$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft File: _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json) Hash identifier: FrJx8Dod54mf3lPunY2+6GtgeG+dOvlv2lk6gXlVRkg= Subject key identifier: 47:76:3E:BF:83:C4:2C:5F:02:FD:4A:E2:0E:F1:40:C0:8C:D7:CD:80 Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23 Certificate issuer: /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft Manifest number: 52 Signing time: Sat 01 Jun 2024 09:22:01 +0000 Manifest this update: Sat 01 Jun 2024 09:22:00 +0000 Manifest next update: Sat 08 Jun 2024 09:22:00 +0000 Files and hashes: 1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: sssAfYyCRn+wXi9adRHk1U4Tbg2LP1UkvFqb3TXmeLI=) 2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: Lonvm/OZLKDxplecUeCYCiHwkdpqzMiL+zaeBSIideY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23 Validity Not Before: Jun 1 09:22:00 2024 GMT Not After : Jun 8 09:22:00 2024 GMT Subject: CN=665ae838-609e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:ae:70:fc:ef:66:45:a8:6d:6b:95:ea:7c: 0a:a8:32:76:39:6a:2e:c0:a9:4f:72:ec:a7:af:c7: ea:cb:31:8c:97:b4:63:c9:9b:97:f8:58:d5:85:f9: 5a:9c:a3:c5:dd:96:5e:13:d4:f4:6c:a3:a2:98:ae: 0c:f6:6c:65:66:3d:6c:8a:fb:30:2f:22:6e:66:cd: a2:bc:f1:d4:86:27:40:e2:ee:ae:18:b1:14:12:85: 75:67:f3:1e:2e:12:c3:99:be:39:36:4a:82:e0:54: 94:e3:f1:c4:43:f4:a8:44:bf:3b:7b:c0:47:5f:b7: 1f:c7:91:38:d3:42:9a:8a:7a:3f:85:73:ad:69:82: 44:9e:1b:d1:bd:ed:4d:4b:07:ce:c8:34:25:84:4f: 26:e6:41:2a:77:20:99:e1:75:ae:26:d6:2a:6f:24: bb:4a:e6:e6:17:23:f7:8e:c4:b2:5e:1b:1c:6c:4e: 2e:25:c9:4a:7e:51:b7:d6:0b:26:d0:ca:69:5b:e2: 7f:19:65:71:15:8f:3c:4d:9a:b9:74:91:c1:27:dd: 9b:c9:1e:7d:e1:2c:d5:4e:9d:34:0d:3e:8a:0a:9e: 24:c9:37:6a:20:9e:7a:6f:3f:8e:a4:00:10:8e:f6: c3:a3:06:4d:e6:f8:b4:e3:5a:aa:a3:3c:8d:c1:e2: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:76:3E:BF:83:C4:2C:5F:02:FD:4A:E2:0E:F1:40:C0:8C:D7:CD:80 X509v3 Authority Key Identifier: keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6b:5f:dc:e2:c2:79:22:6e:d1:d8:a3:c7:a8:ac:04:4d:b1: 9f:70:e0:02:26:49:e5:c5:7c:ca:37:24:a2:c1:e3:7b:74:20: 4e:7e:b7:21:21:a2:15:df:6d:3b:9e:5b:37:37:63:1c:0c:50: b3:b1:55:28:bb:67:78:5b:58:f6:be:13:02:c8:79:bd:b4:c3: 92:48:61:08:9d:d6:95:43:8a:4d:54:b2:23:89:9f:e1:e7:3c: c2:46:42:50:47:8c:d6:61:30:21:5a:51:47:bd:4f:93:18:53: 77:1c:72:f7:a2:6f:9a:e8:37:0e:cf:8b:84:86:84:df:20:0a: 88:93:00:2b:34:b5:0a:70:4a:ab:3b:02:66:c7:c3:e8:47:02: 89:2b:c8:75:73:76:ca:d6:9f:d7:f6:77:30:d8:fd:e5:7b:b7: 30:b7:41:17:d7:6a:ad:75:c3:3a:89:1e:8f:db:0f:72:48:69: 2a:da:90:ed:2d:d2:9a:63:e5:8b:0f:02:40:10:dc:3e:8f:1a: 40:90:93:aa:ab:08:c5:03:6f:f0:8a:08:78:7b:e4:30:1e:6f: 7f:5b:a0:e5:51:b5:9e:fb:fd:5b:16:34:de:48:e2:ef:85:63: 79:78:ae:75:bd:f4:97:cd:ee:b8:34:dc:d9:46:4d:19:1c:bc: bc:9b:59:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkI4NjExMC8GA1UEBRMoRkREOTFERDMwRTlCMUZFQTNCQjdFMTJBRUY3NjIxNjYy ODEyOUIyMzAeFw0yNDA2MDEwOTIyMDBaFw0yNDA2MDgwOTIyMDBaMBgxFjAUBgNV BAMTDTY2NWFlODM4LTYwOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRPq5w/O9mRahta5XqfAqoMnY5ai7AqU9y7Kevx+rLMYyXtGPJm5f4WNWF+Vqc o8Xdll4T1PRso6KYrgz2bGVmPWyK+zAvIm5mzaK88dSGJ0Di7q4YsRQShXVn8x4u EsOZvjk2SoLgVJTj8cRD9KhEvzt7wEdftx/HkTjTQpqKej+Fc61pgkSeG9G97U1L B87INCWETybmQSp3IJnhda4m1ipvJLtK5uYXI/eOxLJeGxxsTi4lyUp+UbfWCybQ ymlb4n8ZZXEVjzxNmrl0kcEn3ZvJHn3hLNVOnTQNPooKniTJN2ognnpvP46kABCO 9sOjBk3m+LTjWqqjPI3B4qVjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR3Y+v4PE LF8C/UriDvFAwIzXzYAwHwYDVR0jBBgwFoAU/dkd0w6bH+o7t+Eq73YhZigSmyMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQjg2Lzg2RTk3N0NBQTg3 RDExRUU5RkE1NUE2REM0RjlBRTAyL19ka2QwdzZiSC1vN3QtRXE3M1loWmlnU215 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2RrZDB3NmJILW83dC1FcTczWWhaaWdTbXlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky Qjg2Lzg2RTk3N0NBQTg3RDExRUU5RkE1NUE2REM0RjlBRTAyL19ka2QwdzZiSC1v N3QtRXE3M1loWmlnU215TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5rX9ziwnkibtHYo8eorARNsZ9w4AImSeXFfMo3JKLB43t0IE5+tyEh ohXfbTueWzc3YxwMULOxVSi7Z3hbWPa+EwLIeb20w5JIYQid1pVDik1UsiOJn+Hn PMJGQlBHjNZhMCFaUUe9T5MYU3cccveib5roNw7Pi4SGhN8gCoiTACs0tQpwSqs7 AmbHw+hHAokryHVzdsrWn9f2dzDY/eV7tzC3QRfXaq11wzqJHo/bD3JIaSrakO0t 0ppj5YsPAkAQ3D6PGkCQk6qrCMUDb/CKCHh75DAeb39boOVRtZ77/VsWNN5I4u+F Y3l4rnW99JfN7rg03NlGTRkcvLybWXQ= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:29 2024 by rpki-client on console-fra.rpki-client.org