$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft File: rdfp-5VrvujwEu3elUJI2bXWWMY.mft (raw, json) Hash identifier: Izb0LIO7HZz6vQkxcD2KZpC9+lJnCkndsYPRUXubewM= Subject key identifier: C9:01:E6:33:D1:D7:F0:45:11:AB:01:95:41:0A:5D:ED:04:48:32:29 Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 0743 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft Manifest number: 073D Signing time: Sat 18 May 2024 22:26:07 +0000 Manifest this update: Sat 18 May 2024 22:26:06 +0000 Manifest next update: Sat 25 May 2024 22:26:06 +0000 Files and hashes: 1: rdfp-5VrvujwEu3elUJI2bXWWMY.crl (hash: eV16sie4gWLgEbFUN4zz9TJBkUwLIDsu00sIs1cx9TA=) 2: 5EB50658E20A11EA92701267C4F9AE02.roa (hash: 9+QbnBgbRo8eZoKRW39Si6bh/aHuXGKnWbvy5OwbED0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: May 18 22:26:06 2024 GMT Not After : May 25 22:26:06 2024 GMT Subject: CN=66492aff-6de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:3a:44:0d:7d:e9:62:da:a0:e5:92:62:2e: c1:7d:42:e6:26:4b:00:d0:81:6f:4e:ea:72:c9:47: ab:2b:e0:d2:09:8c:51:cd:78:71:6c:5e:e0:4d:2f: 15:26:89:a2:2e:13:57:65:98:01:ed:73:ce:55:cc: 0e:08:ae:92:3e:77:b2:0f:16:ba:b2:df:40:b8:74: f5:7d:29:e3:2e:44:9c:37:5d:af:d4:38:ba:75:83: d4:ab:f4:c3:3e:5f:01:fc:27:22:44:ba:5e:b7:64: 25:82:f7:91:df:3f:b6:92:fb:57:4e:8b:de:02:cb: cf:7d:65:91:41:7a:9f:29:d5:8d:6a:49:6e:6b:07: 75:74:85:b4:2b:cd:60:09:49:b6:90:a4:3e:a6:85: 15:79:c0:ce:57:d1:dc:c1:ea:73:5f:ac:86:5a:ed: 23:dc:50:e2:2d:ae:b7:10:35:d0:7d:f4:9e:36:e5: 76:9b:f2:29:c8:26:03:10:44:bf:af:23:fe:17:97: f7:51:1a:c6:60:db:7c:29:1c:12:f0:e1:6c:33:64: 45:5f:b7:45:c0:fd:be:fb:eb:ba:a7:76:ee:09:dc: ca:f9:0d:fe:2a:b8:ab:70:85:6a:36:3a:af:22:64: 9a:7b:2e:2c:d7:f3:c9:69:48:cf:d8:0d:0e:c0:f3: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:01:E6:33:D1:D7:F0:45:11:AB:01:95:41:0A:5D:ED:04:48:32:29 X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:dc:49:f0:3e:e4:49:d4:e7:4e:e1:f3:ec:e5:57:a6:96:58: a0:11:68:75:13:80:1d:c9:23:46:9a:bd:05:4a:ce:ad:ac:aa: 45:4b:f5:4f:bf:f4:58:aa:e0:e6:81:13:b6:5c:4b:6b:be:b3: 45:ff:fb:05:6a:7c:d9:46:bf:49:72:ac:eb:21:14:d3:cd:a2: 75:74:16:fa:d1:8f:2f:70:4c:4e:49:d0:18:f5:3e:f1:e3:92: 4f:b1:a2:e5:7c:6f:f7:ef:e3:4c:7a:82:b6:34:f1:ca:7e:37: 65:94:0b:01:44:c8:ea:b0:1d:ea:ab:a5:6d:bb:05:bb:72:bf: 29:48:59:bc:1c:ae:b3:c7:60:10:f2:18:b7:b8:40:ec:71:2b: 00:05:d3:14:ef:20:b0:99:15:55:d0:94:c4:79:7f:51:1a:d9: e5:d6:11:2a:7c:7b:ab:ee:0a:0b:cf:87:94:8b:81:35:7e:24: 88:42:59:96:38:97:fb:f8:0a:32:9c:ce:5a:7f:20:92:f4:a7: 36:8c:a5:6a:86:37:82:ec:2c:a4:ad:18:7e:1c:79:74:92:4d: ad:f2:fd:38:12:e3:00:84:b0:71:d9:fc:2a:8a:62:bd:1e:97: 4b:e7:b5:37:a4:b2:75:78:33:14:96:a1:ff:4e:ed:75:00:1f: 67:74:e9:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjQwNTE4MjIyNjA2WhcNMjQwNTI1MjIyNjA2WjAYMRYwFAYD VQQDEw02NjQ5MmFmZi02ZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJU6RA196WLaoOWSYi7BfULmJksA0IFvTupyyUerK+DSCYxRzXhxbF7gTS8V JomiLhNXZZgB7XPOVcwOCK6SPneyDxa6st9AuHT1fSnjLkScN12v1Di6dYPUq/TD Pl8B/CciRLpet2QlgveR3z+2kvtXToveAsvPfWWRQXqfKdWNakluawd1dIW0K81g CUm2kKQ+poUVecDOV9HcwepzX6yGWu0j3FDiLa63EDXQffSeNuV2m/IpyCYDEES/ ryP+F5f3URrGYNt8KRwS8OFsM2RFX7dFwP2+++u6p3buCdzK+Q3+KrircIVqNjqv ImSaey4s1/PJaUjP2A0OwPPvpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkB5jPR 1/BFEasBlUEKXe0ESDIpMB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzBEMC85ODc5OUM2Q0UyMDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1 andFdTNlbFVKSTJiWFdXTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDf3EnwPuRJ1OdO4fPs5VemlligEWh1E4AdySNGmr0FSs6trKpFS/VP v/RYquDmgRO2XEtrvrNF//sFanzZRr9JcqzrIRTTzaJ1dBb60Y8vcExOSdAY9T7x 45JPsaLlfG/37+NMeoK2NPHKfjdllAsBRMjqsB3qq6VtuwW7cr8pSFm8HK6zx2AQ 8hi3uEDscSsABdMU7yCwmRVV0JTEeX9RGtnl1hEqfHur7goLz4eUi4E1fiSIQlmW OJf7+AoynM5afyCS9Kc2jKVqhjeC7CykrRh+HHl0kk2t8v04EuMAhLBx2fwqimK9 HpdL57U3pLJ1eDMUlqH/Tu11AB9ndOny -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org