$ rpki-client -vvf rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft File: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft (raw, json) Hash identifier: NUe7eHw9MP2ti8HS6p6DvBg0c73yHZS8rs/7QKvoK8c= Subject key identifier: B0:9B:13:D9:2F:F5:6A:03:86:CD:E1:19:20:DD:B6:BB:15:AB:87:E8 Authority key identifier: 74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B Certificate issuer: /CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft Manifest number: 013E Signing time: Wed 01 May 2024 05:16:52 +0000 Manifest this update: Wed 01 May 2024 05:16:51 +0000 Manifest next update: Wed 08 May 2024 05:16:51 +0000 Files and hashes: 1: dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl (hash: tP0lYWOjYkuSzThw+AsgYNQ2JHHa5i8loH2naxD8sM8=) 2: BEB5E328397011EDA97F630EC4F9AE02.roa (hash: 8XoZy5dDU9zFM9uV1M+fQr5LD1i5aCY5gMZ+0/kaIbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CE56/serialNumber=7466073C8D20FF5B0CA88E4A3A3FC81D3C9F679B Validity Not Before: May 1 05:16:51 2024 GMT Not After : May 8 05:16:51 2024 GMT Subject: CN=6631d044-c594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:c6:4b:64:b9:55:6f:9c:f8:02:b7:4a:f9: be:45:dc:e6:a8:4e:bc:cc:1a:1d:a9:ba:dc:4f:c8: b9:98:01:35:8e:e1:10:cf:1f:24:9c:a9:21:5a:e8: e5:0b:4d:72:60:e7:e9:41:37:c6:12:79:eb:08:7a: 4c:44:49:7e:fe:1a:8e:f8:ef:26:40:87:5b:ca:c7: 20:77:cb:61:68:fa:07:20:00:7a:b7:7e:10:20:c4: 74:d8:7b:52:7c:fa:e3:b1:02:14:f5:10:da:88:ae: 26:3c:38:18:85:1a:f6:ba:b8:8c:ba:8e:58:83:5e: 75:a2:5a:db:3e:9d:e5:53:6f:88:36:b6:a2:84:ef: 4f:d7:69:7a:d1:32:18:5a:c6:18:b3:c4:31:07:d1: a2:f3:d4:2a:b6:4d:85:af:04:01:c0:bf:e1:aa:6e: 13:ae:c4:42:69:8b:ad:b9:ad:5c:0e:f9:b3:77:c3: 3e:3d:7c:d4:3a:0e:96:7b:24:47:c2:1b:e4:89:ec: d0:e6:da:50:90:5c:32:82:d5:17:4e:41:11:b1:9a: 84:ae:db:81:28:fc:c7:4c:be:82:70:40:b8:ec:8e: 57:ab:93:66:f8:d5:57:8e:f6:26:07:eb:e0:25:fb: 46:b3:e8:2d:97:7e:2c:e1:d6:14:91:85:65:93:70: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9B:13:D9:2F:F5:6A:03:86:CD:E1:19:20:DD:B6:BB:15:AB:87:E8 X509v3 Authority Key Identifier: keyid:74:66:07:3C:8D:20:FF:5B:0C:A8:8E:4A:3A:3F:C8:1D:3C:9F:67:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CE56/26264AF0396E11EDBFC3120DC4F9AE02/dGYHPI0g_1sMqI5KOj_IHTyfZ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:de:69:93:93:44:76:41:55:bd:5e:71:37:98:6a:1d:74:d9: ca:bd:6f:72:b3:fe:f1:68:dd:59:b1:0e:d6:de:3d:eb:8f:3a: 2f:08:b5:f2:46:cd:6f:75:22:8f:36:0a:22:c5:d3:58:32:b5: 10:99:08:3d:4b:c4:a5:a7:bb:c7:46:4c:01:60:7f:0c:5a:ef: 77:ee:2b:67:40:b1:73:2c:ba:11:3e:ed:22:f4:6a:71:34:bc: fc:20:6d:c1:6c:ab:dd:32:79:78:49:51:f3:a2:6e:32:48:31: 5b:59:54:ae:09:61:cd:c4:6a:fe:41:40:fd:47:84:dc:ec:7c: db:a1:00:02:a7:0c:cd:d3:c0:30:b9:4f:85:6c:e0:ac:98:5b: 1a:9e:7e:23:4c:fd:21:f7:2e:b4:c5:2b:69:f1:53:59:12:91: 42:ab:0b:e6:d8:6a:06:ed:4f:de:ea:2c:1b:bb:0e:dc:d1:3d: 23:12:18:84:b9:47:d8:74:55:b1:5b:6b:f5:5c:2d:4e:c8:e2: e6:d8:30:ca:6a:4d:02:cb:5d:b5:3e:c8:9e:08:20:6f:90:3e: 66:4f:19:77:8f:9c:19:58:a1:c3:60:4c:ed:08:64:55:f3:45: 62:a6:ab:00:f7:c3:3a:f2:54:02:33:97:c7:55:d3:a8:11:c0: 43:d6:d6:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFNTYxMTAvBgNVBAUTKDc0NjYwNzNDOEQyMEZGNUIwQ0E4OEU0QTNBM0ZDODFE M0M5RjY3OUIwHhcNMjQwNTAxMDUxNjUxWhcNMjQwNTA4MDUxNjUxWjAYMRYwFAYD VQQDEw02NjMxZDA0NC1jNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppPGS2S5VW+c+AK3Svm+RdzmqE68zBodqbrcT8i5mAE1juEQzx8knKkhWujl C01yYOfpQTfGEnnrCHpMREl+/hqO+O8mQIdbyscgd8thaPoHIAB6t34QIMR02HtS fPrjsQIU9RDaiK4mPDgYhRr2uriMuo5Yg151olrbPp3lU2+INraihO9P12l60TIY WsYYs8QxB9Gi89Qqtk2FrwQBwL/hqm4TrsRCaYutua1cDvmzd8M+PXzUOg6WeyRH whvkiezQ5tpQkFwygtUXTkERsZqErtuBKPzHTL6CcEC47I5Xq5Nm+NVXjvYmB+vg JftGs+gtl34s4dYUkYVlk3BHZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCbE9kv 9WoDhs3hGSDdtrsVq4foMB8GA1UdIwQYMBaAFHRmBzyNIP9bDKiOSjo/yB08n2eb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0U1Ni8yNjI2NEFGMDM5 NkUxMUVEQkZDMzEyMERDNEY5QUUwMi9kR1lIUEkwZ18xc01xSTVLT2pfSUhUeWZa NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHWUhQSTBnXzFzTXFJNUtPal9JSFR5Zlo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0U1Ni8yNjI2NEFGMDM5NkUxMUVEQkZDMzEyMERDNEY5QUUwMi9kR1lIUEkwZ18x c01xSTVLT2pfSUhUeWZaNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs3mmTk0R2QVW9XnE3mGoddNnKvW9ys/7xaN1ZsQ7W3j3rjzovCLXy Rs1vdSKPNgoixdNYMrUQmQg9S8Slp7vHRkwBYH8MWu937itnQLFzLLoRPu0i9Gpx NLz8IG3BbKvdMnl4SVHzom4ySDFbWVSuCWHNxGr+QUD9R4Tc7HzboQACpwzN08Aw uU+FbOCsmFsann4jTP0h9y60xStp8VNZEpFCqwvm2GoG7U/e6iwbuw7c0T0jEhiE uUfYdFWxW2v1XC1OyOLm2DDKak0Cy121PsieCCBvkD5mTxl3j5wZWKHDYEztCGRV 80VipqsA98M68lQCM5fHVdOoEcBD1tZq -----END CERTIFICATE-----Generated at Wed May 1 05:59:07 2024 by rpki-client on console-fra.rpki-client.org