$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: UfJJTTEaAmbzty6FPxQJ4V5y0kek4CZ/xzpj9O22ErY= Subject key identifier: 22:EB:DC:08:4F:43:71:60:96:9E:7C:6F:AF:73:E7:F7:AD:D3:46:FE Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 024D Signing time: Sat 27 Apr 2024 03:49:58 +0000 Manifest this update: Sat 27 Apr 2024 03:49:57 +0000 Manifest next update: Sat 04 May 2024 03:49:57 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: OOYUcdrlbXGrESKH+l02ryg1MdYtVtrUD4u+Mij1u3M=) 2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: evkhr75ATMvHk9AbwFyIpIPCNLqUEmsZ8FxHR0DQego=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Apr 27 03:49:57 2024 GMT Not After : May 4 03:49:57 2024 GMT Subject: CN=662c75e6-bf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:5f:da:d8:f3:6c:6f:1d:91:94:34:8a:bb: 9c:c0:0d:e8:a1:d9:8a:31:0e:25:51:32:53:bd:ea: 73:78:04:0f:e5:78:50:48:a0:03:83:cb:70:69:1f: 02:15:94:db:2d:7d:17:bb:cc:2b:da:98:9a:8a:36: 7c:a8:34:0c:8c:59:f5:c5:29:b9:36:4f:39:f2:02: 35:e9:51:95:41:f4:9b:5f:25:8a:df:6c:c7:e2:a9: 28:93:4e:1c:ce:aa:1e:c6:0b:1c:93:96:f7:1c:eb: 41:d6:8d:2a:9a:4b:c4:17:d9:be:ee:4b:11:f4:42: 60:38:70:c0:97:0d:1c:0f:15:9c:e7:b0:e6:25:d3: 7e:89:2b:b2:21:4a:c7:f9:83:33:93:09:12:93:bb: 50:1d:13:ca:a1:b6:a1:54:0d:13:fb:ec:c2:a4:8a: 38:d4:4f:06:9b:ae:7c:75:9e:7c:31:72:dc:40:e4: df:5f:c4:77:e1:84:8a:dc:c9:4b:31:c4:ad:c8:ca: fb:e1:33:10:9b:3a:a6:05:70:7a:25:5d:87:c7:c8: 33:e3:0d:9f:53:a2:9c:32:8b:19:dc:9a:d4:80:72: 4a:0a:da:79:6b:72:92:2b:0a:7e:06:93:9a:b4:84: b9:34:8a:b7:79:62:99:9c:81:a3:76:ca:f4:c3:94: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EB:DC:08:4F:43:71:60:96:9E:7C:6F:AF:73:E7:F7:AD:D3:46:FE X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ef:c4:06:52:57:37:ba:6f:ab:36:a7:92:49:24:f9:cd:b6: 60:ed:12:52:4a:2e:54:3f:9f:18:ba:2c:70:c0:5a:87:0a:aa: 07:31:87:11:59:f2:5e:7e:31:e2:01:c7:36:8d:b7:f2:3a:45: 35:66:56:1f:5d:3f:34:cd:ff:37:48:92:63:e2:28:99:31:bb: 3a:99:df:89:e8:cd:66:fb:54:8f:3f:a7:a2:e6:24:42:0f:36: 3f:62:be:ad:cb:c8:40:6e:2e:6d:4b:cf:df:9e:27:4f:22:44: 3f:66:18:80:a8:53:59:d3:a5:72:78:01:ef:fa:97:d1:20:5b: 5b:26:18:3f:72:b1:eb:a1:49:63:aa:c7:ba:af:be:9f:5b:21: 1d:21:95:12:52:56:b8:73:1e:fe:c5:a9:56:54:e4:40:db:12: fe:b7:e1:1a:d9:20:73:51:27:0f:66:06:f3:6b:7b:63:81:bf: a8:25:ad:59:5c:e5:ac:f9:1d:ce:9d:11:df:99:9e:2c:05:60: d0:f6:b0:23:2c:3e:ee:33:81:9b:29:97:2d:ed:01:3d:fd:09: 53:ca:d0:18:b1:da:f3:16:8c:7a:ef:68:b6:19:dc:99:5f:95: 6f:02:30:71:23:ca:69:a7:13:0a:26:93:a3:84:67:7d:0f:62: f9:33:ef:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjQwNDI3MDM0OTU3WhcNMjQwNTA0MDM0OTU3WjAYMRYwFAYD VQQDEw02NjJjNzVlNi1iZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWtf2tjzbG8dkZQ0irucwA3oodmKMQ4lUTJTvepzeAQP5XhQSKADg8twaR8C FZTbLX0Xu8wr2piaijZ8qDQMjFn1xSm5Nk858gI16VGVQfSbXyWK32zH4qkok04c zqoexgsck5b3HOtB1o0qmkvEF9m+7ksR9EJgOHDAlw0cDxWc57DmJdN+iSuyIUrH +YMzkwkSk7tQHRPKobahVA0T++zCpIo41E8Gm658dZ58MXLcQOTfX8R34YSK3MlL McStyMr74TMQmzqmBXB6JV2Hx8gz4w2fU6KcMosZ3JrUgHJKCtp5a3KSKwp+BpOa tIS5NIq3eWKZnIGjdsr0w5TjMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLr3AhP Q3Fglp58b69z5/et00b+MB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf78QGUlc3um+rNqeSSST5zbZg7RJSSi5UP58YuixwwFqHCqoHMYcR WfJefjHiAcc2jbfyOkU1ZlYfXT80zf83SJJj4iiZMbs6md+J6M1m+1SPP6ei5iRC DzY/Yr6ty8hAbi5tS8/fnidPIkQ/ZhiAqFNZ06VyeAHv+pfRIFtbJhg/crHroUlj qse6r76fWyEdIZUSUla4cx7+xalWVORA2xL+t+Ea2SBzUScPZgbza3tjgb+oJa1Z XOWs+R3OnRHfmZ4sBWDQ9rAjLD7uM4GbKZct7QE9/QlTytAYsdrzFox672i2GdyZ X5VvAjBxI8pppxMKJpOjhGd9D2L5M+8y -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:41 2024 by rpki-client on console-ams.rpki-client.org