$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: mgKWFYFBzU/E2UiiZcGBBO1Sg6Dbo9SuctNUbRGRLbU= Subject key identifier: 48:AE:B3:B9:D0:18:3C:A3:AB:D9:83:FF:A3:A1:B5:58:3F:99:A9:19 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 168D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 166F Signing time: Fri 26 Apr 2024 17:09:27 +0000 Manifest this update: Fri 26 Apr 2024 17:09:26 +0000 Manifest next update: Fri 03 May 2024 17:09:26 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: dYw/05G/rkQj6RyYfmmcHOVoJrKpDP/Rq7I5I/nYVmg=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: JalxQifJVFOUSnaEXpUDHVuRdigl/yt5t9Kqo/nTepM=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: oJAXuOtWecU0+MoURgBbn68ILjDBXF4ZWgsPb7e4mBM=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: O2w5N1Zod0RmjR73calT8+O57LgGjSnYZ9PGyMFvfv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 17:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5773 (0x168d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Apr 26 17:09:26 2024 GMT Not After : May 3 17:09:26 2024 GMT Subject: CN=662bdfc7-5d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:69:5e:83:a3:8a:ab:9a:77:f2:ac:eb:96: 9e:db:3f:64:7a:06:00:75:e5:dd:55:e7:1b:96:1d: 9f:e2:2d:e2:65:ea:4f:4e:50:83:8e:43:28:ad:71: ab:38:db:39:42:2c:7b:09:fb:3b:75:be:ef:36:dd: 3e:80:9b:b4:58:c6:b4:21:18:9b:e4:da:61:69:78: f3:cb:fb:b2:09:b0:dd:ff:af:1f:ce:b3:25:5f:99: ad:75:5b:f0:33:35:d8:0a:23:87:3b:86:f3:80:e3: a0:99:52:18:21:79:1c:c6:bb:42:49:4c:22:27:29: f1:1d:cf:a8:b7:9e:ef:20:e8:9b:a5:66:9a:dc:f0: f8:c8:17:13:ee:30:ab:34:33:d0:07:4a:06:b1:a2: 58:84:69:55:31:0a:fd:0d:0d:51:69:78:db:a3:ad: 03:e4:52:13:cf:ec:31:48:d7:60:ae:29:85:8c:87: 2b:35:d9:d6:d6:c2:a2:cf:dd:60:cc:ce:88:95:60: 5e:f8:02:13:cf:a6:5b:00:16:b0:61:b8:1c:72:0c: a3:69:d5:fd:88:0e:79:2e:e1:34:5b:93:c6:a4:50: 69:10:39:04:0b:c1:0b:3b:d4:31:08:3c:82:df:33: 3d:d2:48:0d:1d:d2:a3:0f:2b:b3:74:ab:85:06:86: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:B3:B9:D0:18:3C:A3:AB:D9:83:FF:A3:A1:B5:58:3F:99:A9:19 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:26:1e:f1:38:1a:8e:57:fa:71:d3:0e:1e:64:9a:b1:e8:25: 99:96:2f:af:27:7d:22:e3:30:b9:54:c9:88:ea:de:d1:0b:6f: d1:5e:dd:ba:a3:d3:b0:79:14:39:ec:d6:42:5b:41:cb:a6:11: 26:8e:d4:6f:cb:11:70:bf:a5:76:68:c5:02:76:44:0f:ac:bd: c4:d6:64:34:82:47:d8:a2:5c:5a:24:07:d7:db:f6:e2:4a:9b: 85:f3:40:c6:43:3e:1a:26:01:7c:e5:83:cb:95:19:be:92:31: 92:a8:ea:4c:f8:38:63:ad:f9:ca:34:6c:65:9f:52:bb:9b:15: c4:87:88:e8:b8:c8:9e:8f:b4:e3:af:9a:90:13:56:48:8e:3d: 92:86:95:76:2e:84:be:c0:21:c8:c3:3f:b4:84:2c:69:07:ad: 0d:e4:78:c4:a2:d3:62:24:b8:ff:6a:5a:d1:66:8d:dc:60:1f: 47:9a:9b:45:2a:03:10:f0:3e:ac:7b:a1:77:ec:96:4a:65:34: 7f:5d:5d:9f:64:af:b2:1d:a4:02:0e:61:6d:cf:42:a6:d1:74: de:02:c5:21:22:64:a0:01:8c:d2:9c:6d:49:9d:98:a9:93:d5: 21:f9:3c:0c:4c:06:79:4d:95:b3:18:e9:a8:5b:d7:55:80:5e: cd:33:56:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjQwNDI2MTcwOTI2WhcNMjQwNTAzMTcwOTI2WjAYMRYwFAYD VQQDEw02NjJiZGZjNy01ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmJpXoOjiquad/Ks65ae2z9kegYAdeXdVecblh2f4i3iZepPTlCDjkMorXGr ONs5Qix7Cfs7db7vNt0+gJu0WMa0IRib5NphaXjzy/uyCbDd/68fzrMlX5mtdVvw MzXYCiOHO4bzgOOgmVIYIXkcxrtCSUwiJynxHc+ot57vIOibpWaa3PD4yBcT7jCr NDPQB0oGsaJYhGlVMQr9DQ1RaXjbo60D5FITz+wxSNdgrimFjIcrNdnW1sKiz91g zM6IlWBe+AITz6ZbABawYbgccgyjadX9iA55LuE0W5PGpFBpEDkEC8ELO9QxCDyC 3zM90kgNHdKjDyuzdKuFBoYSlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEius7nQ GDyjq9mD/6OhtVg/makZMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJJh7xOBqOV/px0w4eZJqx6CWZli+vJ30i4zC5VMmI6t7RC2/RXt26 o9OweRQ57NZCW0HLphEmjtRvyxFwv6V2aMUCdkQPrL3E1mQ0gkfYolxaJAfX2/bi SpuF80DGQz4aJgF85YPLlRm+kjGSqOpM+DhjrfnKNGxln1K7mxXEh4jouMiej7Tj r5qQE1ZIjj2ShpV2LoS+wCHIwz+0hCxpB60N5HjEotNiJLj/alrRZo3cYB9HmptF KgMQ8D6se6F37JZKZTR/XV2fZK+yHaQCDmFtz0Km0XTeAsUhImSgAYzSnG1JnZip k9Uh+TwMTAZ5TZWzGOmoW9dVgF7NM1bC -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:18 2024 by rpki-client on console-ams.rpki-client.org