$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft File: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft (raw, json) Hash identifier: 4BUBVJIcf9azpUwQebbnpj+FoiaoFTAjgUrSVvOg45Q= Subject key identifier: 6A:0C:87:01:B5:5F:D6:83:B8:1C:BC:09:68:2D:40:0E:C1:07:10:B1 Authority key identifier: 0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 Certificate issuer: /CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft Manifest number: 0256 Signing time: Sun 19 May 2024 03:53:02 +0000 Manifest this update: Sun 19 May 2024 03:53:01 +0000 Manifest next update: Sun 26 May 2024 03:53:01 +0000 Files and hashes: 1: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl (hash: DYlI2y9EMzHRvn2pfdvpc6Xyf3298ljTjt2r6vn8DH0=) 2: C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa (hash: FKfLqdfUN3FoQKd+AqLAjArZUq2q5KxR6xwRj40YwlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Validity Not Before: May 19 03:53:01 2024 GMT Not After : May 26 03:53:01 2024 GMT Subject: CN=6649779d-b465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:8f:50:88:e4:5a:38:e1:3b:b0:eb:30:e5: b2:bf:9c:c6:f1:8c:2d:20:7e:d8:e6:42:cd:cc:38: 3f:ad:67:06:86:e8:1b:91:8d:5d:8c:71:93:78:be: f4:81:5e:1a:83:ba:eb:ff:4d:e5:a1:e3:b1:04:09: a0:4f:6d:15:3d:55:fa:36:3b:e8:37:90:5d:35:76: 6f:8a:7f:34:38:8a:c2:07:43:e7:e6:25:ea:8f:f7: 69:f1:13:6e:e8:28:a5:51:9a:65:78:2c:08:01:13: 54:a7:aa:9e:51:d4:5a:d1:6e:c2:16:b8:8f:1a:b9: d6:9b:e5:1d:60:bf:70:2b:43:53:07:46:22:e6:1c: f4:2d:77:cd:c4:a1:10:51:b9:3e:7a:13:6d:ea:0b: d7:7d:9a:66:c7:53:48:8a:c5:3c:cd:c7:ff:ca:fb: 52:25:cb:33:93:25:e5:44:7b:d2:71:01:f0:36:ce: 14:6d:ba:43:ae:4a:5a:6f:71:81:63:ca:e8:cd:b2: bb:68:23:9b:46:2a:ae:5c:d2:c9:24:e7:df:5f:6e: 67:5d:70:dc:9d:26:fb:8d:a4:42:67:a2:79:5b:1a: 13:21:53:78:50:20:f5:27:15:02:ce:84:db:ba:bc: 15:95:c5:c6:6c:5c:e9:fd:0b:6d:0b:db:f3:c2:50: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0C:87:01:B5:5F:D6:83:B8:1C:BC:09:68:2D:40:0E:C1:07:10:B1 X509v3 Authority Key Identifier: keyid:0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:fa:30:f4:ed:f3:9a:3a:4e:dd:76:95:93:f2:55:ab:85:d8: 57:b9:b0:5a:b4:a4:52:e8:65:bc:c6:2e:a4:56:19:00:35:83: 4c:a3:69:14:6f:cb:a2:33:3c:62:94:93:68:cf:5a:b9:3e:00: 16:07:6d:03:00:f9:c2:02:28:8e:75:d1:2a:da:fc:f3:4e:81: 04:a0:fd:7a:69:05:70:dc:f8:c8:33:ce:e5:ef:9d:12:4a:59: cd:1a:56:d9:72:a0:37:1d:5b:7a:59:26:26:b1:fa:06:94:15: b2:46:1d:c8:f2:a7:3e:04:1e:05:ea:4a:4c:35:42:11:ba:2c: c6:87:87:a0:49:c5:58:f9:39:23:93:ad:0b:91:34:b5:08:65: 7d:e5:7d:61:b3:41:eb:42:8f:b4:7f:8a:7e:67:26:38:9c:62: be:53:c3:be:fb:29:95:a4:e4:17:e8:08:47:cd:9f:47:9d:8a: 57:a8:2d:0e:40:e4:4d:55:6f:72:d3:09:18:68:97:6c:f8:ef: 43:5f:30:8c:bc:00:62:5a:aa:c4:92:30:7d:ee:70:b4:3d:06: f9:09:f8:d0:5b:e3:24:48:23:77:e8:10:2f:dc:0b:b9:e9:a6: 6d:f6:9f:d1:db:a0:e9:48:12:10:ea:d3:6a:4f:49:58:a5:7d: 1b:fa:7e:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0QzcxMTAvBgNVBAUTKDBENTU5NDg1NTMxMEQ5MTYwNjRCNzk5MTM3MENDOTY0 QzNEMkYzODQwHhcNMjQwNTE5MDM1MzAxWhcNMjQwNTI2MDM1MzAxWjAYMRYwFAYD VQQDEw02NjQ5Nzc5ZC1iNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaCPUIjkWjjhO7DrMOWyv5zG8YwtIH7Y5kLNzDg/rWcGhugbkY1djHGTeL70 gV4ag7rr/03loeOxBAmgT20VPVX6NjvoN5BdNXZvin80OIrCB0Pn5iXqj/dp8RNu 6CilUZpleCwIARNUp6qeUdRa0W7CFriPGrnWm+UdYL9wK0NTB0Yi5hz0LXfNxKEQ Ubk+ehNt6gvXfZpmx1NIisU8zcf/yvtSJcszkyXlRHvScQHwNs4UbbpDrkpab3GB Y8rozbK7aCObRiquXNLJJOffX25nXXDcnSb7jaRCZ6J5WxoTIVN4UCD1JxUCzoTb urwVlcXGbFzp/QttC9vzwlD9BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoMhwG1 X9aDuBy8CWgtQA7BBxCxMB8GA1UdIwQYMBaAFA1VlIVTENkWBkt5kTcMyWTD0vOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRDNy9DRjZFQzA0NEQw MTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJSWUdTM21STnd6SlpNUFM4 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWV1VoVk1RMlJZR1MzbVJOd3pKWk1QUzg0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTRDNy9DRjZFQzA0NEQwMTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJS WUdTM21STnd6SlpNUFM4NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU+jD07fOaOk7ddpWT8lWrhdhXubBatKRS6GW8xi6kVhkANYNMo2kU b8uiMzxilJNoz1q5PgAWB20DAPnCAiiOddEq2vzzToEEoP16aQVw3PjIM87l750S SlnNGlbZcqA3HVt6WSYmsfoGlBWyRh3I8qc+BB4F6kpMNUIRuizGh4egScVY+Tkj k60LkTS1CGV95X1hs0HrQo+0f4p+ZyY4nGK+U8O++ymVpOQX6AhHzZ9HnYpXqC0O QORNVW9y0wkYaJds+O9DXzCMvABiWqrEkjB97nC0PQb5CfjQW+MkSCN36BAv3Au5 6aZt9p/R26DpSBIQ6tNqT0lYpX0b+n6c -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org