$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json) Hash identifier: PgIA/2mGThyozbp9KU16AcLknxDgt0ucInTWTTDolwo= Subject key identifier: 44:DB:CD:63:CF:A0:3A:EB:55:72:F8:A6:DD:39:6E:DD:A1:E4:CA:C2 Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft Manifest number: 047D Signing time: Sun 19 May 2024 01:39:29 +0000 Manifest this update: Sun 19 May 2024 01:39:28 +0000 Manifest next update: Sun 26 May 2024 01:39:28 +0000 Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: +u9XI2UGo1Zkpw0AO05e3PFvToqdfquhwFS8UztwAno=) 2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 7PTe1iBnO0tL42laH8I/iP5sM/1roMN4MPOCU+l464o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Validity Not Before: May 19 01:39:28 2024 GMT Not After : May 26 01:39:28 2024 GMT Subject: CN=66495851-25a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:b3:25:1e:6a:64:2e:93:4b:bd:55:69:20: 8f:ba:6d:bf:84:f1:18:d7:94:10:ed:25:7d:2a:f3: 5f:73:29:08:75:50:83:31:0d:d2:76:ed:46:07:37: 79:44:65:dd:78:a1:13:99:41:fa:83:6f:ea:db:b4: 96:29:6a:8e:48:dd:64:83:e0:d6:01:0d:39:62:7f: 3c:63:5a:9d:f2:02:65:76:21:ff:e2:c8:7a:58:d0: 06:53:57:fc:11:09:6f:b6:0a:c2:99:94:3d:07:92: 06:ce:16:f2:16:21:51:d0:f7:ac:52:c0:89:fc:24: b6:38:0b:d6:92:7b:4d:fd:2b:bd:6e:f4:f2:51:99: b4:4a:e9:60:09:54:6d:98:0d:4b:9d:0d:ab:03:75: 8f:41:13:d0:3d:ad:39:28:27:a9:90:d8:fa:5f:14: ed:82:d1:ec:f2:e4:14:31:ef:58:51:41:36:7b:1c: 35:95:a2:b5:3a:34:cc:e4:e9:5f:6f:c8:41:f0:48: 95:4b:74:57:6c:15:31:55:23:3d:e1:73:48:c5:f4: 3e:86:83:1e:b6:75:0a:37:95:e5:48:d5:50:dd:3e: e6:61:9f:7d:f1:29:26:1a:24:21:d0:c1:39:41:71: 40:c6:c6:33:01:bc:8d:2d:12:6e:0d:36:76:d5:ba: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DB:CD:63:CF:A0:3A:EB:55:72:F8:A6:DD:39:6E:DD:A1:E4:CA:C2 X509v3 Authority Key Identifier: keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:88:01:61:f9:76:37:50:9b:0b:15:12:03:ee:03:04:bd:45: cb:7c:8d:f3:f9:37:cf:2c:4f:1e:7e:d5:fd:f1:aa:cf:74:72: 00:0b:1e:d6:22:ed:cd:de:ad:db:26:8a:0c:79:73:3e:93:dd: ef:17:bd:45:d2:09:7f:ac:ad:33:d5:dc:e0:ed:9a:8b:ff:29: 53:87:cf:81:f9:8b:1f:53:e7:c2:d8:a1:54:94:a9:ee:42:ed: a7:ae:ad:ed:31:01:50:05:70:7f:36:57:7f:f9:c9:b1:4b:4d: 0e:a6:f4:b2:98:af:e2:ec:4f:fc:4b:9e:a5:ee:d9:c1:97:47: ab:4a:ff:6e:2c:28:8a:4b:74:7d:3a:a1:d2:ce:fc:00:31:af: 50:05:03:a2:d9:7b:03:bb:84:6a:e4:1e:f5:c0:68:07:f4:31: 98:f2:92:7e:d7:3b:d5:a5:68:6e:cc:f8:d0:e9:17:8d:91:d2: 98:99:48:6f:4b:e6:bb:95:f2:dc:5c:ad:2d:ae:bc:b6:bb:e4: a8:e5:84:6b:72:50:14:53:b4:78:32:41:ca:63:03:f3:1c:09: 77:1d:b9:3b:c6:90:1c:1a:7e:a3:f1:f7:e9:85:d3:0d:6e:d7: c1:99:d9:b5:87:3e:7a:ef:ae:ba:49:89:9f:3d:09:6b:de:a2: 13:43:87:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDM0UxMTAvBgNVBAUTKDBDMEIxREQ1RjZBQjY0NEM1NzA3ODFBNDI5RTQ0ODA1 MDIxOEU5RUIwHhcNMjQwNTE5MDEzOTI4WhcNMjQwNTI2MDEzOTI4WjAYMRYwFAYD VQQDEw02NjQ5NTg1MS0yNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw2zJR5qZC6TS71VaSCPum2/hPEY15QQ7SV9KvNfcykIdVCDMQ3Sdu1GBzd5 RGXdeKETmUH6g2/q27SWKWqOSN1kg+DWAQ05Yn88Y1qd8gJldiH/4sh6WNAGU1f8 EQlvtgrCmZQ9B5IGzhbyFiFR0PesUsCJ/CS2OAvWkntN/Su9bvTyUZm0SulgCVRt mA1LnQ2rA3WPQRPQPa05KCepkNj6XxTtgtHs8uQUMe9YUUE2exw1laK1OjTM5Olf b8hB8EiVS3RXbBUxVSM94XNIxfQ+hoMetnUKN5XlSNVQ3T7mYZ998SkmGiQh0ME5 QXFAxsYzAbyNLRJuDTZ21bqa2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETbzWPP oDrrVXL4pt05bt2h5MrCMB8GA1UdIwQYMBaAFAwLHdX2q2RMVweBpCnkSAUCGOnr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEMzRS9BODA3QzFDOEY0 MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpFeFhCNEdrS2VSSUJRSVk2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBc2QxZmFyWkV4WEI0R2tLZVJJQlFJWTZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEMzRS9BODA3QzFDOEY0MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpF eFhCNEdrS2VSSUJRSVk2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+iAFh+XY3UJsLFRID7gMEvUXLfI3z+TfPLE8eftX98arPdHIACx7W Iu3N3q3bJooMeXM+k93vF71F0gl/rK0z1dzg7ZqL/ylTh8+B+YsfU+fC2KFUlKnu Qu2nrq3tMQFQBXB/Nld/+cmxS00OpvSymK/i7E/8S56l7tnBl0erSv9uLCiKS3R9 OqHSzvwAMa9QBQOi2XsDu4Rq5B71wGgH9DGY8pJ+1zvVpWhuzPjQ6ReNkdKYmUhv S+a7lfLcXK0trry2u+So5YRrclAUU7R4MkHKYwPzHAl3Hbk7xpAcGn6j8ffphdMN btfBmdm1hz567666SYmfPQlr3qITQ4dA -----END CERTIFICATE-----Generated at Sun May 19 02:59:06 2024 by rpki-client on console-ams.rpki-client.org