$ rpki-client -vvf rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft File: DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft (raw, json) Hash identifier: tJpXUSsjqR3wIKCFR3CmrDsw7ENkdDpcDC58t3r6Bxg= Subject key identifier: 49:82:5F:9E:D5:66:8F:94:BC:0F:48:A2:A9:8F:13:B5:EE:85:FC:1B Authority key identifier: 0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 Certificate issuer: /CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Certificate serial: 33C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft Manifest number: 33C3 Signing time: Mon 06 May 2024 14:54:58 +0000 Manifest this update: Mon 06 May 2024 14:54:58 +0000 Manifest next update: Mon 13 May 2024 14:54:58 +0000 Files and hashes: 1: DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl (hash: xLiSmMEjjaYJyCBNJX+NQ8a5N0lk7QS5wxSWxPwvtBg=) 2: 06CCBE4AED9A11EA9D06C66BC4F9AE02.roa (hash: 2qvXU+tp2d+3MZx3p0J67Vu1ntJd9jwcAIOzjZKqJZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13257 (0x33c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199990/serialNumber=0C0711D802D7A9346E64C435BB8E9DC27F6D9F87 Validity Not Before: May 6 14:54:58 2024 GMT Not After : May 13 14:54:58 2024 GMT Subject: CN=6638ef42-b7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:ad:f8:1c:6a:c5:dd:8c:5f:9e:1b:01:ea: a6:1e:1e:c3:39:52:7d:b6:ac:ea:d9:a4:67:ea:ee: c7:ae:a5:2d:2e:6d:20:36:b9:d3:09:15:14:9a:d9: 5e:99:5f:b9:9f:2a:29:37:ad:53:7e:8a:0e:b5:43: 62:44:ac:e7:4d:6f:93:37:5b:97:26:05:1e:6e:c0: 91:f2:5e:9e:87:b8:45:7e:bc:60:4e:80:80:7a:5d: 6a:25:b0:c8:dd:2d:16:93:c9:fa:2e:04:cb:dc:9b: 68:63:04:c8:02:e5:9b:8a:57:a8:a8:dc:52:ff:47: 4e:1b:71:45:c3:ff:b7:a4:58:ad:c8:90:06:72:db: f1:1f:66:21:a7:fc:b4:f4:53:65:48:b0:a9:09:3c: 72:83:f5:19:64:7a:a0:8f:b5:0f:dd:8b:40:2d:f6: 91:51:c9:24:d7:cb:2a:21:be:f4:f1:56:12:41:fc: 37:f1:ba:72:58:de:9d:23:af:ab:ab:e5:6d:ae:77: 76:a4:e4:8c:67:60:70:71:c2:67:bc:57:17:8c:f7: d3:26:c9:93:0e:f2:27:9f:bd:56:80:02:fd:a7:23: 71:1d:ca:ed:fd:30:8b:c8:4d:6c:e1:8c:c0:dc:95: f8:92:57:cf:0e:21:2c:2f:17:d0:c9:93:b2:67:bc: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:5F:9E:D5:66:8F:94:BC:0F:48:A2:A9:8F:13:B5:EE:85:FC:1B X509v3 Authority Key Identifier: keyid:0C:07:11:D8:02:D7:A9:34:6E:64:C4:35:BB:8E:9D:C2:7F:6D:9F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199990/5860F3861D9411E2BE7E7BF808B02CD2/DAcR2ALXqTRuZMQ1u46dwn9tn4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:7e:52:f5:d7:15:10:ae:6a:05:c0:0f:07:96:9b:20:49:4a: 87:d6:39:e3:9c:97:0f:a1:57:79:96:86:e0:16:9f:ac:e1:ab: ad:ee:cb:ee:ea:9e:02:31:a4:72:51:cf:8e:e9:d1:2f:3c:6d: 0b:3e:5b:3b:3a:aa:bd:45:5a:18:91:34:ad:6d:1b:27:3a:e9: 96:7f:47:66:df:bc:c1:59:ec:d1:b5:74:69:c8:11:bd:1f:e3: 65:3e:56:eb:93:a9:ce:00:c8:23:9b:84:06:23:fc:20:91:50: 5e:1e:d3:cb:cb:f6:72:bd:14:03:e5:33:da:03:ad:52:ba:5c: 66:45:2b:4e:07:af:69:1c:31:da:0b:be:c8:f1:ec:a9:4f:96: 30:80:e5:24:6b:d1:ea:4a:aa:1b:fe:1e:82:00:68:a8:5e:25: a1:7e:e1:db:79:d5:c2:8c:cd:fa:28:bc:48:8f:37:e9:73:29: 79:57:d1:f6:e9:e1:1a:c0:b2:45:2c:75:f4:0c:3c:91:de:4e: 4d:c4:3f:f7:ce:13:15:58:2d:d5:06:a8:bf:fe:ae:9a:72:d7: 4a:e2:cf:9b:66:83:72:5e:24:7e:4f:02:c3:b6:92:fa:55:d1: 33:4b:be:b9:d4:34:c5:58:53:d5:b1:b3:2a:e7:61:a1:03:7e: 4c:ab:31:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5OTAxMTAvBgNVBAUTKDBDMDcxMUQ4MDJEN0E5MzQ2RTY0QzQzNUJCOEU5REMy N0Y2RDlGODcwHhcNMjQwNTA2MTQ1NDU4WhcNMjQwNTEzMTQ1NDU4WjAYMRYwFAYD VQQDEw02NjM4ZWY0Mi1iN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJet+Bxqxd2MX54bAeqmHh7DOVJ9tqzq2aRn6u7HrqUtLm0gNrnTCRUUmtle mV+5nyopN61TfooOtUNiRKznTW+TN1uXJgUebsCR8l6eh7hFfrxgToCAel1qJbDI 3S0Wk8n6LgTL3JtoYwTIAuWbileoqNxS/0dOG3FFw/+3pFityJAGctvxH2Yhp/y0 9FNlSLCpCTxyg/UZZHqgj7UP3YtALfaRUckk18sqIb708VYSQfw38bpyWN6dI6+r q+Vtrnd2pOSMZ2BwccJnvFcXjPfTJsmTDvInn71WgAL9pyNxHcrt/TCLyE1s4YzA 3JX4klfPDiEsLxfQyZOyZ7x6UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmCX57V Zo+UvA9IoqmPE7XuhfwbMB8GA1UdIwQYMBaAFAwHEdgC16k0bmTENbuOncJ/bZ+H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTk5MC81ODYwRjM4NjFE OTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFUUnVaTVExdTQ2ZHduOXRu NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBY1IyQUxYcVRSdVpNUTF1NDZkd245dG40Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTk5MC81ODYwRjM4NjFEOTQxMUUyQkU3RTdCRjgwOEIwMkNEMi9EQWNSMkFMWHFU UnVaTVExdTQ2ZHduOXRuNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxflL11xUQrmoFwA8HlpsgSUqH1jnjnJcPoVd5lobgFp+s4aut7svu 6p4CMaRyUc+O6dEvPG0LPls7Oqq9RVoYkTStbRsnOumWf0dm37zBWezRtXRpyBG9 H+NlPlbrk6nOAMgjm4QGI/wgkVBeHtPLy/ZyvRQD5TPaA61SulxmRStOB69pHDHa C77I8eypT5YwgOUka9HqSqob/h6CAGioXiWhfuHbedXCjM36KLxIjzfpcyl5V9H2 6eEawLJFLHX0DDyR3k5NxD/3zhMVWC3VBqi//q6actdK4s+bZoNyXiR+TwLDtpL6 VdEzS7651DTFWFPVsbMq52GhA35MqzEX -----END CERTIFICATE-----Generated at Mon May 6 17:43:23 2024 by rpki-client on console-ams.rpki-client.org