$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: OWFHySVyn5Qy1WrAourG6oJrX0/mvhWakhjyfrPHVDI= Subject key identifier: 14:3D:70:9B:EF:CD:7E:E2:7F:8F:07:BD:08:44:45:57:AF:7F:DB:B3 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 1F40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 17C1 Signing time: Sat 18 May 2024 17:58:17 +0000 Manifest this update: Sat 18 May 2024 17:58:16 +0000 Manifest next update: Sat 25 May 2024 17:58:16 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: WUICB+CdFNcm+GZzkMWltI5l0j24Fpqz4HhhnCPBnJY=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: zrGhz5eTWvxDs7l8u0FFEcHmthdaKI1r05igm+ZZOCA=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: 8vFyR44qzve6eQFGrf+0iU1ZgE7HJhnti0y5mu5nwao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8000 (0x1f40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: May 18 17:58:16 2024 GMT Not After : May 25 17:58:16 2024 GMT Subject: CN=6648ec39-5cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:86:15:93:b2:fc:c6:73:ce:4a:92:c9:e6: f2:ef:41:28:31:ff:bc:83:5e:5f:e2:f1:21:87:52: 75:48:ee:26:7e:88:6b:cc:95:42:a0:fb:47:f6:53: 05:54:2c:26:c8:06:85:e5:ef:3c:f9:47:28:8a:e9: 08:ea:e6:cf:ea:41:40:9a:ff:12:cb:87:7e:62:48: 22:0a:14:e3:dc:f7:b8:34:2b:54:46:77:77:44:e8: 3a:2b:33:03:a6:2a:73:f9:e5:99:f4:e5:d0:a5:3d: a9:8d:e4:0d:4f:df:15:87:19:5a:bf:f0:1d:98:0b: b5:49:ab:ec:4c:91:32:8b:a9:c1:d3:7f:01:62:e9: 5a:ae:bf:89:66:a7:a2:c3:92:c8:dc:b8:32:c0:86: 62:73:4b:37:36:96:96:d8:2c:6e:07:a0:97:ef:3f: 62:25:d6:b5:02:c9:e8:8b:c2:81:ae:c5:53:54:4d: 15:87:7b:4e:f5:17:9e:b4:49:c9:fe:bc:b2:81:b7: 2b:13:b0:44:5e:cb:13:c2:cf:e8:28:fc:e6:a9:73: 87:34:05:1a:0c:00:c4:80:b1:09:da:db:f7:35:04: 77:0a:66:a1:38:2e:d4:2d:37:fc:d3:75:1d:80:44: af:d1:eb:84:74:12:f7:e1:51:32:82:b7:c3:98:87: 8b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3D:70:9B:EF:CD:7E:E2:7F:8F:07:BD:08:44:45:57:AF:7F:DB:B3 X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:79:d3:b2:42:3d:da:7c:e7:ae:09:b0:11:df:18:24:a1:4e: 7e:93:8a:c1:c6:a3:0a:f5:e3:61:0c:f3:79:00:c4:cf:c6:09: e5:d0:3a:0e:5d:90:d9:ea:99:7b:b0:82:50:a5:0b:cd:58:c7: d6:ab:f8:2e:ae:79:ff:15:40:b6:5d:b7:b1:d1:21:db:fa:59: 67:0d:b9:c6:75:fa:50:bc:20:2b:cd:ed:f4:e6:e4:35:f9:44: 1a:3b:ce:9c:1d:28:98:1c:d5:91:37:7a:50:40:68:df:b2:fb: 9d:ee:eb:a5:60:db:c5:f3:ef:55:5f:36:43:0a:2e:c5:ae:fd: 5b:1d:bc:b9:eb:6c:4b:7c:c5:35:11:42:54:73:1e:d5:a1:01: e5:b7:55:6d:f2:94:e3:14:0f:4f:03:ae:0c:12:e9:a4:ba:7b: 95:dd:f4:55:ad:70:a3:8a:f7:5c:15:a5:95:b9:70:46:49:db: 31:ab:02:18:9a:c0:60:e6:19:74:06:0d:a1:ad:02:14:7e:2f: c7:0c:56:50:07:76:c1:6e:2f:f4:01:22:84:f7:a1:93:7f:c2: 7b:ef:6d:cb:9e:80:55:bc:c2:23:67:4d:16:1e:da:b1:b5:18: d6:b3:80:eb:e0:73:d1:5b:d9:22:08:17:37:15:cb:36:43:ec: 1d:e1:86:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjQwNTE4MTc1ODE2WhcNMjQwNTI1MTc1ODE2WjAYMRYwFAYD VQQDEw02NjQ4ZWMzOS01Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKOGFZOy/MZzzkqSyeby70EoMf+8g15f4vEhh1J1SO4mfohrzJVCoPtH9lMF VCwmyAaF5e88+UcoiukI6ubP6kFAmv8Sy4d+YkgiChTj3Pe4NCtURnd3ROg6KzMD pipz+eWZ9OXQpT2pjeQNT98Vhxlav/AdmAu1SavsTJEyi6nB038BYularr+JZqei w5LI3LgywIZic0s3NpaW2CxuB6CX7z9iJda1Asnoi8KBrsVTVE0Vh3tO9ReetEnJ /ryygbcrE7BEXssTws/oKPzmqXOHNAUaDADEgLEJ2tv3NQR3CmahOC7ULTf803Ud gESv0euEdBL34VEygrfDmIeL/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQ9cJvv zX7if48HvQhERVevf9uzMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvedOyQj3afOeuCbAR3xgkoU5+k4rBxqMK9eNhDPN5AMTPxgnl0DoO XZDZ6pl7sIJQpQvNWMfWq/gurnn/FUC2Xbex0SHb+llnDbnGdfpQvCArze305uQ1 +UQaO86cHSiYHNWRN3pQQGjfsvud7uulYNvF8+9VXzZDCi7Frv1bHby562xLfMU1 EUJUcx7VoQHlt1Vt8pTjFA9PA64MEumkunuV3fRVrXCjivdcFaWVuXBGSdsxqwIY msBg5hl0Bg2hrQIUfi/HDFZQB3bBbi/0ASKE96GTf8J7723LnoBVvMIjZ00WHtqx tRjWs4Dr4HPRW9kiCBc3Fcs2Q+wd4YZd -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org