$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft File: dK-15U8HPzwgdjJdKsf3AA4uaoY.mft (raw, json) Hash identifier: FpvO9NAjVMcjbAgx0EBE6RFleSQe9z18FdEEl3C2KHg= Subject key identifier: 45:A1:D8:F7:29:78:3A:31:D1:1B:CF:3D:06:55:63:6F:72:02:FA:C1 Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 Certificate issuer: /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft Manifest number: 026E Signing time: Wed 01 May 2024 04:05:15 +0000 Manifest this update: Wed 01 May 2024 04:05:15 +0000 Manifest next update: Wed 08 May 2024 04:05:15 +0000 Files and hashes: 1: dK-15U8HPzwgdjJdKsf3AA4uaoY.crl (hash: hagw/21p1o+4aj8mFuUroAlrV0+kjYwNdbPCwywOEso=) 2: 5E8E08E8C26211ECBFC22B20C4F9AE02.roa (hash: BPc2ul74OB2iZzZj4zYG4tzM+HpQpkLBKywQ3Rl7cOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86 Validity Not Before: May 1 04:05:15 2024 GMT Not After : May 8 04:05:15 2024 GMT Subject: CN=6631bf7b-4d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:3e:17:6d:25:b2:1c:8c:cb:9d:bf:17:8f: f5:32:5f:7c:0b:d9:c3:86:55:c2:21:b4:06:d3:71: 1b:47:c6:66:74:31:52:71:1d:a1:6a:c7:c2:80:b0: 54:62:bf:fc:16:d8:f3:d8:c4:18:e1:c6:6c:e1:a2: c0:ca:bf:ff:66:6f:07:01:98:83:dd:7a:88:cb:1a: 53:a0:ee:01:e6:76:bb:fa:9f:9d:fe:85:f5:fd:10: a6:21:5c:c7:0a:31:06:a7:46:19:d9:0b:98:c6:21: 40:9c:7f:f4:98:14:12:2d:81:83:79:62:f8:20:12: 20:77:76:eb:aa:d7:fd:a7:ca:f9:dc:a1:48:d2:36: 5e:a3:d3:37:98:98:ac:0d:f6:6b:2f:7c:d5:95:ae: fa:df:f0:69:3b:d4:88:1a:c4:51:a4:92:bd:bb:6a: 19:33:bf:82:55:fb:04:11:8f:78:f9:b2:7a:ff:9f: df:88:ea:67:9c:e6:da:80:c0:d3:f4:b5:ae:ef:d8: c6:0f:24:25:35:ca:97:9e:0f:f3:a6:16:7d:29:7d: 15:6a:e4:f5:48:e3:3a:00:a0:79:6a:a8:81:55:0e: b1:d5:6a:22:63:b8:9a:6e:cf:83:b5:e3:52:c8:9d: 7b:9e:fe:f0:2a:b6:05:07:76:85:f1:6f:66:8a:d2: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A1:D8:F7:29:78:3A:31:D1:1B:CF:3D:06:55:63:6F:72:02:FA:C1 X509v3 Authority Key Identifier: keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:cd:b6:f4:eb:c2:ab:ea:6b:9c:7f:68:87:1f:4c:f7:5d:8a: a3:25:00:83:c9:43:40:8f:b7:84:50:0b:c4:dd:40:3d:db:49: 9e:54:4a:1b:98:49:65:5c:e4:33:25:13:a6:e4:c5:47:a5:14: 42:16:d7:22:e6:20:9a:cb:7c:b1:8b:c5:00:4b:0a:46:ad:15: f8:4b:9d:d3:af:79:ef:99:e0:3a:4a:44:18:3f:71:ae:81:60: 4d:9b:1d:9d:0a:14:ed:94:8e:e5:b6:f8:d9:9f:7d:b0:01:f1: 53:b1:f7:ff:b6:1b:74:4e:aa:bd:36:ea:97:fb:b2:9d:01:b7: 14:11:29:c4:1b:5d:f9:ec:7d:26:ea:33:1d:f8:1e:26:cb:1e: c2:4c:d3:6b:1a:94:81:04:cb:30:78:b4:f1:eb:19:5d:46:a7: dd:17:dc:0c:2f:73:9a:f8:98:6d:4c:e4:18:d1:9c:20:9b:42: d2:7d:c5:70:bb:eb:bc:78:06:18:0a:71:ce:2c:54:99:da:72: 71:2a:c9:10:0c:e9:31:a9:e3:6a:4b:7b:4f:bb:eb:4a:d3:a7: b1:41:98:e2:fc:4d:60:d6:ff:ce:44:56:87:cf:9c:29:32:3b: 7c:b8:94:6c:e4:be:e8:02:fa:24:3a:af:24:c9:16:51:cd:13: ab:df:c5:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzIxMTAvBgNVBAUTKDc0QUZCNUU1NEYwNzNGM0MyMDc2MzI1RDJBQzdGNzAw MEUyRTZBODYwHhcNMjQwNTAxMDQwNTE1WhcNMjQwNTA4MDQwNTE1WjAYMRYwFAYD VQQDEw02NjMxYmY3Yi00ZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3M+F20lshyMy52/F4/1Ml98C9nDhlXCIbQG03EbR8ZmdDFScR2hasfCgLBU Yr/8Ftjz2MQY4cZs4aLAyr//Zm8HAZiD3XqIyxpToO4B5na7+p+d/oX1/RCmIVzH CjEGp0YZ2QuYxiFAnH/0mBQSLYGDeWL4IBIgd3brqtf9p8r53KFI0jZeo9M3mJis DfZrL3zVla763/BpO9SIGsRRpJK9u2oZM7+CVfsEEY94+bJ6/5/fiOpnnObagMDT 9LWu79jGDyQlNcqXng/zphZ9KX0VauT1SOM6AKB5aqiBVQ6x1WoiY7iabs+DteNS yJ17nv7wKrYFB3aF8W9mitKlBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWh2Pcp eDox0RvPPQZVY29yAvrBMB8GA1UdIwQYMBaAFHSvteVPBz88IHYyXSrH9wAOLmqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDMi8zNkVCMjMyOEMy NUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6d2dkakpkS3NmM0FBNHVh b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RLLTE1VThIUHp3Z2RqSmRLc2YzQUE0dWFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDMi8zNkVCMjMyOEMyNUYxMUVDOEMzQjAwMURDNEY5QUUwMi9kSy0xNVU4SFB6 d2dkakpkS3NmM0FBNHVhb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClzbb068Kr6mucf2iHH0z3XYqjJQCDyUNAj7eEUAvE3UA920meVEob mEllXOQzJROm5MVHpRRCFtci5iCay3yxi8UASwpGrRX4S53Tr3nvmeA6SkQYP3Gu gWBNmx2dChTtlI7ltvjZn32wAfFTsff/tht0Tqq9NuqX+7KdAbcUESnEG1357H0m 6jMd+B4myx7CTNNrGpSBBMsweLTx6xldRqfdF9wML3Oa+JhtTOQY0Zwgm0LSfcVw u+u8eAYYCnHOLFSZ2nJxKskQDOkxqeNqS3tPu+tK06exQZji/E1g1v/ORFaHz5wp Mjt8uJRs5L7oAvokOq8kyRZRzROr38XP -----END CERTIFICATE-----Generated at Wed May 1 05:59:05 2024 by rpki-client on console-fra.rpki-client.org