$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft File: dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json) Hash identifier: 7rF4oVJJNV9AK5/bJqbpjWnY/+mdYZovFBp+bfY0v5U= Subject key identifier: 15:98:1E:8A:B8:11:89:5E:0A:DF:B3:12:47:CD:0C:0D:11:77:5D:0B Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F Certificate issuer: /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Certificate serial: 0A6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft Manifest number: 0A5C Signing time: Fri 26 Apr 2024 20:22:28 +0000 Manifest this update: Fri 26 Apr 2024 20:22:27 +0000 Manifest next update: Fri 03 May 2024 20:22:27 +0000 Files and hashes: 1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: Yd0G3Z7tsYwrc9Isipc98Iux3KbLmo421mlOI7dtcLw=) 2: 4B1D295E9EA211EB901A9532C4F9AE02.roa (hash: /xWesDsMi1pD+tn1de40Hq3CgHdzNliJuaUvah0mIOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 20:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2666 (0xa6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Validity Not Before: Apr 26 20:22:27 2024 GMT Not After : May 3 20:22:27 2024 GMT Subject: CN=662c0d03-71b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:c1:7d:8b:f6:05:52:8e:59:5e:f1:9c:5c: 88:94:93:31:37:48:1c:51:66:7b:1a:c7:aa:cf:2a: 3f:5b:ec:fe:d9:a2:75:69:cf:e7:54:1b:17:a1:d5: 6b:6f:6d:36:61:70:4c:c9:42:9d:62:af:eb:7a:6f: d5:41:1b:eb:45:02:76:1e:ae:0c:49:01:80:23:31: 3d:bf:9d:86:05:77:04:da:89:5d:d8:3c:39:67:99: 38:9a:8a:10:6e:a9:f5:c8:52:bd:af:a4:1a:fc:23: e5:e8:a7:bb:fc:58:7e:f2:90:08:8d:f2:3a:de:cb: 56:77:8f:f9:5c:5e:d7:bb:78:a0:aa:fe:2c:f5:c5: 5e:f0:1d:40:02:dd:1b:d3:22:30:3d:e0:9d:29:a7: bb:1e:9c:03:c4:b6:d2:9c:75:cd:52:2e:62:e7:84: ed:34:54:2d:91:63:1d:af:94:48:da:fc:ca:a7:ca: e3:e9:c7:01:97:e8:4f:88:4c:27:d7:36:aa:18:07: 78:92:7a:1d:5d:5e:d8:61:c8:e8:e0:43:dc:95:9b: d5:4f:ad:ef:04:4c:8d:08:e2:a7:ea:f0:a3:a7:d3: 87:bf:05:19:c0:b6:41:61:be:66:46:63:d5:9e:84: 3d:5b:17:b2:a5:1d:32:20:65:58:3c:ec:d7:37:83: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:98:1E:8A:B8:11:89:5E:0A:DF:B3:12:47:CD:0C:0D:11:77:5D:0B X509v3 Authority Key Identifier: keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:31:a7:10:bc:73:1a:5d:5f:22:88:23:1b:f5:00:3d:ea:a4: 0a:1c:54:70:8a:c0:6d:36:19:3e:35:92:1e:3f:f5:9b:ed:f4: b7:27:58:dc:8e:57:9c:9f:c0:45:72:14:d1:b1:80:1f:ec:3b: 3a:5c:bf:04:96:ff:04:35:1d:53:e4:f3:a2:e4:dc:a3:72:4b: ec:5a:f4:c0:4a:1b:ed:2a:71:b2:83:be:68:d4:56:3d:c5:fe: 94:24:c7:a0:21:d8:02:23:3d:95:5c:2f:bf:67:40:2d:b5:a1: 23:60:bf:53:c6:94:ce:61:72:33:ae:c9:01:b7:89:9e:f0:fe: b4:18:d7:51:53:0c:29:79:46:f6:98:f3:ee:39:94:36:6e:29: a9:54:ed:51:75:c1:7f:00:4d:2e:60:df:ee:0b:21:5a:53:06: 36:b1:e5:96:60:fa:08:34:7c:b1:60:07:b1:2a:d0:1e:16:e3: 27:88:a4:e0:cb:92:3a:e8:48:42:42:ba:2c:2b:1a:59:8d:12: ae:3b:ed:ff:e9:57:ff:a2:7e:4f:02:5c:a7:6a:55:fb:2c:15: 2c:25:e0:06:77:19:4e:19:39:95:e2:aa:2b:30:47:8e:96:6c: 92:04:60:94:48:b6:3e:e4:fd:31:6f:6d:31:db:0c:62:03:88: 95:3f:24:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwRTYxMTAvBgNVBAUTKDc1MDVBODZCNUY0RkFBNTA1NDNEMjQ4QzZGMDg1NEM1 MDVBRURDMEYwHhcNMjQwNDI2MjAyMjI3WhcNMjQwNTAzMjAyMjI3WjAYMRYwFAYD VQQDEw02NjJjMGQwMy03MWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykvBfYv2BVKOWV7xnFyIlJMxN0gcUWZ7Gseqzyo/W+z+2aJ1ac/nVBsXodVr b202YXBMyUKdYq/rem/VQRvrRQJ2Hq4MSQGAIzE9v52GBXcE2old2Dw5Z5k4mooQ bqn1yFK9r6Qa/CPl6Ke7/Fh+8pAIjfI63stWd4/5XF7Xu3igqv4s9cVe8B1AAt0b 0yIwPeCdKae7HpwDxLbSnHXNUi5i54TtNFQtkWMdr5RI2vzKp8rj6ccBl+hPiEwn 1zaqGAd4knodXV7YYcjo4EPclZvVT63vBEyNCOKn6vCjp9OHvwUZwLZBYb5mRmPV noQ9WxeypR0yIGVYPOzXN4NytwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWYHoq4 EYleCt+zEkfNDA0Rd10LMB8GA1UdIwQYMBaAFHUFqGtfT6pQVD0kjG8IVMUFrtwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBFNi9EOEFERDk0MjNG MzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFsQlVQU1NNYndoVXhRV3Uz QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRV29hMTlQcWxCVVBTU01id2hVeFFXdTNBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBFNi9EOEFERDk0MjNGMzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFs QlVQU1NNYndoVXhRV3UzQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgMacQvHMaXV8iiCMb9QA96qQKHFRwisBtNhk+NZIeP/Wb7fS3J1jc jlecn8BFchTRsYAf7Ds6XL8Elv8ENR1T5POi5NyjckvsWvTAShvtKnGyg75o1FY9 xf6UJMegIdgCIz2VXC+/Z0AttaEjYL9TxpTOYXIzrskBt4me8P60GNdRUwwpeUb2 mPPuOZQ2bimpVO1RdcF/AE0uYN/uCyFaUwY2seWWYPoINHyxYAexKtAeFuMniKTg y5I66EhCQrosKxpZjRKuO+3/6Vf/on5PAlynalX7LBUsJeAGdxlOGTmV4qorMEeO lmySBGCUSLY+5P0xb20x2wxiA4iVPyTZ -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:24 2024 by rpki-client on console-ams.rpki-client.org