$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft File: drnTOfrNYrR-k-iITehQOW2877Q.mft (raw, json) Hash identifier: Ns8MzMYib3RRuIQuS1QczwX2vEZAN8fbA6uGcYakrQA= Subject key identifier: 92:2B:F0:88:13:24:67:69:5F:15:38:55:58:F2:FA:7A:8A:8A:E2:C4 Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Certificate serial: 0A21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft Manifest number: 0A0C Signing time: Mon 06 May 2024 20:45:58 +0000 Manifest this update: Mon 06 May 2024 20:45:58 +0000 Manifest next update: Mon 13 May 2024 20:45:58 +0000 Files and hashes: 1: drnTOfrNYrR-k-iITehQOW2877Q.crl (hash: Ne49hvBEsyATeSgybQhpF7tS56E+OGVzjClsoOSdJUY=) 2: 83882F7AF83B11ECB4154E31C4F9AE02.roa (hash: EhSHrFVVtHL5lFFl+aVbUcLo1qXdi3FAtdOJlX814u4=) 3: 4FFC83964CA311EE815AF017C4F9AE02.roa (hash: vgN7wLEDbyrBifRerfum3Fk0T52cGWinYY+zg+1VrHM=) 4: AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa (hash: H5ZVPVTct0U6OTmtMr1f5SRBkjmlilrIyET1lT5wzps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Validity Not Before: May 6 20:45:58 2024 GMT Not After : May 13 20:45:58 2024 GMT Subject: CN=66394186-9461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:53:47:33:0c:5d:b3:3c:89:a8:7f:19:dc:8e: 24:23:99:75:2c:ca:06:a8:91:c4:f9:f8:a7:06:e2: ee:1f:bb:42:74:f7:ec:b0:5f:6c:ac:dd:b7:8b:65: 04:fd:ab:00:1a:bc:56:21:24:e4:89:da:89:06:0a: 7f:c5:90:2b:6d:e3:f0:da:31:19:9d:8f:46:2c:4c: ff:73:c2:9b:80:cc:4f:9a:3a:bd:cc:ef:cb:82:a2: 1a:99:d9:bc:51:58:1a:f4:30:b0:e5:e3:60:80:77: 4b:62:3c:6d:6e:9e:f4:25:8f:dc:18:67:91:e7:5f: c9:68:a1:68:28:d2:53:01:92:d8:2a:32:46:8c:0c: 4a:c2:3d:9f:a6:3d:80:89:89:7a:31:3d:54:f2:ea: 8c:5c:cb:37:e8:e2:ff:ee:3f:d8:54:e2:33:3e:09: 27:e1:3d:36:5a:d5:ab:c7:b9:bf:6a:07:ed:48:d1: 9e:77:3d:46:ba:66:8b:12:02:b4:5f:41:e8:db:0d: b0:33:44:19:9d:97:0f:04:bd:5d:08:db:14:e3:a0: af:e4:62:2b:56:65:2f:55:b2:55:46:1d:80:15:2e: c5:cd:f1:94:d0:36:c8:06:25:43:1c:03:51:e0:d1: 3a:04:f0:6c:55:36:c6:7e:2c:c5:82:e5:a8:04:32: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:F0:88:13:24:67:69:5F:15:38:55:58:F2:FA:7A:8A:8A:E2:C4 X509v3 Authority Key Identifier: keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:4c:7b:a7:71:fd:1d:24:c3:c2:37:52:0a:33:6c:f3:51:f9: 77:4c:38:18:6d:69:14:e6:f1:26:bb:69:67:fa:ae:e3:bb:68: 3d:0d:c8:f7:1e:cb:9b:d7:1d:2a:fa:c4:51:2d:3d:35:33:10: 01:28:56:a7:ca:22:3c:be:ee:99:0c:58:b5:3b:02:7e:28:ac: 00:85:5c:d1:c1:f9:c1:51:05:94:39:84:48:7d:98:67:1c:1c: f3:c1:13:5f:fe:72:f2:1d:44:8e:15:94:2d:91:74:aa:1c:06: 3c:36:98:e2:d9:4e:97:f2:5f:90:53:ee:e6:73:c2:19:52:a3: 22:5b:20:23:bf:e2:b2:f6:1e:2e:af:06:3d:df:97:71:51:0e: aa:15:66:f8:bf:cf:b0:ec:e6:5a:34:1e:9e:dc:a6:d1:d1:5f: ee:c1:34:28:03:85:5d:71:63:62:7e:9c:29:dd:2d:a2:2b:9e: 74:b9:d3:4d:37:0c:c8:cc:01:21:4a:00:c1:90:e6:9c:0b:5c: e8:3b:5b:70:81:00:6e:27:d1:eb:e3:84:e1:9e:89:2a:ac:02: 7e:bd:38:bc:71:7d:33:ff:63:e1:c5:91:80:12:1e:62:4a:b8: 5b:42:36:da:76:90:7b:de:bd:37:f4:33:b8:07:ef:fa:8a:3f: 5d:95:23:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2Q0ExMTAvBgNVBAUTKDc2QjlEMzM5RkFDRDYyQjQ3RTkzRTg4ODRERTg1MDM5 NkRCQ0VGQjQwHhcNMjQwNTA2MjA0NTU4WhcNMjQwNTEzMjA0NTU4WjAYMRYwFAYD VQQDEw02NjM5NDE4Ni05NDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VNHMwxdszyJqH8Z3I4kI5l1LMoGqJHE+finBuLuH7tCdPfssF9srN23i2UE /asAGrxWISTkidqJBgp/xZArbePw2jEZnY9GLEz/c8KbgMxPmjq9zO/LgqIamdm8 UVga9DCw5eNggHdLYjxtbp70JY/cGGeR51/JaKFoKNJTAZLYKjJGjAxKwj2fpj2A iYl6MT1U8uqMXMs36OL/7j/YVOIzPgkn4T02WtWrx7m/agftSNGedz1GumaLEgK0 X0Ho2w2wM0QZnZcPBL1dCNsU46Cv5GIrVmUvVbJVRh2AFS7FzfGU0DbIBiVDHANR 4NE6BPBsVTbGfizFguWoBDJn1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIr8IgT JGdpXxU4VVjy+nqKiuLEMB8GA1UdIwQYMBaAFHa50zn6zWK0fpPoiE3oUDltvO+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTZDQS83NDA5QjQ3QTRG QzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTllyUi1rLWlJVGVoUU9XMjg3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RyblRPZnJOWXJSLWstaUlUZWhRT1cyODc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTZDQS83NDA5QjQ3QTRGQzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTlly Ui1rLWlJVGVoUU9XMjg3N1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0THuncf0dJMPCN1IKM2zzUfl3TDgYbWkU5vEmu2ln+q7ju2g9Dcj3 Hsub1x0q+sRRLT01MxABKFanyiI8vu6ZDFi1OwJ+KKwAhVzRwfnBUQWUOYRIfZhn HBzzwRNf/nLyHUSOFZQtkXSqHAY8Npji2U6X8l+QU+7mc8IZUqMiWyAjv+Ky9h4u rwY935dxUQ6qFWb4v8+w7OZaNB6e3KbR0V/uwTQoA4VdcWNifpwp3S2iK550udNN NwzIzAEhSgDBkOacC1zoO1twgQBuJ9Hr44ThnokqrAJ+vTi8cX0z/2PhxZGAEh5i SrhbQjbadpB73r039DO4B+/6ij9dlSNV -----END CERTIFICATE-----Generated at Mon May 6 22:40:53 2024 by rpki-client on console-ams.rpki-client.org