$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: N7Bz9zYIvfDbOOSyUy7sHLfyl5Yje4IZNY6IXIzmoU8= Subject key identifier: 60:34:4A:78:46:33:66:6D:15:D3:95:56:37:67:39:51:89:C5:DE:9E Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 343D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 340B Signing time: Fri 31 May 2024 14:18:08 +0000 Manifest this update: Fri 31 May 2024 14:18:07 +0000 Manifest next update: Fri 07 Jun 2024 14:18:07 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: uxOgenRuxEPyGZ/76xOBHB3mSYym/rYl3ExCzbSmZ7g=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 02bT8CJits/dRAWQSl3SIwLvUODi5bkhKG1y3uNprTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13373 (0x343d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: May 31 14:18:07 2024 GMT Not After : Jun 7 14:18:07 2024 GMT Subject: CN=6659dc1f-8a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:79:7c:17:87:25:25:08:08:79:a8:cf:0f: 6f:4b:66:f6:43:bd:c3:02:45:03:ac:f7:c5:9f:1e: ab:6e:8b:78:ee:0e:f0:16:fd:8a:bf:53:e6:cc:03: a0:b9:48:8e:2e:e8:b4:ef:3c:3c:49:ee:9c:91:0c: a8:95:d0:d1:57:bd:dc:6c:5f:9b:55:16:93:7c:41: 4a:f2:c6:2c:85:34:79:2b:22:44:c8:b4:2d:87:8c: f7:a3:77:6d:6b:4d:bd:32:26:f7:21:cc:37:a9:5d: 46:84:af:6b:84:b2:dc:8f:c2:e2:bb:b3:ae:1b:70: f2:f0:d7:97:ea:cd:1b:cf:09:9d:81:9b:de:32:18: b7:9d:de:70:31:59:3a:2e:15:fd:d4:e3:27:b3:8d: 57:8e:47:a0:67:48:4e:fc:d9:b1:18:3c:6f:62:d1: 58:4a:3c:80:c5:ae:44:9d:c9:5c:46:cf:e9:e9:b3: 61:6b:54:2d:88:2b:ce:4e:6c:d7:19:3a:31:55:ce: ba:6b:22:a3:06:6a:81:7c:45:85:b1:c9:b1:ce:a4: bc:aa:c0:bf:79:72:45:3c:26:22:49:87:68:12:73: 37:a1:0d:5b:4f:69:2e:6e:fe:0f:03:57:f4:e6:f2: c9:a9:5b:3b:70:af:9c:76:23:07:48:17:6b:b5:28: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:34:4A:78:46:33:66:6D:15:D3:95:56:37:67:39:51:89:C5:DE:9E X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f9:a9:2c:2a:f8:cf:65:e3:1a:2d:7a:a4:f6:5f:4c:36:ea: ae:87:7f:f0:15:d8:54:c6:bf:ae:5b:66:28:e9:7a:74:e1:8d: 2b:66:d4:7f:d9:f7:6d:80:32:53:63:5d:3b:37:c1:bd:de:16: 02:28:64:f6:19:8b:f9:99:5b:ee:b2:fb:b8:3e:0c:ee:35:84: 1e:60:5e:b1:53:ae:f0:89:5a:a9:95:99:eb:70:a0:e3:ff:5e: ca:50:d0:8a:2b:4e:4b:68:ff:c4:6b:ca:ac:ca:c3:ac:c8:e3: 15:18:f6:12:e6:2d:ff:5d:21:7d:a2:a4:ed:b0:e0:9d:ba:a0: ed:f0:6b:7e:f1:9a:27:8b:1c:b5:28:95:d2:af:0f:44:ec:7d: 77:d6:ca:f6:0e:92:3d:70:a0:03:47:8b:64:a6:b8:6c:61:d9: 7d:f0:40:14:54:88:83:13:8f:21:d9:f2:0f:13:d8:88:c8:cc: 13:18:eb:98:6d:24:99:99:d8:29:b4:db:7d:c7:63:8f:41:59: cb:e7:60:38:38:c2:2b:24:15:19:46:29:fc:94:4a:4a:c1:7a: 39:f5:fb:8b:84:d3:af:10:24:73:49:02:bf:55:a4:f4:05:b4: c7:af:33:18:73:89:70:c5:0a:1a:c2:b8:17:db:8f:3b:30:c9: d3:8d:63:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICND0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjQwNTMxMTQxODA3WhcNMjQwNjA3MTQxODA3WjAYMRYwFAYD VQQDEw02NjU5ZGMxZi04YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq95fBeHJSUICHmozw9vS2b2Q73DAkUDrPfFnx6rbot47g7wFv2Kv1PmzAOg uUiOLui07zw8Se6ckQyoldDRV73cbF+bVRaTfEFK8sYshTR5KyJEyLQth4z3o3dt a029Mib3Icw3qV1GhK9rhLLcj8Liu7OuG3Dy8NeX6s0bzwmdgZveMhi3nd5wMVk6 LhX91OMns41XjkegZ0hO/NmxGDxvYtFYSjyAxa5EnclcRs/p6bNha1QtiCvOTmzX GToxVc66ayKjBmqBfEWFscmxzqS8qsC/eXJFPCYiSYdoEnM3oQ1bT2kubv4PA1f0 5vLJqVs7cK+cdiMHSBdrtSjw/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA0SnhG M2ZtFdOVVjdnOVGJxd6eMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3+aksKvjPZeMaLXqk9l9MNuquh3/wFdhUxr+uW2Yo6Xp04Y0rZtR/ 2fdtgDJTY107N8G93hYCKGT2GYv5mVvusvu4PgzuNYQeYF6xU67wiVqplZnrcKDj /17KUNCKK05LaP/Ea8qsysOsyOMVGPYS5i3/XSF9oqTtsOCduqDt8Gt+8Zonixy1 KJXSrw9E7H131sr2DpI9cKADR4tkprhsYdl98EAUVIiDE48h2fIPE9iIyMwTGOuY bSSZmdgptNt9x2OPQVnL52A4OMIrJBUZRin8lEpKwXo59fuLhNOvECRzSQK/VaT0 BbTHrzMYc4lwxQoawrgX2487MMnTjWPo -----END CERTIFICATE-----Generated at Fri May 31 15:08:08 2024 by rpki-client on console-fra.rpki-client.org