:94:0a:66:f4:94:8c:4e:2a:96:f5:e9:fe:21:10: 6e:5a:57:00:13:2d:05:3c:45:62:bc:85:3c:17:be: d4:11:5a:a9:4a:3b:58:1c:d5:25:1a:b7:cf:4d:e6: a4:2a:b7:94:38:19:6a:72:c6:3e:a5:a8:8a:f9:5d: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C3:A0:17:03:F4:DC:9C:97:14:E2:18:49:75:A9:12:5B:E3:7A:DE X509v3 Authority Key Identifier: keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:81:1d:93:d0:87:0b:df:45:03:fd:f6:66:37:16:76:4f:54: 8b:17:57:3e:ab:59:c3:9e:be:73:dc:1c:4f:82:c0:29:a9:46: a4:e7:ef:e6:e4:7a:a9:36:0f:4c:33:0d:84:ba:a4:62:7a:0e: 4c:a6:ea:d3:f6:72:20:ea:fc:44:26:8d:c7:a4:1c:34:cc:7c: 13:5d:4b:2f:a8:53:6e:f3:9a:c9:fa:98:17:57:bb:a3:52:c5: 56:d0:32:20:56:48:94:0a:23:d7:bb:1d:e0:22:b0:24:f6:62: 04:67:8c:c0:3c:24:12:e0:22:41:ee:71:c3:27:ea:c8:d1:3e: b9:dd:e4:87:97:35:75:29:19:cb:2d:a2:fe:63:6e:0a:33:de: 8d:17:bb:73:35:f0:50:96:8a:4c:55:49:59:42:af:c6:8c:45: 49:8f:44:be:bd:3b:55:d5:20:41:8d:f4:ce:68:27:5e:24:fe: de:f5:f7:db:b4:84:28:50:f2:6d:54:47:88:30:aa:c4:05:49: b1:8d:3a:92:39:d9:d2:7e:64:0d:57:1b:13:9a:ee:d4:f2:7f: 98:6b:22:87:20:d3:33:1b:a0:e3:47:0e:8d:18:c3:67:23:26: 9f:21:b7:d9:42:8d:e9:87:28:7a:79:f1:b1:bf:35:aa:48:4f: 67:11:ca:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURFQkUxMTAvBgNVBAUTKDBDMDE1QzA2RDFDRDIzNzg0MkI2NzA1N0MxRDU0QTIw RUYyNzJENDcwHhcNMjQwNTE4MjE0MzE3WhcNMjQwNTI1MjE0MzE3WjAYMRYwFAYD VQQDEw02NjQ5MjBmNS1iNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOssTU2T1gdSOakM02sqmqF/Js1q6G5c+/cRsNp6XdmwoFXNxH95ts++mi1x nBKnni93o2BXcW9AZi+FDy4Sf4rWIya+YJAQE8QIC/WQMMVx6Z3ooRBfUULEhNsY ButAiA3z30iYNBOYfORsKo6DGE7hqVI6N4XL5af/FRpwMVfQ5N0Ts/hxdAKGBLEj rrj3NMGlL+zA1Q/Cx2UKwsmIMRf/PIofDqRPFMEGvPyZcGkQc+zj07RtrHq4k4H6 kk+7v85tlApm9JSMTiqW9en+IRBuWlcAEy0FPEVivIU8F77UEVqpSjtYHNUlGrfP TeakKreUOBlqcsY+paiK+V2/qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHDoBcD 9NyclxTiGEl1qRJb43reMB8GA1UdIwQYMBaAFAwBXAbRzSN4QrZwV8HVSiDvJy1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREVCRS83OTQzM0ZDQUE5 MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkzaEN0bkJYd2RWS0lPOG5M VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBRmNCdEhOSTNoQ3RuQlh3ZFZLSU84bkxVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REVCRS83OTQzM0ZDQUE5MTcxMUVBOTQ4MTg2NkZDNEY5QUUwMi9EQUZjQnRITkkz aEN0bkJYd2RWS0lPOG5MVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFgR2T0IcL30UD/fZmNxZ2T1SLF1c+q1nDnr5z3BxPgsApqUak5+/m 5HqpNg9MMw2EuqRieg5MpurT9nIg6vxEJo3HpBw0zHwTXUsvqFNu85rJ+pgXV7uj UsVW0DIgVkiUCiPXux3gIrAk9mIEZ4zAPCQS4CJB7nHDJ+rI0T653eSHlzV1KRnL LaL+Y24KM96NF7tzNfBQlopMVUlZQq/GjEVJj0S+vTtV1SBBjfTOaCdeJP7e9ffb tIQoUPJtVEeIMKrEBUmxjTqSOdnSfmQNVxsTmu7U8n+YayKHINMzG6DjRw6NGMNn IyafIbfZQo3phyh6efGxvzWqSE9nEcod -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org