$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: 8+NYHT1jtFAon2i78edHwSAWVUAsIuyEPBHrnFA8y/0= Subject key identifier: AD:85:ED:E7:7F:97:61:A2:2D:16:5F:A6:A7:14:8A:8B:93:51:16:5B Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0BFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0BE3 Signing time: Thu 02 May 2024 19:10:08 +0000 Manifest this update: Thu 02 May 2024 19:10:07 +0000 Manifest next update: Thu 09 May 2024 19:10:07 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: eAcLJtCtg0QvCE7ZvqrZ/nqCKoJORWmwH5RZmP3/J44=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: Z3QChAmaX93zkH7uu1vQ0lrHznlVt8lujJ2zdrd04mw=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: cGsRLZFoLI4pqqGQ/qt8n7dOCdyQTM3HAYI4vIn1t/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: May 2 19:10:07 2024 GMT Not After : May 9 19:10:07 2024 GMT Subject: CN=6633e510-747d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:b1:12:51:2a:43:c7:e9:1b:c9:a0:71:37: 99:cd:de:6c:75:f7:e4:bb:57:d2:13:ee:38:22:84: b1:2c:0e:e8:6d:82:8d:99:ef:72:45:27:cd:e4:39: 01:69:a9:bd:10:c7:44:9a:ad:68:86:99:d5:ad:ea: 59:9c:91:8d:7e:93:5f:59:ee:7c:7f:d2:d5:f0:71: 4a:17:c1:50:e4:47:19:53:c6:4d:89:0c:d6:3a:c2: 8d:a6:32:2d:82:39:b1:cd:7b:d9:2d:35:2e:11:7e: c5:a8:2f:eb:94:c1:6c:92:fb:a3:9e:89:8b:b3:52: c2:4d:35:c0:a6:b6:78:7a:30:92:2a:b6:c6:f5:6c: fb:d6:f9:33:73:4b:e5:67:0a:2f:c9:ec:66:7b:1f: 7a:ac:fd:96:1b:dd:35:f7:db:11:47:07:57:93:3d: 7b:8b:4b:fb:06:0f:e6:e3:4c:bb:21:d6:ee:e7:46: 3a:3e:bc:3d:36:4d:1d:4d:65:ed:5e:a3:f2:47:1e: ad:52:50:bf:a1:e8:26:1f:ca:26:5e:18:84:99:65: 47:f0:66:54:3f:df:4a:88:06:6c:45:c8:5a:84:10: e1:83:18:5c:b9:27:18:37:e8:0a:90:73:e3:be:c3: d8:8f:86:3d:79:0b:2d:50:31:2a:dd:7f:98:8f:60: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:85:ED:E7:7F:97:61:A2:2D:16:5F:A6:A7:14:8A:8B:93:51:16:5B X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f9:65:64:78:12:78:ce:f8:5c:a3:4a:cd:7c:31:99:9d:e1: e7:3a:49:d1:ad:92:1c:dd:e0:51:c5:af:4f:28:6b:bd:07:de: 3a:95:9e:58:2a:c8:9e:40:df:0a:5e:e5:04:a0:78:7c:09:52: b0:27:04:c8:16:6e:e6:a4:23:11:28:d5:8c:aa:8a:a7:ba:6c: e3:52:5a:df:aa:57:34:45:b4:ba:29:aa:41:fb:68:52:8d:75: 17:5a:a7:07:07:84:ee:03:f7:d6:fa:b7:9d:da:bf:6c:23:57: e9:6e:bb:67:9c:8e:78:a8:b4:90:40:f8:dd:31:04:b7:1f:79: 57:e0:8d:fc:83:51:80:1c:1e:91:24:e1:a8:65:58:78:a1:e8: cc:50:7a:3f:84:fc:6f:f0:32:d6:b2:d9:05:d5:e3:07:fb:d2: a4:fc:2e:0e:16:c9:5a:db:7a:01:f3:23:3e:15:10:08:f3:1e: 12:34:fb:86:ca:d1:3e:42:5e:59:ad:09:2b:99:ee:ef:88:8a: b2:e8:21:4c:69:3e:1c:30:a9:ab:b4:27:92:62:94:86:b6:1d: db:0b:5d:2c:f1:86:4c:31:ad:50:a1:e3:22:88:74:18:70:51: bd:09:80:97:d6:34:9b:5c:eb:0e:61:db:74:26:86:db:a6:8a: 2b:4f:a4:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjQwNTAyMTkxMDA3WhcNMjQwNTA5MTkxMDA3WjAYMRYwFAYD VQQDEw02NjMzZTUxMC03NDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo+xElEqQ8fpG8mgcTeZzd5sdffku1fSE+44IoSxLA7obYKNme9yRSfN5DkB aam9EMdEmq1ohpnVrepZnJGNfpNfWe58f9LV8HFKF8FQ5EcZU8ZNiQzWOsKNpjIt gjmxzXvZLTUuEX7FqC/rlMFskvujnomLs1LCTTXAprZ4ejCSKrbG9Wz71vkzc0vl Zwovyexmex96rP2WG90199sRRwdXkz17i0v7Bg/m40y7Idbu50Y6Prw9Nk0dTWXt XqPyRx6tUlC/oegmH8omXhiEmWVH8GZUP99KiAZsRchahBDhgxhcuScYN+gKkHPj vsPYj4Y9eQstUDEq3X+Yj2DnSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2F7ed/ l2GiLRZfpqcUiouTURZbMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt+WVkeBJ4zvhco0rNfDGZneHnOknRrZIc3eBRxa9PKGu9B946lZ5Y KsieQN8KXuUEoHh8CVKwJwTIFm7mpCMRKNWMqoqnumzjUlrfqlc0RbS6KapB+2hS jXUXWqcHB4TuA/fW+red2r9sI1fpbrtnnI54qLSQQPjdMQS3H3lX4I38g1GAHB6R JOGoZVh4oejMUHo/hPxv8DLWstkF1eMH+9Kk/C4OFsla23oB8yM+FRAI8x4SNPuG ytE+Ql5ZrQkrme7viIqy6CFMaT4cMKmrtCeSYpSGth3bC10s8YZMMa1QoeMiiHQY cFG9CYCX1jSbXOsOYdt0JobbpoorT6Sa -----END CERTIFICATE-----Generated at Thu May 2 20:04:52 2024 by rpki-client on console-ams.rpki-client.org