$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: oaXxQ8hJ5ZQh9OLJY/67vEDH9KwyoWF+UuigztaYhN0= Subject key identifier: 48:7E:34:70:4F:76:CD:D5:18:55:A4:1B:6F:2D:9C:4B:6F:BA:6B:2A Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 19A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 199E Signing time: Sat 18 May 2024 16:48:13 +0000 Manifest this update: Sat 18 May 2024 16:48:13 +0000 Manifest next update: Sat 25 May 2024 16:48:13 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: Uk7YA8LpTuZ4CH2WR7qE6LqGTARwg0rtJoGQGO8fav0=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: RisbfuJJzaRwnSTXbblXr9BK361KaCscEIHy8SrD2Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6568 (0x19a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: May 18 16:48:13 2024 GMT Not After : May 25 16:48:13 2024 GMT Subject: CN=6648dbcd-7704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:37:6d:29:a3:54:7b:03:7a:ee:31:08:3a: b3:53:c4:f6:18:b0:d0:84:b3:39:32:cd:02:6b:d3: da:36:83:45:17:1d:b8:6a:73:0c:fd:94:5e:e1:69: 65:00:dd:aa:74:f1:14:62:c7:9a:a9:bd:25:dd:02: 88:6d:34:99:d2:71:35:b5:d6:76:b2:61:48:3c:d2: e2:96:4e:c4:f4:c6:ec:df:c8:e6:f6:a2:b1:60:0a: 3d:a3:46:9f:13:03:cf:69:c3:5a:5e:62:1b:3b:12: 8f:43:3e:82:f3:38:8a:82:6e:04:a4:e2:04:e2:40: d7:70:02:a3:9b:12:51:61:8d:e8:55:3b:82:89:1e: 93:15:50:ad:7c:cd:e8:a6:db:f5:e1:06:8a:17:56: cd:6d:ec:9e:31:0e:09:5b:2e:fb:52:46:be:1b:c7: c8:ea:5d:f4:f5:62:10:a1:22:fe:a9:6f:0c:3a:22: 7f:3f:97:15:ac:3d:d5:b4:f5:cd:c5:56:35:ab:c9: 6f:42:26:ca:9c:05:a1:a1:bb:b4:81:e9:37:33:21: a0:67:24:8b:3c:6c:2a:51:2d:8b:09:a7:cf:e8:8a: ef:e7:a9:7e:38:e6:5c:68:a2:e3:81:25:53:66:9f: 27:4b:37:ca:0d:ea:c1:9c:b5:c6:07:b4:71:01:9b: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7E:34:70:4F:76:CD:D5:18:55:A4:1B:6F:2D:9C:4B:6F:BA:6B:2A X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:22:0b:0b:21:3a:8a:71:ec:3c:d3:0c:d4:81:2f:c3:33:73: 79:57:98:7e:71:5e:89:c5:2c:07:8c:e9:31:a5:ed:42:99:ec: 48:18:e1:96:8c:a7:1c:80:34:af:0c:af:a9:1f:e5:4e:9a:af: d6:c3:1d:99:99:54:8b:3b:ec:35:dc:98:84:34:3b:d9:9e:e7: c4:9e:4b:f6:1f:5e:48:8a:98:ae:40:7d:77:37:98:03:a8:54: 7b:8f:a6:46:8a:2d:19:43:81:89:0d:1b:63:d1:80:92:5c:3c: 32:98:c8:41:6a:c5:30:0b:10:38:a8:64:12:5e:61:31:42:d6: 89:e2:96:c7:5a:98:da:5e:0d:cc:fb:2d:bc:4e:f5:5a:85:ed: 26:82:2f:9b:b1:11:06:4a:68:f6:21:55:62:8a:89:32:ef:07: a6:48:ad:47:3b:85:67:62:b0:a2:f4:2c:99:96:f1:49:5c:db: d5:5d:98:29:85:e6:0a:7b:99:92:72:cc:60:60:0b:88:55:4b: b9:67:8e:0d:59:29:6a:38:47:a3:73:03:6a:b2:ed:86:a2:c0: 8b:ea:a7:77:82:6b:48:af:9f:68:48:73:14:06:b0:71:ed:35: 4e:59:03:9c:cc:75:ea:e2:ab:af:d7:00:06:36:44:2c:88:91: 53:e0:26:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjQwNTE4MTY0ODEzWhcNMjQwNTI1MTY0ODEzWjAYMRYwFAYD VQQDEw02NjQ4ZGJjZC03NzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgE3bSmjVHsDeu4xCDqzU8T2GLDQhLM5Ms0Ca9PaNoNFFx24anMM/ZRe4Wll AN2qdPEUYseaqb0l3QKIbTSZ0nE1tdZ2smFIPNLilk7E9Mbs38jm9qKxYAo9o0af EwPPacNaXmIbOxKPQz6C8ziKgm4EpOIE4kDXcAKjmxJRYY3oVTuCiR6TFVCtfM3o ptv14QaKF1bNbeyeMQ4JWy77Uka+G8fI6l309WIQoSL+qW8MOiJ/P5cVrD3VtPXN xVY1q8lvQibKnAWhobu0gek3MyGgZySLPGwqUS2LCafP6Irv56l+OOZcaKLjgSVT Zp8nSzfKDerBnLXGB7RxAZuGZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEh+NHBP ds3VGFWkG28tnEtvumsqMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXIgsLITqKcew80wzUgS/DM3N5V5h+cV6JxSwHjOkxpe1CmexIGOGW jKccgDSvDK+pH+VOmq/Wwx2ZmVSLO+w13JiENDvZnufEnkv2H15IipiuQH13N5gD qFR7j6ZGii0ZQ4GJDRtj0YCSXDwymMhBasUwCxA4qGQSXmExQtaJ4pbHWpjaXg3M +y28TvVahe0mgi+bsREGSmj2IVViioky7wemSK1HO4VnYrCi9CyZlvFJXNvVXZgp heYKe5mScsxgYAuIVUu5Z44NWSlqOEejcwNqsu2GosCL6qd3gmtIr59oSHMUBrBx 7TVOWQOczHXq4quv1wAGNkQsiJFT4CaP -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org