$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json) Hash identifier: 2HFwSYM0eevtuOnfNEwK/5CguV3h49pi+nisn1S4dcE= Subject key identifier: BA:C3:2A:56:D3:82:0B:13:3A:A8:B5:32:A4:9B:CC:0C:5D:37:C8:53 Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft Manifest number: 0324 Signing time: Sun 19 May 2024 03:02:55 +0000 Manifest this update: Sun 19 May 2024 03:02:55 +0000 Manifest next update: Sun 26 May 2024 03:02:55 +0000 Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: LNS9H/9cDweUGcEQJA9IiLJyxISyoDDsLJHoUuab6M0=) 2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: rucSOvDUlPs/cm3Q5kFV8pvarNxcY2no81UvR20k9hU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Validity Not Before: May 19 03:02:55 2024 GMT Not After : May 26 03:02:55 2024 GMT Subject: CN=66496bdf-c8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:00:1b:e1:57:de:52:07:6d:9f:a8:76:78: fb:ea:e1:bf:82:60:d8:17:d0:71:e3:dd:a2:87:49: f3:85:e9:98:a4:c0:be:3d:41:b5:d4:b5:ad:49:fd: 91:61:cb:3e:d3:8f:7c:05:94:f9:d2:27:be:d1:a6: fa:1a:a7:9e:30:56:4a:73:75:22:d2:50:11:31:a7: fd:e7:6a:79:1c:78:9b:1d:83:f2:10:91:39:e4:4f: 33:8d:1b:d9:bf:54:da:12:c9:6d:60:8b:bb:99:9e: de:f1:0e:51:ed:4c:3f:57:bc:39:b5:74:51:c1:b5: 2c:5e:56:48:f6:9e:3a:7b:53:35:08:9a:2a:06:ba: 11:75:ae:54:33:fb:5c:b5:ae:86:96:0c:40:9c:ac: 17:2f:05:f7:da:1f:e4:d7:e9:54:82:27:34:27:c0: 7e:04:9c:14:9a:1d:2f:0e:54:e2:d6:1d:58:cc:63: ed:71:54:62:a4:ec:99:81:68:2b:22:a3:15:3d:a1: e8:85:ed:db:03:e3:d3:a3:c6:16:6e:69:91:31:44: 60:13:a1:10:e5:0c:f9:00:05:07:e4:f1:0a:58:d5: a8:27:e9:1e:71:83:a8:f4:ae:6b:fb:71:95:3c:b0: 4f:7a:24:b0:6a:40:99:cf:18:3a:09:60:b8:68:47: 20:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C3:2A:56:D3:82:0B:13:3A:A8:B5:32:A4:9B:CC:0C:5D:37:C8:53 X509v3 Authority Key Identifier: keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e7:ca:ec:48:86:b8:d5:8b:6a:6c:62:fb:71:42:31:9f:af: a3:30:d4:18:b3:19:35:08:04:2a:3d:8e:69:54:40:67:d2:6e: 9d:01:24:85:59:80:8a:6a:f9:52:7d:b4:60:5d:75:d0:2e:f2: 48:fa:35:f1:62:31:78:f6:c8:61:12:06:92:cf:4d:4d:7e:c7: 08:96:fa:2b:d0:20:92:66:f4:69:15:ce:8e:86:11:9a:b2:08: 9b:b4:aa:a9:9e:ad:93:27:ed:30:1a:bf:11:38:8b:c4:60:2e: e3:52:73:9c:8b:df:b9:2a:f2:6a:af:8b:3e:61:02:91:c1:26: 0f:5a:30:35:f8:b5:4e:89:a2:a3:ed:6f:b0:b8:42:c4:98:db: 6e:0f:93:08:f5:68:55:0f:1c:67:62:ad:21:c8:d0:98:39:90: a3:ff:49:77:60:0f:db:98:35:71:b4:6a:42:85:9e:3f:dc:6f: 31:7f:0f:ec:bf:03:f5:81:1f:62:f8:4b:a2:bc:92:e6:d9:ae: 27:2f:0e:78:f2:8d:6d:44:83:db:14:57:61:17:4c:34:f4:2e: eb:e3:87:07:30:b3:f5:ae:5f:e5:91:00:d9:d2:29:d0:26:f2: 30:b1:23:d5:44:2f:81:92:71:82:6f:e7:7d:1e:c3:8d:06:29: 4e:e9:47:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF Q0M2NjNFRUQwHhcNMjQwNTE5MDMwMjU1WhcNMjQwNTI2MDMwMjU1WjAYMRYwFAYD VQQDEw02NjQ5NmJkZi1jOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHoAG+FX3lIHbZ+odnj76uG/gmDYF9Bx492ih0nzhemYpMC+PUG11LWtSf2R Ycs+0498BZT50ie+0ab6GqeeMFZKc3Ui0lARMaf952p5HHibHYPyEJE55E8zjRvZ v1TaEsltYIu7mZ7e8Q5R7Uw/V7w5tXRRwbUsXlZI9p46e1M1CJoqBroRda5UM/tc ta6GlgxAnKwXLwX32h/k1+lUgic0J8B+BJwUmh0vDlTi1h1YzGPtcVRipOyZgWgr IqMVPaHohe3bA+PTo8YWbmmRMURgE6EQ5Qz5AAUH5PEKWNWoJ+kecYOo9K5r+3GV PLBPeiSwakCZzxg6CWC4aEcg9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrDKlbT ggsTOqi1MqSbzAxdN8hTMB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs58rsSIa41YtqbGL7cUIxn6+jMNQYsxk1CAQqPY5pVEBn0m6dASSF WYCKavlSfbRgXXXQLvJI+jXxYjF49shhEgaSz01NfscIlvor0CCSZvRpFc6OhhGa sgibtKqpnq2TJ+0wGr8ROIvEYC7jUnOci9+5KvJqr4s+YQKRwSYPWjA1+LVOiaKj 7W+wuELEmNtuD5MI9WhVDxxnYq0hyNCYOZCj/0l3YA/bmDVxtGpChZ4/3G8xfw/s vwP1gR9i+EuivJLm2a4nLw548o1tRIPbFFdhF0w09C7r44cHMLP1rl/lkQDZ0inQ JvIwsSPVRC+BknGCb+d9HsONBilO6Uec -----END CERTIFICATE-----Generated at Sun May 19 03:38:16 2024 by rpki-client on console-ams.rpki-client.org