$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft File: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft (raw, json) Hash identifier: LkNq1XZmDzAfdK6bh/9zca62Fw1FWtxF+cQLKT047u0= Subject key identifier: B5:C0:35:1C:D4:F1:9E:37:1F:59:0F:83:ED:18:C6:F1:1E:33:1A:D3 Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC Certificate issuer: /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft Manifest number: 60 Signing time: Fri 17 May 2024 07:46:18 +0000 Manifest this update: Fri 17 May 2024 07:46:16 +0000 Manifest next update: Fri 24 May 2024 07:46:16 +0000 Files and hashes: 1: dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl (hash: MqN4bVED7OORrjONtHBJiE1rH5qZ7aHsbLGWYF7peBE=) 2: FA0FC12E869E11EE9FAC6784C4F9AE02.roa (hash: HBDGFiTbyNRk83HqmHwC2x3I23vzUVlyz218sJOf/RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC Validity Not Before: May 17 07:46:16 2024 GMT Not After : May 24 07:46:16 2024 GMT Subject: CN=66470b49-f89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:98:d5:ee:0e:8d:c9:cb:64:d3:a1:98:0a: 71:b6:48:4a:cf:ca:e1:91:13:8f:18:77:69:af:ea: 3c:2d:5e:b8:53:c9:a4:d3:f3:e6:16:6d:73:5f:26: 5f:0d:b0:d4:d7:5b:c2:a4:5f:1c:2a:51:d0:1e:62: 3c:67:3b:05:47:3b:db:f9:dd:50:37:a0:0c:72:34: 25:ac:b2:45:6a:a3:c6:d7:f0:1b:de:ef:6b:41:56: 13:f4:e3:7f:16:ce:c8:ce:39:3a:82:f1:a5:4d:48: a2:48:ee:66:10:ec:f3:5f:c7:71:59:ff:71:c1:68: d6:b9:da:07:20:e2:9f:a4:62:46:46:7a:e1:24:d4: fe:fa:1f:9c:d2:45:b4:cc:41:8f:46:62:d7:b9:80: 64:be:01:2b:64:be:69:68:21:e9:46:0c:b6:53:7a: 89:6d:4d:da:7c:87:18:81:a0:3a:bf:fc:0d:88:56: 16:88:2c:35:94:c8:0d:2f:80:a6:aa:ac:30:f8:45: ea:b3:7f:54:73:9a:fa:93:bd:7a:32:15:37:ee:1a: f9:c5:9a:ed:84:40:ec:b6:f9:a2:f5:90:fa:ae:ab: 8b:33:f1:42:3f:61:47:83:66:d3:32:22:3f:26:e9: e2:17:0e:34:29:08:95:63:26:c1:61:fa:f2:d6:8f: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C0:35:1C:D4:F1:9E:37:1F:59:0F:83:ED:18:C6:F1:1E:33:1A:D3 X509v3 Authority Key Identifier: keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7d:37:b3:22:73:70:19:9b:0b:f2:1f:b6:68:d1:00:fe:d1: b8:b7:5f:c0:75:31:a1:8c:09:89:14:e2:ad:3d:0c:f4:b6:ce: 8b:a6:9a:fe:ba:f6:8c:9f:b4:c5:82:6a:e1:ca:ae:f1:58:ff: be:11:6f:e4:12:88:40:22:37:3f:e6:b3:2b:ef:1a:49:e3:af: 87:71:78:29:e0:1c:c1:52:06:8c:aa:3f:66:6f:3e:f2:36:90: d3:a2:ed:d2:cb:6c:9c:35:57:f8:8e:53:55:b3:fc:1f:67:6f: 95:e3:04:76:7e:46:86:53:d3:cd:ff:a4:9b:23:e2:83:39:1b: 32:85:6a:21:0d:ef:78:eb:59:f5:f3:75:d6:ee:1f:d9:37:cb: b5:93:35:e8:e4:c5:4d:81:b7:89:6b:b5:c2:51:12:f9:fb:9d: 1c:db:e2:07:f4:ff:84:e6:ec:23:91:36:b7:f3:58:2d:31:0a: 1e:c9:1b:e7:30:bf:27:7f:b6:a2:f6:15:73:4c:a7:f4:fe:a9: d6:8e:6f:f7:a2:34:48:b9:9c:06:cb:31:98:15:6f:da:5b:cb: 59:ac:fb:29:6c:df:0a:3f:3d:2c:93:96:8a:e1:35:2b:bf:f3: 2e:fa:e3:80:f2:d5:df:6b:16:63:0f:a7:2e:2e:54:08:f0:ad: 0a:90:b2:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjBEMjExMC8GA1UEBRMoNzQyMjc4OUU4RUQwQkZDMjBDMzREN0JGNjhGNTE5RUU2 NUVGRjRCQzAeFw0yNDA1MTcwNzQ2MTZaFw0yNDA1MjQwNzQ2MTZaMBgxFjAUBgNV BAMTDTY2NDcwYjQ5LWY4OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI3ZjV7g6Nyctk06GYCnG2SErPyuGRE48Yd2mv6jwtXrhTyaTT8+YWbXNfJl8N sNTXW8KkXxwqUdAeYjxnOwVHO9v53VA3oAxyNCWsskVqo8bX8Bve72tBVhP0438W zsjOOTqC8aVNSKJI7mYQ7PNfx3FZ/3HBaNa52gcg4p+kYkZGeuEk1P76H5zSRbTM QY9GYte5gGS+AStkvmloIelGDLZTeoltTdp8hxiBoDq//A2IVhaILDWUyA0vgKaq rDD4Reqzf1RzmvqTvXoyFTfuGvnFmu2EQOy2+aL1kPquq4sz8UI/YUeDZtMyIj8m 6eIXDjQpCJVjJsFh+vLWjy6DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtcA1HNTx njcfWQ+D7RjG8R4zGtMwHwYDVR0jBBgwFoAUdCJ4no7Qv8IMNNe/aPUZ7mXv9Lww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMEQyLzg4Rjk3OUEyODJD QjExRUU5QUEzNzY0Q0M0RjlBRTAyL2RDSjRubzdRdjhJTU5OZV9hUFVaN21YdjlM dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZENKNG5vN1F2OElNTk5lX2FQVVo3bVh2OUx3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC MEQyLzg4Rjk3OUEyODJDQjExRUU5QUEzNzY0Q0M0RjlBRTAyL2RDSjRubzdRdjhJ TU5OZV9hUFVaN21YdjlMdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB19N7Mic3AZmwvyH7Zo0QD+0bi3X8B1MaGMCYkU4q09DPS2zoummv66 9oyftMWCauHKrvFY/74Rb+QSiEAiNz/msyvvGknjr4dxeCngHMFSBoyqP2ZvPvI2 kNOi7dLLbJw1V/iOU1Wz/B9nb5XjBHZ+RoZT083/pJsj4oM5GzKFaiEN73jrWfXz ddbuH9k3y7WTNejkxU2Bt4lrtcJREvn7nRzb4gf0/4Tm7CORNrfzWC0xCh7JG+cw vyd/tqL2FXNMp/T+qdaOb/eiNEi5nAbLMZgVb9pby1ms+yls3wo/PSyTlorhNSu/ 8y7644Dy1d9rFmMPpy4uVAjwrQqQsh4= -----END CERTIFICATE-----Generated at Fri May 17 08:52:48 2024 by rpki-client on console-ams.rpki-client.org