$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json) Hash identifier: X1rVegQhveJ2iJ/hHqLNyr+yIgVFZGM7uULenXayGQQ= Subject key identifier: 7F:5C:71:CE:7D:A7:68:49:EE:52:84:57:96:97:DD:90:3B:0E:50:CA Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 0FA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft Manifest number: 0F98 Signing time: Mon 06 May 2024 18:10:53 +0000 Manifest this update: Mon 06 May 2024 18:10:52 +0000 Manifest next update: Mon 13 May 2024 18:10:52 +0000 Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: NZYIAPm7EPculCDsINZ4lPqnZ9ujOe0sd66gf4ctszQ=) 2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: c2vWrZ/a7PGvEt2qXPS4oKRS8go8Nn3udLRvekISHhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4002 (0xfa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: May 6 18:10:52 2024 GMT Not After : May 13 18:10:52 2024 GMT Subject: CN=66391d2c-a0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:34:90:86:f6:a7:fe:76:75:6a:b0:6a:b7: 2c:47:3d:fa:29:11:51:5c:3f:e2:13:28:8a:93:ff: a3:f7:26:4c:81:37:bd:99:68:43:5a:b9:94:0b:16: 54:9b:9f:28:5b:0b:51:9e:1a:1f:bd:97:95:3f:9c: e7:5f:3a:0d:89:3d:99:a1:6e:d9:55:5f:a8:e5:f6: b3:40:56:dd:9d:4e:9f:50:55:98:30:d0:be:cc:5f: e9:58:a1:fd:22:fc:75:fd:68:4e:9a:a6:1b:7c:29: fc:53:d1:b8:93:9e:d2:ea:03:92:da:6b:28:dd:69: f7:e7:2b:ed:4a:cf:42:00:e6:52:88:5f:00:e5:33: 58:ba:82:7e:f4:f9:5b:fb:de:2d:57:65:e0:82:b9: 69:62:5d:f1:c2:a6:0d:c0:df:78:3e:1d:e8:5e:17: 43:6c:da:58:ff:35:78:43:2b:20:ae:5e:2f:e4:56: 31:3b:47:00:03:42:b5:1e:73:2e:29:50:e1:27:44: d1:69:73:e1:e3:e1:3c:ec:42:59:6e:31:1e:82:e0: d0:16:6e:70:de:31:f3:fb:7a:20:c6:7f:21:6e:63: aa:7d:18:78:53:bb:f0:c8:5e:d8:35:19:18:78:3e: fd:d5:bc:64:2f:02:43:e7:2f:43:33:3e:5c:3e:fc: 59:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5C:71:CE:7D:A7:68:49:EE:52:84:57:96:97:DD:90:3B:0E:50:CA X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:73:4b:cb:74:f8:c9:89:bb:07:b6:f7:7b:a9:36:28:e6:0d: 44:5e:72:c9:98:b5:18:8a:09:1a:09:98:c9:e7:38:ae:94:8a: 9f:cf:bf:42:8b:ac:69:23:2f:be:33:01:d0:a9:13:b0:f1:83: 39:cc:41:99:00:3a:38:3a:09:8c:d7:54:63:e8:c8:41:84:c5: e0:d7:ef:ce:54:5d:78:20:67:0c:dc:e8:be:92:8b:7d:30:e1: 85:db:37:06:7a:2a:cd:8d:44:58:9f:f3:83:6a:2a:c8:d3:c9: 3f:f1:57:e5:2c:0d:82:a8:61:23:d7:0b:9b:d3:0a:da:85:8d: 84:79:d2:ef:1e:d4:95:b0:a3:57:b3:46:69:b5:d0:25:92:69: 9f:9a:b6:8d:d4:76:77:64:db:42:a8:80:a4:c1:76:6a:8c:40: 26:c3:a4:e3:0b:42:94:ae:f3:87:8a:85:ad:88:96:cc:fd:a3: dd:e5:4d:6f:74:42:f7:dd:23:e1:28:8f:c9:95:1e:a8:cc:e2: a3:d0:68:e9:1a:4a:44:46:8d:eb:ae:eb:c4:69:05:66:f2:71: 41:f2:bd:3f:f8:55:06:09:fe:a3:90:0b:99:b2:c5:6c:dc:0a: 77:e1:39:17:9f:ba:c7:00:38:5e:93:48:6e:79:3c:58:10:3b: 6c:f3:d3:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjQwNTA2MTgxMDUyWhcNMjQwNTEzMTgxMDUyWjAYMRYwFAYD VQQDEw02NjM5MWQyYy1hMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsg0kIb2p/52dWqwarcsRz36KRFRXD/iEyiKk/+j9yZMgTe9mWhDWrmUCxZU m58oWwtRnhofvZeVP5znXzoNiT2ZoW7ZVV+o5fazQFbdnU6fUFWYMNC+zF/pWKH9 Ivx1/WhOmqYbfCn8U9G4k57S6gOS2mso3Wn35yvtSs9CAOZSiF8A5TNYuoJ+9Plb +94tV2XggrlpYl3xwqYNwN94Ph3oXhdDbNpY/zV4Qysgrl4v5FYxO0cAA0K1HnMu KVDhJ0TRaXPh4+E87EJZbjEeguDQFm5w3jHz+3ogxn8hbmOqfRh4U7vwyF7YNRkY eD791bxkLwJD5y9DMz5cPvxZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9ccc59 p2hJ7lKEV5aX3ZA7DlDKMB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDc0vLdPjJibsHtvd7qTYo5g1EXnLJmLUYigkaCZjJ5ziulIqfz79C i6xpIy++MwHQqROw8YM5zEGZADo4OgmM11Rj6MhBhMXg1+/OVF14IGcM3Oi+kot9 MOGF2zcGeirNjURYn/ODairI08k/8VflLA2CqGEj1wub0wrahY2EedLvHtSVsKNX s0ZptdAlkmmfmraN1HZ3ZNtCqICkwXZqjEAmw6TjC0KUrvOHioWtiJbM/aPd5U1v dEL33SPhKI/JlR6ozOKj0GjpGkpERo3rruvEaQVm8nFB8r0/+FUGCf6jkAuZssVs 3Ap34TkXn7rHADhek0hueTxYEDts89PW -----END CERTIFICATE-----Generated at Mon May 6 20:19:30 2024 by rpki-client on console-ams.rpki-client.org