$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft File: DmJr6z1CBZMzO_tMhYMHqJnqfco.mft (raw, json) Hash identifier: rJWS54RRFnP+Cvmsr2RuCr/K7oPvvm31F7JkpewQY5g= Subject key identifier: E1:33:C7:A8:AA:03:D1:E8:20:86:06:88:35:D1:B1:AC:35:64:91:4F Authority key identifier: 0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA Certificate issuer: /CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft Manifest number: 31 Signing time: Sun 19 May 2024 08:21:51 +0000 Manifest this update: Sun 19 May 2024 08:21:50 +0000 Manifest next update: Sun 26 May 2024 08:21:50 +0000 Files and hashes: 1: DmJr6z1CBZMzO_tMhYMHqJnqfco.crl (hash: 0GplctRuGeJ2peCU8mZaIx4YqXeYCAE76hb+0kW3BSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912981B/serialNumber=0E626BEB3D420593333BFB4C858307A899EA7DCA Validity Not Before: May 19 08:21:50 2024 GMT Not After : May 26 08:21:50 2024 GMT Subject: CN=6649b69f-b0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:21:45:37:77:fd:7b:14:60:f5:81:f3:69:bd: 12:08:2c:2a:b6:a8:e1:b5:6b:ae:95:7c:fb:a8:c7: 2a:c4:88:9e:4a:f6:c1:54:b2:14:9b:09:31:67:31: bf:21:c5:f4:51:02:20:2d:dd:6f:8a:41:62:02:b4: c1:37:35:e5:53:bc:43:86:18:f9:3d:dd:c0:de:25: 44:a3:dd:a6:9a:ab:f7:c0:1a:f1:e1:f5:21:c1:55: d8:a0:95:50:51:9b:dd:2b:9d:4c:b1:1f:71:9d:fe: 05:91:10:06:3f:ff:74:71:44:d9:8d:84:93:d4:0e: 24:42:2b:c2:2d:a7:9d:ee:04:55:bf:ac:41:93:41: 4e:d0:c9:a5:3b:0f:5c:05:ac:6f:00:c0:e2:b8:af: 91:57:e4:98:ad:ee:dd:99:a2:1e:d0:3f:0e:ee:78: 7d:07:bc:35:56:98:6a:d7:d8:f5:83:3b:18:49:78: e8:7f:a4:9b:44:26:15:64:d0:94:8c:3a:bf:b4:13: fe:e1:89:b2:4a:2c:68:32:02:e0:2b:29:e3:06:bc: c2:de:37:60:2e:ef:70:9e:25:cb:af:59:ea:f1:1d: ac:9e:0a:d2:60:3c:60:ff:96:22:71:b9:a8:d8:aa: 96:58:ea:c5:82:dd:a8:bc:a7:e7:38:f4:28:bb:12: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:33:C7:A8:AA:03:D1:E8:20:86:06:88:35:D1:B1:AC:35:64:91:4F X509v3 Authority Key Identifier: keyid:0E:62:6B:EB:3D:42:05:93:33:3B:FB:4C:85:83:07:A8:99:EA:7D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmJr6z1CBZMzO_tMhYMHqJnqfco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/C58CF84CCA8A11EEB056E61FC4F9AE02/DmJr6z1CBZMzO_tMhYMHqJnqfco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:8c:ad:d0:e6:0a:4e:d7:9b:26:27:21:38:bd:e5:12:32:9a: a4:6f:d8:55:a5:e5:1f:4a:52:6a:47:c0:94:7f:44:11:0f:80: dd:ae:54:5c:25:3f:23:70:a7:06:ce:8a:a9:9d:c6:64:e4:05: 22:a9:11:ef:7a:f5:71:49:8f:ea:25:3a:89:d3:bc:d5:ee:5a: a3:17:11:9b:d3:e7:94:3e:b0:4b:10:26:80:c9:51:20:17:bb: 53:76:39:1a:ad:bd:ed:42:6b:fc:91:11:d7:dc:12:20:f9:98: 98:96:de:bd:74:66:4c:83:70:b7:c5:69:40:c4:49:28:4a:bf: 0a:d8:c5:27:e4:76:ea:21:92:3e:0f:25:80:48:a6:e9:60:b5: 0f:b5:0a:20:17:cb:a3:98:a7:c6:31:02:bf:66:1e:76:8a:b3: 36:ec:a5:df:e1:36:0b:03:e0:13:9a:89:5f:eb:6a:09:fd:c9: 07:0a:02:40:41:0e:f3:22:52:fe:c9:4d:08:ea:98:2e:9c:12: 1e:d3:db:2e:9f:d3:2a:27:52:a7:d0:59:41:33:e5:79:94:32: d9:56:95:03:0f:2d:47:f4:f9:78:64:e2:10:2b:a5:1b:69:0c: ed:9a:20:a1:78:7b:e4:64:8b:2f:77:d3:05:f3:3e:68:51:6d: c7:6c:a0:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTgxQjExMC8GA1UEBRMoMEU2MjZCRUIzRDQyMDU5MzMzM0JGQjRDODU4MzA3QTg5 OUVBN0RDQTAeFw0yNDA1MTkwODIxNTBaFw0yNDA1MjYwODIxNTBaMBgxFjAUBgNV BAMTDTY2NDliNjlmLWIwYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMIUU3d/17FGD1gfNpvRIILCq2qOG1a66VfPuoxyrEiJ5K9sFUshSbCTFnMb8h xfRRAiAt3W+KQWICtME3NeVTvEOGGPk93cDeJUSj3aaaq/fAGvHh9SHBVdiglVBR m90rnUyxH3Gd/gWREAY//3RxRNmNhJPUDiRCK8Itp53uBFW/rEGTQU7QyaU7D1wF rG8AwOK4r5FX5Jit7t2Zoh7QPw7ueH0HvDVWmGrX2PWDOxhJeOh/pJtEJhVk0JSM Or+0E/7hibJKLGgyAuArKeMGvMLeN2Au73CeJcuvWerxHayeCtJgPGD/liJxuajY qpZY6sWC3ai8p+c49Ci7EgOVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4TPHqKoD 0egghgaINdGxrDVkkU8wHwYDVR0jBBgwFoAUDmJr6z1CBZMzO/tMhYMHqJnqfcow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5ODFCL0M1OENGODRDQ0E4 QTExRUVCMDU2RTYxRkM0RjlBRTAyL0RtSnI2ejFDQlpNek9fdE1oWU1IcUpucWZj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRG1KcjZ6MUNCWk16T190TWhZTUhxSm5xZmNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 ODFCL0M1OENGODRDQ0E4QTExRUVCMDU2RTYxRkM0RjlBRTAyL0RtSnI2ejFDQlpN ek9fdE1oWU1IcUpucWZjby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKiMrdDmCk7XmyYnITi95RIymqRv2FWl5R9KUmpHwJR/RBEPgN2uVFwl PyNwpwbOiqmdxmTkBSKpEe969XFJj+olOonTvNXuWqMXEZvT55Q+sEsQJoDJUSAX u1N2ORqtve1Ca/yREdfcEiD5mJiW3r10ZkyDcLfFaUDESShKvwrYxSfkduohkj4P JYBIpulgtQ+1CiAXy6OYp8YxAr9mHnaKszbspd/hNgsD4BOaiV/ragn9yQcKAkBB DvMiUv7JTQjqmC6cEh7T2y6f0yonUqfQWUEz5XmUMtlWlQMPLUf0+Xhk4hArpRtp DO2aIKF4e+Rkiy930wXzPmhRbcdsoFA= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org