$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft File: dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json) Hash identifier: 7jN1IQcK29EMRQsr5wa6YJYYVy2cZNm4Wz8SLfVouUs= Subject key identifier: CC:B0:0A:4F:D7:42:D5:C6:08:93:ED:9D:0B:B0:E5:B8:C1:52:48:6D Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 Certificate issuer: /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft Manifest number: 078D Signing time: Sat 18 May 2024 22:11:55 +0000 Manifest this update: Sat 18 May 2024 22:11:54 +0000 Manifest next update: Sat 25 May 2024 22:11:54 +0000 Files and hashes: 1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: YfYb9GcOylS/bdFcO4xsLybIc7hhtJEjgRddbm/UXys=) 2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: yYCYM+D4VlWmYI/ad0TBLqiC/Uh/7gNsKoXWr+9O79s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886 Validity Not Before: May 18 22:11:54 2024 GMT Not After : May 25 22:11:54 2024 GMT Subject: CN=664927ab-16e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ce:7b:93:ba:58:d0:60:52:95:8a:66:59:32: f5:59:70:47:ec:60:27:02:72:e5:8e:5f:6d:95:ae: 82:1a:92:53:e2:da:28:f5:73:a7:7c:a6:ea:81:08: a8:58:96:8c:a6:f8:9d:26:4b:54:2a:ae:fd:7f:66: 44:e2:83:27:b6:34:25:2a:6b:c8:c8:7e:a4:91:30: 62:5b:ae:86:16:6d:bc:bd:af:91:57:8d:a2:e2:97: c3:2c:91:70:61:fc:31:ad:3d:2a:88:b6:26:72:8f: 9c:c2:5b:ef:31:ab:cd:b5:a7:22:cd:a8:59:39:c0: 08:cf:e5:6d:71:56:53:3c:9f:87:91:af:e4:95:ed: 73:6b:11:52:bc:c4:44:37:ab:2d:5e:12:ea:27:c0: 98:11:6e:4d:79:25:b9:82:4f:6a:66:fe:e5:4a:4d: 49:b2:24:26:ea:71:29:a8:03:5e:ae:ab:7a:f2:c0: 36:25:aa:74:30:ed:9a:41:52:4b:70:0e:31:2d:a8: 09:05:6a:e2:4f:c0:7f:86:01:fc:27:dd:fd:66:10: bd:b1:57:ca:2f:04:15:64:75:79:71:00:cf:1f:ed: 62:8c:9a:aa:42:35:44:43:e9:26:16:04:4d:c0:30: f8:68:f6:38:e1:3f:2c:9b:67:18:d7:9d:e1:9d:ed: 94:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:0A:4F:D7:42:D5:C6:08:93:ED:9D:0B:B0:E5:B8:C1:52:48:6D X509v3 Authority Key Identifier: keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:27:be:bb:13:03:f3:4c:09:72:e9:85:0c:0c:17:1d:de:31: 18:f2:32:fe:f2:d0:08:3a:5c:0d:31:87:00:0c:32:81:10:d9: 57:22:4e:f6:f7:ec:38:18:2b:58:7f:9d:39:ce:98:e5:b1:a6: 3a:48:6c:7d:2e:51:9d:52:8a:40:bd:76:4d:5a:dd:ec:4e:12: 49:bb:e4:2c:04:9f:f5:0e:e9:6f:82:02:b3:96:db:71:e7:95: 29:e7:4f:09:d0:d9:7d:c3:4a:14:09:39:fc:48:92:7f:aa:38: 9c:8c:21:60:4a:da:62:03:e9:6f:a4:71:71:ff:e2:a1:a0:51: a6:c8:69:c4:68:20:7f:ba:d4:5f:a4:50:96:96:4f:fb:29:ef: 79:22:c8:46:b6:46:6f:77:97:5a:16:25:8a:ee:4d:95:c7:31: fe:18:fc:fa:b7:5a:1e:5f:6d:d7:7b:ff:2d:e4:92:c0:1c:a4: c0:fa:ad:0e:91:fb:f3:cb:fc:f3:18:f8:a2:e4:ae:ab:af:52: c0:65:89:24:92:22:75:a9:db:2b:3d:ff:ff:e4:cc:da:41:e1: df:de:7e:f1:3f:70:99:02:94:0b:bc:fc:b1:ee:4c:ca:1d:1d: 62:35:ae:e1:05:16:9d:44:f4:f0:f1:51:cf:15:14:ed:5f:34: 22:83:c9:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD QzE0MkY4ODYwHhcNMjQwNTE4MjIxMTU0WhcNMjQwNTI1MjIxMTU0WjAYMRYwFAYD VQQDEw02NjQ5MjdhYi0xNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3M57k7pY0GBSlYpmWTL1WXBH7GAnAnLljl9tla6CGpJT4too9XOnfKbqgQio WJaMpvidJktUKq79f2ZE4oMntjQlKmvIyH6kkTBiW66GFm28va+RV42i4pfDLJFw YfwxrT0qiLYmco+cwlvvMavNtacizahZOcAIz+VtcVZTPJ+Hka/kle1zaxFSvMRE N6stXhLqJ8CYEW5NeSW5gk9qZv7lSk1JsiQm6nEpqANerqt68sA2Jap0MO2aQVJL cA4xLagJBWriT8B/hgH8J939ZhC9sVfKLwQVZHV5cQDPH+1ijJqqQjVEQ+kmFgRN wDD4aPY44T8sm2cY153hne2U6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMywCk/X QtXGCJPtnQuw5bjBUkhtMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIJ767EwPzTAly6YUMDBcd3jEY8jL+8tAIOlwNMYcADDKBENlXIk72 9+w4GCtYf505zpjlsaY6SGx9LlGdUopAvXZNWt3sThJJu+QsBJ/1DulvggKzlttx 55Up508J0Nl9w0oUCTn8SJJ/qjicjCFgStpiA+lvpHFx/+KhoFGmyGnEaCB/utRf pFCWlk/7Ke95IshGtkZvd5daFiWK7k2VxzH+GPz6t1oeX23Xe/8t5JLAHKTA+q0O kfvzy/zzGPii5K6rr1LAZYkkkiJ1qdsrPf//5MzaQeHf3n7xP3CZApQLvPyx7kzK HR1iNa7hBRadRPTw8VHPFRTtXzQig8lY -----END CERTIFICATE-----Generated at Sun May 19 00:30:22 2024 by rpki-client on console-ams.rpki-client.org