$ rpki-client -vvf rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft File: dQVeDYzbFO-fBPi5XayLiclozd0.mft (raw, json) Hash identifier: F/7dhi4oSfQImquzX3FC/vW68/p4uLIqhxSiVc+GpC0= Subject key identifier: 03:40:C9:EC:D3:62:E4:6B:3E:9C:F3:3D:3D:FF:D2:82:5E:9C:26:79 Authority key identifier: 75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD Certificate issuer: /CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Certificate serial: 0B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft Manifest number: 0B72 Signing time: Sat 04 May 2024 19:41:58 +0000 Manifest this update: Sat 04 May 2024 19:41:57 +0000 Manifest next update: Sat 11 May 2024 19:41:57 +0000 Files and hashes: 1: dQVeDYzbFO-fBPi5XayLiclozd0.crl (hash: Ggi2WWuTgDelM3SDympLeoX89bSSmoj/QEE2BEQIiVY=) 2: 3E0EDBC83E0111ECA3AF5462C4F9AE02.roa (hash: S1HXzhvFtsXdHX0pd9yiJFTv4vp0m5nc84WdbIZmysI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C4DB/serialNumber=75055E0D8CDB14EF9F04F8B95DAC8B89C968CDDD Validity Not Before: May 4 19:41:57 2024 GMT Not After : May 11 19:41:57 2024 GMT Subject: CN=66368f85-1e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:37:94:1b:fa:0e:d6:52:c5:c6:05:49:4d: e4:ad:91:26:07:35:68:0a:c4:26:84:1e:2b:6e:c9: 50:b6:2f:de:98:76:f6:72:14:86:ee:6f:9a:b4:c8: 86:ec:04:47:2b:2f:54:ca:c1:37:80:e4:7f:66:1c: 93:c5:ef:90:60:35:21:32:32:fd:dc:58:b2:db:40: 8a:50:3d:b8:e1:88:ad:d9:9e:20:ab:82:fb:c1:48: c3:69:38:56:eb:c2:71:57:33:6a:6d:db:04:db:a7: 32:da:5e:53:6e:81:1d:01:2f:aa:33:b1:f5:00:d7: 15:fd:b9:51:3e:98:05:46:ab:1a:8d:c3:f6:0b:45: 77:5c:93:b6:79:09:45:65:82:2d:49:cc:86:0a:ce: 32:e9:7e:77:36:ab:35:57:e8:e1:f4:b2:c5:65:57: 6c:e4:8a:c2:f3:40:58:b5:37:4f:24:bc:d9:0a:ce: 81:a5:c4:5e:c0:1a:98:0e:ed:6b:37:eb:5f:8f:3d: 1e:10:5d:4f:3c:3b:72:c6:df:aa:31:b4:4a:2c:c7: ed:9f:70:96:5b:b9:1f:7c:c6:28:31:44:4d:a7:eb: f9:6b:b2:d2:9b:d1:20:cb:e5:04:bf:d9:3a:8e:b2: 77:23:d1:91:41:70:dc:a6:15:71:c8:e9:ac:27:54: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:40:C9:EC:D3:62:E4:6B:3E:9C:F3:3D:3D:FF:D2:82:5E:9C:26:79 X509v3 Authority Key Identifier: keyid:75:05:5E:0D:8C:DB:14:EF:9F:04:F8:B9:5D:AC:8B:89:C9:68:CD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQVeDYzbFO-fBPi5XayLiclozd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C4DB/D7DFD6CA08F811EA9D18AE68C4F9AE02/dQVeDYzbFO-fBPi5XayLiclozd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c2:bb:70:1d:36:a0:22:e9:77:79:9e:c7:c5:73:06:69:29: b7:d5:73:f6:66:af:32:04:c6:e7:ea:58:5c:29:f7:7f:13:5f: d1:7e:b0:48:04:89:b4:6d:35:78:37:86:9f:54:f7:61:68:0c: 1a:21:41:a2:e8:55:fd:86:1c:71:62:7b:04:37:01:47:33:d8: ae:a3:de:21:a8:e9:b3:c4:0f:bb:80:c0:24:07:a8:a7:9a:6d: 61:70:cf:3d:ed:cb:41:36:e7:20:aa:d0:9c:3a:d1:34:cd:59: c3:17:9c:db:4a:68:a0:74:54:04:b6:2a:49:bd:d9:6e:62:e4: cc:e7:f9:82:2c:24:7a:68:ea:6b:7c:b1:91:ef:5e:78:10:09: 06:9d:39:1c:dc:1c:27:59:36:7d:7f:27:5f:c1:04:84:ef:9f: 18:64:cb:19:14:af:f7:4c:1e:e1:20:e2:dd:90:85:eb:3f:b1: e1:f2:ef:f8:ca:0e:ba:43:12:4e:c8:cb:4b:c1:42:bb:8d:9e: 51:07:b9:f3:82:c8:54:85:89:ae:c3:ef:2e:5c:a3:04:d9:44: 14:ca:52:1b:49:7f:27:28:3c:c6:46:e9:dd:ca:02:16:09:fa: ef:48:ee:0b:81:b4:54:66:92:46:aa:25:3f:73:d0:4e:19:52: 06:3c:9b:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM0REIxMTAvBgNVBAUTKDc1MDU1RTBEOENEQjE0RUY5RjA0RjhCOTVEQUM4Qjg5 Qzk2OENEREQwHhcNMjQwNTA0MTk0MTU3WhcNMjQwNTExMTk0MTU3WjAYMRYwFAYD VQQDEw02NjM2OGY4NS0xZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5w3lBv6DtZSxcYFSU3krZEmBzVoCsQmhB4rbslQti/emHb2chSG7m+atMiG 7ARHKy9UysE3gOR/ZhyTxe+QYDUhMjL93Fiy20CKUD244Yit2Z4gq4L7wUjDaThW 68JxVzNqbdsE26cy2l5TboEdAS+qM7H1ANcV/blRPpgFRqsajcP2C0V3XJO2eQlF ZYItScyGCs4y6X53Nqs1V+jh9LLFZVds5IrC80BYtTdPJLzZCs6BpcRewBqYDu1r N+tfjz0eEF1PPDtyxt+qMbRKLMftn3CWW7kffMYoMURNp+v5a7LSm9Egy+UEv9k6 jrJ3I9GRQXDcphVxyOmsJ1SrmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANAyezT YuRrPpzzPT3/0oJenCZ5MB8GA1UdIwQYMBaAFHUFXg2M2xTvnwT4uV2si4nJaM3d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzREQi9EN0RGRDZDQTA4 RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZPLWZCUGk1WGF5TGljbG96 ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRVmVEWXpiRk8tZkJQaTVYYXlMaWNsb3pkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzREQi9EN0RGRDZDQTA4RjgxMUVBOUQxOEFFNjhDNEY5QUUwMi9kUVZlRFl6YkZP LWZCUGk1WGF5TGljbG96ZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOwrtwHTagIul3eZ7HxXMGaSm31XP2Zq8yBMbn6lhcKfd/E1/RfrBI BIm0bTV4N4afVPdhaAwaIUGi6FX9hhxxYnsENwFHM9iuo94hqOmzxA+7gMAkB6in mm1hcM897ctBNucgqtCcOtE0zVnDF5zbSmigdFQEtipJvdluYuTM5/mCLCR6aOpr fLGR7154EAkGnTkc3BwnWTZ9fydfwQSE758YZMsZFK/3TB7hIOLdkIXrP7Hh8u/4 yg66QxJOyMtLwUK7jZ5RB7nzgshUhYmuw+8uXKME2UQUylIbSX8nKDzGRundygIW CfrvSO4LgbRUZpJGqiU/c9BOGVIGPJv3 -----END CERTIFICATE-----Generated at Sat May 4 20:37:05 2024 by rpki-client on console-fra.rpki-client.org