$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: FlIlMzESGuxKVngtJ95jRyauruL0epDvrONe1l/v0X8= Subject key identifier: C3:3D:A9:07:4D:E8:17:E9:58:D8:D6:ED:94:F1:AB:3B:04:A8:AF:C5 Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 0483 Signing time: Sun 19 May 2024 01:40:10 +0000 Manifest this update: Sun 19 May 2024 01:40:09 +0000 Manifest next update: Sun 26 May 2024 01:40:09 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: VzeNgYWeOqmX054lEctW/e+KUPVJ7KjkNEKrW2bKfMs=) 2: 97A9EA446CE211EEA0262334C4F9AE02.roa (hash: svIhPcyfiCXwkFUhbyaAnIHzjx8Jl2I2WGfWRPG19MY=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: bTBIulT5DOVNDlGpqruh0biVPZ8saRMpFENxpI9tQtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: May 19 01:40:09 2024 GMT Not After : May 26 01:40:09 2024 GMT Subject: CN=6649587a-2a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:91:a4:18:34:6c:3a:67:3f:18:1a:a3:f6: 84:d1:55:31:3c:b0:e9:db:f3:ac:e9:e7:fd:41:2f: 34:ab:1a:95:f6:1c:42:fb:4a:e6:cc:5d:59:f2:ad: 73:4b:b5:76:6f:28:6a:8f:df:73:77:e9:da:69:11: 7a:86:87:39:06:9b:cd:4a:82:59:cd:5c:cc:fb:66: dc:f5:de:5f:70:6d:af:83:30:4a:c3:03:08:ac:ce: af:a6:1a:db:a1:ee:a5:b5:44:50:4f:87:43:06:5c: 24:62:78:8d:89:02:88:eb:14:7d:f5:fa:00:31:ae: 9d:67:ea:56:f1:d3:1f:eb:f3:51:12:bb:65:25:27: 9e:50:64:2f:38:16:20:e2:cb:70:ca:16:04:22:7e: 5b:84:ed:e0:a7:0a:41:37:9d:45:75:9a:a0:6c:88: 4a:34:d9:0d:c6:fb:61:31:7f:d1:a9:64:70:7b:50: 40:1c:a1:cb:54:4d:65:e9:92:7f:51:d9:19:8e:15: 91:14:de:eb:9c:4b:72:21:ee:69:2b:31:9f:1e:cf: 6c:84:8e:6d:98:96:6f:02:36:41:a4:28:36:06:4e: 30:78:fe:d5:a6:9b:cc:59:f7:70:3a:d8:2d:48:bd: 82:e4:18:d3:f1:b6:d6:11:c7:ec:80:52:fc:21:b7: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3D:A9:07:4D:E8:17:E9:58:D8:D6:ED:94:F1:AB:3B:04:A8:AF:C5 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:f5:b0:18:44:37:de:e5:85:80:7c:7c:9d:91:ba:56:6d:c9: a3:0e:0f:54:bf:8a:47:a4:62:c9:a1:06:f0:f9:a9:b0:98:cc: fe:00:1f:1d:bb:db:2f:e4:89:97:ea:c5:7a:c3:7a:35:80:69: 2d:e6:fc:ea:1e:f8:4c:4f:38:87:45:21:63:25:a0:03:bf:02: a1:6c:d3:e3:74:df:23:64:91:d8:34:d9:97:ec:05:d0:af:b5: 80:13:e8:91:39:02:78:bb:3e:02:22:da:a9:7b:d9:58:8a:a9: 39:b7:75:05:5e:07:94:71:60:e2:02:f6:04:fe:ca:51:96:be: ac:61:74:62:c3:67:15:87:13:fa:80:66:8e:4c:d4:6f:a5:ee: d9:46:df:e0:97:7d:a2:3a:75:54:e7:60:88:c0:c4:86:58:3c: fd:5b:f9:99:ba:c6:00:9c:76:a5:ee:54:8a:7b:34:ab:53:42: 9b:e3:ee:d9:24:a2:65:31:ce:03:95:6b:f3:f8:61:ca:c0:ea: d5:94:0c:d6:8e:cf:54:32:e5:5d:98:67:58:5c:7c:e6:53:75: 5a:11:69:c5:5b:50:3e:35:c6:02:f4:b6:65:da:78:9b:1f:7e: f8:39:82:15:8e:c0:f1:5e:bd:7f:98:c2:4d:fa:6c:4a:cf:2b: df:48:30:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjQwNTE5MDE0MDA5WhcNMjQwNTI2MDE0MDA5WjAYMRYwFAYD VQQDEw02NjQ5NTg3YS0yYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodmRpBg0bDpnPxgao/aE0VUxPLDp2/Os6ef9QS80qxqV9hxC+0rmzF1Z8q1z S7V2byhqj99zd+naaRF6hoc5BpvNSoJZzVzM+2bc9d5fcG2vgzBKwwMIrM6vphrb oe6ltURQT4dDBlwkYniNiQKI6xR99foAMa6dZ+pW8dMf6/NRErtlJSeeUGQvOBYg 4stwyhYEIn5bhO3gpwpBN51FdZqgbIhKNNkNxvthMX/RqWRwe1BAHKHLVE1l6ZJ/ UdkZjhWRFN7rnEtyIe5pKzGfHs9shI5tmJZvAjZBpCg2Bk4weP7VppvMWfdwOtgt SL2C5BjT8bbWEcfsgFL8Ibe3+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM9qQdN 6BfpWNjW7ZTxqzsEqK/FMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE9bAYRDfe5YWAfHydkbpWbcmjDg9Uv4pHpGLJoQbw+amwmMz+AB8d u9sv5ImX6sV6w3o1gGkt5vzqHvhMTziHRSFjJaADvwKhbNPjdN8jZJHYNNmX7AXQ r7WAE+iROQJ4uz4CItqpe9lYiqk5t3UFXgeUcWDiAvYE/spRlr6sYXRiw2cVhxP6 gGaOTNRvpe7ZRt/gl32iOnVU52CIwMSGWDz9W/mZusYAnHal7lSKezSrU0Kb4+7Z JKJlMc4DlWvz+GHKwOrVlAzWjs9UMuVdmGdYXHzmU3VaEWnFW1A+NcYC9LZl2nib H374OYIVjsDxXr1/mMJN+mxKzyvfSDA0 -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org