$ rpki-client -vvf rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft File: DNkEx-s5CtGlXbr0_FAFTAhUbis.mft (raw, json) Hash identifier: UbyENd6AKsUBoxqOqUY6Y9ErTgHFQrPcZYvPB9Rf6jY= Subject key identifier: 45:AA:71:C7:99:75:EE:81:C8:88:9C:E9:36:14:8D:F6:2D:AB:01:33 Authority key identifier: 0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B Certificate issuer: /CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft Manifest number: 34 Signing time: Fri 31 May 2024 09:16:49 +0000 Manifest this update: Fri 31 May 2024 09:16:49 +0000 Manifest next update: Fri 07 Jun 2024 09:16:49 +0000 Files and hashes: 1: DNkEx-s5CtGlXbr0_FAFTAhUbis.crl (hash: FzOZOJCv9zOVFItJljIoMSrDt3dx19MZ8VP3k3y91rY=) 2: D45022C8CEC211EE80F08B36C4F9AE02.roa (hash: xCA25wbkGD0fkIHcfCSDQazpiDazjD9RA7SrbORza4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A47B6/serialNumber=0CD904C7EB390AD1A55DBAF4FC50054C08546E2B Validity Not Before: May 31 09:16:49 2024 GMT Not After : Jun 7 09:16:49 2024 GMT Subject: CN=66599581-e771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:f7:61:92:0b:96:05:68:b8:54:a8:68:de: a3:09:32:21:97:2c:9f:d2:32:a9:29:97:5f:b8:ff: 36:94:60:a6:45:9f:31:92:4a:55:1f:91:8b:95:1d: 73:3a:48:da:b4:88:6f:d6:d2:05:ac:6e:6d:81:a6: 0e:51:54:fb:a3:af:fd:d7:8c:36:11:53:97:b3:07: 06:a2:87:ea:80:15:15:41:2b:f2:15:07:9f:62:70: 7e:fe:da:17:04:53:3d:ad:b3:b2:38:23:c6:7d:a1: de:af:cc:b2:5f:f0:af:ee:20:16:d9:bb:77:dd:0d: a4:9f:15:2a:64:84:f7:8d:f5:fe:92:8f:b1:d5:b9: 67:0f:a3:01:81:e4:46:e5:e4:39:4f:08:28:52:51: 1a:0a:3e:a2:05:40:11:b2:87:f0:d2:86:d1:df:cc: ed:80:71:df:c7:d2:89:cc:92:6b:94:ce:99:3e:5e: ae:76:1b:58:e4:e4:0f:47:d8:e7:7e:63:7e:f4:3e: 44:bf:7f:81:36:d1:65:38:96:3c:b7:d1:f0:6d:fc: 83:fb:15:6b:ea:ee:c6:4a:8a:73:c9:52:ef:59:e7: 8b:49:ec:de:d9:56:4d:db:1b:a7:93:c9:3f:29:b5: e6:03:66:9b:72:b9:c9:ca:ab:e2:02:44:c3:b3:0b: 75:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:71:C7:99:75:EE:81:C8:88:9C:E9:36:14:8D:F6:2D:AB:01:33 X509v3 Authority Key Identifier: keyid:0C:D9:04:C7:EB:39:0A:D1:A5:5D:BA:F4:FC:50:05:4C:08:54:6E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNkEx-s5CtGlXbr0_FAFTAhUbis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A47B6/905D7FEECEC111EE8CF01740C4F9AE02/DNkEx-s5CtGlXbr0_FAFTAhUbis.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d7:9a:c1:70:1e:7c:ce:2a:60:28:6c:79:48:3a:66:03:be: be:b9:3d:c8:76:19:28:c2:c1:57:cb:a2:55:be:b7:f6:4d:d1: 61:4d:5d:7d:25:d8:fc:c4:28:c1:ce:54:37:03:fa:03:00:83: 1b:33:72:77:39:33:38:6b:25:38:37:72:cf:45:ca:45:cd:8f: 9d:fb:ca:0b:58:c4:c5:ad:87:f2:66:77:b4:06:de:b4:32:ba: ad:ef:0d:21:06:87:c1:e9:01:db:39:27:0a:e8:3f:d7:b0:af: 86:21:35:f0:6c:5d:9d:7d:63:d7:18:08:f0:c3:22:d2:f6:09: 25:f3:08:67:6b:42:45:76:0b:ab:ad:81:14:21:5f:49:fc:99: 8c:61:70:ab:87:f4:94:74:fe:90:67:4c:fd:b1:13:81:20:c7: c1:48:ea:3b:0e:43:e4:2a:29:28:39:3b:8d:dd:83:c3:f3:80: 16:26:84:f4:44:d6:7c:60:43:0f:a1:76:0c:3f:84:a4:fa:60: 68:5a:55:20:0e:50:d4:56:69:8f:47:30:b1:53:1f:32:bc:dc: 94:bb:ac:bd:8c:bf:66:06:0e:fd:4f:49:16:61:a5:8b:92:c7: 8c:a0:16:28:66:ec:f1:a3:5d:bb:8e:23:eb:f1:0c:b6:55:18: 04:c8:e5:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDdCNjExMC8GA1UEBRMoMENEOTA0QzdFQjM5MEFEMUE1NURCQUY0RkM1MDA1NEMw ODU0NkUyQjAeFw0yNDA1MzEwOTE2NDlaFw0yNDA2MDcwOTE2NDlaMBgxFjAUBgNV BAMTDTY2NTk5NTgxLWU3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEefdhkguWBWi4VKho3qMJMiGXLJ/SMqkpl1+4/zaUYKZFnzGSSlUfkYuVHXM6 SNq0iG/W0gWsbm2Bpg5RVPujr/3XjDYRU5ezBwaih+qAFRVBK/IVB59icH7+2hcE Uz2ts7I4I8Z9od6vzLJf8K/uIBbZu3fdDaSfFSpkhPeN9f6Sj7HVuWcPowGB5Ebl 5DlPCChSURoKPqIFQBGyh/DShtHfzO2Acd/H0onMkmuUzpk+Xq52G1jk5A9H2Od+ Y370PkS/f4E20WU4ljy30fBt/IP7FWvq7sZKinPJUu9Z54tJ7N7ZVk3bG6eTyT8p teYDZptyucnKq+ICRMOzC3XvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURapxx5l1 7oHIiJzpNhSN9i2rATMwHwYDVR0jBBgwFoAUDNkEx+s5CtGlXbr0/FAFTAhUbisw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0N0I2LzkwNUQ3RkVFQ0VD MTExRUU4Q0YwMTc0MEM0RjlBRTAyL0ROa0V4LXM1Q3RHbFhicjBfRkFGVEFoVWJp cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRE5rRXgtczVDdEdsWGJyMF9GQUZUQWhVYmlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 N0I2LzkwNUQ3RkVFQ0VDMTExRUU4Q0YwMTc0MEM0RjlBRTAyL0ROa0V4LXM1Q3RH bFhicjBfRkFGVEFoVWJpcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDXmsFwHnzOKmAobHlIOmYDvr65Pch2GSjCwVfLolW+t/ZN0WFNXX0l 2PzEKMHOVDcD+gMAgxszcnc5MzhrJTg3cs9FykXNj537ygtYxMWth/Jmd7QG3rQy uq3vDSEGh8HpAds5JwroP9ewr4YhNfBsXZ19Y9cYCPDDItL2CSXzCGdrQkV2C6ut gRQhX0n8mYxhcKuH9JR0/pBnTP2xE4Egx8FI6jsOQ+QqKSg5O43dg8PzgBYmhPRE 1nxgQw+hdgw/hKT6YGhaVSAOUNRWaY9HMLFTHzK83JS7rL2Mv2YGDv1PSRZhpYuS x4ygFihm7PGjXbuOI+vxDLZVGATI5SU= -----END CERTIFICATE-----Generated at Fri May 31 10:02:39 2024 by rpki-client on console-ams.rpki-client.org