$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: j7LoMstSw4cRAN4RPNLw58rU7WYxlLyPX6ND3gTO6NI= Subject key identifier: 43:00:C9:76:DA:27:DB:B4:5F:51:D1:1F:60:92:7C:A5:FB:35:87:8E Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 02AE Signing time: Sun 05 May 2024 03:42:01 +0000 Manifest this update: Sun 05 May 2024 03:42:00 +0000 Manifest next update: Sun 12 May 2024 03:42:00 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: uC35QIOadKuFD2L9wJ7SskooWILwkG7g+5tF9xr2/uA=) 2: AC75DD32AD1411EC91F4E20FC4F9AE02.roa (hash: EdomrLb8rOTH+/Ojn/01RQDJuGHKTUTpMp4b7EWXyrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: May 5 03:42:00 2024 GMT Not After : May 12 03:42:00 2024 GMT Subject: CN=66370009-8d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1b:bf:2b:68:a5:c9:6c:47:68:10:8a:eb:62: 00:66:a6:9b:3b:fd:42:b0:0f:af:f0:6f:0c:ca:32: 0f:8a:cf:f1:46:6d:94:fd:ac:46:a4:e8:60:38:87: d5:97:61:d9:27:da:64:d6:a6:8d:c4:fd:37:d0:b2: 45:bd:8e:61:28:2a:01:3a:01:8a:bd:b9:e6:49:7e: b9:21:bc:4f:4b:20:13:42:91:2d:63:17:8d:c9:99: 30:bd:68:ff:89:c7:a8:b8:1a:3c:6b:d8:6a:bc:4d: 89:9a:98:79:70:6a:07:da:18:0b:f9:bc:c9:9c:ad: d4:59:05:3a:c7:14:b6:ca:cf:16:23:da:14:02:23: 91:58:bc:25:3c:cb:1f:46:33:b3:f3:12:7b:90:0a: 18:fd:93:4e:44:e3:4d:e6:8e:d9:31:35:f8:f9:b2: 18:fc:51:bc:07:f6:1f:c1:7a:86:07:a2:b9:d1:7b: 60:13:3b:a1:56:28:d7:1b:17:a5:ed:b8:60:57:46: 8d:c6:f6:e4:8e:90:68:7e:2a:a8:a6:f6:7f:83:a2: e4:92:71:cb:c1:ed:c6:6a:c8:6a:8e:ee:d4:cd:70: 79:7c:33:53:27:a0:8e:f0:f0:92:7e:f8:a8:37:4a: aa:ea:3e:50:51:5a:40:c8:a4:42:9f:bd:b9:ca:f2: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:00:C9:76:DA:27:DB:B4:5F:51:D1:1F:60:92:7C:A5:FB:35:87:8E X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0b:56:24:9c:c2:bd:cd:87:da:de:7a:e4:78:b1:53:5d:f1: cd:21:ac:58:01:1d:cf:02:96:d2:17:83:7f:af:1e:f8:be:66: 6d:74:a3:d4:eb:1d:a3:27:ca:cb:09:b4:28:4f:ec:03:83:47: a2:5d:a3:95:12:18:21:78:e1:4e:ce:f6:c8:07:d7:a6:d0:f4: 3c:fb:e2:02:c4:71:93:36:fd:32:c7:de:6e:55:bc:c0:36:46: 26:ba:ca:8b:3e:55:75:6c:69:24:d3:e7:67:01:e4:c3:bb:b8: b5:3b:b9:d5:fd:18:db:f5:4b:a7:de:c6:85:f5:f0:77:25:e2: 58:0e:21:75:d7:af:26:53:5b:02:58:36:35:73:ff:77:2a:f9: bc:88:44:8f:b3:0a:b5:4c:42:a8:fe:2a:0c:80:f1:08:f3:21: cf:5b:fe:ef:33:5c:86:72:d4:fa:8c:0c:31:d2:2e:e1:22:36: d6:d9:91:eb:b1:0b:01:ea:4d:d1:be:49:d4:52:28:41:f1:49: ae:e5:03:c5:c0:30:89:dc:5e:f7:e1:12:f1:7a:9a:08:ec:2b: f2:78:d2:da:18:20:0c:75:a7:66:67:36:33:22:d5:52:ea:cf: 1d:33:cc:f0:ec:b6:c7:da:9f:13:b2:7e:e3:31:76:3b:24:70: 3b:4e:bc:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjQwNTA1MDM0MjAwWhcNMjQwNTEyMDM0MjAwWjAYMRYwFAYD VQQDEw02NjM3MDAwOS04ZDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hu/K2ilyWxHaBCK62IAZqabO/1CsA+v8G8MyjIPis/xRm2U/axGpOhgOIfV l2HZJ9pk1qaNxP030LJFvY5hKCoBOgGKvbnmSX65IbxPSyATQpEtYxeNyZkwvWj/ iceouBo8a9hqvE2Jmph5cGoH2hgL+bzJnK3UWQU6xxS2ys8WI9oUAiORWLwlPMsf RjOz8xJ7kAoY/ZNORONN5o7ZMTX4+bIY/FG8B/YfwXqGB6K50XtgEzuhVijXGxel 7bhgV0aNxvbkjpBofiqopvZ/g6LkknHLwe3Gashqju7UzXB5fDNTJ6CO8PCSfvio N0qq6j5QUVpAyKRCn725yvLyhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMAyXba J9u0X1HRH2CSfKX7NYeOMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPC1YknMK9zYfa3nrkeLFTXfHNIaxYAR3PApbSF4N/rx74vmZtdKPU 6x2jJ8rLCbQoT+wDg0eiXaOVEhgheOFOzvbIB9em0PQ8++ICxHGTNv0yx95uVbzA NkYmusqLPlV1bGkk0+dnAeTDu7i1O7nV/Rjb9Uun3saF9fB3JeJYDiF1168mU1sC WDY1c/93Kvm8iESPswq1TEKo/ioMgPEI8yHPW/7vM1yGctT6jAwx0i7hIjbW2ZHr sQsB6k3RvknUUihB8Umu5QPFwDCJ3F734RLxepoI7CvyeNLaGCAMdadmZzYzItVS 6s8dM8zw7LbH2p8Tsn7jMXY7JHA7TrwR -----END CERTIFICATE-----Generated at Sun May 5 04:34:53 2024 by rpki-client on console-fra.rpki-client.org