$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft File: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json) Hash identifier: xK5h79Rh7Xl7pf52+95CdfC8IkxD0U2doLTpSmx6pG0= Subject key identifier: 91:89:6E:C7:27:5C:EB:8E:B9:2F:75:40:7D:DB:C3:6C:03:3C:AD:82 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft Manifest number: 038A Signing time: Sat 18 May 2024 17:46:01 +0000 Manifest this update: Sat 18 May 2024 17:46:00 +0000 Manifest next update: Sat 25 May 2024 17:46:00 +0000 Files and hashes: 1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: MzgUxDLhtCuPYsG/zfr0SBigJikGIqP1OYHXbz8qVzg=) 2: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: sxrmm3JlL/k0ct5wIWAW6jZv0BJa2muxpRwSyTLfsOs=) 3: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: yVqJXkyhmawyWOzSapKy8QYIEjCOWt6iWvrokohhmLc=) 4: 1479C514596A11ECB1394271C4F9AE02.roa (hash: BB94ioWlwmy+5Fk/XHM3As2KqIhpAGjiHmhVZf8F+aE=) 5: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: ozCsjqAuq1SouBvB98Jf4Yq1iuHvv/bdbzijdLA64Oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: May 18 17:46:00 2024 GMT Not After : May 25 17:46:00 2024 GMT Subject: CN=6648e959-0fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:58:71:b7:85:3f:5a:46:df:f9:62:1c:69: 0b:c6:ff:ec:b1:89:d8:08:47:0d:72:01:2a:06:a6: d9:93:a5:1e:60:72:a1:23:87:aa:aa:69:4d:f7:7c: 6d:29:f8:02:6f:95:ad:88:0a:2a:ab:b4:2c:ef:8c: 8d:51:bc:ad:17:05:ef:0e:e6:c4:49:7d:b9:53:78: 6d:52:0c:5e:fb:7f:83:cc:63:7c:14:a9:b3:99:e2: 8f:1d:2f:b6:1e:5f:6d:88:0f:28:87:91:9d:39:a1: 18:27:c9:53:a5:89:d5:15:4f:c6:9f:50:9a:7f:c4: 2d:58:f4:05:ec:1f:d4:68:f7:38:ed:ae:8a:be:b8: 02:6f:f1:a5:bf:3d:a8:6d:45:06:14:ac:ed:cf:8f: 35:05:e2:8a:5c:50:9e:13:84:c0:4a:ba:7b:09:7d: 0e:6c:ae:5c:6d:84:9f:71:3c:d1:6e:99:30:eb:1d: 83:92:06:ba:81:41:bc:e8:1d:0d:56:e6:f2:b7:29: be:81:f8:ee:37:ce:21:65:5f:11:88:f4:13:13:b3: 95:54:04:2f:7d:7c:90:6d:36:19:0e:a4:fa:a7:f0: a1:5a:c6:2e:53:45:40:e4:de:1c:04:01:ab:36:63: 33:39:8a:dc:67:f5:b3:2b:19:77:3b:0c:67:be:07: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:89:6E:C7:27:5C:EB:8E:B9:2F:75:40:7D:DB:C3:6C:03:3C:AD:82 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:19:49:e0:1d:2a:52:60:88:06:b2:53:a3:47:2d:4c:41:85: 6f:bf:3b:70:31:ef:1c:24:19:c1:3d:da:98:86:ab:ca:3f:6d: 58:50:98:36:ff:c0:92:bf:8e:fa:fa:6a:7d:d9:37:6c:bf:82: 92:06:58:2d:54:2a:0b:25:1d:a8:e0:41:f6:8d:1d:b1:5d:12: c1:21:e5:76:16:4a:03:2e:47:b5:cc:28:39:13:d6:3d:b6:7a: 0e:2c:d3:33:15:17:32:cc:f3:bb:2e:77:9d:7d:2c:2c:b8:e2: 39:fa:f4:d8:85:60:69:ba:da:c7:98:ee:5c:a4:32:63:ca:d4: cb:8f:91:90:11:0f:51:ab:db:0f:5a:ca:8d:42:b2:64:1c:8f: 39:6c:dd:b2:e2:3a:14:bd:bf:b1:05:08:a8:77:d4:e7:36:08: d3:03:cd:c5:b4:d3:5d:e1:b0:90:e2:29:f2:7a:02:bd:88:1d: e3:b1:9d:ce:db:4c:40:7f:d5:bd:3f:53:cf:1f:3c:bb:2c:1b: 64:b9:17:55:2b:2a:82:07:b6:2e:bb:5f:38:cc:4b:e0:2e:a1: 7c:7a:1e:fa:82:37:a9:fb:ae:7a:42:f4:7e:3e:51:d7:78:60: 9b:d6:b6:fd:af:f3:e2:64:9d:79:8e:37:25:f4:be:7e:0c:a3: 38:d3:6e:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjQwNTE4MTc0NjAwWhcNMjQwNTI1MTc0NjAwWjAYMRYwFAYD VQQDEw02NjQ4ZTk1OS0wZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP1YcbeFP1pG3/liHGkLxv/ssYnYCEcNcgEqBqbZk6UeYHKhI4eqqmlN93xt KfgCb5WtiAoqq7Qs74yNUbytFwXvDubESX25U3htUgxe+3+DzGN8FKmzmeKPHS+2 Hl9tiA8oh5GdOaEYJ8lTpYnVFU/Gn1Caf8QtWPQF7B/UaPc47a6KvrgCb/Glvz2o bUUGFKztz481BeKKXFCeE4TASrp7CX0ObK5cbYSfcTzRbpkw6x2Dkga6gUG86B0N Vubytym+gfjuN84hZV8RiPQTE7OVVAQvfXyQbTYZDqT6p/ChWsYuU0VA5N4cBAGr NmMzOYrcZ/WzKxl3OwxnvgdvWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGJbscn XOuOuS91QH3bw2wDPK2CMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xf Z090VzluVURJN0ZrcHcyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnGUngHSpSYIgGslOjRy1MQYVvvztwMe8cJBnBPdqYhqvKP21YUJg2 /8CSv476+mp92Tdsv4KSBlgtVCoLJR2o4EH2jR2xXRLBIeV2FkoDLke1zCg5E9Y9 tnoOLNMzFRcyzPO7LnedfSwsuOI5+vTYhWBputrHmO5cpDJjytTLj5GQEQ9Rq9sP WsqNQrJkHI85bN2y4joUvb+xBQiod9TnNgjTA83FtNNd4bCQ4inyegK9iB3jsZ3O 20xAf9W9P1PPHzy7LBtkuRdVKyqCB7Yuu184zEvgLqF8eh76gjep+656QvR+PlHX eGCb1rb9r/PiZJ15jjcl9L5+DKM4027T -----END CERTIFICATE-----Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org