$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json) Hash identifier: ta3OEi6zCgCh9ptuRpryDZBypmFaJ8p+qEQXvrUPioI= Subject key identifier: 33:8D:18:A8:46:6F:57:68:1D:3D:39:3B:45:92:3E:D6:2A:05:BA:4F Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft Manifest number: 0325 Signing time: Sun 19 May 2024 03:03:53 +0000 Manifest this update: Sun 19 May 2024 03:03:52 +0000 Manifest next update: Sun 26 May 2024 03:03:52 +0000 Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: UVM0SJ5fJ2/ro12Dr4LCEbSF1x5dKd9IlJ0xfwOTyrU=) 2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: m8FloIsH28VEFYR4VSnaFgU3R518CnbZZxE+Tn5D20s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Validity Not Before: May 19 03:03:52 2024 GMT Not After : May 26 03:03:52 2024 GMT Subject: CN=66496c19-e8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:99:a2:cd:88:00:b1:26:cc:22:2c:04:64: 69:a4:e2:82:04:a3:60:e5:96:1e:dd:f8:b8:71:60: d3:87:34:8c:3c:be:65:0b:ca:35:26:be:59:a7:7d: 77:17:8d:c7:6d:53:13:b5:45:79:84:28:cb:1a:d2: 3b:d3:b3:37:32:61:88:87:a1:ef:5c:b2:90:5e:c6: 6f:22:38:5a:e7:c6:1f:82:f0:0a:c4:15:1d:40:b7: 60:71:87:de:6d:0d:dc:a1:31:34:f6:1d:d7:b0:55: 2d:55:cb:46:b7:c2:2c:45:73:ed:e8:7b:32:e3:30: f9:55:68:3e:db:a0:c7:b6:3e:3e:1e:fc:f7:98:c2: be:79:c6:25:de:b2:f5:d1:c2:50:ad:90:d1:84:e8: f4:48:1b:4a:41:a6:11:0f:d4:14:aa:1c:6c:7a:a7: 80:c3:56:09:7f:36:9c:e9:d7:36:55:36:ac:73:9a: c4:2e:d4:b8:f9:44:e1:78:78:74:d5:34:55:35:e2: 9d:18:97:f7:38:5f:4b:54:c5:54:8a:be:c0:a1:85: 77:ef:e3:b6:88:b7:67:f7:a3:01:13:7c:4f:d4:4b: 0f:0e:f5:ed:ed:1b:2d:bd:0c:e7:be:48:40:36:fa: ae:20:5b:4b:27:b3:d1:9f:63:92:3c:8f:70:b5:8b: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:18:A8:46:6F:57:68:1D:3D:39:3B:45:92:3E:D6:2A:05:BA:4F X509v3 Authority Key Identifier: keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:91:cc:23:10:f6:a6:78:e0:b4:be:b3:7d:fd:16:bf:ba:68: b8:47:35:10:91:a5:93:77:29:51:74:7e:cc:1f:2d:97:67:42: e1:c5:c5:73:a5:4c:30:aa:c7:5d:7a:aa:e5:c8:99:32:e6:87: dd:37:45:c7:e3:24:27:89:a3:0a:28:6f:4d:21:26:5f:c0:39: 08:88:a2:f8:e2:3d:bc:28:df:df:c8:61:c0:cc:4a:f9:fa:51: e4:e9:ed:91:a2:94:56:2d:92:18:a7:47:d1:5a:64:61:97:f6: 5f:46:5c:f5:8f:4f:e0:62:de:51:ea:e7:43:26:6a:d3:a6:18: ed:52:1e:86:99:88:05:0f:2f:04:b7:f9:03:5f:4a:23:b9:16: d7:32:31:a6:e6:f2:27:2f:79:f0:d0:26:3b:19:42:59:48:93: 25:51:d5:d0:5f:78:1c:9b:0a:dd:1d:c5:1c:14:70:d5:9a:8e: 00:e0:3b:5f:1c:0d:1e:89:ee:12:e0:75:69:17:1e:92:05:30: 75:7a:d7:6b:2a:84:29:61:8b:20:da:8e:4c:14:0e:72:cd:5f: e7:ac:0c:48:6d:f2:0f:2e:cb:2c:f3:af:90:a7:99:f9:96:63: e7:4e:0a:4c:80:45:26:da:bf:b3:51:19:5e:34:9d:6a:13:d9: 7b:ea:b2:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx QjU2N0I1RTIwHhcNMjQwNTE5MDMwMzUyWhcNMjQwNTI2MDMwMzUyWjAYMRYwFAYD VQQDEw02NjQ5NmMxOS1lOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV6Zos2IALEmzCIsBGRppOKCBKNg5ZYe3fi4cWDThzSMPL5lC8o1Jr5Zp313 F43HbVMTtUV5hCjLGtI707M3MmGIh6HvXLKQXsZvIjha58YfgvAKxBUdQLdgcYfe bQ3coTE09h3XsFUtVctGt8IsRXPt6Hsy4zD5VWg+26DHtj4+Hvz3mMK+ecYl3rL1 0cJQrZDRhOj0SBtKQaYRD9QUqhxseqeAw1YJfzac6dc2VTasc5rELtS4+UTheHh0 1TRVNeKdGJf3OF9LVMVUir7AoYV37+O2iLdn96MBE3xP1EsPDvXt7RstvQznvkhA NvquIFtLJ7PRn2OSPI9wtYsehwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDONGKhG b1doHT05O0WSPtYqBbpPMB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRkcwjEPameOC0vrN9/Ra/umi4RzUQkaWTdylRdH7MHy2XZ0LhxcVz pUwwqsddeqrlyJky5ofdN0XH4yQniaMKKG9NISZfwDkIiKL44j28KN/fyGHAzEr5 +lHk6e2RopRWLZIYp0fRWmRhl/ZfRlz1j0/gYt5R6udDJmrTphjtUh6GmYgFDy8E t/kDX0ojuRbXMjGm5vInL3nw0CY7GUJZSJMlUdXQX3gcmwrdHcUcFHDVmo4A4Dtf HA0eie4S4HVpFx6SBTB1etdrKoQpYYsg2o5MFA5yzV/nrAxIbfIPLsss86+Qp5n5 lmPnTgpMgEUm2r+zURleNJ1qE9l76rL0 -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org