$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json) Hash identifier: 3Cx+A84qAtGyPfVKl2uA2A9KN7Tvao+1zrhi7GbbK6Q= Subject key identifier: E9:2B:79:E3:DB:BC:F2:5F:00:D1:78:57:1A:E2:1C:DD:D7:6D:6A:D7 Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 15FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft Manifest number: 15F3 Signing time: Fri 31 May 2024 17:25:44 +0000 Manifest this update: Fri 31 May 2024 17:25:44 +0000 Manifest next update: Fri 07 Jun 2024 17:25:44 +0000 Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: w97M32v+wIeRtoIgK/4WqQ40PyION4BTbrTEg8wcsbE=) 2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: Zj+iHPxvMADUxX/J3R3nQF997c2L/tq6sljYaBjJeZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5629 (0x15fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: May 31 17:25:44 2024 GMT Not After : Jun 7 17:25:44 2024 GMT Subject: CN=665a0818-0b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:f2:a1:ef:14:bb:d7:ec:31:57:1c:bd:93: 15:73:1b:a8:b5:f1:84:d6:81:62:d7:7b:1c:f6:ad: d8:49:95:c8:75:8a:45:d3:00:64:0a:e0:f7:3c:a9: a7:f4:4e:0d:04:0f:e4:86:2a:98:b1:76:cf:b3:3b: 68:8d:5a:b0:07:8f:87:a3:92:a9:e8:79:52:e2:f3: 9a:ae:1f:78:bc:b5:1e:60:87:e3:f6:81:fc:28:ad: 24:d4:89:ff:1f:f0:79:6d:34:4d:a2:0e:a0:88:e0: 1e:25:61:84:c9:41:ff:a4:7b:50:61:fd:d8:87:38: c1:28:ee:7c:43:ad:e3:27:c3:40:18:9a:38:f8:21: 30:b4:71:b1:9e:2c:a7:27:17:a2:2d:98:72:6f:10: 22:6a:b1:c0:5c:ed:50:2b:38:2b:97:f6:fe:e9:43: dd:b9:7b:f2:63:7f:60:d5:64:6c:6f:68:f5:f7:d9: 0b:0b:59:15:42:7c:2b:c1:1d:27:a4:18:49:9d:10: 62:4b:86:9f:7f:55:dc:88:58:5f:d8:5a:61:2f:2c: 03:4b:9e:7f:9a:86:65:2a:6f:da:7f:98:95:08:23: 6b:cb:36:b3:cc:75:e1:c3:34:1d:ac:72:94:b4:75: 52:67:14:3e:a0:64:5d:10:0a:21:65:ba:01:e8:fb: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2B:79:E3:DB:BC:F2:5F:00:D1:78:57:1A:E2:1C:DD:D7:6D:6A:D7 X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:78:f1:4d:b4:57:60:64:b8:eb:75:33:22:35:7a:de:a7:7c: 86:ca:d1:8f:5e:5c:5f:48:a1:2d:54:1f:6c:5c:9f:1f:50:9c: b5:88:76:80:b6:04:3f:c7:ea:a8:e6:58:54:f9:e9:6f:8d:30: da:cd:a5:98:ab:5a:f0:e5:3d:ed:32:2f:b4:b7:c1:bb:0b:7b: b8:93:5e:d6:81:cb:da:63:e8:92:a8:8d:13:55:9a:8b:eb:7c: 9a:f9:b3:f6:3f:74:c8:86:73:1c:e5:13:60:93:c7:91:c9:67: 75:ef:27:60:c6:d3:0f:e8:ac:e7:ee:0f:12:e5:24:dc:9b:15: ed:b9:a7:ac:8a:d2:6f:4a:50:c1:94:e5:70:b5:b1:a0:c4:c1: 70:21:63:b9:43:d4:5d:e2:31:6a:61:f2:64:8f:84:df:0c:b9: 9b:ba:eb:71:68:b7:9d:31:c5:fd:a1:3f:07:e8:6e:b6:de:fb: a6:4e:5d:5a:a9:a8:01:e6:2a:99:81:32:19:0d:81:cf:b9:8c: fd:87:11:a6:ff:8d:ba:61:3c:9e:bd:ed:a7:4d:81:c2:e5:d4: 87:41:ce:5f:60:e1:a3:9b:fd:aa:d3:8e:7c:c6:72:6e:80:21: 0b:1d:c3:87:76:ef:0a:c8:e2:3d:f0:b4:a9:5c:29:bc:98:df: 87:ee:e0:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjQwNTMxMTcyNTQ0WhcNMjQwNjA3MTcyNTQ0WjAYMRYwFAYD VQQDEw02NjVhMDgxOC0wYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlszyoe8Uu9fsMVccvZMVcxuotfGE1oFi13sc9q3YSZXIdYpF0wBkCuD3PKmn 9E4NBA/khiqYsXbPsztojVqwB4+Ho5Kp6HlS4vOarh94vLUeYIfj9oH8KK0k1In/ H/B5bTRNog6giOAeJWGEyUH/pHtQYf3YhzjBKO58Q63jJ8NAGJo4+CEwtHGxniyn JxeiLZhybxAiarHAXO1QKzgrl/b+6UPduXvyY39g1WRsb2j199kLC1kVQnwrwR0n pBhJnRBiS4aff1XciFhf2FphLywDS55/moZlKm/af5iVCCNryzazzHXhwzQdrHKU tHVSZxQ+oGRdEAohZboB6PtyPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkreePb vPJfANF4VxriHN3XbWrXMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMePFNtFdgZLjrdTMiNXrep3yGytGPXlxfSKEtVB9sXJ8fUJy1iHaA tgQ/x+qo5lhU+elvjTDazaWYq1rw5T3tMi+0t8G7C3u4k17WgcvaY+iSqI0TVZqL 63ya+bP2P3TIhnMc5RNgk8eRyWd17ydgxtMP6Kzn7g8S5STcmxXtuaesitJvSlDB lOVwtbGgxMFwIWO5Q9Rd4jFqYfJkj4TfDLmbuutxaLedMcX9oT8H6G623vumTl1a qagB5iqZgTIZDYHPuYz9hxGm/426YTyeve2nTYHC5dSHQc5fYOGjm/2q0458xnJu gCELHcOHdu8KyOI98LSpXCm8mN+H7uA3 -----END CERTIFICATE-----Generated at Fri May 31 20:34:19 2024 by rpki-client on console-ams.rpki-client.org