$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft File: dOSCYGNYsugSWKrw2-THyWPYfhw.mft (raw, json) Hash identifier: Xd7v5190gUP5jlScssl/+Nm2GraHoDr12IKxAQdoacE= Subject key identifier: 3F:3F:7E:C9:BC:B6:78:3E:AA:3D:2B:13:9C:BE:6C:67:FB:59:44:6D Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Certificate serial: 1CEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft Manifest number: 1CD3 Signing time: Sun 28 Apr 2024 16:32:16 +0000 Manifest this update: Sun 28 Apr 2024 16:32:16 +0000 Manifest next update: Sun 05 May 2024 16:32:16 +0000 Files and hashes: 1: dOSCYGNYsugSWKrw2-THyWPYfhw.crl (hash: Zwul1t/5ZYZBeZ7YPfclmB50obWqIrzwNU5e98i8PlI=) 2: 79AE82F8171711EBB12F2574C4F9AE02.roa (hash: x/NfxpH2eoGcgtkvt2TSTT1Y6u9H0RDRjRHSJKdXUc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 16:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7402 (0x1cea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C Validity Not Before: Apr 28 16:32:16 2024 GMT Not After : May 5 16:32:16 2024 GMT Subject: CN=662e7a10-44f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:5f:6a:e6:2b:ca:a8:4b:18:bb:24:8c:a2: cf:db:42:63:8f:a3:d2:d6:bc:a0:f0:9f:85:08:fd: 03:2d:c7:f1:fe:26:b0:2d:4e:f3:96:f3:c7:7e:2e: 50:b2:c7:83:ae:87:c0:42:01:0d:0e:c1:7c:02:21: 64:af:64:58:7c:95:0e:ad:b6:74:a0:58:d3:6f:7d: db:cb:f4:ef:3c:e9:19:d8:0e:85:07:2c:6a:db:ea: 76:c9:80:44:6b:e8:9e:bb:ea:c3:1d:fa:94:e0:37: f9:38:8d:41:06:66:30:81:4a:c5:3f:8d:02:82:51: 29:8f:b0:94:fb:8d:96:5f:38:2a:e5:a9:f7:9b:68: 4e:61:35:9e:08:ad:ea:86:c9:b6:c0:44:15:85:84: 2f:18:f0:c8:b7:28:dd:9d:b0:fc:13:a9:d4:3b:f6: 93:58:e9:ed:d3:8f:d8:84:e5:b2:ba:0c:6a:ce:e1: b5:da:43:ce:dd:04:96:a8:e9:de:25:a8:7d:75:22: f0:93:a6:3d:15:0e:35:ac:fd:d0:cd:ff:c7:0c:a0: 41:c3:ef:9a:64:18:99:4d:3e:8c:95:de:a5:86:23: 26:7d:0e:4f:9d:fc:7b:8a:b6:5f:ad:33:2e:ba:68: b6:5e:b4:1d:56:23:6f:74:c5:0c:48:f8:72:68:69: 38:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3F:7E:C9:BC:B6:78:3E:AA:3D:2B:13:9C:BE:6C:67:FB:59:44:6D X509v3 Authority Key Identifier: keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:64:d0:db:10:ad:a4:09:97:88:68:a4:99:ae:eb:26:4f:e9: 40:58:6f:6b:c4:8e:72:e3:3b:79:40:f6:7b:91:03:ce:4e:8b: 20:65:91:21:d4:d9:da:db:2d:71:b0:29:83:d6:22:94:d1:45: 9f:38:46:a2:43:23:24:38:52:eb:b0:2c:73:d4:2d:73:dd:c9: e8:e7:44:63:40:74:71:56:2e:4e:cb:a1:52:05:f0:ca:64:bd: 77:7f:97:38:ed:5d:19:7d:1a:9c:ad:68:08:dc:8a:8c:04:40: 21:9d:f5:ab:ad:10:35:53:cf:81:cc:1e:ea:fb:26:81:e9:34: 48:c2:7b:04:01:fe:da:10:d5:ea:a1:3f:3e:06:38:8c:83:6e: 4a:33:56:f4:d9:ec:cb:9b:62:b6:3e:02:a8:5f:b7:6f:92:5d: 2b:47:71:a5:99:6b:a9:29:13:cc:c9:5c:0b:a7:92:4b:ad:db: c1:e9:28:c8:64:5c:05:b8:37:8d:19:48:cd:08:28:e1:8d:ed: e1:81:db:ac:0c:59:6f:4b:ec:ca:24:bb:3e:d6:35:53:7e:3a: c9:4a:11:22:3d:82:03:e1:67:91:5f:9e:9e:e6:e1:fa:ad:5a: 0d:01:cb:aa:5e:fd:82:3d:7b:2b:a2:71:fe:9c:b9:a4:bc:85: dd:77:39:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2MzMxMTAvBgNVBAUTKDc0RTQ4MjYwNjM1OEIyRTgxMjU4QUFGMERCRTRDN0M5 NjNEODdFMUMwHhcNMjQwNDI4MTYzMjE2WhcNMjQwNTA1MTYzMjE2WjAYMRYwFAYD VQQDEw02NjJlN2ExMC00NGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaZfauYryqhLGLskjKLP20Jjj6PS1ryg8J+FCP0DLcfx/iawLU7zlvPHfi5Q sseDrofAQgENDsF8AiFkr2RYfJUOrbZ0oFjTb33by/TvPOkZ2A6FByxq2+p2yYBE a+ieu+rDHfqU4Df5OI1BBmYwgUrFP40CglEpj7CU+42WXzgq5an3m2hOYTWeCK3q hsm2wEQVhYQvGPDItyjdnbD8E6nUO/aTWOnt04/YhOWyugxqzuG12kPO3QSWqOne Jah9dSLwk6Y9FQ41rP3Qzf/HDKBBw++aZBiZTT6Mld6lhiMmfQ5Pnfx7irZfrTMu umi2XrQdViNvdMUMSPhyaGk4ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8/fsm8 tng+qj0rE5y+bGf7WURtMB8GA1UdIwQYMBaAFHTkgmBjWLLoEliq8Nvkx8lj2H4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzYzMy82MjkwOUYzOEEy NDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1Z1NXS3J3Mi1USHlXUFlm aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPU0NZR05Zc3VnU1dLcncyLVRIeVdQWWZody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzYzMy82MjkwOUYzOEEyNDExMUU2QkNBOEQwNzhDNEY5QUUwMi9kT1NDWUdOWXN1 Z1NXS3J3Mi1USHlXUFlmaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ZNDbEK2kCZeIaKSZrusmT+lAWG9rxI5y4zt5QPZ7kQPOTosgZZEh 1Nna2y1xsCmD1iKU0UWfOEaiQyMkOFLrsCxz1C1z3cno50RjQHRxVi5Oy6FSBfDK ZL13f5c47V0ZfRqcrWgI3IqMBEAhnfWrrRA1U8+BzB7q+yaB6TRIwnsEAf7aENXq oT8+BjiMg25KM1b02ezLm2K2PgKoX7dvkl0rR3GlmWupKRPMyVwLp5JLrdvB6SjI ZFwFuDeNGUjNCCjhje3hgdusDFlvS+zKJLs+1jVTfjrJShEiPYID4WeRX56e5uH6 rVoNAcuqXv2CPXsronH+nLmkvIXddzmR -----END CERTIFICATE-----Generated at Sun Apr 28 19:01:39 2024 by rpki-client on console-fra.rpki-client.org