$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: /5rAZPu4pCXS7dqVv5zz2aT+/E4a6SZkB7XcGmIIZ1I= Subject key identifier: 3E:3F:04:FA:94:9D:25:27:F1:B3:67:E2:B1:49:6F:29:24:6C:F7:66 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 1F37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 17B8 Signing time: Tue 30 Apr 2024 18:12:18 +0000 Manifest this update: Tue 30 Apr 2024 18:12:18 +0000 Manifest next update: Tue 07 May 2024 18:12:18 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: zQuo/S6U2EZo1Mj6ROSeoEHYCyA/tYuV4wjuBDGD69A=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: zrGhz5eTWvxDs7l8u0FFEcHmthdaKI1r05igm+ZZOCA=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: 8vFyR44qzve6eQFGrf+0iU1ZgE7HJhnti0y5mu5nwao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 18:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7991 (0x1f37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Apr 30 18:12:18 2024 GMT Not After : May 7 18:12:18 2024 GMT Subject: CN=66313482-fdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:f5:21:a0:6e:f0:87:17:c2:2e:0b:d9:1e: 50:04:e3:88:68:3e:fc:a5:67:35:3d:9e:ca:94:e4: ed:a3:e3:8a:a9:e0:c0:2b:f8:fe:3d:9b:02:8d:72: 2c:1a:d7:f4:e0:fb:de:f0:e8:41:73:f1:9d:f1:e3: 65:59:06:59:6f:6f:92:07:d0:05:a4:ef:30:60:4d: db:c5:3e:77:5e:7d:c3:19:ab:bd:a8:6f:bd:8d:1c: 78:7a:c2:e8:13:29:3c:74:e5:6a:0c:be:92:d2:47: 8e:10:7b:f2:e1:cd:d4:4d:44:f0:08:8a:d1:ae:a8: f7:cc:d1:a1:ba:52:2b:81:ff:57:c4:c7:ee:34:a4: 1a:c3:dc:e8:c4:ae:0e:04:6f:96:16:65:75:0b:55: 5f:9e:5b:be:25:b2:10:bd:05:be:ff:1c:dc:de:ab: 54:de:f8:cb:f7:30:31:1b:0a:94:6d:65:7b:eb:92: 84:11:c7:b0:9e:d5:3c:cd:34:00:c6:b9:a1:42:84: fa:bd:c2:91:22:de:49:1e:e0:8f:9d:c7:3b:9e:86: fc:7e:27:c2:9e:16:98:2d:65:b2:88:b6:2d:85:39: bf:db:4a:a9:f6:54:bd:b5:3d:61:b2:12:2c:af:5e: 64:07:f5:6e:d4:6b:4c:93:38:9a:42:52:c3:6e:49: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3F:04:FA:94:9D:25:27:F1:B3:67:E2:B1:49:6F:29:24:6C:F7:66 X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:18:5c:c1:56:e8:c4:cb:82:e5:d5:05:df:fe:40:26:36:08: 81:6c:f2:3e:2e:41:9b:65:b8:d8:cf:5e:38:a3:63:bd:90:67: 80:ee:fd:8e:10:40:cb:81:3f:82:17:4e:db:be:fa:eb:ee:79: f8:9f:6e:7e:d7:c1:ed:f6:50:b8:79:b1:7f:08:8f:e0:11:4a: f0:4a:a7:2b:59:26:db:85:cb:99:8d:27:2f:df:92:ce:cd:0b: 83:6d:6d:56:55:7d:91:a2:f8:ec:9c:67:03:76:e0:f8:af:5f: 05:42:b7:0b:ad:c3:57:f0:59:6e:4c:31:1e:50:01:ea:2d:57: e7:2f:ad:71:39:98:3f:7e:33:1e:16:14:27:bb:68:92:b4:82: fa:64:e1:f0:6c:c1:79:68:56:90:f2:97:a7:8a:06:ae:2b:ca: ba:17:fd:d7:f2:86:ec:cc:fa:8d:96:e4:59:d0:7a:bb:78:ca: bd:cf:0e:62:50:44:0d:e0:1e:5c:0d:0a:3e:68:65:54:18:94: e0:12:6c:d3:e7:22:ee:76:c2:c7:fb:ff:61:1f:dc:c1:15:26: 2a:94:f8:52:94:67:e6:dd:a8:46:54:05:0d:be:f4:28:fb:8b: 7d:7b:83:51:1e:ed:ab:a5:75:e2:3c:86:7f:a3:35:fb:2a:2e: 00:87:df:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjQwNDMwMTgxMjE4WhcNMjQwNTA3MTgxMjE4WjAYMRYwFAYD VQQDEw02NjMxMzQ4Mi1mZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK31IaBu8IcXwi4L2R5QBOOIaD78pWc1PZ7KlOTto+OKqeDAK/j+PZsCjXIs Gtf04Pve8OhBc/Gd8eNlWQZZb2+SB9AFpO8wYE3bxT53Xn3DGau9qG+9jRx4esLo Eyk8dOVqDL6S0keOEHvy4c3UTUTwCIrRrqj3zNGhulIrgf9XxMfuNKQaw9zoxK4O BG+WFmV1C1Vfnlu+JbIQvQW+/xzc3qtU3vjL9zAxGwqUbWV765KEEcewntU8zTQA xrmhQoT6vcKRIt5JHuCPncc7nob8fifCnhaYLWWyiLYthTm/20qp9lS9tT1hshIs r15kB/Vu1GtMkziaQlLDbkk45QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4/BPqU nSUn8bNn4rFJbykkbPdmMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgGFzBVujEy4Ll1QXf/kAmNgiBbPI+LkGbZbjYz144o2O9kGeA7v2O EEDLgT+CF07bvvrr7nn4n25+18Ht9lC4ebF/CI/gEUrwSqcrWSbbhcuZjScv35LO zQuDbW1WVX2RovjsnGcDduD4r18FQrcLrcNX8FluTDEeUAHqLVfnL61xOZg/fjMe FhQnu2iStIL6ZOHwbMF5aFaQ8penigauK8q6F/3X8obszPqNluRZ0Hq7eMq9zw5i UEQN4B5cDQo+aGVUGJTgEmzT5yLudsLH+/9hH9zBFSYqlPhSlGfm3ahGVAUNvvQo +4t9e4NRHu2rpXXiPIZ/ozX7Ki4Ah99l -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:36 2024 by rpki-client on console-fra.rpki-client.org