$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json) Hash identifier: 1yR+5xxqyEs0wSf06NlN/HLP77B5RumDX30dW88u6TM= Subject key identifier: 37:73:EE:C4:99:67:02:27:D7:EE:0E:43:F9:C9:5C:6C:22:F6:D2:3F Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Certificate serial: 1CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft Manifest number: 1CDF Signing time: Sat 18 May 2024 16:32:16 +0000 Manifest this update: Sat 18 May 2024 16:32:16 +0000 Manifest next update: Sat 25 May 2024 16:32:16 +0000 Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: tCQ7fiRmHEfR82FtyWTFdEIhL10JG41ZgDow0fxmZFc=) 2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: n/NMyqDI06S8XiVUDvMprWnoGUCP8JkT5dCu21/kF7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7415 (0x1cf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Validity Not Before: May 18 16:32:16 2024 GMT Not After : May 25 16:32:16 2024 GMT Subject: CN=6648d810-dcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:32:75:c7:8f:9c:ca:fa:3f:49:9b:13:a0:d2: 10:b1:c5:00:ee:30:ba:47:ff:e7:ce:a7:fe:93:98: 02:4a:72:da:b3:29:a7:d8:52:f0:a2:1c:dd:66:33: 77:d4:88:2e:80:b3:32:f5:b7:33:7a:91:27:cb:82: fd:2c:54:05:ed:48:91:cd:4a:a2:6b:1f:95:32:e9: 9d:3a:93:a2:0e:2e:c9:c5:b5:d9:09:d3:a1:13:2a: 82:88:88:c2:04:3a:fb:33:63:52:eb:0e:8b:6d:e5: 72:68:9f:d9:8b:cb:e6:f8:ce:47:04:65:2f:ac:21: d7:2f:f2:df:f4:eb:76:80:b3:51:60:ec:2d:b4:5c: bb:89:2e:51:5b:13:ea:ab:99:b2:11:08:66:43:d0: 5c:a6:e2:dc:05:f9:cb:98:5d:4c:ae:43:49:6f:0a: c5:fa:ce:e9:48:9a:91:10:d3:7f:bf:f0:ad:6b:cf: bb:59:27:a3:85:4e:3c:69:44:d7:a4:2f:85:53:9f: 29:a6:e4:81:1d:99:1a:7d:85:30:9a:61:be:1a:9f: 2d:06:45:d8:56:f1:5d:dd:9b:9f:70:31:79:8b:0e: ae:e2:25:a1:df:4e:c9:95:7c:bf:50:9f:d0:1e:8e: bf:89:b8:72:99:99:bd:a1:e6:75:cd:03:81:c9:fc: e3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:73:EE:C4:99:67:02:27:D7:EE:0E:43:F9:C9:5C:6C:22:F6:D2:3F X509v3 Authority Key Identifier: keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d8:df:b5:44:ec:e3:61:e3:6b:fc:31:80:c2:c1:fa:d5:47: 8d:cb:4b:06:28:9f:d4:a2:e5:69:98:57:35:0f:ef:d9:9e:ac: e9:aa:3a:40:ed:1f:2e:74:e8:fd:71:c5:aa:80:f6:0a:83:b5: 6f:42:96:d1:65:17:5f:f3:19:4e:01:ce:0d:8a:0b:25:f6:d9: 56:ff:32:32:1d:f3:a2:9a:1e:d9:01:84:13:95:34:22:1d:f8: 46:1f:f3:74:60:5a:eb:c1:2f:68:b5:9d:e4:e0:47:59:70:c5: bb:fd:07:ce:57:97:cd:be:81:70:ee:03:74:a1:03:6c:9e:79: 4d:53:62:bf:4d:b6:6c:36:58:49:eb:09:47:90:66:fe:1e:ec: 83:8f:c7:31:24:5c:3b:c9:b2:f4:f4:70:57:cd:0c:98:07:ec: 77:31:ff:8a:0c:36:cc:fd:ba:b3:d2:12:e2:a3:8b:0f:2b:1d: c4:fe:38:9b:88:f2:44:ba:24:2e:99:b8:b2:53:5c:93:50:57: ca:19:ac:85:23:f0:fb:f2:e7:d9:f1:17:e0:2a:07:ff:db:c6: 38:e6:0d:da:46:12:bc:2c:eb:31:88:fb:6a:b9:6c:1f:d7:c9: 0f:72:52:98:3f:62:0b:71:a4:08:64:89:a3:1d:78:7e:e9:e7: 79:4b:a5:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5 NjNEODdFMUMwHhcNMjQwNTE4MTYzMjE2WhcNMjQwNTI1MTYzMjE2WjAYMRYwFAYD VQQDEw02NjQ4ZDgxMC1kY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7DJ1x4+cyvo/SZsToNIQscUA7jC6R//nzqf+k5gCSnLasymn2FLwohzdZjN3 1IgugLMy9bczepEny4L9LFQF7UiRzUqiax+VMumdOpOiDi7JxbXZCdOhEyqCiIjC BDr7M2NS6w6LbeVyaJ/Zi8vm+M5HBGUvrCHXL/Lf9Ot2gLNRYOwttFy7iS5RWxPq q5myEQhmQ9BcpuLcBfnLmF1MrkNJbwrF+s7pSJqRENN/v/Cta8+7WSejhU48aUTX pC+FU58ppuSBHZkafYUwmmG+Gp8tBkXYVvFd3ZufcDF5iw6u4iWh307JlXy/UJ/Q Ho6/ibhymZm9oeZ1zQOByfzjsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdz7sSZ ZwIn1+4OQ/nJXGwi9tI/MB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1 Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI2N+1ROzjYeNr/DGAwsH61UeNy0sGKJ/UouVpmFc1D+/ZnqzpqjpA 7R8udOj9ccWqgPYKg7VvQpbRZRdf8xlOAc4Nigsl9tlW/zIyHfOimh7ZAYQTlTQi HfhGH/N0YFrrwS9otZ3k4EdZcMW7/QfOV5fNvoFw7gN0oQNsnnlNU2K/TbZsNlhJ 6wlHkGb+HuyDj8cxJFw7ybL09HBXzQyYB+x3Mf+KDDbM/bqz0hLio4sPKx3E/jib iPJEuiQumbiyU1yTUFfKGayFI/D78ufZ8RfgKgf/28Y45g3aRhK8LOsxiPtquWwf 18kPclKYP2ILcaQIZImjHXh+6ed5S6Vb -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org