$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json) Hash identifier: eo207Zee+VfBS5h0VounVZEv/aVNJKOxFyLEQG5D6dc= Subject key identifier: C6:3B:40:EC:6D:21:F2:AA:A4:5D:24:F6:0F:94:16:6A:08:84:7D:7F Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Certificate serial: 33D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft Manifest number: 33CE Signing time: Sat 18 May 2024 14:17:36 +0000 Manifest this update: Sat 18 May 2024 14:17:36 +0000 Manifest next update: Sat 25 May 2024 14:17:36 +0000 Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: SO5r7Zg+CyxQIA1voxC0KUYJVoUrPZzAbyCpny1l9Y0=) 2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: dY/k1RoDFoYbxGUxW8Yd7Na7yKGxnF2Cj2HCzStkWDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13269 (0x33d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Validity Not Before: May 18 14:17:36 2024 GMT Not After : May 25 14:17:36 2024 GMT Subject: CN=6648b880-dc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:30:6d:71:ce:b0:e3:1a:0d:8f:93:45:de: c7:08:d4:23:2b:9a:48:5e:6d:ec:62:f6:ce:6f:6f: 9d:87:0d:42:72:16:97:66:fc:40:f6:8a:5b:f9:af: 62:93:30:bc:2e:2c:02:60:66:01:dd:30:92:0b:27: 03:e8:f3:39:b5:b5:fa:1f:bd:7e:e5:b5:81:20:4f: 7a:d8:4b:81:72:2b:ab:5c:40:6b:82:e6:7c:89:93: d4:df:d9:85:d0:d5:a9:f6:be:83:e6:e7:68:17:dc: c1:3e:c2:50:4a:eb:cd:a4:a0:f3:78:65:52:5d:18: 67:77:68:f1:ce:14:ee:db:ea:99:e5:c8:fd:d4:08: f0:35:ad:f7:0d:1b:7a:b6:15:17:d4:cf:78:d0:0a: 97:fb:03:c2:9b:ee:82:69:99:8d:6a:46:9c:77:48: d5:99:d7:6e:af:0b:c2:f8:06:24:b6:eb:70:d1:cd: e3:24:50:07:ec:a2:31:e8:0d:d3:30:98:fc:4e:d0: 42:0d:2c:6e:9e:d4:a4:38:45:57:bd:46:7b:a5:27: 9d:bf:48:a5:04:0a:81:a1:b3:dc:3b:d1:7f:75:5d: 8f:44:76:8d:44:8a:f0:55:2a:0a:50:7b:ab:4a:9d: 76:99:b6:76:20:04:8e:58:3f:2c:b6:34:aa:3d:64: 39:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3B:40:EC:6D:21:F2:AA:A4:5D:24:F6:0F:94:16:6A:08:84:7D:7F X509v3 Authority Key Identifier: keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bb:53:94:c4:30:92:b6:86:f0:39:74:49:36:6b:27:5d:65: 54:f0:c1:9a:00:5c:33:51:e6:3f:80:14:5b:55:a3:7f:b0:fc: 02:f5:75:75:90:c6:6c:f9:94:61:2a:b3:35:59:36:82:f7:c0: b2:28:ec:4c:35:4a:9a:44:8f:7c:0c:b0:04:55:d6:37:a2:fb: ed:f8:61:64:70:86:ad:9e:79:71:8e:ad:4b:ce:25:23:cb:6c: 9a:84:eb:e8:7f:b4:b0:76:36:20:70:d7:c5:4c:cf:68:93:b5: eb:5a:24:db:ef:d0:3a:6f:61:43:4a:5c:d4:f3:fc:04:f5:6f: ae:4f:da:8a:0b:2f:d9:16:89:07:7f:30:46:e3:ba:03:ce:07: 0b:67:b0:d9:5b:48:f4:6c:e4:67:5c:07:ab:02:ae:d0:d1:1d: b1:bb:21:42:34:39:b5:34:fa:7f:7b:c1:0d:33:29:08:78:16: 94:de:5c:eb:2a:d4:22:3e:1c:fa:ec:09:2a:28:b8:33:af:59: 7e:02:7e:70:4c:7a:f1:72:a3:db:c8:73:22:7a:75:a0:4f:2c: 69:8c:d3:bc:2c:c8:81:7c:58:60:65:a3:83:c0:82:6c:26:a1: cf:c5:d3:d0:28:4b:8e:62:f4:4a:e1:3a:b8:b7:71:fe:71:fd: 30:d4:08:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG MzFEODQwOTcwHhcNMjQwNTE4MTQxNzM2WhcNMjQwNTI1MTQxNzM2WjAYMRYwFAYD VQQDEw02NjQ4Yjg4MC1kYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7IwbXHOsOMaDY+TRd7HCNQjK5pIXm3sYvbOb2+dhw1CchaXZvxA9opb+a9i kzC8LiwCYGYB3TCSCycD6PM5tbX6H71+5bWBIE962EuBciurXEBrguZ8iZPU39mF 0NWp9r6D5udoF9zBPsJQSuvNpKDzeGVSXRhnd2jxzhTu2+qZ5cj91AjwNa33DRt6 thUX1M940AqX+wPCm+6CaZmNakacd0jVmddurwvC+AYktutw0c3jJFAH7KIx6A3T MJj8TtBCDSxuntSkOEVXvUZ7pSedv0ilBAqBobPcO9F/dV2PRHaNRIrwVSoKUHur Sp12mbZ2IASOWD8stjSqPWQ5wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY7QOxt IfKqpF0k9g+UFmoIhH1/MB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDYwRi81RTdFRDVFNDFENkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdI M1ZOUkZoT1FFdkR6SFlRSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOu1OUxDCStobwOXRJNmsnXWVU8MGaAFwzUeY/gBRbVaN/sPwC9XV1 kMZs+ZRhKrM1WTaC98CyKOxMNUqaRI98DLAEVdY3ovvt+GFkcIatnnlxjq1LziUj y2yahOvof7SwdjYgcNfFTM9ok7XrWiTb79A6b2FDSlzU8/wE9W+uT9qKCy/ZFokH fzBG47oDzgcLZ7DZW0j0bORnXAerAq7Q0R2xuyFCNDm1NPp/e8ENMykIeBaU3lzr KtQiPhz67AkqKLgzr1l+An5wTHrxcqPbyHMienWgTyxpjNO8LMiBfFhgZaODwIJs JqHPxdPQKEuOYvRK4Tq4t3H+cf0w1AhO -----END CERTIFICATE-----Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org