$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: ibFU+jDLXwfmJUQg1NFxIvJrYIi589t1NBbStj9eLkA= Subject key identifier: 10:99:AE:B3:93:52:B5:C6:C2:C6:A4:0F:FF:C7:4D:78:B9:93:5A:03 Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 0314 Signing time: Sun 19 May 2024 03:08:06 +0000 Manifest this update: Sun 19 May 2024 03:08:06 +0000 Manifest next update: Sun 26 May 2024 03:08:06 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: fixd9ys/k+MuskAJiOqP5GRxH6/MXlizT0uMyXTbN6s=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: W1x/EXO8bWreNOkmC081MRTGEO62/pX9uJW9+p1JmgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: May 19 03:08:06 2024 GMT Not After : May 26 03:08:06 2024 GMT Subject: CN=66496d16-8698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:69:e8:45:3e:ea:e5:a1:70:b6:7c:d8:4d: 42:26:d7:a7:9e:04:d3:dc:4d:c6:78:f3:1f:cc:07: de:b6:76:cc:1b:c0:04:7c:5d:43:41:ce:2f:3b:5c: eb:e4:4b:c5:8f:f7:1e:a6:e1:71:00:dc:97:ca:cb: f5:12:cd:55:b5:d2:ac:70:c5:21:0c:ed:cc:f9:17: 34:3d:c1:44:07:8e:3c:d0:ee:18:07:a5:a6:c9:b5: 88:68:ce:ab:20:9e:3f:ce:42:fc:9a:4c:47:6d:4b: 1e:37:a9:8a:b6:ba:29:c2:a3:bb:ec:bf:19:f5:58: 91:b2:7b:98:0e:23:f9:6f:21:46:66:7f:4c:96:69: d3:69:7c:2b:8d:76:37:b5:58:50:5e:b2:03:fb:73: be:a2:37:34:df:b1:fa:5b:19:b0:12:f8:be:22:34: e4:4a:e8:ff:f5:c4:c2:09:bc:07:f2:4f:8b:7d:a4: 30:2a:a9:01:50:1c:63:c4:9e:9b:e8:a0:bb:67:7c: 2b:b1:9e:bc:bc:7a:a5:a1:d8:73:49:79:30:a2:65: 7c:85:1a:67:0e:a1:eb:f2:86:9e:0f:19:5d:4e:e9: 1a:37:63:6b:b2:f7:56:9b:b6:e4:40:40:54:2e:11: 02:ae:88:48:5c:f4:e8:13:2c:d2:6c:29:95:fc:16: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:99:AE:B3:93:52:B5:C6:C2:C6:A4:0F:FF:C7:4D:78:B9:93:5A:03 X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6c:ea:3c:4d:18:68:57:ca:e1:3e:6f:7f:31:f0:8a:83:c9: f6:6a:67:5e:4c:34:04:e6:c7:5d:f2:26:f9:ee:7c:e3:35:c7: bb:43:2d:0c:da:0c:1d:9f:8b:65:cc:0d:2d:b0:dd:14:8f:c2: 8e:29:c3:86:d2:0a:6f:8f:35:48:a8:1e:f9:56:01:88:d0:56: 02:2c:97:90:e7:0c:de:15:91:c0:07:04:41:98:21:90:80:19: 05:c6:ed:2c:94:8a:dc:36:df:74:31:b9:48:e8:c6:f3:05:2a: 9d:2b:24:1c:9c:72:9b:4f:30:61:37:ce:79:94:9d:7c:a9:c9: 7b:94:56:d4:ee:0c:05:e2:f7:a0:ac:82:67:7d:df:7c:55:25: 34:75:df:01:64:8e:ec:33:28:63:cf:56:86:6f:b6:51:45:a0: 9e:97:9e:c9:c9:6f:89:cb:5c:c8:6c:e2:9c:05:41:12:cf:27: c5:69:ac:b2:98:90:c4:84:63:94:d9:79:5d:88:28:a4:59:01: 3d:12:1b:fc:22:66:0f:ef:62:44:3b:84:84:03:f2:f0:1e:3e: 8c:87:bc:b1:47:1b:ab:73:77:b5:1b:01:47:6b:72:3e:31:c3: 60:dc:fa:c1:94:b7:e1:19:45:40:61:70:0d:d5:64:ce:72:d4: a7:e6:45:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjQwNTE5MDMwODA2WhcNMjQwNTI2MDMwODA2WjAYMRYwFAYD VQQDEw02NjQ5NmQxNi04Njk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hZp6EU+6uWhcLZ82E1CJtenngTT3E3GePMfzAfetnbMG8AEfF1DQc4vO1zr 5EvFj/cepuFxANyXysv1Es1VtdKscMUhDO3M+Rc0PcFEB4480O4YB6WmybWIaM6r IJ4/zkL8mkxHbUseN6mKtropwqO77L8Z9ViRsnuYDiP5byFGZn9MlmnTaXwrjXY3 tVhQXrID+3O+ojc037H6WxmwEvi+IjTkSuj/9cTCCbwH8k+LfaQwKqkBUBxjxJ6b 6KC7Z3wrsZ68vHqlodhzSXkwomV8hRpnDqHr8oaeDxldTukaN2NrsvdWm7bkQEBU LhECrohIXPToEyzSbCmV/BZvsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCZrrOT UrXGwsakD//HTXi5k1oDMB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsbOo8TRhoV8rhPm9/MfCKg8n2amdeTDQE5sdd8ib57nzjNce7Qy0M 2gwdn4tlzA0tsN0Uj8KOKcOG0gpvjzVIqB75VgGI0FYCLJeQ5wzeFZHABwRBmCGQ gBkFxu0slIrcNt90MblI6MbzBSqdKyQcnHKbTzBhN855lJ18qcl7lFbU7gwF4veg rIJnfd98VSU0dd8BZI7sMyhjz1aGb7ZRRaCel57JyW+Jy1zIbOKcBUESzyfFaayy mJDEhGOU2XldiCikWQE9Ehv8ImYP72JEO4SEA/LwHj6Mh7yxRxurc3e1GwFHa3I+ McNg3PrBlLfhGUVAYXAN1WTOctSn5kX9 -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org