$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft File: D4D0DTKGhSybn240W-HVvS-VSDI.mft (raw, json) Hash identifier: aVj8nlM2aqzft0gcZoPoEXxOmZAp3Kn9ckILi7VtCy4= Subject key identifier: 9C:A1:7F:63:9D:5C:8D:7C:EA:8C:85:41:BD:26:A4:9F:2C:DF:A8:A9 Authority key identifier: 0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32 Certificate issuer: /CN=A911DFB8/serialNumber=0F80F40D3286852C9B9F6E345BE1D5BD2F954832 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D4D0DTKGhSybn240W-HVvS-VSDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft Manifest number: 0624 Signing time: Thu 28 Mar 2024 23:38:08 +0000 Manifest this update: Thu 28 Mar 2024 23:38:08 +0000 Manifest next update: Thu 04 Apr 2024 23:38:08 +0000 Files and hashes: 1: D4D0DTKGhSybn240W-HVvS-VSDI.crl (hash: C7GIJ9hmEJpjFZWPlGrfqDdDEsp2Mzssryg8YZ6UsDs=) 2: B6E44C08454211EBAE62CF6BC4F9AE02.roa (hash: MP0F9GfPab0fw0dsEjoEfIYN+LcUl9Vs5gZO4he/YCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.crl rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D4D0DTKGhSybn240W-HVvS-VSDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Apr 2024 23:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFB8/serialNumber=0F80F40D3286852C9B9F6E345BE1D5BD2F954832 Validity Not Before: Mar 28 23:38:08 2024 GMT Not After : Apr 4 23:38:08 2024 GMT Subject: CN=6605ff60-5411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:79:0a:08:3b:c6:85:c7:73:95:1e:21:06:5f: 08:e4:55:ea:49:37:f4:f1:e9:c4:ae:3b:41:9d:ae: 54:de:e7:30:84:a5:35:66:18:fb:c1:04:20:fa:cf: cd:4c:1b:f9:b4:b1:93:88:ad:3a:30:7f:13:46:39: 7d:20:ce:3a:70:8b:71:d7:14:40:37:54:b9:47:98: e3:f1:36:49:0d:07:2c:8d:32:fd:d6:bc:74:e8:40: 71:be:e0:9f:10:16:4b:8b:50:14:3a:72:4f:1e:4c: 86:a7:f5:d6:9c:e1:28:7e:ac:e1:01:f2:40:98:3c: 00:c7:94:bf:4d:bf:c1:3e:b1:71:19:53:fd:9c:64: 12:7e:d5:05:cf:a7:85:5f:03:81:e2:8c:70:55:b9: ac:35:17:cd:89:74:d9:e4:9b:68:c0:4d:19:41:7a: 62:c7:7b:f7:d1:1d:53:57:4d:2c:00:82:c5:f2:a6: 3e:94:d0:ed:b2:8c:bf:11:4e:49:0c:41:34:8e:2e: d3:d2:37:54:11:89:ad:0b:fb:ad:6b:35:73:b5:fa: 1a:18:85:54:a7:ed:9d:52:9a:2c:ad:d3:75:50:4d: 5a:b5:ad:1e:e7:6b:18:c8:de:fe:46:21:42:92:39: 93:c0:c0:b0:93:c4:a3:22:3c:7a:49:81:07:89:95: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A1:7F:63:9D:5C:8D:7C:EA:8C:85:41:BD:26:A4:9F:2C:DF:A8:A9 X509v3 Authority Key Identifier: keyid:0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D4D0DTKGhSybn240W-HVvS-VSDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:ab:80:1e:e9:da:69:89:47:95:98:06:4d:e6:38:8d:85:e4: 10:8e:b8:11:11:b4:17:f6:f1:0f:a4:be:9e:83:3a:2c:db:1b: 82:29:42:0e:8d:d4:f3:e2:4e:cb:aa:37:ba:a2:0c:02:a9:17: ea:cd:55:43:f7:d1:eb:ef:f0:29:e1:92:a1:74:61:cc:7f:e1: 8f:25:d6:93:fc:71:e2:54:7d:39:e8:1b:88:85:1b:05:37:79: c8:f4:ce:73:72:c0:34:77:07:7a:fc:a0:2f:96:8e:d9:bc:59: 8f:2a:20:86:fc:66:83:b9:92:ee:63:56:21:8d:e1:a2:19:d7: 54:5d:90:a5:04:1c:b6:15:f1:d1:42:b2:f8:72:a2:97:e5:c5: 1e:81:09:85:f5:a2:70:d3:ed:ab:14:25:0d:d5:ab:0a:82:49: d3:79:b4:27:04:dc:64:fa:fa:63:46:96:cd:10:21:85:a6:da: da:9f:d8:d7:ff:14:be:40:d8:c9:75:b1:6a:5b:df:1a:4f:e9: bf:ed:ad:f0:d4:4d:15:22:57:7e:ab:bc:60:09:63:17:62:2a: dd:ac:4e:8e:1f:62:57:ed:d9:1b:d9:fd:5a:eb:ce:07:36:5e: fc:09:60:62:77:e6:f9:b9:cb:3a:5b:7a:a4:ff:86:00:17:59: e6:bc:73:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQjgxMTAvBgNVBAUTKDBGODBGNDBEMzI4Njg1MkM5QjlGNkUzNDVCRTFENUJE MkY5NTQ4MzIwHhcNMjQwMzI4MjMzODA4WhcNMjQwNDA0MjMzODA4WjAYMRYwFAYD VQQDEw02NjA1ZmY2MC01NDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XkKCDvGhcdzlR4hBl8I5FXqSTf08enErjtBna5U3ucwhKU1Zhj7wQQg+s/N TBv5tLGTiK06MH8TRjl9IM46cItx1xRAN1S5R5jj8TZJDQcsjTL91rx06EBxvuCf EBZLi1AUOnJPHkyGp/XWnOEofqzhAfJAmDwAx5S/Tb/BPrFxGVP9nGQSftUFz6eF XwOB4oxwVbmsNRfNiXTZ5JtowE0ZQXpix3v30R1TV00sAILF8qY+lNDtsoy/EU5J DEE0ji7T0jdUEYmtC/utazVztfoaGIVUp+2dUposrdN1UE1ata0e52sYyN7+RiFC kjmTwMCwk8SjIjx6SYEHiZWGNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyhf2Od XI186oyFQb0mpJ8s36ipMB8GA1UdIwQYMBaAFA+A9A0yhoUsm59uNFvh1b0vlUgy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZCOC84NUE1RDkwRTQ1 M0QxMUVCQjU1QTYyMjVDNEY5QUUwMi9ENEQwRFRLR2hTeWJuMjQwVy1IVnZTLVZT REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q0RDBEVEtHaFN5Ym4yNDBXLUhWdlMtVlNESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZCOC84NUE1RDkwRTQ1M0QxMUVCQjU1QTYyMjVDNEY5QUUwMi9ENEQwRFRLR2hT eWJuMjQwVy1IVnZTLVZTREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5q4Ae6dppiUeVmAZN5jiNheQQjrgREbQX9vEPpL6egzos2xuCKUIO jdTz4k7Lqje6ogwCqRfqzVVD99Hr7/Ap4ZKhdGHMf+GPJdaT/HHiVH056BuIhRsF N3nI9M5zcsA0dwd6/KAvlo7ZvFmPKiCG/GaDuZLuY1YhjeGiGddUXZClBBy2FfHR QrL4cqKX5cUegQmF9aJw0+2rFCUN1asKgknTebQnBNxk+vpjRpbNECGFptran9jX /xS+QNjJdbFqW98aT+m/7a3w1E0VIld+q7xgCWMXYirdrE6OH2JX7dkb2f1a684H Nl78CWBid+b5ucs6W3qk/4YAF1nmvHNV -----END CERTIFICATE-----Generated at Fri Mar 29 02:39:26 2024 by rpki-client on console-fra.rpki-client.org