$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft File: DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json) Hash identifier: wXhQLZnvogwJFwWPnS0ZW/gTvA7XIGUvhDta/Oac+N8= Subject key identifier: 23:12:93:C7:BF:44:F3:4C:6F:3F:05:F0:05:90:72:76:24:3E:F8:9A Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Certificate serial: 0790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft Manifest number: 0788 Signing time: Mon 06 May 2024 22:17:44 +0000 Manifest this update: Mon 06 May 2024 22:17:44 +0000 Manifest next update: Mon 13 May 2024 22:17:44 +0000 Files and hashes: 1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: JiMKri3xTQHJd8hHsE6u0h7WCsgeLbMyb3Den8DLU1g=) 2: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: wrz9NcO15NKFZgxZwwAqVuVrrYTqHhwaMWYAmXJ0k7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA Validity Not Before: May 6 22:17:44 2024 GMT Not After : May 13 22:17:44 2024 GMT Subject: CN=66395708-2e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:c7:97:92:ea:d3:f6:49:fc:71:28:d2:82: 50:44:c9:8a:28:54:6b:10:a8:13:27:b8:eb:b4:40: 3d:f4:ac:c6:9a:95:f9:8a:f8:64:67:49:78:a7:52: 95:a8:50:b5:75:b7:4d:da:ff:d7:51:cc:90:6b:fc: b0:74:91:ff:a9:5c:91:ae:fd:8e:93:e3:bb:fd:f0: 9b:c6:3d:7c:26:6c:46:28:8c:51:04:50:c0:91:11: 0a:18:ec:45:0e:2c:c0:56:ef:5c:5f:ff:32:76:57: 66:53:0c:81:b8:fd:e9:b0:ba:a2:9b:85:35:14:31: 00:1b:ef:e7:c3:d2:14:79:47:a7:e6:83:f0:37:24: a0:ec:af:4d:20:4e:7d:ff:52:3d:9a:18:db:82:1e: b2:f9:9b:95:a6:c9:44:05:bb:da:ed:4e:02:30:1c: a3:ff:38:d4:53:c2:15:f3:89:65:95:3e:b9:54:0d: 2d:6d:fa:88:82:cb:2d:94:48:a8:53:b5:a7:fb:a9: ec:36:d5:5c:91:d1:dc:91:68:f3:18:97:4e:01:e7: fc:4f:aa:f2:05:aa:94:7e:6a:d3:d8:62:00:54:aa: 2c:bb:db:df:97:58:fd:32:09:e2:38:25:7f:b7:0e: 34:c5:7f:b3:df:14:0f:7e:3b:d6:38:4c:dd:a4:e0: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:12:93:C7:BF:44:F3:4C:6F:3F:05:F0:05:90:72:76:24:3E:F8:9A X509v3 Authority Key Identifier: keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ef:de:2e:12:77:a2:5c:44:9a:02:c0:08:a4:c2:01:20:9d: bb:79:59:94:bd:ca:9c:6a:eb:1f:c4:1b:77:da:2e:cd:7e:59: 18:74:6c:7a:23:c8:83:40:b1:b6:f9:4e:0e:f3:f0:8e:84:2f: d2:74:8d:cb:e7:af:68:fa:1a:1b:56:92:1d:59:d9:0f:6c:f7: dd:c8:be:7d:4b:4a:03:db:0b:24:e9:db:82:81:12:81:3f:e5: 20:30:90:51:6f:2f:cf:a3:47:96:b9:34:5b:ab:9f:f4:1e:ff: f8:b5:e7:7f:27:a5:62:73:1c:fc:14:e7:e6:fe:9a:ee:0c:bb: b1:1f:ce:85:27:93:ef:b7:dc:d3:f6:9c:bb:e7:b9:ae:51:8a: 26:ab:34:52:b0:0b:7a:85:21:c4:c6:cd:24:1d:db:a1:55:b0: b6:01:30:29:60:a0:9b:fe:d2:24:18:27:9d:e9:18:71:ba:9f: a0:16:dd:2f:35:68:7a:03:4a:7f:42:07:29:a0:86:24:84:5a: 68:30:90:37:44:b8:37:92:6e:c1:5b:a5:f9:39:39:0f:4d:cf: 32:a6:c4:fa:e0:08:e0:b0:99:9d:17:80:9b:f5:a6:c9:48:11: 36:62:f4:23:59:c1:de:d6:4d:b3:c7:c7:1f:b0:06:95:28:1c: e6:ca:83:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEQxMTAvBgNVBAUTKDBENjhEQkFENjAwRjhCRDkwQjM1NUI5OEY0QjIzOEZC OUU5QTU3RkEwHhcNMjQwNTA2MjIxNzQ0WhcNMjQwNTEzMjIxNzQ0WjAYMRYwFAYD VQQDEw02NjM5NTcwOC0yZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxvHl5Lq0/ZJ/HEo0oJQRMmKKFRrEKgTJ7jrtEA99KzGmpX5ivhkZ0l4p1KV qFC1dbdN2v/XUcyQa/ywdJH/qVyRrv2Ok+O7/fCbxj18JmxGKIxRBFDAkREKGOxF DizAVu9cX/8ydldmUwyBuP3psLqim4U1FDEAG+/nw9IUeUen5oPwNySg7K9NIE59 /1I9mhjbgh6y+ZuVpslEBbva7U4CMByj/zjUU8IV84lllT65VA0tbfqIgsstlEio U7Wn+6nsNtVckdHckWjzGJdOAef8T6ryBaqUfmrT2GIAVKosu9vfl1j9MgniOCV/ tw40xX+z3xQPfjvWOEzdpOA+aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMSk8e/ RPNMbz8F8AWQcnYkPviaMB8GA1UdIwQYMBaAFA1o261gD4vZCzVbmPSyOPuemlf6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwRC81Nzk2NEQ0QUNC MEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5a0xOVnVZOUxJNC01NmFW X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXamJyV0FQaTlrTE5WdVk5TEk0LTU2YVZfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwRC81Nzk2NEQ0QUNCMEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5 a0xOVnVZOUxJNC01NmFWX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR794uEneiXESaAsAIpMIBIJ27eVmUvcqcausfxBt32i7NflkYdGx6 I8iDQLG2+U4O8/COhC/SdI3L569o+hobVpIdWdkPbPfdyL59S0oD2wsk6duCgRKB P+UgMJBRby/Po0eWuTRbq5/0Hv/4ted/J6Vicxz8FOfm/pruDLuxH86FJ5Pvt9zT 9py757muUYomqzRSsAt6hSHExs0kHduhVbC2ATApYKCb/tIkGCed6Rhxup+gFt0v NWh6A0p/QgcpoIYkhFpoMJA3RLg3km7BW6X5OTkPTc8ypsT64AjgsJmdF4Cb9abJ SBE2YvQjWcHe1k2zx8cfsAaVKBzmyoMz -----END CERTIFICATE-----Generated at Tue May 7 00:53:25 2024 by rpki-client on console-ams.rpki-client.org