$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft File: DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft (raw, json) Hash identifier: OMiZkoi2KluJ7JyFtMuH+U+FqTTA8ww7Mxs4FHGuhFc= Subject key identifier: 77:D3:3E:84:09:30:25:F5:8C:A5:7F:6D:6D:76:3A:D4:54:6B:DB:57 Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Certificate serial: 1351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft Manifest number: 1340 Signing time: Tue 30 Apr 2024 17:45:23 +0000 Manifest this update: Tue 30 Apr 2024 17:45:22 +0000 Manifest next update: Tue 07 May 2024 17:45:22 +0000 Files and hashes: 1: DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl (hash: TQNqXPMycO1X84gKuLAQoOfTEuYF+UxDp2f6XWay8gY=) 2: 3E116486891E11EAB5188575C4F9AE02.roa (hash: YGUgLvoISsHndI8vl7wHnCug9siHPrjVKAPfmpJGZqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4945 (0x1351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF Validity Not Before: Apr 30 17:45:22 2024 GMT Not After : May 7 17:45:22 2024 GMT Subject: CN=66312e33-95d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:20:45:28:78:e5:97:4c:58:89:29:98:6b: 1a:e2:ab:6b:ca:c0:a8:38:06:6d:67:1c:06:c5:11: c0:4f:be:7a:36:3d:d5:ca:ae:03:8b:f6:af:c4:bb: 07:3a:95:84:19:33:7e:a7:71:10:8d:85:15:2f:27: 19:0a:2e:c6:dc:1e:3e:9e:61:02:db:a3:40:c2:0c: 7d:75:57:a6:8a:e8:1d:13:6f:35:50:f4:06:af:bc: 56:08:ae:1c:1d:3c:4a:81:38:be:3f:56:f1:b3:2b: 28:b5:b2:51:22:bb:51:d1:59:64:f1:16:de:e5:b0: 52:0b:4b:4f:92:09:21:69:99:ff:8f:8c:56:92:a4: 75:ea:8e:2f:54:55:fe:90:85:28:d7:83:43:4e:2c: 8e:84:db:fa:9d:ad:79:cb:ed:f5:72:08:a1:d6:3f: 0b:f9:02:66:ff:6b:80:27:83:c6:65:a1:de:10:40: e5:36:16:10:f1:e1:16:66:26:ca:1e:b8:96:e6:09: b2:00:a4:e9:8f:c9:fa:6a:a0:ea:33:db:3e:08:36: 79:46:45:11:1a:b4:db:2b:5c:58:60:f6:f8:fa:2d: 59:55:8c:c0:75:a5:6d:f6:8f:b5:35:cd:d3:3c:42: cf:12:73:eb:06:ee:ca:af:fc:6e:2d:49:36:d6:95: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D3:3E:84:09:30:25:F5:8C:A5:7F:6D:6D:76:3A:D4:54:6B:DB:57 X509v3 Authority Key Identifier: keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b0:84:2d:c6:eb:e1:12:84:a0:00:93:8a:5f:97:90:e2:2f: 25:bb:61:d9:35:e0:92:29:33:1e:de:01:73:c6:f7:9b:63:e5: 78:8b:a0:2e:25:11:ef:07:b8:25:0b:03:3d:d6:28:96:3b:55: de:b9:3c:ce:ee:ea:34:aa:da:69:0f:9e:e2:bd:85:51:da:67: 74:09:fc:41:f0:10:63:80:74:17:cd:e1:70:a3:2b:85:ac:a3: b0:ed:90:a5:01:6d:42:95:79:c0:4d:65:c0:d4:b1:bd:ba:ce: f0:fa:13:a5:d7:32:ae:af:33:15:b1:b7:7c:61:0d:e2:b3:5d: 00:24:d3:fe:7f:ce:f7:e6:dc:7d:6d:68:98:80:8d:98:60:3c: 23:aa:0d:45:fb:e6:38:9d:56:e3:51:10:f4:5a:d6:f5:1d:1f: 62:36:30:ef:79:e3:1f:42:90:54:ee:30:b3:20:a0:a0:b7:bd: ca:14:2d:6b:70:db:67:dd:a1:c5:8d:b6:dc:82:54:71:39:b0: ea:b6:48:2f:52:64:4d:bf:83:b0:04:25:74:e0:3d:33:18:9a: 05:2c:ec:83:fe:8f:6e:7a:80:88:73:2d:78:6b:9a:ee:53:f2: 6b:65:dd:83:d0:31:c5:6d:cc:e6:e0:b4:3b:38:da:70:21:3f: 08:54:d5:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y1NDcxMTAvBgNVBAUTKDBFRTNFQTIyMkMzOThDRDc2MEM3Njc1NjFENTgyRkMw RkM1RDIzRkYwHhcNMjQwNDMwMTc0NTIyWhcNMjQwNTA3MTc0NTIyWjAYMRYwFAYD VQQDEw02NjMxMmUzMy05NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHAgRSh45ZdMWIkpmGsa4qtrysCoOAZtZxwGxRHAT756Nj3Vyq4Di/avxLsH OpWEGTN+p3EQjYUVLycZCi7G3B4+nmEC26NAwgx9dVemiugdE281UPQGr7xWCK4c HTxKgTi+P1bxsysotbJRIrtR0Vlk8Rbe5bBSC0tPkgkhaZn/j4xWkqR16o4vVFX+ kIUo14NDTiyOhNv6na15y+31cgih1j8L+QJm/2uAJ4PGZaHeEEDlNhYQ8eEWZibK HriW5gmyAKTpj8n6aqDqM9s+CDZ5RkURGrTbK1xYYPb4+i1ZVYzAdaVt9o+1Nc3T PELPEnPrBu7Kr/xuLUk21pVGSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfTPoQJ MCX1jKV/bW12OtRUa9tXMB8GA1UdIwQYMBaAFA7j6iIsOYzXYMdnVh1YL8D8XSP/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjU0Ny80QTgyRjEyNDgw NTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpOZGd4MmRXSFZndndQeGRJ XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1UHFJaXc1ak5kZ3gyZFdIVmd2d1B4ZElfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjU0Ny80QTgyRjEyNDgwNTMxMUU4QjcyN0YxNTZDNEY5QUUwMi9EdVBxSWl3NWpO ZGd4MmRXSFZndndQeGRJXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgsIQtxuvhEoSgAJOKX5eQ4i8lu2HZNeCSKTMe3gFzxvebY+V4i6Au JRHvB7glCwM91iiWO1XeuTzO7uo0qtppD57ivYVR2md0CfxB8BBjgHQXzeFwoyuF rKOw7ZClAW1ClXnATWXA1LG9us7w+hOl1zKurzMVsbd8YQ3is10AJNP+f8735tx9 bWiYgI2YYDwjqg1F++Y4nVbjURD0Wtb1HR9iNjDveeMfQpBU7jCzIKCgt73KFC1r cNtn3aHFjbbcglRxObDqtkgvUmRNv4OwBCV04D0zGJoFLOyD/o9ueoCIcy14a5ru U/JrZd2D0DHFbczm4LQ7ONpwIT8IVNVW -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:05 2024 by rpki-client on console-ams.rpki-client.org