$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft File: DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json) Hash identifier: 5+v7l+48B+50qcsdXIVJu1l8EIZuqsvADrcfIVmsutQ= Subject key identifier: 3B:42:37:D1:03:99:88:38:F2:CF:D2:96:70:45:09:F7:16:4D:27:83 Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E Certificate issuer: /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Certificate serial: 093A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft Manifest number: 0933 Signing time: Sat 18 May 2024 21:08:41 +0000 Manifest this update: Sat 18 May 2024 21:08:41 +0000 Manifest next update: Sat 25 May 2024 21:08:41 +0000 Files and hashes: 1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: Ky9ZK9WrRYmrvbAvmcA6uvaJk8PhuNy/Lbugs/85u7c=) 2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: 63q5xAYRR13q9Wbw71Jt7uvF6vNGnh8Mpl6xwXy0DDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2362 (0x93a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Validity Not Before: May 18 21:08:41 2024 GMT Not After : May 25 21:08:41 2024 GMT Subject: CN=664918d9-f774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:21:29:33:7d:43:06:63:35:df:d9:c9:ab: 42:83:3d:ea:09:5e:bb:c8:cb:f4:8e:f4:18:d1:1d: d9:bc:0e:3d:1f:a6:45:1f:1e:be:4d:01:99:78:f2: 68:71:09:13:5c:bd:d5:80:74:18:d2:b4:47:a1:cf: 28:4f:f4:0e:80:ca:ee:c4:c1:bc:e5:85:68:21:c9: 59:25:d1:09:f0:12:82:6b:90:be:eb:42:94:56:56: b5:b4:e0:4e:ca:b3:48:06:34:80:be:7b:f4:7f:cf: dd:4e:f8:7b:38:46:c3:fc:2a:96:75:19:84:f4:2b: ee:57:e8:50:90:ee:84:f0:bf:96:a5:dc:4c:0b:fa: 25:ac:37:87:a5:71:f4:ca:cd:dc:47:c5:d4:cd:3d: 89:5d:c4:3a:e8:bb:d8:ed:b8:6e:a5:18:cc:9b:d8: fb:64:95:58:bf:d5:60:d8:06:87:08:d3:81:f5:90: 98:79:82:ea:3f:0b:9f:ce:b4:1c:47:6c:79:bd:98: fb:dd:15:dd:61:56:d6:5b:af:84:98:f9:ea:cd:02: 0d:26:30:36:6e:ef:3b:53:81:27:f5:d1:7a:e8:26: 44:ef:16:a1:6b:b3:30:78:59:90:74:aa:7c:d2:90: 18:f1:15:ac:74:77:1c:52:ef:4e:9d:f5:19:1c:90: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:42:37:D1:03:99:88:38:F2:CF:D2:96:70:45:09:F7:16:4D:27:83 X509v3 Authority Key Identifier: keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:bc:ca:e8:93:8c:52:50:bb:1e:ff:6d:f7:4f:0b:04:62:08: a3:30:9a:f8:8f:42:2a:ce:c6:d5:5a:74:ec:0c:96:62:b1:02: d0:fc:a5:71:5f:fa:96:ba:a2:06:08:4c:c9:a5:bf:71:6b:93: 31:19:1a:03:a2:06:9c:60:67:7f:92:c2:1a:16:28:1c:86:bf: 4d:32:ce:f9:36:3f:d2:c7:63:48:5a:7a:80:bf:a6:9e:ee:15: 4e:6f:ee:a3:4f:83:8c:46:2a:3e:2a:1d:b3:8e:f7:19:c1:1b: 15:46:5c:88:ec:7e:ca:43:8b:93:ad:e4:10:ad:af:ad:e3:36: 56:81:16:a8:41:7b:99:7f:ff:0d:6c:20:22:91:bd:b3:8d:a5: 2b:26:47:7f:7b:df:f8:d5:59:bb:ec:89:6f:0a:e3:0c:af:01: 96:02:e4:da:a5:19:46:f9:e2:b5:f5:6f:f2:7b:23:d0:49:31: ab:23:cf:00:ab:2c:82:bf:c9:96:a2:f2:c7:45:55:8d:5b:ce: e0:bd:06:ef:ec:63:ae:68:e6:22:ca:48:a4:c8:43:09:7c:cf: c0:4e:de:6b:1f:17:9f:30:aa:85:8d:6d:75:33:9e:bd:6d:4c: 12:22:1a:62:71:34:3f:bb:ff:c6:8f:43:ac:f2:f1:ee:e5:c1: 8e:8b:53:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFMzExMTAvBgNVBAUTKDBFNkE0MzAxOTU2OEY5NzcxMTRFNkQ0NjVCMEE2RjU1 NjlGNTM4M0UwHhcNMjQwNTE4MjEwODQxWhcNMjQwNTI1MjEwODQxWjAYMRYwFAYD VQQDEw02NjQ5MThkOS1mNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8ghKTN9QwZjNd/ZyatCgz3qCV67yMv0jvQY0R3ZvA49H6ZFHx6+TQGZePJo cQkTXL3VgHQY0rRHoc8oT/QOgMruxMG85YVoIclZJdEJ8BKCa5C+60KUVla1tOBO yrNIBjSAvnv0f8/dTvh7OEbD/CqWdRmE9CvuV+hQkO6E8L+WpdxMC/olrDeHpXH0 ys3cR8XUzT2JXcQ66LvY7bhupRjMm9j7ZJVYv9Vg2AaHCNOB9ZCYeYLqPwufzrQc R2x5vZj73RXdYVbWW6+EmPnqzQINJjA2bu87U4En9dF66CZE7xaha7MweFmQdKp8 0pAY8RWsdHccUu9OnfUZHJB9CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtCN9ED mYg48s/SlnBFCfcWTSeDMB8GA1UdIwQYMBaAFA5qQwGVaPl3EU5tRlsKb1Vp9Tg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkUzMS9BQjc5NTZENDc5 MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1YY1JUbTFHV3dwdlZXbjFP RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtcERBWlZvLVhjUlRtMUdXd3B2VlduMU9ENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkUzMS9BQjc5NTZENDc5MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1Y Y1JUbTFHV3dwdlZXbjFPRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYvMrok4xSULse/233TwsEYgijMJr4j0IqzsbVWnTsDJZisQLQ/KVx X/qWuqIGCEzJpb9xa5MxGRoDogacYGd/ksIaFigchr9NMs75Nj/Sx2NIWnqAv6ae 7hVOb+6jT4OMRio+Kh2zjvcZwRsVRlyI7H7KQ4uTreQQra+t4zZWgRaoQXuZf/8N bCAikb2zjaUrJkd/e9/41Vm77IlvCuMMrwGWAuTapRlG+eK19W/yeyPQSTGrI88A qyyCv8mWovLHRVWNW87gvQbv7GOuaOYiykikyEMJfM/ATt5rHxefMKqFjW11M569 bUwSIhpicTQ/u//Gj0Os8vHu5cGOi1OR -----END CERTIFICATE-----Generated at Sat May 18 22:14:02 2024 by rpki-client on console-fra.rpki-client.org