$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft File: dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json) Hash identifier: PqgMYEPGnNl0KG2V295cPjL6odjAV1ZWX0q2rB2ChHQ= Subject key identifier: 33:8A:28:D3:FE:94:F9:D5:93:47:D8:07:B1:1A:C5:3B:1A:4A:3D:50 Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Certificate serial: 0B83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft Manifest number: 0B78 Signing time: Sat 18 May 2024 19:30:28 +0000 Manifest this update: Sat 18 May 2024 19:30:28 +0000 Manifest next update: Sat 25 May 2024 19:30:28 +0000 Files and hashes: 1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: RLbdAhNYRiLk30x3YKaBBcYqK2yFt9rinlxfJY2+7A4=) 2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: S1HXzhvFtsXdHX0pd9yiJFTv4vp0m5nc84WdbIZmysI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2947 (0xb83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Validity Not Before: May 18 19:30:28 2024 GMT Not After : May 25 19:30:28 2024 GMT Subject: CN=664901d4-d320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:49:9c:ed:3f:b5:91:63:45:1a:d0:97:28: c3:28:ea:89:e2:c4:f8:29:49:75:6e:3f:4b:d9:cc: c7:cc:d7:e2:5a:01:a7:30:9f:99:52:94:e9:55:33: ba:58:a2:9b:2f:d2:4a:c9:2f:aa:44:b4:67:ca:03: a4:48:7e:90:14:18:8c:f7:f3:e8:5c:69:7a:ec:a3: 53:04:24:18:7a:66:2b:ea:c8:49:03:d9:04:52:f3: fa:6c:f3:a4:f4:13:83:08:38:12:81:c5:57:7d:cc: fe:b1:66:da:ff:24:a5:43:57:0e:ef:e0:77:c0:f4: d7:13:b0:37:1c:4e:1c:7c:ec:1b:36:30:4c:42:6a: 34:ae:fd:2c:9a:63:dc:e4:53:fe:f2:5b:b8:95:6a: 49:36:80:46:e9:ce:7e:ba:ca:f9:fa:5c:67:b3:c6: b1:d9:9e:ad:21:70:90:f4:c1:8c:f8:95:63:78:78: 47:3f:ea:b7:fb:da:c3:e4:7a:52:55:4d:fb:18:3e: ac:08:fa:65:ad:60:49:fb:36:e9:71:6e:c1:62:dc: 16:b5:99:ba:69:93:86:59:1a:9e:24:34:0b:1a:fa: 6b:e2:e5:6b:bd:4b:33:37:4d:b8:5d:23:92:5f:48: 6d:b1:8d:8b:c6:46:72:ca:39:34:61:5b:70:21:30: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8A:28:D3:FE:94:F9:D5:93:47:D8:07:B1:1A:C5:3B:1A:4A:3D:50 X509v3 Authority Key Identifier: keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8a:43:5e:5d:b8:ff:bc:72:d9:e7:5d:a4:9e:6e:0c:97:22: 46:3e:be:05:63:28:2e:c1:9f:bc:4d:4f:92:b4:e1:1e:3d:e5: ff:af:e5:0f:a7:59:a4:d8:e1:0b:c7:e8:92:03:08:08:8a:96: ec:01:a5:f7:14:5d:ca:49:22:5e:b7:0f:28:32:37:c8:5a:63: b4:db:5d:fa:82:54:b7:26:7a:f0:e9:be:55:fc:9c:ba:2d:1d: e9:6b:72:9a:d2:ee:1b:64:f6:a0:4c:59:b2:93:f2:9c:4f:24: 71:2f:89:bb:4c:11:b5:7c:ad:5e:52:e9:67:4b:51:22:d9:35: c8:5f:5f:9e:0a:56:41:75:83:8e:11:81:cc:94:f7:57:e1:74: 6c:14:2c:73:9c:ca:a8:d2:18:09:4f:ca:a6:e3:30:9c:7a:15: 2e:b7:14:34:04:03:80:2a:4a:c8:d4:f3:03:cc:f1:c2:50:46: d8:90:52:34:75:84:de:95:38:3e:b6:f1:c2:a7:f8:6d:a2:3d: ff:45:c2:17:dd:aa:8c:3a:e6:b9:1f:d6:5d:39:a9:59:f4:fa: 26:2b:43:ba:aa:ee:62:ad:0e:90:79:25:91:0a:1a:d7:b9:bb: 04:bf:4c:ef:b1:dd:da:88:55:21:22:6d:c7:b1:0d:ad:c6:1b: c0:f4:aa:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM0REIxMTAvBgNVBAUTKDc1MDU1RTBEOENEQjE0RUY5RjA0RjhCOTVEQUM4Qjg5 Qzk2OENEREQwHhcNMjQwNTE4MTkzMDI4WhcNMjQwNTI1MTkzMDI4WjAYMRYwFAYD VQQDEw02NjQ5MDFkNC1kMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzFJnO0/tZFjRRrQlyjDKOqJ4sT4KUl1bj9L2czHzNfiWgGnMJ+ZUpTpVTO6 WKKbL9JKyS+qRLRnygOkSH6QFBiM9/PoXGl67KNTBCQYemYr6shJA9kEUvP6bPOk 9BODCDgSgcVXfcz+sWba/ySlQ1cO7+B3wPTXE7A3HE4cfOwbNjBMQmo0rv0smmPc 5FP+8lu4lWpJNoBG6c5+usr5+lxns8ax2Z6tIXCQ9MGM+JVjeHhHP+q3+9rD5HpS VU37GD6sCPplrWBJ+zbpcW7BYtwWtZm6aZOGWRqeJDQLGvpr4uVrvUszN024XSOS X0htsY2LxkZyyjk0YVtwITCe9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOKKNP+ lPnVk0fYB7EaxTsaSj1QMB8GA1UdIwQYMBaAFHUFXg2M2xTvnwT4uV2si4nJaM3d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzREQi9EN0RGRDZDQTA4 RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZPLWZCUGk1WGF5TGljbG96 ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRVmVEWXpiRk8tZkJQaTVYYXlMaWNsb3pkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzREQi9EN0RGRDZDQTA4RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZP LWZCUGk1WGF5TGljbG96ZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvikNeXbj/vHLZ512knm4MlyJGPr4FYyguwZ+8TU+StOEePeX/r+UP p1mk2OELx+iSAwgIipbsAaX3FF3KSSJetw8oMjfIWmO02136glS3Jnrw6b5V/Jy6 LR3pa3Ka0u4bZPagTFmyk/KcTyRxL4m7TBG1fK1eUulnS1Ei2TXIX1+eClZBdYOO EYHMlPdX4XRsFCxznMqo0hgJT8qm4zCcehUutxQ0BAOAKkrI1PMDzPHCUEbYkFI0 dYTelTg+tvHCp/htoj3/RcIX3aqMOua5H9ZdOalZ9PomK0O6qu5irQ6QeSWRChrX ubsEv0zvsd3aiFUhIm3HsQ2txhvA9Kox -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org