$ rpki-client -vvf rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft File: DlgFGyS9WtsbzJ844tPnN0to23w.mft (raw, json) Hash identifier: NnclIvig7WrsR2zf5IgZfgrDE7JeuXtfGFzSAaU2Wa8= Subject key identifier: 2A:29:4F:F6:2A:D0:23:39:E7:74:76:D9:CD:41:D0:05:4D:7D:A1:2F Authority key identifier: 0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C Certificate issuer: /CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft Manifest number: FC Signing time: Sun 19 May 2024 05:44:52 +0000 Manifest this update: Sun 19 May 2024 05:44:52 +0000 Manifest next update: Sun 26 May 2024 05:44:52 +0000 Files and hashes: 1: DlgFGyS9WtsbzJ844tPnN0to23w.crl (hash: ws98DvloTbsBefDhBXHbLSGfAiZMeC5w7DR8A1Q8xSg=) 2: B08DD41EE73E11EDB9372A29C4F9AE02.roa (hash: ghW+JWtx2ipcRK5A8aOJHKLLo0T9QbwhYmPqibO1GoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847B9/serialNumber=0E58051B24BD5ADB1BCC9F38E2D3E7374B68DB7C Validity Not Before: May 19 05:44:52 2024 GMT Not After : May 26 05:44:52 2024 GMT Subject: CN=664991d4-c36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:50:4a:9c:67:fc:30:8b:87:0e:66:1d:70: 2c:47:ea:6f:1c:d1:45:28:41:e5:88:b6:eb:93:a9: 73:dc:eb:7c:15:66:07:b6:4b:45:a3:c9:21:d0:1a: fb:99:0a:0f:e5:36:df:ca:13:d1:61:e9:91:c0:62: f9:d1:fe:e4:87:79:fb:03:36:7e:dd:54:b2:bc:e5: 49:3d:21:67:8d:c4:34:05:87:74:5c:5f:56:36:25: 3e:e8:a9:bb:7d:51:69:f3:58:b8:f4:8a:3d:6f:83: 9f:21:cd:1c:db:e0:65:b0:eb:df:eb:77:f6:24:02: 90:c5:ef:47:9c:6a:a6:63:b7:9b:23:de:bf:a6:0c: 37:9b:e2:3c:7a:49:a9:20:c4:af:cc:23:54:bd:82: 6d:af:12:b8:bb:4d:d6:b0:df:6a:21:bd:30:fb:88: df:fc:24:50:dc:8d:88:fa:25:86:9c:97:e9:0f:b2: aa:81:e0:e8:1e:ea:c5:8f:7a:ec:f7:3f:cf:ed:0b: ba:1f:75:27:77:0e:56:79:3b:f1:1e:e5:ea:c7:a3: a4:e8:b3:88:1b:d3:dd:a9:1a:26:07:76:8a:81:f2: 28:5d:e9:56:f6:22:26:f1:c7:fd:0f:69:1a:b8:d5: 20:25:be:26:28:ae:6a:a1:b8:fc:92:ac:c2:42:67: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:29:4F:F6:2A:D0:23:39:E7:74:76:D9:CD:41:D0:05:4D:7D:A1:2F X509v3 Authority Key Identifier: keyid:0E:58:05:1B:24:BD:5A:DB:1B:CC:9F:38:E2:D3:E7:37:4B:68:DB:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlgFGyS9WtsbzJ844tPnN0to23w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847B9/FC558882A14411ED95704386C4F9AE02/DlgFGyS9WtsbzJ844tPnN0to23w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ce:49:cc:28:7c:a6:2c:65:0f:60:eb:a8:fd:b2:0e:4f:eb: 2c:da:dc:56:1f:2e:a9:d1:e9:56:3c:28:b7:85:88:52:3f:a0: e1:7d:3e:3a:ab:15:13:22:70:1f:b0:90:0c:6d:1c:58:45:e1: af:8f:64:c9:88:19:84:26:77:97:c5:09:b8:7d:56:fb:75:58: 34:b7:f4:e2:93:c3:94:31:87:92:19:41:e8:f6:15:75:4a:fe: 41:a3:28:21:a2:24:32:7f:54:e2:a2:aa:97:4b:35:7f:99:81: 2c:20:b2:8a:13:54:70:98:05:2a:76:c4:b7:d6:f1:85:51:30: 2f:2d:58:31:3d:7f:89:13:67:35:b1:18:87:84:70:e7:5e:75: 98:d2:b0:d9:e8:60:57:ff:d9:4e:c1:2a:51:7b:63:2a:26:4c: 8a:60:95:c2:b8:39:9b:e1:54:a6:64:6f:bd:65:d0:c6:63:78: 67:1e:3c:a1:55:d0:09:ed:c3:6e:46:2c:46:5c:ae:ef:9b:b2: 46:df:61:08:76:06:44:0e:36:d1:9f:43:a4:67:7d:90:47:1d: 07:18:0f:12:0a:64:20:10:a9:7c:01:1b:bc:03:73:cb:7f:fc: 27:b9:97:a0:1c:cd:bd:f7:ad:79:e8:16:dd:77:96:1b:c9:dd: 42:90:20:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QjkxMTAvBgNVBAUTKDBFNTgwNTFCMjRCRDVBREIxQkNDOUYzOEUyRDNFNzM3 NEI2OERCN0MwHhcNMjQwNTE5MDU0NDUyWhcNMjQwNTI2MDU0NDUyWjAYMRYwFAYD VQQDEw02NjQ5OTFkNC1jMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7ZQSpxn/DCLhw5mHXAsR+pvHNFFKEHliLbrk6lz3Ot8FWYHtktFo8kh0Br7 mQoP5TbfyhPRYemRwGL50f7kh3n7AzZ+3VSyvOVJPSFnjcQ0BYd0XF9WNiU+6Km7 fVFp81i49Io9b4OfIc0c2+BlsOvf63f2JAKQxe9HnGqmY7ebI96/pgw3m+I8ekmp IMSvzCNUvYJtrxK4u03WsN9qIb0w+4jf/CRQ3I2I+iWGnJfpD7KqgeDoHurFj3rs 9z/P7Qu6H3Undw5WeTvxHuXqx6Ok6LOIG9PdqRomB3aKgfIoXelW9iIm8cf9D2ka uNUgJb4mKK5qobj8kqzCQmfaqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCopT/Yq 0CM553R22c1B0AVNfaEvMB8GA1UdIwQYMBaAFA5YBRskvVrbG8yfOOLT5zdLaNt8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdCOS9GQzU1ODg4MkEx NDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0c2J6Sjg0NHRQbk4wdG8y M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZ0ZHeVM5V3RzYnpKODQ0dFBuTjB0bzIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdCOS9GQzU1ODg4MkExNDQxMUVEOTU3MDQzODZDNEY5QUUwMi9EbGdGR3lTOVd0 c2J6Sjg0NHRQbk4wdG8yM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyzknMKHymLGUPYOuo/bIOT+ss2txWHy6p0elWPCi3hYhSP6DhfT46 qxUTInAfsJAMbRxYReGvj2TJiBmEJneXxQm4fVb7dVg0t/Tik8OUMYeSGUHo9hV1 Sv5BoyghoiQyf1TioqqXSzV/mYEsILKKE1RwmAUqdsS31vGFUTAvLVgxPX+JE2c1 sRiHhHDnXnWY0rDZ6GBX/9lOwSpRe2MqJkyKYJXCuDmb4VSmZG+9ZdDGY3hnHjyh VdAJ7cNuRixGXK7vm7JG32EIdgZEDjbRn0OkZ32QRx0HGA8SCmQgEKl8ARu8A3PL f/wnuZegHM2996156Bbdd5Ybyd1CkCBT -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org