$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft File: dOW7m208x_jCmoO9yEkrllnw7hc.mft (raw, json) Hash identifier: /aZ0gs03wDoyHwyVNj9rn9akGXZh2C+YUpOqkCS3lIY= Subject key identifier: 4A:46:1E:5D:A0:E3:6B:EF:54:5D:E4:EA:18:47:CF:E7:58:2E:7F:71 Authority key identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 Certificate issuer: /CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17 Certificate serial: 0CA3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft Manifest number: 0BDD Signing time: Sat 18 May 2024 20:10:58 +0000 Manifest this update: Sat 18 May 2024 20:10:57 +0000 Manifest next update: Sat 25 May 2024 20:10:57 +0000 Files and hashes: 1: dOW7m208x_jCmoO9yEkrllnw7hc.crl (hash: 85ghwojT/k/SmadOYvuiaIM7IeFVyu53UbbQZLOvjGE=) 2: 2DD04222580811EBB9B04151C4F9AE02.roa (hash: OoMvnGi/5Kis5mQPmBB1XD5/HuXuRkIzO5m9GZ1zTFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17 Validity Not Before: May 18 20:10:57 2024 GMT Not After : May 25 20:10:57 2024 GMT Subject: CN=66490b52-1bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:5c:25:d5:e9:0e:09:5e:d7:a0:24:1d:be: 2d:8e:09:96:6e:64:44:c3:aa:39:71:6c:17:34:85: 82:8c:ec:df:09:a5:15:cb:5c:7f:b7:69:e2:7a:3b: 4d:87:7c:a9:8a:51:13:4d:5c:91:02:e4:ba:14:26: 3f:17:bf:74:c7:56:c1:f6:82:ae:2e:f5:11:59:ab: 3d:85:18:65:02:6b:97:df:11:57:ed:f1:3c:58:81: c3:e9:56:e9:38:d5:96:5e:15:e0:52:26:35:a5:bc: ac:b1:ba:bf:ab:99:50:7e:18:e9:94:67:d8:11:0b: bd:a6:3b:f9:3e:c6:a7:d6:7f:e2:fa:d0:66:ef:04: 3d:60:f4:44:76:92:9d:9e:e1:2a:d3:91:b7:06:a3: 6e:58:36:78:8a:bc:c9:a6:40:3b:92:03:7c:f2:df: d8:24:c4:4d:db:68:1a:25:46:3c:e9:c1:08:57:1a: 6f:96:9b:2b:f7:e5:ae:49:a7:93:db:b2:3d:65:78: 51:25:a4:a8:a7:d7:97:eb:89:a2:a2:0e:22:7c:e0: d4:a3:f7:78:b0:5a:7f:94:d7:20:59:79:f7:40:ec: 14:9d:c2:f2:75:8d:07:cf:3e:af:de:e5:69:f3:19: a6:b6:2f:36:8d:01:bf:bf:8d:0b:cf:de:5d:39:0f: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:46:1E:5D:A0:E3:6B:EF:54:5D:E4:EA:18:47:CF:E7:58:2E:7F:71 X509v3 Authority Key Identifier: keyid:74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:df:83:87:e6:cd:c1:5a:59:b0:da:69:f8:b9:5a:27:18:67: e4:fd:01:49:53:fb:19:cb:57:d6:f6:e2:9c:b2:5e:ec:af:56: f4:6a:ea:c1:26:32:f9:9a:fb:a2:40:9c:c2:b5:d7:fc:a8:f4: be:45:15:8d:83:84:d5:8b:78:0b:5e:5a:0f:40:fb:73:03:e2: 6f:6f:05:f0:ae:6e:b7:26:d1:f9:1f:2c:8e:10:d7:75:2e:93: 23:19:b2:a1:14:59:70:9f:e7:4c:78:70:f0:10:03:ee:24:34: e7:ba:ce:63:47:1c:0b:f6:e1:f7:89:f7:9c:bb:2c:da:99:1f: f6:e4:9c:db:be:98:e5:0f:50:06:40:29:35:6f:38:06:6f:0c: 1d:28:11:7b:34:09:04:39:3f:37:4e:27:06:68:f0:2e:6d:d2: e0:00:d5:d6:4a:4c:fd:f3:22:9f:4c:1c:2e:a2:72:65:ce:bb: bb:f2:86:17:19:8d:60:e1:e7:ed:19:8d:12:2f:15:c6:18:21: f5:73:ed:be:a4:c2:b4:63:4e:ec:23:e3:e3:65:00:5f:85:a7: e7:bf:eb:a6:ea:a3:96:52:10:89:8a:7f:71:04:1b:36:4a:8c: 84:59:a6:e2:e6:0e:e7:0c:32:a5:ef:48:92:74:00:cc:aa:07: cb:27:26:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKDc0RTVCQjlCNkQzQ0M3RjhDMjlBODNCREM4NDkyQjk2 NTlGMEVFMTcwHhcNMjQwNTE4MjAxMDU3WhcNMjQwNTI1MjAxMDU3WjAYMRYwFAYD VQQDEw02NjQ5MGI1Mi0xYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA129cJdXpDgle16AkHb4tjgmWbmREw6o5cWwXNIWCjOzfCaUVy1x/t2niejtN h3ypilETTVyRAuS6FCY/F790x1bB9oKuLvURWas9hRhlAmuX3xFX7fE8WIHD6Vbp ONWWXhXgUiY1pbyssbq/q5lQfhjplGfYEQu9pjv5Psan1n/i+tBm7wQ9YPREdpKd nuEq05G3BqNuWDZ4irzJpkA7kgN88t/YJMRN22gaJUY86cEIVxpvlpsr9+WuSaeT 27I9ZXhRJaSop9eX64miog4ifODUo/d4sFp/lNcgWXn3QOwUncLydY0Hzz6v3uVp 8xmmti82jQG/v40Lz95dOQ83ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpGHl2g 42vvVF3k6hhHz+dYLn9xMB8GA1UdIwQYMBaAFHTlu5ttPMf4wpqDvchJK5ZZ8O4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9EOTY0QjQ4MjMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhfakNtb085eUVrcmxsbnc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RPVzdtMjA4eF9qQ21vTzl5RWtybGxudzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9EOTY0QjQ4MjMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhf akNtb085eUVrcmxsbnc3aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDV34OH5s3BWlmw2mn4uVonGGfk/QFJU/sZy1fW9uKcsl7sr1b0aurB JjL5mvuiQJzCtdf8qPS+RRWNg4TVi3gLXloPQPtzA+JvbwXwrm63JtH5HyyOENd1 LpMjGbKhFFlwn+dMeHDwEAPuJDTnus5jRxwL9uH3ifecuyzamR/25JzbvpjlD1AG QCk1bzgGbwwdKBF7NAkEOT83TicGaPAubdLgANXWSkz98yKfTBwuonJlzru78oYX GY1g4eftGY0SLxXGGCH1c+2+pMK0Y07sI+PjZQBfhafnv+um6qOWUhCJin9xBBs2 SoyEWabi5g7nDDKl70iSdADMqgfLJyby -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org