$ rpki-client -vvf rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft File: DXj787IdvbDPDE2ILytFm0R8uOg.mft (raw, json) Hash identifier: GzQQ3XUkWwAEwCBQiFbaGVlRgoAJjT0Abm4UVP4IXfQ= Subject key identifier: 33:85:45:0B:19:0C:B1:F9:36:4A:02:D8:B6:20:77:CF:40:61:B7:12 Authority key identifier: 0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 Certificate issuer: /CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft Manifest number: 01A5 Signing time: Fri 31 May 2024 05:17:19 +0000 Manifest this update: Fri 31 May 2024 05:17:18 +0000 Manifest next update: Fri 07 Jun 2024 05:17:18 +0000 Files and hashes: 1: DXj787IdvbDPDE2ILytFm0R8uOg.crl (hash: bOfI27+gR/JG5MNYjUW3d96qerMp4fzuBWgapJk/BM0=) 2: 8F0A568216A611ED86A3EF0CC4F9AE02.roa (hash: qu+P2eTIKMXxrUFmTSB4+I9aHJ7LzFiqMHB0Qh4Tiv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D766/serialNumber=0D78FBF3B21DBDB0CF0C4D882F2B459B447CB8E8 Validity Not Before: May 31 05:17:18 2024 GMT Not After : Jun 7 05:17:18 2024 GMT Subject: CN=66595d5e-c039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:b6:96:d6:2d:ed:18:f8:5d:4e:c2:2e:1d: b1:5a:21:3d:b0:6c:fc:4e:62:cb:87:2a:71:b7:b2: 4e:d0:6b:ef:fd:6b:be:c1:89:9d:31:f3:6b:e2:99: 9b:d1:8d:3e:d5:8b:eb:38:44:e7:0d:a2:04:82:5f: 6f:3c:53:ad:d9:6e:3b:fb:1c:54:4a:ae:35:36:bb: 21:d5:f3:cb:d5:32:a3:74:17:db:90:44:c7:f1:8d: 41:80:73:fe:c5:0c:2e:86:c9:59:68:ce:3d:12:78: 82:5f:d6:e9:ff:cd:c4:16:84:35:6f:04:4d:05:1b: ed:24:b6:ea:21:f2:f5:c5:c7:aa:03:a4:a5:2b:cb: 49:fd:ed:18:09:2f:95:28:ed:46:25:d7:4a:cd:b3: 82:37:58:e6:a5:7c:00:0d:b9:70:67:63:5f:63:9a: 04:1e:cc:87:9c:e2:6b:c3:e4:d3:5e:aa:65:b4:ba: d3:7a:c1:8d:d3:3d:f0:a9:9a:4b:73:f0:15:1e:a7: ec:3b:1a:7d:dd:af:26:ca:ed:db:a8:0a:b1:67:90: be:c7:83:7b:15:82:71:9a:ad:e4:47:50:02:66:d5: f9:5b:ae:48:12:e1:cc:c0:8f:a5:56:bb:91:b3:54: cc:60:bb:8f:2f:ac:70:1c:be:cc:8c:94:5f:89:d7: f1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:45:0B:19:0C:B1:F9:36:4A:02:D8:B6:20:77:CF:40:61:B7:12 X509v3 Authority Key Identifier: keyid:0D:78:FB:F3:B2:1D:BD:B0:CF:0C:4D:88:2F:2B:45:9B:44:7C:B8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DXj787IdvbDPDE2ILytFm0R8uOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D766/66207B0A16A311EDA8FE7585C4F9AE02/DXj787IdvbDPDE2ILytFm0R8uOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:02:8f:7a:93:b4:34:10:26:9d:45:a4:a2:64:0b:f4:f8:38: 4f:5e:af:43:0f:10:b4:80:d8:fd:3c:d4:74:e7:b0:95:43:f4: 01:98:bf:c5:2c:a0:79:9f:82:86:a7:94:af:6a:f4:aa:22:36: de:07:58:16:fe:87:90:ee:2c:6e:dc:bb:b8:25:33:f2:07:7c: b1:ca:43:d9:d8:ef:e6:bb:a3:76:4b:ef:02:39:cd:db:65:17: 4e:4e:38:13:20:a1:da:aa:98:e6:1f:72:ee:b0:cb:ff:bf:74: d8:19:8d:85:d6:29:20:e2:46:f1:96:96:c6:d7:27:95:53:63: 7b:cb:22:d3:a3:a6:96:d1:4f:e7:07:eb:53:6a:c7:f9:7c:78: dc:25:41:9c:82:7e:8e:98:e1:4a:f9:2b:6f:b3:ec:a1:2a:96: ab:2c:3c:36:16:cb:4b:dd:ba:40:ab:ac:32:92:da:0e:7e:22: 74:e6:ec:8e:6c:58:0b:e3:2f:f7:7a:9c:3b:ce:f0:29:04:e1: f0:51:f0:e2:73:f1:5d:ff:c5:35:4e:5e:fa:fa:ac:af:84:ae: 37:91:34:cf:2b:7a:bf:02:f6:08:af:d3:2e:5b:41:e1:cb:31: 02:99:e4:cf:d8:f1:02:6d:32:7f:9b:43:0d:f4:12:26:4c:d6: fe:c3:a3:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ3NjYxMTAvBgNVBAUTKDBENzhGQkYzQjIxREJEQjBDRjBDNEQ4ODJGMkI0NTlC NDQ3Q0I4RTgwHhcNMjQwNTMxMDUxNzE4WhcNMjQwNjA3MDUxNzE4WjAYMRYwFAYD VQQDEw02NjU5NWQ1ZS1jMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfm2ltYt7Rj4XU7CLh2xWiE9sGz8TmLLhypxt7JO0Gvv/Wu+wYmdMfNr4pmb 0Y0+1YvrOETnDaIEgl9vPFOt2W47+xxUSq41Nrsh1fPL1TKjdBfbkETH8Y1BgHP+ xQwuhslZaM49EniCX9bp/83EFoQ1bwRNBRvtJLbqIfL1xceqA6SlK8tJ/e0YCS+V KO1GJddKzbOCN1jmpXwADblwZ2NfY5oEHsyHnOJrw+TTXqpltLrTesGN0z3wqZpL c/AVHqfsOxp93a8myu3bqAqxZ5C+x4N7FYJxmq3kR1ACZtX5W65IEuHMwI+lVruR s1TMYLuPL6xwHL7MjJRfidfxdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOFRQsZ DLH5NkoC2LYgd89AYbcSMB8GA1UdIwQYMBaAFA14+/OyHb2wzwxNiC8rRZtEfLjo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDc2Ni82NjIwN0IwQTE2 QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZiRFBERTJJTHl0Rm0wUjh1 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RYajc4N0lkdmJEUERFMklMeXRGbTBSOHVPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDc2Ni82NjIwN0IwQTE2QTMxMUVEQThGRTc1ODVDNEY5QUUwMi9EWGo3ODdJZHZi RFBERTJJTHl0Rm0wUjh1T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaAo96k7Q0ECadRaSiZAv0+DhPXq9DDxC0gNj9PNR057CVQ/QBmL/F LKB5n4KGp5SvavSqIjbeB1gW/oeQ7ixu3Lu4JTPyB3yxykPZ2O/mu6N2S+8COc3b ZRdOTjgTIKHaqpjmH3LusMv/v3TYGY2F1ikg4kbxlpbG1yeVU2N7yyLTo6aW0U/n B+tTasf5fHjcJUGcgn6OmOFK+Stvs+yhKparLDw2FstL3bpAq6wyktoOfiJ05uyO bFgL4y/3epw7zvApBOHwUfDic/Fd/8U1Tl76+qyvhK43kTTPK3q/AvYIr9MuW0Hh yzECmeTP2PECbTJ/m0MN9BImTNb+w6OP -----END CERTIFICATE-----Generated at Fri May 31 05:53:52 2024 by rpki-client on console-fra.rpki-client.org