$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: y46/f0/hCD5Pih80nIgirh3C8i9U4J7DqPnDzImzMEQ= Subject key identifier: C1:4E:CD:2E:AD:89:B8:BC:D6:B1:EA:36:83:95:BA:E6:0A:74:E8:19 Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 03A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 0397 Signing time: Fri 31 May 2024 03:17:26 +0000 Manifest this update: Fri 31 May 2024 03:17:25 +0000 Manifest next update: Fri 07 Jun 2024 03:17:25 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: wmKkCrMs+t2tnqOPyNQyk/f1MO4tWV3LbFIBXdhTdtE=) 2: A0183FCCEC1D11EEBB97077FC4F9AE02.roa (hash: a41XSp6h8aQ8smaZiApjLygIFut0x4N/FyKFRn2y54A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 929 (0x3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: May 31 03:17:25 2024 GMT Not After : Jun 7 03:17:25 2024 GMT Subject: CN=66594146-3420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:68:75:e7:63:f7:9c:39:94:9d:e4:a2:09: 3c:bd:2c:8f:27:c4:31:c6:62:07:c9:98:5b:37:5f: 56:90:1b:e6:b1:58:c0:65:28:0e:b9:70:05:cb:9b: 06:2a:7c:34:06:b1:c0:a4:10:72:a1:b3:51:8a:b1: e1:9e:0c:f2:6d:eb:c5:55:2f:0b:7b:ba:45:f7:0d: 69:45:d6:ab:de:67:98:36:84:b9:42:9f:96:6c:21: 74:d2:c1:e9:d2:7e:e0:0a:60:91:39:ed:8d:e7:2c: 89:67:56:b6:b0:27:85:44:b2:b1:09:22:a4:a1:10: 38:5d:ad:85:56:43:5d:12:06:08:22:c2:6e:30:d9: 7d:d9:ac:48:47:49:f5:62:65:52:d9:96:71:cf:e1: d8:f3:43:51:e0:11:56:2c:da:db:7d:9a:61:ae:d6: 01:ce:48:68:bd:6b:b6:5b:c3:0d:f7:7d:d8:dd:35: 37:e7:c6:cf:dc:c1:03:12:ca:03:ec:d1:d0:05:c7: 09:a3:5d:44:3f:0f:58:a8:bf:3a:08:71:61:30:d4: 73:7c:cd:bf:ce:43:87:32:92:d6:69:f6:c8:2b:26: fc:50:73:32:67:bb:09:c7:fd:70:01:73:3a:61:a6: 86:53:16:ba:18:cc:24:16:c0:69:1e:de:8c:f3:b9: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4E:CD:2E:AD:89:B8:BC:D6:B1:EA:36:83:95:BA:E6:0A:74:E8:19 X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:fa:e5:f9:4c:34:f3:94:ab:61:8a:40:db:f1:ed:a6:ee:32: 28:fc:d1:86:02:9c:2c:ca:b0:16:b7:d1:5b:33:f2:75:3e:4b: 38:ba:10:da:36:e1:e2:2b:7f:cb:d0:f7:9e:b0:f0:4f:10:a8: cc:b7:1f:1f:00:c7:80:5e:b7:f4:49:a1:b5:09:07:72:29:98: 19:26:11:a4:33:f9:1e:ee:01:a4:64:cb:d8:ed:f9:86:c7:7d: 67:03:81:ee:e3:84:4b:d2:e4:4a:21:9d:15:90:a4:fb:bb:e2: 3b:60:95:14:9e:00:87:08:49:18:cc:d4:67:5f:8e:c7:e0:77: d6:ae:c7:b3:91:70:cb:e4:a9:09:97:3d:38:45:64:95:11:55: 81:7d:ca:03:25:e7:0a:57:37:6e:d7:f6:99:6d:08:45:f3:c7: 21:4f:97:55:f3:05:41:e8:ca:61:64:1d:77:e0:e7:a3:ae:4e: 67:96:3e:2a:89:77:d8:07:31:d3:ee:62:97:9b:c3:f2:ef:8b: 7d:5c:8e:fb:20:1a:62:27:47:94:98:5e:ea:0b:8a:d1:fd:bf: f7:6d:a9:1f:9d:6b:d4:2a:67:e9:dd:0a:46:35:2c:64:3f:14: fd:22:29:7f:4a:cc:7d:ab:f5:65:09:31:24:63:ff:c4:ef:f5: 9e:c7:32:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjQwNTMxMDMxNzI1WhcNMjQwNjA3MDMxNzI1WjAYMRYwFAYD VQQDEw02NjU5NDE0Ni0zNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuudodedj95w5lJ3kogk8vSyPJ8QxxmIHyZhbN19WkBvmsVjAZSgOuXAFy5sG Knw0BrHApBByobNRirHhngzybevFVS8Le7pF9w1pRdar3meYNoS5Qp+WbCF00sHp 0n7gCmCROe2N5yyJZ1a2sCeFRLKxCSKkoRA4Xa2FVkNdEgYIIsJuMNl92axIR0n1 YmVS2ZZxz+HY80NR4BFWLNrbfZphrtYBzkhovWu2W8MN933Y3TU358bP3MEDEsoD 7NHQBccJo11EPw9YqL86CHFhMNRzfM2/zkOHMpLWafbIKyb8UHMyZ7sJx/1wAXM6 YaaGUxa6GMwkFsBpHt6M87lqLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFOzS6t ibi81rHqNoOVuuYKdOgZMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl+uX5TDTzlKthikDb8e2m7jIo/NGGApwsyrAWt9FbM/J1Pks4uhDa NuHiK3/L0PeesPBPEKjMtx8fAMeAXrf0SaG1CQdyKZgZJhGkM/ke7gGkZMvY7fmG x31nA4Hu44RL0uRKIZ0VkKT7u+I7YJUUngCHCEkYzNRnX47H4HfWrsezkXDL5KkJ lz04RWSVEVWBfcoDJecKVzdu1/aZbQhF88chT5dV8wVB6MphZB134Oejrk5nlj4q iXfYBzHT7mKXm8Py74t9XI77IBpiJ0eUmF7qC4rR/b/3bakfnWvUKmfp3QpGNSxk PxT9Iil/Ssx9q/VlCTEkY//E7/WexzKh -----END CERTIFICATE-----Generated at Fri May 31 04:54:01 2024 by rpki-client on console-fra.rpki-client.org