$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: Opw2SU1/veYdYERgnW4jn3eT+AEc9qznfJEqsGVKYfg= Subject key identifier: 1E:96:05:54:B4:B9:2B:C2:62:B3:B6:CA:1B:0D:ED:57:E3:75:45:4B Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 135A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 1349 Signing time: Sat 18 May 2024 17:32:47 +0000 Manifest this update: Sat 18 May 2024 17:32:46 +0000 Manifest next update: Sat 25 May 2024 17:32:46 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: R0SGbAo7fkA++SkGQeSf59DdkURZ8Mb+U1j8vxcr9Us=) 2: 3E116486891E11EAB5188575C4F9AE02.roa (hash: YGUgLvoISsHndI8vl7wHnCug9siHPrjVKAPfmpJGZqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4954 (0x135a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: May 18 17:32:46 2024 GMT Not After : May 25 17:32:46 2024 GMT Subject: CN=6648e63f-98a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:b3:2a:f9:9b:a7:e6:34:20:40:b0:84:45: 89:75:48:02:ce:1a:9e:ed:d1:8f:ce:f0:54:c7:ce: e6:3a:de:29:7f:8f:ca:c2:39:5c:93:59:7e:1c:68: 2d:f0:b1:0b:ec:0c:91:95:a3:ca:9f:72:26:ff:aa: 2c:2e:be:83:c4:3b:68:0a:60:30:1b:a8:06:d0:9d: 38:b3:80:93:20:e5:fa:87:d5:f8:da:bb:a4:ca:9e: 1c:cd:e5:48:ea:46:1e:bb:1c:2b:45:51:71:10:ef: 0e:f8:cb:0c:1e:1e:6e:3d:e9:1c:66:81:37:65:ec: ba:41:4a:19:bf:fd:74:ee:e0:cf:7c:39:6c:e1:4c: cb:ea:91:c3:21:cd:01:b7:07:d9:9e:68:55:e3:65: ab:47:5a:f4:99:9b:f0:f3:7f:b8:85:a1:e9:d6:c2: 0b:76:3b:c6:d9:e0:77:55:b9:33:98:00:78:91:03: 35:84:2f:b1:7f:c2:2b:0e:dd:a9:b0:08:97:12:c8: f0:46:b8:38:09:80:54:06:d8:27:e4:ce:cf:15:d2: c2:18:a6:8d:fe:ea:15:46:47:eb:7c:20:eb:57:a4: 84:75:b5:bf:1d:fc:4d:0b:3e:d2:02:44:1a:65:e7: 13:8d:04:f3:1b:56:03:2e:6e:a1:89:31:32:38:4e: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:96:05:54:B4:B9:2B:C2:62:B3:B6:CA:1B:0D:ED:57:E3:75:45:4B X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:78:08:f4:51:58:bc:8c:5a:05:0c:5b:d4:7f:83:dc:2c:b7: 68:42:3d:71:4a:c7:0a:62:2e:7f:93:29:ba:86:7e:5d:70:a2: 2f:ad:f9:ee:74:c6:ff:40:d6:be:6b:b5:2e:b6:7b:35:b5:6b: 73:2a:fc:61:24:21:f1:3e:f8:dc:ca:fb:0c:ce:5f:23:45:92: 39:81:4f:b3:66:45:00:9a:96:60:61:37:49:fe:73:0c:53:62: db:e4:d2:e7:0d:1f:bd:8e:e3:b7:88:85:3e:81:e6:08:c8:92: c2:04:23:3a:ff:30:94:ee:e9:4d:8e:4a:56:3d:d0:56:c1:fe: fc:14:d7:80:8e:c3:d0:27:38:53:a9:1a:57:8c:9c:b7:e9:01: d3:23:54:97:a9:c2:82:3d:ac:46:29:d6:35:06:a3:76:58:44: f1:b0:67:35:c5:17:51:f0:b2:71:07:a4:6c:dc:1a:41:e0:b2: 3e:3b:48:2c:1e:14:07:2d:7d:4e:46:2c:52:3a:ad:bd:2f:38: 86:ee:c1:38:b0:37:9f:93:d8:f3:9f:13:38:6a:31:42:bc:b6: 11:75:05:9e:38:ff:e5:5f:a2:07:b6:a6:c4:c0:22:6b:e9:b4: 14:b1:4f:c2:07:c9:6c:2c:a9:49:24:e2:4f:d8:e9:91:74:c6: fd:d4:ea:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjQwNTE4MTczMjQ2WhcNMjQwNTI1MTczMjQ2WjAYMRYwFAYD VQQDEw02NjQ4ZTYzZi05OGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CGzKvmbp+Y0IECwhEWJdUgCzhqe7dGPzvBUx87mOt4pf4/Kwjlck1l+HGgt 8LEL7AyRlaPKn3Im/6osLr6DxDtoCmAwG6gG0J04s4CTIOX6h9X42rukyp4czeVI 6kYeuxwrRVFxEO8O+MsMHh5uPekcZoE3Zey6QUoZv/107uDPfDls4UzL6pHDIc0B twfZnmhV42WrR1r0mZvw83+4haHp1sILdjvG2eB3VbkzmAB4kQM1hC+xf8IrDt2p sAiXEsjwRrg4CYBUBtgn5M7PFdLCGKaN/uoVRkfrfCDrV6SEdbW/HfxNCz7SAkQa ZecTjQTzG1YDLm6hiTEyOE52IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6WBVS0 uSvCYrO2yhsN7VfjdUVLMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEeAj0UVi8jFoFDFvUf4PcLLdoQj1xSscKYi5/kym6hn5dcKIvrfnu dMb/QNa+a7Uutns1tWtzKvxhJCHxPvjcyvsMzl8jRZI5gU+zZkUAmpZgYTdJ/nMM U2Lb5NLnDR+9juO3iIU+geYIyJLCBCM6/zCU7ulNjkpWPdBWwf78FNeAjsPQJzhT qRpXjJy36QHTI1SXqcKCPaxGKdY1BqN2WETxsGc1xRdR8LJxB6Rs3BpB4LI+O0gs HhQHLX1ORixSOq29LziG7sE4sDefk9jznxM4ajFCvLYRdQWeOP/lX6IHtqbEwCJr 6bQUsU/CB8lsLKlJJOJP2OmRdMb91OqS -----END CERTIFICATE-----Generated at Sat May 18 18:12:31 2024 by rpki-client on console-fra.rpki-client.org