$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft File: dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json) Hash identifier: cnr7QFUYPOu3kieOxiIc9xT8iXsh84OJGyioCyYhAug= Subject key identifier: DB:01:9B:E5:E5:37:B1:DE:6A:95:F7:44:24:0D:92:F9:2C:06:9D:00 Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB Certificate issuer: /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft Manifest number: 04BA Signing time: Sun 19 May 2024 01:28:29 +0000 Manifest this update: Sun 19 May 2024 01:28:28 +0000 Manifest next update: Sun 26 May 2024 01:28:28 +0000 Files and hashes: 1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: u/zmWacgXkGMw7K+/V3JADAy303neyfs8Cu2q5oovGg=) 2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: DFkTRRYQ+YJ5PsVkYuizyehKfvUu9N3Ir45U5Fot5PM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Validity Not Before: May 19 01:28:28 2024 GMT Not After : May 26 01:28:28 2024 GMT Subject: CN=664955bc-32d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:b4:84:25:6d:b2:f8:a3:84:b3:86:8e:81: d6:03:d4:44:2c:8a:eb:ec:e3:56:c8:7c:05:97:8e: b7:78:5d:0f:96:d9:82:33:52:f8:b5:33:4c:5c:1b: 5a:59:89:8f:8d:4d:14:87:c8:be:ef:58:6d:ec:eb: 27:49:f9:b1:1f:f4:91:ad:65:30:42:8f:55:13:7d: 9f:3e:02:df:87:e0:71:48:42:9e:fa:34:a5:89:6d: 6e:a5:4d:09:1b:58:41:a6:b6:8d:17:86:68:75:84: 38:37:01:ce:6c:92:6d:e7:19:e8:f5:87:cc:ae:6d: 90:85:74:68:1f:fc:69:fe:92:93:04:ce:46:f0:a7: 1e:60:7f:c1:5e:66:f8:38:e2:36:94:8a:1d:ba:67: b1:c3:14:7f:11:b3:fc:60:8d:46:95:c4:f5:53:10: ca:70:e0:43:b7:81:94:4f:bd:bb:52:10:fa:f3:ac: c8:9a:cc:42:f1:3a:7d:db:7f:93:2b:d9:42:dd:96: ef:86:13:4d:66:ff:19:4a:d2:d7:e9:15:f3:75:6a: c7:05:60:87:aa:74:1d:e1:d1:68:67:b6:64:f3:07: ee:a2:bf:c6:7b:2e:56:c3:11:71:1a:03:b9:1b:e4: c5:a3:21:df:86:7d:9a:d7:33:c8:27:27:86:34:44: df:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:01:9B:E5:E5:37:B1:DE:6A:95:F7:44:24:0D:92:F9:2C:06:9D:00 X509v3 Authority Key Identifier: keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:6b:23:43:bf:25:e9:b1:95:41:8b:b1:71:15:7d:9b:ad:2e: dc:51:5e:68:f1:8d:ca:4e:08:33:e2:a9:be:d9:16:95:b7:8f: 69:55:c4:98:05:44:50:ca:ce:7e:46:75:fe:a6:92:66:b5:29: 90:ea:79:8e:ce:27:36:16:45:2e:50:24:32:44:c1:7a:e9:60: 67:b3:25:d7:84:ba:10:d6:8a:a8:b1:b7:ff:03:8f:20:76:db: 96:30:8d:75:a6:77:4d:e0:9a:e4:50:29:05:89:d7:97:8a:aa: 98:b7:e6:7c:e1:b7:ba:05:c1:42:ea:aa:83:6c:8d:c9:34:c1: 03:6f:d0:81:d7:dc:f0:d2:ce:fd:d5:1b:3e:1d:9a:38:0a:bc: 6a:e0:93:66:7a:b9:bc:8c:cc:ba:b3:c3:e9:d6:23:67:10:49: 49:fd:d2:a0:52:18:0e:b0:97:23:11:e3:b5:7b:92:63:ed:7d: 52:fa:97:c5:7e:88:4f:3c:f9:e7:33:69:47:e8:05:ef:06:1f: 3f:89:b8:c8:17:bb:78:80:41:79:66:14:a3:0e:06:12:dd:b4: 13:22:d7:70:a2:73:48:7b:33:a9:51:48:59:fa:a9:10:d9:5b: 4a:ae:6c:21:26:0a:e7:62:66:b6:d3:54:7f:ce:05:54:53:bf: b4:d5:2a:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDREQzExMTAvBgNVBAUTKDc2REY3RjkxMTY5QTNGMzgwQzBBNkJDRDM4RTkxODZE RUZGMzFCQUIwHhcNMjQwNTE5MDEyODI4WhcNMjQwNTI2MDEyODI4WjAYMRYwFAYD VQQDEw02NjQ5NTViYy0zMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3m0hCVtsvijhLOGjoHWA9RELIrr7ONWyHwFl463eF0PltmCM1L4tTNMXBta WYmPjU0Uh8i+71ht7OsnSfmxH/SRrWUwQo9VE32fPgLfh+BxSEKe+jSliW1upU0J G1hBpraNF4ZodYQ4NwHObJJt5xno9YfMrm2QhXRoH/xp/pKTBM5G8KceYH/BXmb4 OOI2lIodumexwxR/EbP8YI1GlcT1UxDKcOBDt4GUT727UhD686zImsxC8Tp923+T K9lC3ZbvhhNNZv8ZStLX6RXzdWrHBWCHqnQd4dFoZ7Zk8wfuor/Gey5WwxFxGgO5 G+TFoyHfhn2a1zPIJyeGNETf6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsBm+Xl N7HeapX3RCQNkvksBp0AMB8GA1UdIwQYMBaAFHbff5EWmj84DAprzTjpGG3v8xur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENERDMS85OTZGOThFQURC RDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6Z01DbXZOT09rWWJlX3pH NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0OV9rUmFhUHpnTUNtdk5PT2tZYmVfekc2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NERDMS85OTZGOThFQURCRDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6 Z01DbXZOT09rWWJlX3pHNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFayNDvyXpsZVBi7FxFX2brS7cUV5o8Y3KTggz4qm+2RaVt49pVcSY BURQys5+RnX+ppJmtSmQ6nmOzic2FkUuUCQyRMF66WBnsyXXhLoQ1oqosbf/A48g dtuWMI11pndN4JrkUCkFideXiqqYt+Z84be6BcFC6qqDbI3JNMEDb9CB19zw0s79 1Rs+HZo4Crxq4JNmerm8jMy6s8Pp1iNnEElJ/dKgUhgOsJcjEeO1e5Jj7X1S+pfF fohPPPnnM2lH6AXvBh8/ibjIF7t4gEF5ZhSjDgYS3bQTItdwonNIezOpUUhZ+qkQ 2VtKrmwhJgrnYma201R/zgVUU7+01SoK -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org