$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: lpbrbCtrH1gToIxUtM1Jh/Whw/mGebDX9gjLBvrDedA= Subject key identifier: 59:AC:E3:38:22:52:EE:88:5B:F3:96:2F:24:73:56:97:70:7F:34:7B Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: 17 Signing time: Fri 31 May 2024 09:42:27 +0000 Manifest this update: Fri 31 May 2024 09:42:26 +0000 Manifest next update: Fri 07 Jun 2024 09:42:26 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: niTYK5BTZzjU6CGmImHV6yzaBPz+uylL6poyqziAhPg=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: 8kO5Y6mBbR8uiBBtuQEnY7XxsIn44iqMDq9T/sqgPbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: May 31 09:42:26 2024 GMT Not After : Jun 7 09:42:26 2024 GMT Subject: CN=66599b82-7b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:35:a2:b9:64:9e:1c:b9:31:1e:21:89:d2: 2b:ea:95:77:1f:6b:fd:12:22:ba:5f:b5:09:7d:18: 6e:8d:74:f4:e2:57:67:0e:03:d1:02:87:d5:ed:9a: 80:81:57:c0:67:40:b4:10:2e:7a:b2:c0:eb:de:2b: cf:fd:51:ac:bf:41:38:bd:2c:fc:c3:b1:a1:95:98: 3c:88:1c:8c:ea:a5:fb:19:c9:7a:7c:b4:7e:ed:d2: e6:b6:4c:09:49:24:67:1a:23:7f:1e:af:d0:ea:e2: 34:16:9a:ec:cc:cc:7d:12:e2:dd:34:38:7f:ab:de: 5f:50:a4:cb:2a:10:22:72:15:39:e7:92:66:f7:80: 1e:5e:15:59:a6:0b:8a:4b:a9:51:a8:f4:ef:c9:44: ac:9f:7a:37:2d:86:32:d9:72:cd:23:b2:b8:f4:7d: f0:71:94:f9:e8:5f:63:de:fd:77:9b:28:a9:a4:24: 1e:fd:58:fb:1c:6d:e6:f8:a5:d9:47:e5:a0:79:e1: 2e:61:77:90:7a:5e:50:24:44:89:0a:ff:57:ab:4d: 2d:61:62:6e:b5:f5:d5:f2:c0:4d:ce:6e:90:b3:50: ba:24:22:73:52:71:04:c9:c5:19:84:03:f9:8b:da: 39:a3:4d:a1:89:10:33:ba:df:95:ce:29:e1:de:04: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AC:E3:38:22:52:EE:88:5B:F3:96:2F:24:73:56:97:70:7F:34:7B X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:02:01:7d:48:02:35:ae:25:75:37:f4:eb:dc:9b:09:6b:f6: 0c:e1:c5:aa:e2:7c:f8:3d:ef:a9:a0:bf:c8:94:70:a4:79:63: 45:e7:cb:4f:58:fe:72:0f:4b:44:c7:ac:41:23:5e:b5:da:43: a8:53:86:2a:06:1a:f2:ac:d2:3b:04:4a:35:54:9f:b8:98:d5: 99:87:ae:08:93:78:29:3d:72:b5:31:c3:e5:2f:0e:6f:4e:84: 0f:cd:2d:f1:59:20:5b:9b:86:a6:2d:1c:d1:d5:e9:82:d8:f9: eb:e3:23:4d:87:09:26:80:fb:9e:a7:68:19:b5:38:22:26:28: 08:9d:40:8b:a3:c9:ee:d8:43:e4:67:24:de:ce:3d:4a:11:e4: 7a:d8:d4:65:a7:18:28:46:20:72:9b:c1:28:89:ef:b7:ea:08: 41:ed:62:e1:05:91:69:5c:c9:9a:ce:6d:fb:1f:c6:94:ac:fd: 61:3b:e4:46:4d:dc:86:ae:b5:31:c1:f3:63:d0:6e:ea:da:b3: d4:b5:0a:be:df:51:a3:4a:81:1d:a3:f1:b5:52:7f:32:de:5b: a8:6f:0c:f8:20:a1:f3:22:88:2f:55:ac:13:3a:10:ba:90:22: 79:e9:ba:a5:2e:f4:65:4c:f4:f5:93:73:29:3e:56:f0:7c:48: 72:13:82:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzhFMjExMC8GA1UEBRMoMEVEQjRBMzcyNzBCRjQ5NDE4NEE0NkU2MDIzMTQ4RkVE NkUzM0ExRTAeFw0yNDA1MzEwOTQyMjZaFw0yNDA2MDcwOTQyMjZaMBgxFjAUBgNV BAMTDTY2NTk5YjgyLTdiMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ/jWiuWSeHLkxHiGJ0ivqlXcfa/0SIrpftQl9GG6NdPTiV2cOA9ECh9XtmoCB V8BnQLQQLnqywOveK8/9Uay/QTi9LPzDsaGVmDyIHIzqpfsZyXp8tH7t0ua2TAlJ JGcaI38er9Dq4jQWmuzMzH0S4t00OH+r3l9QpMsqECJyFTnnkmb3gB5eFVmmC4pL qVGo9O/JRKyfejcthjLZcs0jsrj0ffBxlPnoX2Pe/XebKKmkJB79WPscbeb4pdlH 5aB54S5hd5B6XlAkRIkK/1erTS1hYm619dXywE3ObpCzULokInNScQTJxRmEA/mL 2jmjTaGJEDO635XOKeHeBHq/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWazjOCJS 7ohb85YvJHNWl3B/NHswHwYDVR0jBBgwFoAUDttKNycL9JQYSkbmAjFI/tbjOh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEUyL0FGMzIwODNFRkM2 ODExRUU5OTYxREQ1REM0RjlBRTAyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9o NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHR0S055Y0w5SlFZU2tibUFqRklfdGJqT2g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OEUyL0FGMzIwODNFRkM2ODExRUU5OTYxREQ1REM0RjlBRTAyL0R0dEtOeWNMOUpR WVNrYm1BakZJX3Riak9oNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFQCAX1IAjWuJXU39Ovcmwlr9gzhxarifPg976mgv8iUcKR5Y0Xny09Y /nIPS0THrEEjXrXaQ6hThioGGvKs0jsESjVUn7iY1ZmHrgiTeCk9crUxw+UvDm9O hA/NLfFZIFubhqYtHNHV6YLY+evjI02HCSaA+56naBm1OCImKAidQIujye7YQ+Rn JN7OPUoR5HrY1GWnGChGIHKbwSiJ77fqCEHtYuEFkWlcyZrObfsfxpSs/WE75EZN 3IautTHB82PQburas9S1Cr7fUaNKgR2j8bVSfzLeW6hvDPggofMiiC9VrBM6ELqQ InnpuqUu9GVM9PWTcyk+VvB8SHITgvU= -----END CERTIFICATE-----Generated at Fri May 31 10:42:22 2024 by rpki-client on console-fra.rpki-client.org