$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json) Hash identifier: SLDdX6mkgoLxHHZszd+SanpaSGX8dDXNVFPsx74H3Zs= Subject key identifier: 37:09:07:AA:20:25:9B:40:AB:DC:1A:95:ED:D9:D7:D3:A5:07:5B:A6 Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Certificate serial: 33D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft Manifest number: 33CC Signing time: Sat 18 May 2024 15:28:28 +0000 Manifest this update: Sat 18 May 2024 15:28:28 +0000 Manifest next update: Sat 25 May 2024 15:28:28 +0000 Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: XjhQnjz+2ymtwBuUmLVFUR9SlU/wYILmzbfa/rahsO4=) 2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: 5lsNCFb8moOXWnbntsee/VP/JcjrGGlDNsbMoAQhig0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13268 (0x33d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Validity Not Before: May 18 15:28:28 2024 GMT Not After : May 25 15:28:28 2024 GMT Subject: CN=6648c91c-2448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:b7:75:f4:17:d4:fe:a9:c3:0f:f3:d2:b5: 3b:b4:1b:b4:af:45:be:a1:e4:7c:7f:17:78:0f:14: 23:e4:ce:1d:e2:79:cc:57:72:aa:86:90:77:af:2f: 20:17:92:63:ea:2b:ae:48:60:a8:6b:b1:e7:bd:f4: 50:9f:c6:fb:b3:d7:fb:27:4a:11:ec:84:07:f7:e4: 7d:ca:25:70:1f:8e:12:5e:31:66:f4:e0:7b:4b:61: ee:53:cc:c0:19:cc:91:0a:01:0e:ce:35:eb:c0:51: 29:da:67:12:49:dc:0d:f8:19:98:08:9c:6c:45:1c: 6e:45:5f:7b:1d:d5:0f:be:67:3d:c6:ec:af:97:4d: 78:e8:1e:11:eb:86:ee:16:21:e8:b7:6c:10:ea:3b: 50:65:cf:3d:4e:3a:d7:43:cc:cf:62:88:5d:13:54: 33:a7:a0:bf:7d:aa:fa:e9:b5:d4:f1:b6:11:f4:ce: 7a:db:ae:85:2f:3a:ef:4f:88:84:1c:e5:01:19:a6: f4:ec:45:2a:6e:b8:50:5f:d6:63:20:23:96:ba:37: ec:98:12:ff:7a:c0:c0:20:1f:6e:21:bc:0c:35:98: 61:f8:c6:af:6d:c2:ca:0c:f3:ec:e1:63:10:ab:9b: 8f:a7:80:2f:02:ad:0c:8e:5b:64:0c:64:bc:44:09: 24:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:09:07:AA:20:25:9B:40:AB:DC:1A:95:ED:D9:D7:D3:A5:07:5B:A6 X509v3 Authority Key Identifier: keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ac:ea:a3:8a:23:b3:7a:e3:b2:f1:35:a1:6c:e3:0a:81:af: 56:d4:e9:35:3c:80:1c:9d:72:36:88:98:10:02:14:f2:8a:a4: c4:fd:0e:7c:38:84:14:e9:91:3e:cb:77:d8:fe:f2:9f:73:fd: 44:e8:05:ca:6d:a7:d6:5d:87:b8:56:2c:48:68:14:42:71:f9: 49:8c:64:5f:7f:a7:08:6c:99:43:92:87:82:69:c1:2e:0f:cd: 38:8a:0b:f2:54:32:74:0e:8e:ba:25:c1:31:e9:29:e0:73:96: 38:45:84:dc:24:42:79:c7:59:d1:47:b4:9a:6b:33:08:92:97: 06:78:a1:58:45:0e:c9:03:72:45:97:8f:e0:20:fe:3e:ba:32: 1b:5d:98:c4:36:cf:82:5c:cb:ca:26:ed:e8:03:2a:91:95:db: cd:55:c8:17:97:68:35:73:94:b0:f1:41:57:47:9e:61:9c:cc: 1c:2d:88:ba:e6:eb:1d:7a:ee:d9:2b:86:a5:9c:ca:af:71:74: 47:01:8c:1f:c8:a2:f5:c2:7f:45:42:c0:b4:19:12:d3:d4:6c: 47:36:4d:93:74:71:32:c5:40:e1:eb:3b:d1:33:31:15:3a:a2: 82:20:13:c3:47:31:04:70:98:ee:69:3d:df:c6:8a:ab:e3:3f: 8d:76:25:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3 MjhBNENEQTYwHhcNMjQwNTE4MTUyODI4WhcNMjQwNTI1MTUyODI4WjAYMRYwFAYD VQQDEw02NjQ4YzkxYy0yNDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXG3dfQX1P6pww/z0rU7tBu0r0W+oeR8fxd4DxQj5M4d4nnMV3KqhpB3ry8g F5Jj6iuuSGCoa7HnvfRQn8b7s9f7J0oR7IQH9+R9yiVwH44SXjFm9OB7S2HuU8zA GcyRCgEOzjXrwFEp2mcSSdwN+BmYCJxsRRxuRV97HdUPvmc9xuyvl0146B4R64bu FiHot2wQ6jtQZc89TjrXQ8zPYohdE1Qzp6C/far66bXU8bYR9M56266FLzrvT4iE HOUBGab07EUqbrhQX9ZjICOWujfsmBL/esDAIB9uIbwMNZhh+MavbcLKDPPs4WMQ q5uPp4AvAq0MjltkDGS8RAkkmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcJB6og JZtAq9wale3Z19OlB1umMB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6 YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKrOqjiiOzeuOy8TWhbOMKga9W1Ok1PIAcnXI2iJgQAhTyiqTE/Q58 OIQU6ZE+y3fY/vKfc/1E6AXKbafWXYe4VixIaBRCcflJjGRff6cIbJlDkoeCacEu D804igvyVDJ0Do66JcEx6Sngc5Y4RYTcJEJ5x1nRR7SaazMIkpcGeKFYRQ7JA3JF l4/gIP4+ujIbXZjENs+CXMvKJu3oAyqRldvNVcgXl2g1c5Sw8UFXR55hnMwcLYi6 5usdeu7ZK4alnMqvcXRHAYwfyKL1wn9FQsC0GRLT1GxHNk2TdHEyxUDh6zvRMzEV OqKCIBPDRzEEcJjuaT3fxoqr4z+NdiVN -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org