$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json) Hash identifier: A5mA0ey1oeYuZJhwMDeDMGqkd2IwjySZK2Af1lj3Z+A= Subject key identifier: C4:BA:CD:A3:33:1C:CE:53:07:49:89:40:A2:E0:CA:A8:69:E6:BF:1E Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft Manifest number: 0475 Signing time: Wed 01 May 2024 01:59:58 +0000 Manifest this update: Wed 01 May 2024 01:59:58 +0000 Manifest next update: Wed 08 May 2024 01:59:58 +0000 Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: 3RK5tyZSxLxzrPVxE9boGKzhf0lpZ8CoczX90UxJ64Y=) 2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: 7PTe1iBnO0tL42laH8I/iP5sM/1roMN4MPOCU+l464o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Validity Not Before: May 1 01:59:58 2024 GMT Not After : May 8 01:59:58 2024 GMT Subject: CN=6631a21e-3f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:03:b2:34:b3:7f:0a:02:81:0a:ca:ed:3c: 37:52:e9:34:20:bd:9f:54:62:84:c7:4c:81:ea:cf: 8e:6d:fc:63:6a:e9:f3:8a:57:28:27:75:8f:9d:ca: 82:81:7a:ea:3b:8c:29:ad:76:65:d8:b7:46:61:16: 8d:25:57:5e:04:79:6c:01:cf:31:89:47:a1:64:5a: 62:52:02:37:ab:06:92:82:54:dd:69:25:d3:9f:58: 49:df:6b:80:8d:72:77:fd:c3:43:cc:4e:1f:2f:b5: 3a:45:41:61:b3:03:74:4f:a9:ba:a9:d2:3f:d5:44: 33:cd:ee:4c:37:c8:e7:99:91:25:dd:d0:30:56:27: b4:38:a4:33:f0:dc:4e:ff:2b:ab:27:b1:b4:1f:16: 58:c0:1c:54:53:c9:58:07:86:04:7c:7a:b3:2f:32: ba:44:f8:42:bc:a0:5f:53:45:00:af:35:48:39:73: b8:2d:7d:8c:8f:90:93:a2:b3:26:cc:5d:d2:0c:50: 27:16:57:d4:39:7e:b1:33:59:8d:88:31:10:f1:a0: 79:0a:20:68:68:36:54:a0:22:e7:24:12:2f:10:c8: 01:d8:50:fc:5a:08:90:6e:34:c3:b4:c4:15:bc:d7: 4b:a0:2c:f1:d5:90:34:f2:88:98:99:5d:89:fd:c7: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BA:CD:A3:33:1C:CE:53:07:49:89:40:A2:E0:CA:A8:69:E6:BF:1E X509v3 Authority Key Identifier: keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:87:36:7d:34:f3:d2:d4:3c:a6:45:41:1a:f9:6a:48:7f:4e: b5:23:86:45:d5:11:01:0b:bd:54:aa:51:9c:0f:9d:21:b5:28: 69:28:96:80:a4:df:02:44:ae:51:48:85:92:88:85:9d:5c:0d: d1:8d:5b:ac:f5:27:26:b7:fa:8d:da:a7:ab:dc:1c:fc:b5:29: 7b:ad:18:4a:38:d2:c9:3d:cf:0e:61:b0:c2:35:97:22:5c:8e: fe:28:8b:00:85:74:ca:9f:00:c6:83:ef:e3:49:72:ed:f0:2d: 5d:9c:51:59:b9:5b:75:2d:ef:00:e5:4e:73:78:c5:54:23:37: 55:1b:6b:b0:35:9c:09:88:9c:60:c6:1f:08:a9:a4:e0:1b:aa: eb:ba:40:ac:d4:05:36:62:f8:ad:89:e6:49:9d:15:5d:ca:e3: fe:09:f9:d5:b6:55:c9:a2:10:34:5b:6f:cf:44:72:d0:ce:1e: 13:f5:25:47:cb:cc:de:38:f0:c4:8a:1c:45:c1:55:92:c8:5f: 20:e5:17:af:13:41:b6:3c:1a:86:fe:05:05:c3:a5:a8:e3:32: 4e:3d:0b:47:4e:d8:f7:15:34:f2:f3:36:2c:74:0a:e5:db:f1: b2:1b:4a:c4:a9:a1:22:4c:06:7f:f0:95:eb:18:a2:f5:23:8d: 48:fb:ba:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDM0UxMTAvBgNVBAUTKDBDMEIxREQ1RjZBQjY0NEM1NzA3ODFBNDI5RTQ0ODA1 MDIxOEU5RUIwHhcNMjQwNTAxMDE1OTU4WhcNMjQwNTA4MDE1OTU4WjAYMRYwFAYD VQQDEw02NjMxYTIxZS0zZjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z4DsjSzfwoCgQrK7Tw3Uuk0IL2fVGKEx0yB6s+ObfxjaunzilcoJ3WPncqC gXrqO4wprXZl2LdGYRaNJVdeBHlsAc8xiUehZFpiUgI3qwaSglTdaSXTn1hJ32uA jXJ3/cNDzE4fL7U6RUFhswN0T6m6qdI/1UQzze5MN8jnmZEl3dAwVie0OKQz8NxO /yurJ7G0HxZYwBxUU8lYB4YEfHqzLzK6RPhCvKBfU0UArzVIOXO4LX2Mj5CTorMm zF3SDFAnFlfUOX6xM1mNiDEQ8aB5CiBoaDZUoCLnJBIvEMgB2FD8WgiQbjTDtMQV vNdLoCzx1ZA08oiYmV2J/ccT0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMS6zaMz HM5TB0mJQKLgyqhp5r8eMB8GA1UdIwQYMBaAFAwLHdX2q2RMVweBpCnkSAUCGOnr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEMzRS9BODA3QzFDOEY0 MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpFeFhCNEdrS2VSSUJRSVk2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBc2QxZmFyWkV4WEI0R2tLZVJJQlFJWTZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEMzRS9BODA3QzFDOEY0MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpF eFhCNEdrS2VSSUJRSVk2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2hzZ9NPPS1DymRUEa+WpIf061I4ZF1REBC71UqlGcD50htShpKJaA pN8CRK5RSIWSiIWdXA3RjVus9Scmt/qN2qer3Bz8tSl7rRhKONLJPc8OYbDCNZci XI7+KIsAhXTKnwDGg+/jSXLt8C1dnFFZuVt1Le8A5U5zeMVUIzdVG2uwNZwJiJxg xh8IqaTgG6rrukCs1AU2YvitieZJnRVdyuP+CfnVtlXJohA0W2/PRHLQzh4T9SVH y8zeOPDEihxFwVWSyF8g5RevE0G2PBqG/gUFw6Wo4zJOPQtHTtj3FTTy8zYsdArl 2/GyG0rEqaEiTAZ/8JXrGKL1I41I+7qh -----END CERTIFICATE-----Generated at Wed May 1 03:20:30 2024 by rpki-client on console-fra.rpki-client.org