$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json) Hash identifier: bXnQ3MXyBN86GPOpoHhB4CTQkI0/Z2XizZ6apzEFuvM= Subject key identifier: E8:56:B0:AD:D9:8E:C4:19:53:25:28:08:CB:BF:E6:D8:B0:3D:71:64 Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Certificate serial: 1085 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft Manifest number: 107D Signing time: Sat 18 May 2024 17:56:46 +0000 Manifest this update: Sat 18 May 2024 17:56:45 +0000 Manifest next update: Sat 25 May 2024 17:56:45 +0000 Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: ddcb0ukonEye1bhvsi7qyATa+7WeQ4O0keb4D0i8hTM=) 2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: gFAOXeGkc2eCk0nFhSOjgbpqiUaf2WF1/qXSm8cRYI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4229 (0x1085) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146 Validity Not Before: May 18 17:56:45 2024 GMT Not After : May 25 17:56:45 2024 GMT Subject: CN=6648ebde-626b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:fa:1e:76:f1:34:43:11:44:09:5d:51:88: 9c:a7:a8:3b:26:a7:6c:de:8b:fc:c3:87:eb:3f:b9: 57:f2:26:49:e8:98:2b:fd:a3:a4:a4:64:f2:52:b0: 70:b7:ae:56:70:46:aa:b0:8e:6d:d5:1e:5e:63:f0: ab:c7:78:b5:3e:f1:b1:ff:b4:61:e6:de:82:7b:35: 7f:2a:2a:b3:33:72:90:97:63:b3:aa:bf:9e:00:44: ef:e5:d3:d3:94:90:63:10:74:fb:c3:bf:a7:ff:94: 39:a8:eb:ac:f0:48:b8:68:c8:76:3e:e0:97:9b:0a: 82:61:f4:8d:4e:21:e6:76:3f:96:12:57:c9:b1:a9: 1a:e8:b2:4c:17:ef:66:48:76:11:7a:26:84:a8:01: dc:e4:4b:f6:ce:ba:62:2e:44:be:db:ec:12:28:18: 65:dc:ff:66:1e:72:3e:85:36:a6:c4:ac:75:d2:25: 0c:06:65:dd:b2:cb:88:23:f5:4d:71:eb:04:ac:b7: ee:1c:17:f6:6e:4e:05:53:ff:1f:43:46:82:cf:a9: fe:ac:70:2b:fc:49:9b:59:41:3f:ab:f9:87:f0:85: fe:8b:48:35:e0:b8:68:f8:99:93:67:45:5e:f1:47: 4f:81:ee:4e:52:14:ee:e6:bc:2f:e7:56:34:01:30: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:56:B0:AD:D9:8E:C4:19:53:25:28:08:CB:BF:E6:D8:B0:3D:71:64 X509v3 Authority Key Identifier: keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:3f:68:76:f9:b1:48:8e:52:6c:f0:27:b4:be:98:97:a7:fb: 70:5e:f9:d5:af:78:bc:1e:05:4a:44:68:0c:17:9c:98:ca:0c: ca:aa:6b:04:ab:af:96:76:9b:88:b1:46:1b:b2:a3:8f:ae:79: 70:dd:f1:f4:57:ad:12:36:e5:c5:80:b9:db:bd:48:2b:52:10: 03:c8:44:d7:70:30:67:79:24:74:71:64:b3:cf:9e:d9:dc:02: 74:5d:31:ad:63:8d:38:d1:0a:d1:00:35:3d:c7:58:fb:b1:65: ae:0c:45:70:b0:f7:a5:0f:fd:2e:ee:70:6c:c7:bd:7f:ab:0e: 97:7a:17:1f:84:2b:9b:5d:56:bf:8d:4a:c4:8b:0c:de:7c:8b: b7:cf:94:3d:cf:3c:84:43:6a:df:3d:dc:08:5b:06:a9:be:26: 40:42:23:d0:6d:ef:9d:8a:59:bf:ee:ba:d5:14:e2:df:19:04: 10:58:9d:6b:bc:7f:6e:39:eb:37:09:08:0e:1e:4b:0d:c3:33: cf:08:bc:c2:fc:de:1f:0f:1c:a5:fc:8d:28:11:38:d1:c9:e4: 23:7f:4c:a1:54:1d:bf:20:20:99:29:e4:c1:6a:3f:1e:86:01: ec:8a:51:76:ea:fb:69:41:b7:e7:ef:76:ce:b2:32:74:5f:57: 65:a6:87:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBNDQxMTAvBgNVBAUTKDBEOEM2REI0ODBGRUY4QkJGNUM2OEIxRDQzOTZERDg1 RjU5M0MxNDYwHhcNMjQwNTE4MTc1NjQ1WhcNMjQwNTI1MTc1NjQ1WjAYMRYwFAYD VQQDEw02NjQ4ZWJkZS02MjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMD6HnbxNEMRRAldUYicp6g7Jqds3ov8w4frP7lX8iZJ6Jgr/aOkpGTyUrBw t65WcEaqsI5t1R5eY/Crx3i1PvGx/7Rh5t6CezV/KiqzM3KQl2Ozqr+eAETv5dPT lJBjEHT7w7+n/5Q5qOus8Ei4aMh2PuCXmwqCYfSNTiHmdj+WElfJsaka6LJMF+9m SHYReiaEqAHc5Ev2zrpiLkS+2+wSKBhl3P9mHnI+hTamxKx10iUMBmXdssuII/VN cesErLfuHBf2bk4FU/8fQ0aCz6n+rHAr/EmbWUE/q/mH8IX+i0g14Lho+JmTZ0Ve 8UdPge5OUhTu5rwv51Y0ATA8UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhWsK3Z jsQZUyUoCMu/5tiwPXFkMB8GA1UdIwQYMBaAFA2MbbSA/vi79caLHUOW3YX1k8FG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE0NC83Mzk3NzVDRTBB MzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1MdjF4b3NkUTViZGhmV1R3 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZeHR0SUQtLUx2MXhvc2RRNWJkaGZXVHdVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE0NC83Mzk3NzVDRTBBMzQxMUU5OEVFODcxNUVDNEY5QUUwMi9EWXh0dElELS1M djF4b3NkUTViZGhmV1R3VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJP2h2+bFIjlJs8Ce0vpiXp/twXvnVr3i8HgVKRGgMF5yYygzKqmsE q6+WdpuIsUYbsqOPrnlw3fH0V60SNuXFgLnbvUgrUhADyETXcDBneSR0cWSzz57Z 3AJ0XTGtY4040QrRADU9x1j7sWWuDEVwsPelD/0u7nBsx71/qw6XehcfhCubXVa/ jUrEiwzefIu3z5Q9zzyEQ2rfPdwIWwapviZAQiPQbe+dilm/7rrVFOLfGQQQWJ1r vH9uOes3CQgOHksNwzPPCLzC/N4fDxyl/I0oETjRyeQjf0yhVB2/ICCZKeTBaj8e hgHsilF26vtpQbfn73bOsjJ0X1dlpof7 -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org