$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: 4DN5jXuFFaOCjNtAeabG1NKZucuOkJt3zbl2vwBOIFo= Subject key identifier: 27:0C:0E:C0:53:65:79:F2:CA:DD:D0:9E:C0:B6:1F:EF:1B:D2:78:12 Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0B3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0B34 Signing time: Sat 04 May 2024 19:56:57 +0000 Manifest this update: Sat 04 May 2024 19:56:57 +0000 Manifest next update: Sat 11 May 2024 19:56:57 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: y3Ps3ddKzeo9kv7tVgBHqj/ZCYSuLWgQfVKNdFJ1fmE=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: lKGrdUpFTKCrwBRh2fcb2KWgtUgDOTbidK/t7yQBVrM=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: Om9E1w5WXyU4Tu1L+gK6nx3VbYW2GZQxcEa9IiFY8zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: May 4 19:56:57 2024 GMT Not After : May 11 19:56:57 2024 GMT Subject: CN=66369309-ca94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:92:f7:7e:56:82:6c:a6:b6:89:0f:fe:c6: 84:a7:f8:a3:cb:88:8d:37:0d:c1:38:36:29:d7:94: 8e:33:16:6e:f0:4a:56:4b:ea:a2:18:aa:e9:0b:ad: 9c:15:4d:53:4b:e5:e3:6e:1d:a1:c5:9a:7c:1a:a8: d9:c1:ca:80:4a:24:e5:34:3e:b5:dc:1d:4b:bc:e5: dd:61:f8:cb:8f:c9:d6:16:42:66:0f:fd:00:1b:fe: f2:64:5b:c3:b0:c9:25:ab:01:2b:e8:a7:33:5e:a5: 97:eb:6b:7d:d1:4a:20:92:15:ed:fe:38:b0:0e:a1: b8:44:2e:f8:02:0b:84:74:be:a0:4d:a2:45:91:16: 8a:c1:a0:63:98:e2:32:cc:3f:c0:be:0a:af:cc:77: 64:00:a2:f8:7e:87:b4:8c:b4:c0:13:d3:bb:da:b7: e4:1b:52:f1:a7:82:82:33:47:87:b7:61:77:a9:92: ae:b4:54:65:95:b6:a0:bd:87:1b:88:30:c0:8f:81: f9:c3:19:7d:68:8e:00:23:99:c0:17:f1:9b:35:b4: e7:fb:b5:7b:76:2c:23:41:33:65:60:2f:96:ed:d1: 4e:95:5f:42:44:bb:8f:5e:db:1d:c0:71:d5:2d:11: 6f:2f:7e:f9:9d:f6:1e:89:9d:ed:bd:67:56:25:a5: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0C:0E:C0:53:65:79:F2:CA:DD:D0:9E:C0:B6:1F:EF:1B:D2:78:12 X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0d:bf:7f:63:f2:83:cf:48:9c:1a:d3:c4:31:02:6f:41:a3: 9a:94:f3:f2:1f:b3:4e:a8:d7:fc:04:3e:78:49:0c:5c:92:55: 2e:a9:97:11:f8:fd:20:74:a9:36:2f:05:b3:30:21:9d:16:59: 84:06:a2:52:f3:da:3e:c1:a1:b5:27:98:13:53:4b:79:02:ba: 23:7a:8e:56:17:6e:b2:5a:98:59:2d:7f:83:c0:a8:03:9c:44: a2:a4:c2:a9:29:3c:15:ba:f8:73:05:e8:d4:40:0e:1b:87:49: e2:78:14:e3:23:86:48:6b:c3:cc:72:7e:e5:cc:87:06:04:88: 0b:7c:6e:73:40:40:d0:21:0d:a9:bd:43:a1:2a:96:08:cc:32: 61:b2:bd:2c:21:a8:43:81:44:1d:3f:de:b1:73:97:35:e5:ff: b5:88:ac:c7:18:e4:7f:49:68:0b:9a:8b:c1:c5:24:5b:4b:ac: 75:8d:b9:9d:c3:46:a4:eb:27:da:3a:07:f2:14:85:ad:ae:75: eb:b4:4c:df:a6:7d:95:31:42:bd:d5:e7:83:e2:17:1f:2f:f6: fc:2f:fa:18:71:3c:5f:0f:cc:89:ac:0a:6d:14:47:a9:ff:db: 05:bc:be:3c:7c:4d:f7:a6:bc:e9:2c:04:13:60:12:43:01:d5: 3f:5f:00:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjQwNTA0MTk1NjU3WhcNMjQwNTExMTk1NjU3WjAYMRYwFAYD VQQDEw02NjM2OTMwOS1jYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzP+S935WgmymtokP/saEp/ijy4iNNw3BODYp15SOMxZu8EpWS+qiGKrpC62c FU1TS+Xjbh2hxZp8GqjZwcqASiTlND613B1LvOXdYfjLj8nWFkJmD/0AG/7yZFvD sMklqwEr6KczXqWX62t90UogkhXt/jiwDqG4RC74AguEdL6gTaJFkRaKwaBjmOIy zD/AvgqvzHdkAKL4foe0jLTAE9O72rfkG1Lxp4KCM0eHt2F3qZKutFRllbagvYcb iDDAj4H5wxl9aI4AI5nAF/GbNbTn+7V7diwjQTNlYC+W7dFOlV9CRLuPXtsdwHHV LRFvL375nfYeiZ3tvWdWJaVk+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcMDsBT ZXnyyt3QnsC2H+8b0ngSMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALDb9/Y/KDz0icGtPEMQJvQaOalPPyH7NOqNf8BD54SQxcklUuqZcR +P0gdKk2LwWzMCGdFlmEBqJS89o+waG1J5gTU0t5Arojeo5WF26yWphZLX+DwKgD nESipMKpKTwVuvhzBejUQA4bh0nieBTjI4ZIa8PMcn7lzIcGBIgLfG5zQEDQIQ2p vUOhKpYIzDJhsr0sIahDgUQdP96xc5c15f+1iKzHGOR/SWgLmovBxSRbS6x1jbmd w0ak6yfaOgfyFIWtrnXrtEzfpn2VMUK91eeD4hcfL/b8L/oYcTxfD8yJrAptFEep /9sFvL48fE33przpLAQTYBJDAdU/XwCN -----END CERTIFICATE-----Generated at Sat May 4 20:37:07 2024 by rpki-client on console-fra.rpki-client.org