$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json) Hash identifier: FPMbEhxv1eIRVrZkAxVQtmguxVSlRTkQOVgZw1tvuwE= Subject key identifier: 2C:9E:CF:02:89:D0:B8:D5:5D:B9:0C:B6:28:7B:0B:56:97:95:F9:36 Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft Manifest number: 94 Signing time: Sun 19 May 2024 06:54:54 +0000 Manifest this update: Sun 19 May 2024 06:54:54 +0000 Manifest next update: Sun 26 May 2024 06:54:54 +0000 Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: HLoKFmU/dVZTG2LWYGYgf6YsFGAMsl2XUJ77sy9K6IQ=) 2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: //5f/Eebu1ZIucQCCTF4pus5UbQIqyZSXwXiKVYSyoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041 Validity Not Before: May 19 06:54:54 2024 GMT Not After : May 26 06:54:54 2024 GMT Subject: CN=6649a23e-92a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:7e:d0:68:3d:f1:01:d8:e7:e6:58:dc:6f: 1f:d5:d1:9b:51:73:0e:1f:63:aa:6f:16:1d:9f:b7: f4:f6:49:07:7d:92:99:da:2a:87:bf:a4:31:51:07: 5e:84:f5:30:08:2d:10:28:77:53:f6:d4:51:c7:d8: 5d:f7:2e:2d:17:a5:13:9d:e1:a9:49:fe:c1:f9:cc: 4b:cf:49:d5:62:5e:a7:35:1d:88:5f:18:fb:96:1d: 63:6e:51:45:88:31:ae:47:64:60:63:5b:e7:e5:ce: d6:b2:33:11:68:92:10:2f:32:b6:ca:02:6f:5f:71: b7:20:4a:57:ab:c9:02:50:82:77:14:bf:ce:34:2f: a9:dd:9a:98:c5:f9:2b:9f:6c:1c:9e:be:67:00:fa: 6d:88:72:aa:eb:13:45:e7:b0:6e:12:75:0f:a0:cf: 7b:5f:37:8e:84:4c:58:56:bc:ee:d0:7a:a4:81:fd: 70:1a:26:01:75:59:83:8b:ce:00:e0:18:fc:f9:71: bf:9a:bd:7a:ad:52:31:f3:4f:1d:01:4a:f1:d6:5d: b2:92:f1:aa:81:2e:e9:c5:58:f2:1d:26:58:82:a7: c8:93:d5:69:e3:4c:f9:47:fc:68:6b:c1:b5:f1:dd: f5:d4:3d:8f:ab:5d:37:41:08:22:b9:63:f6:ef:8b: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:CF:02:89:D0:B8:D5:5D:B9:0C:B6:28:7B:0B:56:97:95:F9:36 X509v3 Authority Key Identifier: keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f4:4e:f5:8e:33:8d:72:bc:fa:72:ab:c6:32:d3:6f:a9:45: be:68:e1:46:e0:4b:9d:d1:8a:a5:8c:6d:85:a3:78:3b:6e:f2: 7f:34:20:d9:ed:47:2e:7a:e7:ce:93:e2:04:bc:97:61:5d:35: dd:dd:5e:11:7e:1e:8c:cb:42:d6:93:50:b9:74:f5:d4:b6:fe: fd:83:7c:6e:ce:47:5b:67:36:9e:52:55:5d:5e:e0:b4:53:5f: f9:26:95:49:3e:54:03:2e:55:8e:93:fc:fb:67:ea:5e:a2:9b: 9d:b6:a5:66:0d:cb:4d:76:32:5a:d7:90:b9:cd:cc:cf:47:dd: 72:f6:97:cf:71:e4:b1:6c:16:32:16:b7:75:e0:06:ce:75:86: a1:44:44:a2:c0:38:ab:b4:84:c7:f6:07:76:b4:6a:8d:2e:68: 97:6b:be:72:0a:bc:35:be:6e:53:37:f4:e7:48:f5:3e:50:23: 20:06:de:f7:bf:01:d6:7c:1c:15:20:36:b2:ec:62:95:ec:e8: 29:ed:d1:81:8a:5e:13:4f:df:8b:aa:b5:71:4b:16:59:03:e9: 07:f8:77:57:3a:d4:28:0a:6a:44:26:00:2b:0e:ef:37:6f:7e: 0a:d0:4d:15:b7:13:69:3d:e6:92:48:48:cc:96:9c:9e:b3:31: 40:e6:de:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5OEUxMTAvBgNVBAUTKDc3MUQyM0M1REYxQTczNzFERDkyRjAyMTA2RkVFNTlD NUJBN0MwNDEwHhcNMjQwNTE5MDY1NDU0WhcNMjQwNTI2MDY1NDU0WjAYMRYwFAYD VQQDEw02NjQ5YTIzZS05MmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwx+0Gg98QHY5+ZY3G8f1dGbUXMOH2OqbxYdn7f09kkHfZKZ2iqHv6QxUQde hPUwCC0QKHdT9tRRx9hd9y4tF6UTneGpSf7B+cxLz0nVYl6nNR2IXxj7lh1jblFF iDGuR2RgY1vn5c7WsjMRaJIQLzK2ygJvX3G3IEpXq8kCUIJ3FL/ONC+p3ZqYxfkr n2wcnr5nAPptiHKq6xNF57BuEnUPoM97XzeOhExYVrzu0Hqkgf1wGiYBdVmDi84A 4Bj8+XG/mr16rVIx808dAUrx1l2ykvGqgS7pxVjyHSZYgqfIk9Vp40z5R/xoa8G1 8d311D2Pq103QQgiuWP274tkvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyezwKJ 0LjVXbkMtih7C1aXlfk2MB8GA1UdIwQYMBaAFHcdI8XfGnNx3ZLwIQb+5Zxbp8BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk4RS8xMDM5MEZGODMx RDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMzSGRrdkFoQnY3bG5GdW53 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMz SGRrdkFoQnY3bG5GdW53RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB29E71jjONcrz6cqvGMtNvqUW+aOFG4Eud0YqljG2Fo3g7bvJ/NCDZ 7UcueufOk+IEvJdhXTXd3V4Rfh6My0LWk1C5dPXUtv79g3xuzkdbZzaeUlVdXuC0 U1/5JpVJPlQDLlWOk/z7Z+peopudtqVmDctNdjJa15C5zczPR91y9pfPceSxbBYy Frd14AbOdYahRESiwDirtITH9gd2tGqNLmiXa75yCrw1vm5TN/TnSPU+UCMgBt73 vwHWfBwVIDay7GKV7Ogp7dGBil4TT9+LqrVxSxZZA+kH+HdXOtQoCmpEJgArDu83 b34K0E0VtxNpPeaSSEjMlpyeszFA5t7j -----END CERTIFICATE-----Generated at Sun May 19 07:40:36 2024 by rpki-client on console-fra.rpki-client.org