$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: WHlNnJYnErnO96bmouNMX308RJDZZn55YkVOttS54yQ= Subject key identifier: 57:E7:BA:7C:47:C0:A9:78:A7:69:BF:A2:DF:B4:65:19:DB:BD:97:B6 Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 042A Signing time: Fri 31 May 2024 02:36:24 +0000 Manifest this update: Fri 31 May 2024 02:36:23 +0000 Manifest next update: Fri 07 Jun 2024 02:36:23 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: bP9us21mEJz8ecEAlr+uWqEuB00zfnmZUCd8BjspkNM=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: DZNgn7+NfU3Db5mVE1NTaO3BHAIs1oK1qT4eLsO5kr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: May 31 02:36:23 2024 GMT Not After : Jun 7 02:36:23 2024 GMT Subject: CN=665937a8-d6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:da:6e:3d:cb:cd:0c:a8:83:56:04:34:67:1e: 59:08:ee:29:8e:ef:ef:e9:bb:75:90:0c:10:00:60: b3:cc:1f:88:30:b1:72:9f:7d:51:b6:04:3f:b9:93: 57:73:20:4a:48:43:54:33:56:78:12:a3:5a:5e:e8: 63:87:4c:d9:ab:3c:23:99:00:e6:1c:49:f9:12:22: 0b:a4:ca:09:bc:d1:5c:4c:b6:f4:8f:9c:67:3b:4f: de:85:dd:ad:56:ed:c0:f0:d1:10:59:d9:20:2a:bc: 06:bc:92:ca:37:d5:2b:53:7c:b7:1b:f3:a3:4a:11: 29:41:3c:00:15:c9:37:c0:83:f8:20:2d:81:fa:3e: b5:63:27:fc:1a:f2:e1:d9:ba:0a:2c:64:0d:9c:d9: 8d:75:6b:2f:b7:7c:10:38:de:0a:85:31:f4:78:dc: b7:d6:49:2e:27:ed:b4:6b:c2:69:69:66:97:03:02: 2f:7b:8b:71:25:a9:2c:c3:29:43:97:e5:e2:ba:72: 55:79:82:82:25:96:90:e8:7f:bd:fd:f1:35:d6:1b: 4c:c4:e5:df:a5:20:b5:a5:27:73:89:d4:b5:e3:3e: a9:ef:7e:dd:03:09:28:46:37:2d:ec:3a:7d:ab:3d: 13:25:8d:37:e0:ac:28:b1:76:34:96:9c:7b:43:8a: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E7:BA:7C:47:C0:A9:78:A7:69:BF:A2:DF:B4:65:19:DB:BD:97:B6 X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:88:4d:73:07:2e:9e:b0:2b:32:18:bb:66:fb:67:fc:f2:ef: 17:a8:bc:70:41:47:13:db:9b:aa:14:d0:76:63:b1:27:d8:6f: 94:0b:02:12:4a:a5:82:9f:25:e0:88:48:06:b3:d6:29:59:ee: 40:ad:bc:4f:18:65:82:25:0f:10:33:b4:95:d2:3c:72:be:36: 4b:aa:5d:31:c6:59:50:73:43:d5:59:bf:73:18:4a:eb:52:b7: 88:00:fd:be:20:9c:0c:ed:00:5a:6f:a0:8f:cb:30:05:7a:d8: 09:b2:46:4e:ab:3e:e3:d2:9a:35:26:98:33:32:8a:3f:eb:42: 9a:0e:b5:a9:32:d7:18:46:84:be:ba:5d:fa:96:d9:17:2b:4f: 51:60:93:41:9b:16:65:64:f6:ee:3c:84:f3:ec:01:20:5e:ff: 8a:40:44:63:e9:23:ee:0b:f1:06:40:ce:45:4b:ca:8e:11:b4: 5d:f5:01:4b:40:17:af:0d:9f:c6:54:bd:69:c5:4d:77:41:91: a0:f9:d2:6e:f7:43:f6:df:93:31:cf:8e:4a:85:2e:12:19:c8: 9f:6c:7d:d9:f3:ff:c8:96:77:2e:33:e7:db:7c:99:15:d8:2b: 34:e5:88:04:2c:b4:ae:e6:0a:3d:d8:e0:43:a1:00:ea:62:99: 5d:20:40:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjQwNTMxMDIzNjIzWhcNMjQwNjA3MDIzNjIzWjAYMRYwFAYD VQQDEw02NjU5MzdhOC1kNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29puPcvNDKiDVgQ0Zx5ZCO4pju/v6bt1kAwQAGCzzB+IMLFyn31RtgQ/uZNX cyBKSENUM1Z4EqNaXuhjh0zZqzwjmQDmHEn5EiILpMoJvNFcTLb0j5xnO0/ehd2t Vu3A8NEQWdkgKrwGvJLKN9UrU3y3G/OjShEpQTwAFck3wIP4IC2B+j61Yyf8GvLh 2boKLGQNnNmNdWsvt3wQON4KhTH0eNy31kkuJ+20a8JpaWaXAwIve4txJakswylD l+XiunJVeYKCJZaQ6H+9/fE11htMxOXfpSC1pSdzidS14z6p737dAwkoRjct7Dp9 qz0TJY034KwosXY0lpx7Q4pXGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfnunxH wKl4p2m/ot+0ZRnbvZe2MB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAziE1zBy6esCsyGLtm+2f88u8XqLxwQUcT25uqFNB2Y7En2G+UCwIS SqWCnyXgiEgGs9YpWe5ArbxPGGWCJQ8QM7SV0jxyvjZLql0xxllQc0PVWb9zGErr UreIAP2+IJwM7QBab6CPyzAFetgJskZOqz7j0po1JpgzMoo/60KaDrWpMtcYRoS+ ul36ltkXK09RYJNBmxZlZPbuPITz7AEgXv+KQERj6SPuC/EGQM5FS8qOEbRd9QFL QBevDZ/GVL1pxU13QZGg+dJu90P235Mxz45KhS4SGcifbH3Z8//IlncuM+fbfJkV 2Cs05YgELLSu5go92OBDoQDqYpldIEDW -----END CERTIFICATE-----Generated at Fri May 31 03:14:56 2024 by rpki-client on console-ams.rpki-client.org