$ rpki-client -vvf rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft File: 0DOGEJUQz9wm91V6_5mhMey1lCQ.mft (raw, json) Hash identifier: hjdLUwxgGrqKKoP9okfrbj9uXhSEhJJQqjCnHG7849A= Subject key identifier: 42:0D:7E:1A:1F:B1:43:FF:74:42:AD:F4:85:FF:6D:C0:17:B4:3E:DD Authority key identifier: D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24 Certificate issuer: /CN=A9189F23/serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424 Certificate serial: 33F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft Manifest number: 33DF Signing time: Sat 18 May 2024 15:06:47 +0000 Manifest this update: Sat 18 May 2024 15:06:47 +0000 Manifest next update: Sat 25 May 2024 15:06:47 +0000 Files and hashes: 1: 0DOGEJUQz9wm91V6_5mhMey1lCQ.crl (hash: bj01cU9A67aeHC/tIqGTKZlcq3989eKJ37CLvkBwqEI=) 2: 7CC8FF74562511E78A45783FC4F9AE02.roa (hash: zWt/6fE6SX2xRvfbAuWY0a4gZTexQvkwEqOhId6j9Eg=) 3: BE39F43074B811EB9AECDC67C4F9AE02.roa (hash: oZT/L2S4faCDEPiDwhTgLOmYDRKzJhogn0jWo2DknFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13302 (0x33f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189F23/serialNumber=D03386109510CFDC26F7557AFF99A131ECB59424 Validity Not Before: May 18 15:06:47 2024 GMT Not After : May 25 15:06:47 2024 GMT Subject: CN=6648c407-632b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:e7:15:40:8d:ed:7f:93:bb:35:6e:29:1c: 03:7a:c3:5e:d2:da:d7:06:1f:b3:65:09:0d:ba:5e: c2:17:e1:33:5d:f8:a9:a5:4c:61:82:48:b0:d5:33: 02:c6:59:1c:3f:48:fe:96:f1:4d:50:e8:ed:44:3c: 90:0f:83:8d:80:ab:ab:5e:64:c5:14:ac:ab:f7:94: 1d:f8:de:c3:41:54:83:32:d5:75:db:5f:c1:9b:f5: de:ae:2a:c4:c7:89:0b:c0:7f:92:38:8b:62:d5:81: ff:8a:96:37:32:bc:24:39:85:61:a5:23:4c:12:bb: c2:77:ae:ce:36:58:0c:9f:b6:f4:eb:ec:07:6e:6b: 46:e4:5e:3f:48:a4:64:64:fa:b6:41:31:09:aa:58: 0d:97:7b:e1:33:e6:d1:8b:72:91:b1:7d:81:b8:d2: fd:21:f3:0c:88:32:86:4a:ad:0d:32:65:be:b5:72: 9f:5f:ce:31:ff:b6:12:a4:df:4b:10:44:2d:d5:d2: 07:a0:ea:74:f0:d2:25:f7:13:a6:b0:5e:71:4f:1c: a9:b0:f7:c6:0a:0e:28:65:9f:bb:35:37:12:c2:9d: 47:75:fe:02:6c:36:35:2d:6f:68:1b:0e:8c:06:f8: 2b:05:e8:c4:c4:a8:d5:f9:5c:a0:19:93:d2:10:d2: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0D:7E:1A:1F:B1:43:FF:74:42:AD:F4:85:FF:6D:C0:17:B4:3E:DD X509v3 Authority Key Identifier: keyid:D0:33:86:10:95:10:CF:DC:26:F7:55:7A:FF:99:A1:31:EC:B5:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DOGEJUQz9wm91V6_5mhMey1lCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189F23/A5D598D61D9B11E29305918908B02CD2/0DOGEJUQz9wm91V6_5mhMey1lCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:56:93:f6:5f:2a:f5:91:c8:16:0a:88:f1:e6:c0:5b:94:73: cb:e0:d7:86:6f:5a:ff:b3:cf:ca:ab:c9:35:e7:07:fd:ec:75: 15:98:f3:a3:3d:51:c5:e8:0f:44:1c:29:cd:a6:e3:e7:ee:89: 13:1d:e8:0a:ac:ac:43:8f:5b:ee:7f:e8:d8:b4:e5:80:83:95: 0c:a7:db:48:67:89:f9:44:b9:62:8f:8b:77:d5:f1:91:1d:e4: a4:16:a5:f1:47:c9:76:21:3e:60:32:9b:05:93:69:33:07:f7: 27:7d:89:8e:19:ab:e3:1d:a9:47:e6:29:28:ed:8b:a0:62:78: f5:5c:4a:2c:88:c5:b7:0b:fd:74:4b:25:9b:e7:0f:cb:7d:f5: 73:b1:2c:4a:76:c5:4d:1f:a1:d9:ba:1c:d2:d5:fd:5a:c1:98: a5:46:0a:40:3b:da:32:64:83:08:22:41:fe:1c:66:34:0e:71: f0:e2:7a:e1:e4:5a:81:6e:eb:8a:0c:71:94:37:16:6b:c7:5c: d4:55:05:4d:bc:dc:61:cf:03:1b:94:98:1f:92:24:47:c7:41: 14:0b:57:8c:72:7d:a7:fb:ec:bc:48:51:31:d7:5c:b9:02:46: d9:98:80:27:b5:6f:05:0d:41:e4:cb:ab:91:0f:98:8a:9f:60: 52:e8:bd:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlGMjMxMTAvBgNVBAUTKEQwMzM4NjEwOTUxMENGREMyNkY3NTU3QUZGOTlBMTMx RUNCNTk0MjQwHhcNMjQwNTE4MTUwNjQ3WhcNMjQwNTI1MTUwNjQ3WjAYMRYwFAYD VQQDEw02NjQ4YzQwNy02MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3XnFUCN7X+TuzVuKRwDesNe0trXBh+zZQkNul7CF+EzXfippUxhgkiw1TMC xlkcP0j+lvFNUOjtRDyQD4ONgKurXmTFFKyr95Qd+N7DQVSDMtV121/Bm/XerirE x4kLwH+SOIti1YH/ipY3MrwkOYVhpSNMErvCd67ONlgMn7b06+wHbmtG5F4/SKRk ZPq2QTEJqlgNl3vhM+bRi3KRsX2BuNL9IfMMiDKGSq0NMmW+tXKfX84x/7YSpN9L EEQt1dIHoOp08NIl9xOmsF5xTxypsPfGCg4oZZ+7NTcSwp1Hdf4CbDY1LW9oGw6M BvgrBejExKjV+VygGZPSENLHhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEINfhof sUP/dEKt9IX/bcAXtD7dMB8GA1UdIwQYMBaAFNAzhhCVEM/cJvdVev+ZoTHstZQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUYyMy9BNUQ1OThENjFE OUIxMUUyOTMwNTkxODkwOEIwMkNEMi8wRE9HRUpVUXo5d205MVY2XzVtaE1leTFs Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBET0dFSlVRejl3bTkxVjZfNW1oTWV5MWxDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUYyMy9BNUQ1OThENjFEOUIxMUUyOTMwNTkxODkwOEIwMkNEMi8wRE9HRUpVUXo5 d205MVY2XzVtaE1leTFsQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWVpP2Xyr1kcgWCojx5sBblHPL4NeGb1r/s8/Kq8k15wf97HUVmPOj PVHF6A9EHCnNpuPn7okTHegKrKxDj1vuf+jYtOWAg5UMp9tIZ4n5RLlij4t31fGR HeSkFqXxR8l2IT5gMpsFk2kzB/cnfYmOGavjHalH5iko7YugYnj1XEosiMW3C/10 SyWb5w/LffVzsSxKdsVNH6HZuhzS1f1awZilRgpAO9oyZIMIIkH+HGY0DnHw4nrh 5FqBbuuKDHGUNxZrx1zUVQVNvNxhzwMblJgfkiRHx0EUC1eMcn2n++y8SFEx11y5 AkbZmIAntW8FDUHky6uRD5iKn2BS6L0Q -----END CERTIFICATE-----Generated at Sat May 18 16:19:53 2024 by rpki-client on console-fra.rpki-client.org