$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft File: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft (raw, json) Hash identifier: g4bV79YMw4JqbNZgpJMtUa6yB7+hX2Uj3elkVBsyXFg= Subject key identifier: BB:8D:DF:91:62:FD:E0:BD:6A:54:8B:C2:A0:BA:F5:4A:83:EF:E6:FD Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 Certificate issuer: /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft Manifest number: 031B Signing time: Sat 01 Jun 2024 04:14:00 +0000 Manifest this update: Sat 01 Jun 2024 04:13:59 +0000 Manifest next update: Sat 08 Jun 2024 04:13:59 +0000 Files and hashes: 1: DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl (hash: Q2vEUuktWNeWj+zlrf30X+xCnMy2wzhVdjeWmGGyKm8=) 2: 41A312C684BB11EC95CF1D6DC4F9AE02.roa (hash: W1x/EXO8bWreNOkmC081MRTGEO62/pX9uJW9+p1JmgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232 Validity Not Before: Jun 1 04:13:59 2024 GMT Not After : Jun 8 04:13:59 2024 GMT Subject: CN=665aa007-e986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:a3:70:42:52:63:9c:79:08:e7:96:b4:5b: fd:21:f4:d5:e1:65:86:9b:d3:d6:36:44:27:2a:4e: 4b:ab:b3:1b:e8:13:c5:2a:93:41:ef:c3:21:d9:80: cf:e8:a4:d9:37:60:b0:aa:22:57:11:5e:08:ba:3f: 01:31:bb:fa:f5:d2:f7:74:d4:9d:92:0e:79:44:e6: 2f:81:3d:0f:f4:08:11:3e:f2:7f:c8:47:d0:43:c3: 0e:8c:4a:e7:d3:8a:ac:41:c7:0c:90:b9:a6:fb:b1: 08:0f:77:5c:ad:cc:57:a9:72:92:9b:04:02:3d:18: f4:73:51:20:90:ad:08:87:29:ee:e6:72:dd:95:ea: bc:18:0f:d8:91:1c:56:92:ca:7d:27:5d:d3:f6:49: 80:bc:35:0e:33:6a:fb:31:83:56:a2:08:6d:43:d9: fc:b4:bb:64:af:9e:d3:58:4c:32:50:f6:2d:47:3f: a7:70:40:dc:62:f2:bb:f0:a5:cb:8f:25:a0:5e:d7: 2c:e1:ad:84:b5:32:8a:18:07:31:65:9c:56:c2:ca: 0f:c8:7e:d0:f2:f9:43:bc:2a:54:9c:b5:66:35:03: 01:4a:ed:01:89:d3:9c:d4:8b:65:c6:5f:de:e9:e6: a9:67:1b:7c:e9:e0:b4:63:a3:53:d0:d3:b1:51:74: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8D:DF:91:62:FD:E0:BD:6A:54:8B:C2:A0:BA:F5:4A:83:EF:E6:FD X509v3 Authority Key Identifier: keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:70:6f:b7:dc:9f:94:d5:7b:c6:6e:9e:af:c3:33:95:ab:6f: b7:15:e4:dd:0c:2b:a1:7d:29:4c:fc:91:56:fc:59:6d:d2:b4: fc:3e:fc:81:b6:0e:ac:8c:bc:6b:f8:90:56:0e:4f:68:28:bb: 6e:c4:f9:39:4f:9d:5d:cc:9a:dd:99:ec:f4:c2:c4:77:e9:e4: ae:06:5a:83:8a:ee:76:39:88:25:f3:ae:f9:10:b6:1b:ef:80: 4a:49:86:bb:c3:60:9c:38:22:75:e9:b5:56:fa:64:cd:15:70: 3f:94:b3:3b:1f:ed:65:87:7c:79:85:f0:72:4f:fb:1c:91:72: ca:51:71:c5:d3:e4:22:7c:9a:b5:e0:00:3e:82:b6:9b:ff:9d: 91:1f:5f:73:c2:91:c6:2a:31:d5:7b:32:75:1a:f4:64:7e:0a: 2b:56:21:c5:f3:79:e6:5e:40:3b:db:bb:06:4c:71:60:ba:a5: df:f9:f0:de:86:df:15:2f:c1:95:6c:d5:c5:7d:11:68:ea:bb: b0:b0:30:e3:93:6d:a2:0d:47:ca:5f:5b:d0:b9:4e:b4:bf:79: 63:74:e8:a2:9f:24:60:22:0a:67:0b:a5:c3:4c:ac:2d:5d:57: 37:47:39:28:5c:02:04:fc:25:61:50:27:80:17:2a:5d:1e:ee: 6b:5b:5b:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3NDIxMTAvBgNVBAUTKDBDRUUwRDk2NzczRDVEREFENDY3OUUwRTgzOUE4REMx MjY2OUUyMzIwHhcNMjQwNjAxMDQxMzU5WhcNMjQwNjA4MDQxMzU5WjAYMRYwFAYD VQQDEw02NjVhYTAwNy1lOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3mjcEJSY5x5COeWtFv9IfTV4WWGm9PWNkQnKk5Lq7Mb6BPFKpNB78Mh2YDP 6KTZN2CwqiJXEV4Iuj8BMbv69dL3dNSdkg55ROYvgT0P9AgRPvJ/yEfQQ8MOjErn 04qsQccMkLmm+7EID3dcrcxXqXKSmwQCPRj0c1EgkK0Ihynu5nLdleq8GA/YkRxW ksp9J13T9kmAvDUOM2r7MYNWoghtQ9n8tLtkr57TWEwyUPYtRz+ncEDcYvK78KXL jyWgXtcs4a2EtTKKGAcxZZxWwsoPyH7Q8vlDvCpUnLVmNQMBSu0BidOc1Itlxl/e 6eapZxt86eC0Y6NT0NOxUXRJdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuN35Fi /eC9alSLwqC69UqD7+b9MB8GA1UdIwQYMBaAFAzuDZZ3PV3a1GeeDoOajcEmaeIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc0Mi8wNDE1RDZGRTg0 QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhkclVaNTRPZzVxTndTWnA0 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPNE5sbmM5WGRyVVo1NE9nNXFOd1NacDRqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc0Mi8wNDE1RDZGRTg0QjcxMUVDQjVBNzFCNDJDNEY5QUUwMi9ETzRObG5jOVhk clVaNTRPZzVxTndTWnA0akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgcG+33J+U1XvGbp6vwzOVq2+3FeTdDCuhfSlM/JFW/Flt0rT8PvyB tg6sjLxr+JBWDk9oKLtuxPk5T51dzJrdmez0wsR36eSuBlqDiu52OYgl8675ELYb 74BKSYa7w2CcOCJ16bVW+mTNFXA/lLM7H+1lh3x5hfByT/sckXLKUXHF0+QifJq1 4AA+grab/52RH19zwpHGKjHVezJ1GvRkfgorViHF83nmXkA727sGTHFguqXf+fDe ht8VL8GVbNXFfRFo6ruwsDDjk22iDUfKX1vQuU60v3ljdOiinyRgIgpnC6XDTKwt XVc3RzkoXAIE/CVhUCeAFypdHu5rW1sZ -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:13 2024 by rpki-client on console-ams.rpki-client.org