$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft File: DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json) Hash identifier: J5P4JpLZUKcewU9x5nHBmq5xmHuIvO4ZaexCTV9eOgI= Subject key identifier: F3:57:28:A6:8F:19:50:3E:FE:1C:FB:FB:44:2B:BD:CB:4F:31:4F:CE Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 Certificate issuer: /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft Manifest number: 41 Signing time: Mon 13 May 2024 08:15:47 +0000 Manifest this update: Mon 13 May 2024 08:15:47 +0000 Manifest next update: Mon 20 May 2024 08:15:47 +0000 Files and hashes: 1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: BZEM1B73iMAuzxCxW/dmqbJIZuXtcZYpd+DFPPyjhQ8=) 2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: ExCmATibx10XsjNVYFRzqOLQtC3WU3C6cM5a5cjLZq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 07:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1 Validity Not Before: May 13 08:15:47 2024 GMT Not After : May 20 08:15:47 2024 GMT Subject: CN=6641cc33-8160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:ac:98:61:8d:90:69:e3:5d:70:3e:0b:5c: 63:7a:58:1d:4e:0d:dd:18:6f:de:22:c1:b8:e6:d7: 1c:39:40:63:13:38:27:77:f3:ee:62:9e:39:5a:e0: 40:01:87:5e:31:5a:3d:08:38:b8:d4:74:b2:48:d4: 87:6b:d5:ad:d5:c4:f8:c6:9d:ea:a6:76:a7:45:c4: 30:ee:18:5e:b7:35:e9:c4:05:8b:48:83:75:dd:da: 90:b5:c8:9b:73:d5:ea:48:72:0a:66:45:9a:5b:37: 19:4e:e9:89:1a:5e:c3:0e:45:67:60:87:84:ae:43: 5e:ac:7d:2b:05:97:d0:f8:f6:55:24:f8:f2:db:02: 8c:ad:65:85:52:95:93:96:88:97:40:14:7d:51:1f: 76:c8:25:34:79:e1:91:86:97:4e:7a:0d:47:a9:a2: 72:22:e1:88:15:00:de:a4:19:53:14:4f:89:d8:b6: 03:eb:68:0b:09:ee:ef:39:e0:53:31:69:00:39:48: ff:4e:1c:29:51:53:1a:c4:df:f8:e8:b9:76:c2:c7: 8d:53:60:53:66:20:6b:42:80:d3:12:97:2c:22:35: c1:26:71:e3:a2:3a:41:18:bd:5b:de:00:64:37:e1: 66:22:9f:a1:5b:23:19:2b:f9:44:05:d9:bc:37:b0: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:57:28:A6:8F:19:50:3E:FE:1C:FB:FB:44:2B:BD:CB:4F:31:4F:CE X509v3 Authority Key Identifier: keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:47:bf:2a:f6:15:c9:03:eb:b7:6f:1a:0e:79:8f:82:9b:a6: 24:ee:f1:3f:0a:10:79:08:c3:0a:34:35:32:b4:fe:da:db:a4: 71:0d:5a:81:70:6e:9b:7f:2b:44:f5:56:88:8a:c0:0e:e7:c5: 5d:7d:f1:90:f5:12:6a:d6:ef:78:32:66:7d:e4:0a:a7:b7:33: 3e:2f:e1:f6:8d:61:f9:26:64:6d:26:5d:18:62:97:a2:40:59: e1:f6:28:76:34:07:4f:96:fe:28:28:b8:2e:05:67:d0:8a:a9: 3e:1e:3b:ab:27:5a:51:c6:74:d6:82:7b:29:42:09:9d:f7:c5: e2:f2:b9:e6:f1:3c:d9:44:1d:fc:97:17:29:7d:d8:8c:5e:6c: 3c:28:c2:d5:b1:c3:c5:b0:da:e5:af:7b:93:eb:c2:a2:e3:c9: 73:0a:a8:95:bc:7e:82:7b:6a:da:3f:f5:b1:25:8a:ba:33:41: 0e:87:2d:fc:50:d7:57:7e:0b:3d:29:2f:94:85:3e:27:4d:6f: 28:25:c1:95:d2:1c:1f:6c:d5:5a:f8:f0:59:05:34:a3:e0:cf: f5:0a:57:63:47:6a:ca:f7:57:fe:03:62:6a:b7:50:1c:66:52: 1e:56:cd:48:8d:d9:11:51:1e:91:88:5a:25:92:a9:a2:54:96: b9:06:8f:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkQ3QTExMC8GA1UEBRMoMEU5QUNEODA3MTE0QjU4RjcxOEE5QzJCODU5NTI2MjVF NkRCMkJEMTAeFw0yNDA1MTMwODE1NDdaFw0yNDA1MjAwODE1NDdaMBgxFjAUBgNV BAMTDTY2NDFjYzMzLTgxNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDQ6yYYY2QaeNdcD4LXGN6WB1ODd0Yb94iwbjm1xw5QGMTOCd38+5injla4EAB h14xWj0IOLjUdLJI1Idr1a3VxPjGneqmdqdFxDDuGF63NenEBYtIg3Xd2pC1yJtz 1epIcgpmRZpbNxlO6YkaXsMORWdgh4SuQ16sfSsFl9D49lUk+PLbAoytZYVSlZOW iJdAFH1RH3bIJTR54ZGGl056DUeponIi4YgVAN6kGVMUT4nYtgPraAsJ7u854FMx aQA5SP9OHClRUxrE3/jouXbCx41TYFNmIGtCgNMSlywiNcEmceOiOkEYvVveAGQ3 4WYin6FbIxkr+UQF2bw3sEffAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU81copo8Z UD7+HPv7RCu9y08xT84wHwYDVR0jBBgwFoAUDprNgHEUtY9xipwrhZUmJebbK9Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2RDdBLzkzRDI0RjRBQjVD ODExRUVCNEEyNEE2RkM0RjlBRTAyL0Rwck5nSEVVdFk5eGlwd3JoWlVtSmViYks5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHByTmdIRVV0WTl4aXB3cmhaVW1KZWJiSzlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 RDdBLzkzRDI0RjRBQjVDODExRUVCNEEyNEE2RkM0RjlBRTAyL0Rwck5nSEVVdFk5 eGlwd3JoWlVtSmViYks5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKxHvyr2FckD67dvGg55j4KbpiTu8T8KEHkIwwo0NTK0/trbpHENWoFw bpt/K0T1VoiKwA7nxV198ZD1EmrW73gyZn3kCqe3Mz4v4faNYfkmZG0mXRhil6JA WeH2KHY0B0+W/igouC4FZ9CKqT4eO6snWlHGdNaCeylCCZ33xeLyuebxPNlEHfyX Fyl92IxebDwowtWxw8Ww2uWve5PrwqLjyXMKqJW8foJ7ato/9bElirozQQ6HLfxQ 11d+Cz0pL5SFPidNbyglwZXSHB9s1Vr48FkFNKPgz/UKV2NHasr3V/4DYmq3UBxm Uh5WzUiN2RFRHpGIWiWSqaJUlrkGj1I= -----END CERTIFICATE-----Generated at Mon May 13 12:06:56 2024 by rpki-client on console-ams.rpki-client.org