$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft File: DkTRm3yVibI0LQUesJRJN0je608.mft (raw, json) Hash identifier: /mHopnwti1hsSTBN22eNBAwxITezQjWe6miTht9erCw= Subject key identifier: B8:B1:57:47:73:E1:61:57:79:B4:F1:67:AA:8F:C7:8D:F3:F9:BE:A4 Authority key identifier: 0E:44:D1:9B:7C:95:89:B2:34:2D:05:1E:B0:94:49:37:48:DE:EB:4F Certificate issuer: /CN=A91C6504/serialNumber=0E44D19B7C9589B2342D051EB094493748DEEB4F Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkTRm3yVibI0LQUesJRJN0je608.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft Manifest number: CE Signing time: Fri 31 May 2024 07:03:27 +0000 Manifest this update: Fri 31 May 2024 07:03:26 +0000 Manifest next update: Fri 07 Jun 2024 07:03:26 +0000 Files and hashes: 1: DkTRm3yVibI0LQUesJRJN0je608.crl (hash: b3HNUHOfGID1chjSp/XLyFPY+nCLTShHAXMb+U4gNQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.crl rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkTRm3yVibI0LQUesJRJN0je608.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6504/serialNumber=0E44D19B7C9589B2342D051EB094493748DEEB4F Validity Not Before: May 31 07:03:26 2024 GMT Not After : Jun 7 07:03:26 2024 GMT Subject: CN=6659763e-2c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1d:9a:2d:4c:50:48:fb:c5:aa:05:ea:88:e7: 7d:3f:ae:75:8a:e4:4d:65:28:a1:cf:92:10:f2:7a: a6:0a:ad:20:92:6a:42:c2:dc:0a:24:d2:aa:32:ae: 96:c3:f1:7c:0b:ee:17:47:4b:d4:fa:94:2b:00:76: 16:a3:0a:6c:8b:31:72:05:f1:02:6c:ea:b3:97:70: 7b:8e:50:7a:42:23:fc:66:4c:1a:75:4a:7d:63:d9: 1c:29:2d:19:97:53:e1:77:12:e7:ef:7d:e6:1e:9d: 40:cb:b7:ed:ae:ff:5e:43:7f:f1:ed:4d:35:6a:c4: 4b:6b:08:d4:85:4a:c2:e9:cd:56:37:a7:5a:59:f8: 74:db:87:d0:25:8c:26:55:56:db:87:b4:84:9a:0b: f5:e7:86:20:ce:38:75:9f:32:d0:63:37:bd:9d:9b: 6f:ec:1c:f1:be:48:d1:7c:0b:8d:14:9e:d3:e5:5c: 53:50:08:f5:6a:b4:cf:6b:dd:2f:d9:2c:f7:fb:32: dd:59:e7:18:83:40:0e:a9:1d:12:ac:90:ef:7d:0c: 72:d0:0b:b2:61:b1:d7:ec:4b:91:8f:6c:a5:62:a0: 46:e2:98:88:81:1c:b1:1e:e6:a0:c3:27:04:ab:98: dd:4f:1c:fa:77:fc:08:20:ac:cb:06:28:ae:f2:cf: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:57:47:73:E1:61:57:79:B4:F1:67:AA:8F:C7:8D:F3:F9:BE:A4 X509v3 Authority Key Identifier: keyid:0E:44:D1:9B:7C:95:89:B2:34:2D:05:1E:B0:94:49:37:48:DE:EB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkTRm3yVibI0LQUesJRJN0je608.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:34:94:c4:4b:61:f1:b6:50:14:83:85:d2:9c:a0:fa:9d:aa: 6b:46:b7:ef:5e:2a:89:aa:57:5e:69:d8:8d:54:46:4a:bf:dc: f8:5f:d8:17:5c:d1:5b:dc:00:fb:3f:93:cb:98:7b:29:3a:36: cb:09:af:2c:30:5e:70:08:77:c5:2a:c6:c3:cd:32:f9:cc:c6: 59:c7:34:32:e5:d1:72:9d:ec:56:55:e3:e8:ec:38:03:42:e5: e7:63:ac:d3:37:f4:e6:73:f4:fc:20:1f:10:4d:bb:ae:bc:74: a8:97:ec:9b:b5:be:22:4b:4a:9c:c1:77:9e:21:f2:48:c0:6c: 1f:59:b1:fe:2d:dd:f7:81:f4:1b:b9:49:33:ed:31:1a:84:f2: 92:de:1e:02:6a:f8:5b:83:c9:d9:69:ee:ae:a2:93:11:18:7f: 6d:c5:64:34:2b:a7:70:9b:7c:e3:4a:36:e8:d2:94:4a:84:06: 94:fa:db:07:5f:67:1f:a7:84:4c:23:50:98:5e:e2:10:4a:ea: 8e:fb:61:5a:cc:7a:65:31:91:95:f8:83:45:49:d5:e3:8b:6e: 05:d2:b3:fc:52:39:d3:d1:23:52:e9:15:15:f9:1c:b6:74:b2: 43:eb:ad:c4:b1:ad:d6:9e:f6:9a:86:8f:c4:63:75:84:33:56: 30:69:48:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1MDQxMTAvBgNVBAUTKDBFNDREMTlCN0M5NTg5QjIzNDJEMDUxRUIwOTQ0OTM3 NDhERUVCNEYwHhcNMjQwNTMxMDcwMzI2WhcNMjQwNjA3MDcwMzI2WjAYMRYwFAYD VQQDEw02NjU5NzYzZS0yYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6x2aLUxQSPvFqgXqiOd9P651iuRNZSihz5IQ8nqmCq0gkmpCwtwKJNKqMq6W w/F8C+4XR0vU+pQrAHYWowpsizFyBfECbOqzl3B7jlB6QiP8ZkwadUp9Y9kcKS0Z l1PhdxLn733mHp1Ay7ftrv9eQ3/x7U01asRLawjUhUrC6c1WN6daWfh024fQJYwm VVbbh7SEmgv154Ygzjh1nzLQYze9nZtv7BzxvkjRfAuNFJ7T5VxTUAj1arTPa90v 2Sz3+zLdWecYg0AOqR0SrJDvfQxy0AuyYbHX7EuRj2ylYqBG4piIgRyxHuagwycE q5jdTxz6d/wIIKzLBiiu8s8n1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLixV0dz 4WFXebTxZ6qPx43z+b6kMB8GA1UdIwQYMBaAFA5E0Zt8lYmyNC0FHrCUSTdI3utP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjUwNC85MUUwNkU4NEVG QTcxMUVEOUIyNzM1NkVDNEY5QUUwMi9Ea1RSbTN5VmliSTBMUVVlc0pSSk4wamU2 MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RrVFJtM3lWaWJJMExRVWVzSlJKTjBqZTYwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjUwNC85MUUwNkU4NEVGQTcxMUVEOUIyNzM1NkVDNEY5QUUwMi9Ea1RSbTN5Vmli STBMUVVlc0pSSk4wamU2MDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbNJTES2HxtlAUg4XSnKD6naprRrfvXiqJqldeadiNVEZKv9z4X9gX XNFb3AD7P5PLmHspOjbLCa8sMF5wCHfFKsbDzTL5zMZZxzQy5dFynexWVePo7DgD QuXnY6zTN/Tmc/T8IB8QTbuuvHSol+ybtb4iS0qcwXeeIfJIwGwfWbH+Ld33gfQb uUkz7TEahPKS3h4Cavhbg8nZae6uopMRGH9txWQ0K6dwm3zjSjbo0pRKhAaU+tsH X2cfp4RMI1CYXuIQSuqO+2FazHplMZGV+INFSdXji24F0rP8UjnT0SNS6RUV+Ry2 dLJD663Esa3Wnvaaho/EY3WEM1YwaUjL -----END CERTIFICATE-----Generated at Fri May 31 10:02:42 2024 by rpki-client on console-ams.rpki-client.org