$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft File: DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft (raw, json) Hash identifier: uDEcZh/K/h+XyDCy4cb2bjaF7KCgqb1Y4oYMCHi+fBU= Subject key identifier: 28:BC:FD:0D:F8:2C:49:0C:4C:43:5C:4C:60:29:0A:C7:AE:01:4D:D4 Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft Manifest number: 0C50 Signing time: Sat 18 May 2024 18:56:11 +0000 Manifest this update: Sat 18 May 2024 18:56:10 +0000 Manifest next update: Sat 25 May 2024 18:56:10 +0000 Files and hashes: 1: DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl (hash: ZuLGLfGniLcHkWafTWG/X335Zk76XjRILNPmO9g2qcg=) 2: 2328656A840211EEB9348E11C4F9AE02.roa (hash: N3MDXHzjqV4GpQ6x8O8u+w6AmWLtT9oFMdO88Fh9u3Q=) 3: 2245ADD8840211EEB9348E11C4F9AE02.roa (hash: ENpu+8HNJZwaYX6cLyPJBl0Pp1N4nZX8iKiRlKmkkIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30 Validity Not Before: May 18 18:56:10 2024 GMT Not After : May 25 18:56:10 2024 GMT Subject: CN=6648f9cb-2bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f2:c0:e2:fb:a3:4b:c6:e7:23:e8:46:a9:35: c0:1b:ed:0d:52:7d:31:c5:91:78:22:76:5c:ef:7b: 46:27:33:13:76:45:85:44:be:0d:78:ee:09:0f:87: 4c:13:b8:c3:08:49:6d:4b:1c:69:56:ec:2b:39:33: 5a:b5:70:1c:2e:10:e0:d1:cd:d0:6f:40:6b:60:5c: b4:6b:20:52:cf:98:a5:52:4d:bf:e5:30:5a:ab:07: 10:26:39:5e:19:d7:ac:88:9e:3b:39:b0:68:06:d5: af:1f:f3:e1:2c:59:7b:c9:66:e2:46:7f:d8:bc:be: 61:8e:62:36:91:47:73:c9:5c:6e:18:a7:21:7a:7a: 90:ca:f0:4f:61:cd:96:98:41:a8:48:e9:00:47:4c: 74:8e:c8:2e:6d:a2:1a:e5:28:54:0c:44:e9:c1:03: 7e:ff:71:a7:3d:b5:20:77:87:5f:e2:03:49:d7:37: 0c:50:c8:8f:02:32:17:13:66:e6:9c:01:51:56:2c: 20:2e:4b:89:85:5c:44:f3:b0:a4:09:c4:15:49:ba: 76:1b:99:ad:15:31:ff:83:a6:d8:37:bf:ec:e7:5a: e2:04:6b:16:36:b4:4f:6b:5f:18:79:9e:1c:c1:09: 2d:47:ad:f4:00:c0:dd:bf:3a:cd:f9:28:db:95:d2: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BC:FD:0D:F8:2C:49:0C:4C:43:5C:4C:60:29:0A:C7:AE:01:4D:D4 X509v3 Authority Key Identifier: keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e6:aa:7b:82:23:3f:38:9e:87:c1:10:04:af:c8:f6:96:56: 5d:d0:dd:93:a9:c7:da:ee:2d:d8:8d:a2:77:02:46:24:f1:d7: 9d:55:db:f1:b9:69:c5:ec:c5:a8:d5:61:a8:26:a2:3b:10:36: da:60:1a:aa:50:bf:2c:14:ca:27:d5:29:b9:0b:d7:bc:bc:5a: 34:9d:c4:1c:59:91:31:7b:9b:8f:f0:b6:81:c5:ed:ae:2b:5f: 3b:04:3a:1a:6a:66:24:1a:dc:16:36:40:10:2d:7d:48:9d:6b: 28:52:33:b5:06:b9:a9:72:29:87:87:a9:8f:70:70:ee:cb:43: 05:ae:62:a3:2f:de:40:a1:87:4a:b2:05:2f:a7:e1:61:13:6b: 72:11:33:2e:3a:6b:fa:be:03:60:70:5b:6d:d3:84:dd:be:05: 10:e4:58:9f:ff:84:ac:30:45:4c:62:65:e0:65:06:d9:8d:46: 1d:78:1d:7c:de:07:bf:9a:69:43:f9:c2:08:36:7e:84:59:2a: f9:99:ba:8b:41:d7:3e:31:2f:0f:a2:5d:06:f6:31:72:ee:b3: c6:47:b6:58:ca:99:7e:23:d5:02:d3:c9:a1:2c:53:ba:5b:45: 45:36:b3:b3:25:ff:51:ac:22:e2:9f:af:d5:38:5c:34:56:8b: 32:12:de:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2 NTJDMTNBMzAwHhcNMjQwNTE4MTg1NjEwWhcNMjQwNTI1MTg1NjEwWjAYMRYwFAYD VQQDEw02NjQ4ZjljYi0yYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8fLA4vujS8bnI+hGqTXAG+0NUn0xxZF4InZc73tGJzMTdkWFRL4NeO4JD4dM E7jDCEltSxxpVuwrOTNatXAcLhDg0c3Qb0BrYFy0ayBSz5ilUk2/5TBaqwcQJjle GdesiJ47ObBoBtWvH/PhLFl7yWbiRn/YvL5hjmI2kUdzyVxuGKchenqQyvBPYc2W mEGoSOkAR0x0jsgubaIa5ShUDETpwQN+/3GnPbUgd4df4gNJ1zcMUMiPAjIXE2bm nAFRViwgLkuJhVxE87CkCcQVSbp2G5mtFTH/g6bYN7/s51riBGsWNrRPa18YeZ4c wQktR630AMDdvzrN+SjbldL1HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi8/Q34 LEkMTENcTGApCseuAU3UMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAzMy81RDAwQUU1MkRENEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kz Vjl1UFFPdUc4a2RsTEJPakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr5qp7giM/OJ6HwRAEr8j2llZd0N2Tqcfa7i3YjaJ3AkYk8dedVdvx uWnF7MWo1WGoJqI7EDbaYBqqUL8sFMon1Sm5C9e8vFo0ncQcWZExe5uP8LaBxe2u K187BDoaamYkGtwWNkAQLX1InWsoUjO1BrmpcimHh6mPcHDuy0MFrmKjL95AoYdK sgUvp+FhE2tyETMuOmv6vgNgcFtt04TdvgUQ5Fif/4SsMEVMYmXgZQbZjUYdeB18 3ge/mmlD+cIINn6EWSr5mbqLQdc+MS8Pol0G9jFy7rPGR7ZYypl+I9UC08mhLFO6 W0VFNrOzJf9RrCLin6/VOFw0VosyEt5T -----END CERTIFICATE-----Generated at Sat May 18 19:21:03 2024 by rpki-client on console-fra.rpki-client.org