$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: zcn4vhSb8MNmtQSSnD21EiShk49YaNjvhp4U5bhsqSM= Subject key identifier: 35:8D:D6:EC:F0:56:9B:57:09:A3:6C:71:1A:43:94:83:A8:2E:10:CF Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 75 Signing time: Sun 19 May 2024 07:21:13 +0000 Manifest this update: Sun 19 May 2024 07:21:13 +0000 Manifest next update: Sun 26 May 2024 07:21:13 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: vlVT1rtUQ5uTa530hV23AZELVkp4h8CGXXw2i+nhSOY=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: hajaHc68BxQZ1WB6gbKAfNgHHMhtrFETJ7xWbOhfCDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: May 19 07:21:13 2024 GMT Not After : May 26 07:21:13 2024 GMT Subject: CN=6649a869-5605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:2a:59:42:69:ca:3a:72:87:b0:7c:63:67: bb:35:3b:68:bf:2d:c5:cb:0a:95:26:ae:3d:14:dc: 64:f2:45:65:3d:24:c8:03:d0:51:dd:1a:9f:4f:b2: 25:4a:58:13:e4:dc:62:dc:0e:b2:0d:c5:5f:7a:7b: b0:96:df:2a:82:fe:f3:b6:40:ea:60:ab:99:ff:e4: 08:92:15:f3:df:2f:e7:2b:bd:e0:d6:c5:ee:08:be: eb:01:ce:ec:75:df:c7:e3:ff:65:75:29:e9:f1:d5: 3b:68:d7:59:42:83:50:e0:c5:69:78:13:40:16:19: 6a:3b:6d:e0:6a:49:bb:b9:35:78:9d:00:41:2f:89: ca:74:1a:be:7b:b8:11:8c:64:79:d5:8e:49:3a:fa: 6d:97:09:22:3d:0f:28:80:92:f7:85:de:d2:d0:e4: 0c:ac:06:ed:7f:f2:6a:eb:df:4d:e1:b1:25:26:a8: f7:67:1a:16:05:66:f9:76:34:b6:2e:d1:d7:ec:ff: 9c:99:29:dd:f6:a8:42:52:77:02:e6:d7:d2:12:86: c2:3c:46:8d:60:97:f8:b2:62:fa:69:3a:2d:91:90: 21:b7:ef:70:e3:f8:80:ec:43:23:de:18:ca:d2:65: e2:c8:f5:8c:72:a9:ec:77:9d:b0:1f:7d:fc:88:99: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8D:D6:EC:F0:56:9B:57:09:A3:6C:71:1A:43:94:83:A8:2E:10:CF X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:3e:ea:7e:1b:20:ed:e7:38:7e:c4:5d:aa:8f:95:b2:e4:eb: 58:83:f6:1b:a4:0b:f8:94:23:af:b2:83:c3:18:40:48:d4:f1: 39:d6:14:0e:d2:8b:3f:56:22:5c:3f:9f:5e:5f:4b:5d:b1:02: 9b:0f:d3:63:27:c7:20:8f:d0:58:14:ca:7f:95:df:7e:62:09: 11:6b:5a:ac:fb:fd:24:73:5b:a3:98:86:d5:62:89:39:cc:e2: a0:4b:ae:bc:a5:4e:94:24:f4:95:ed:e0:6b:fd:58:48:4b:e6: d5:f2:d8:01:75:59:1f:30:49:28:34:b8:f7:cd:56:1f:98:db: ad:68:cd:36:46:3b:fb:b2:a0:a7:e9:90:a7:b4:9d:eb:4a:a4: df:fd:3b:7f:44:89:cf:8b:57:25:6f:38:3d:23:0b:a7:91:54: ee:17:c1:3d:38:1f:73:b1:6d:cd:d7:ed:60:53:f4:07:80:2f: 9b:e2:38:dd:5a:5a:b9:f0:03:23:ed:86:21:e5:b4:c8:ba:ac: fa:b7:57:73:d2:2c:ed:4e:62:e7:f0:a2:2d:77:d8:4e:82:88: 83:01:0a:fa:d5:19:d2:08:af:9e:4f:80:48:7c:0e:27:b8:33: 26:87:1d:68:00:d8:3b:9e:e2:a8:f4:1a:e6:c4:e4:08:04:12: d5:03:3e:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Rjg1QjExMC8GA1UEBRMoREMzMUNGNUZDOUYyODM0ODM3REJCQjM2ODNDQjhBRjY0 MkFCNEE3QzAeFw0yNDA1MTkwNzIxMTNaFw0yNDA1MjYwNzIxMTNaMBgxFjAUBgNV BAMTDTY2NDlhODY5LTU2MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGzSpZQmnKOnKHsHxjZ7s1O2i/LcXLCpUmrj0U3GTyRWU9JMgD0FHdGp9PsiVK WBPk3GLcDrINxV96e7CW3yqC/vO2QOpgq5n/5AiSFfPfL+crveDWxe4IvusBzux1 38fj/2V1Kenx1Tto11lCg1DgxWl4E0AWGWo7beBqSbu5NXidAEEvicp0Gr57uBGM ZHnVjkk6+m2XCSI9DyiAkveF3tLQ5AysBu1/8mrr303hsSUmqPdnGhYFZvl2NLYu 0dfs/5yZKd32qEJSdwLm19IShsI8Ro1gl/iyYvppOi2RkCG373Dj+IDsQyPeGMrS ZeLI9Yxyqex3nbAfffyImW/ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNY3W7PBW m1cJo2xxGkOUg6guEM8wHwYDVR0jBBgwFoAU3DHPX8nyg0g327s2g8uK9kKrSnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGODVCL0M3MTNDMkZFNjFE NTExRUVCQUEwNEE1RUM0RjlBRTAyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0RIUFg4bnlnMGczMjdzMmc4dUs5a0tyU253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG ODVCL0M3MTNDMkZFNjFENTExRUVCQUEwNEE1RUM0RjlBRTAyLzNESFBYOG55ZzBn MzI3czJnOHVLOWtLclNudy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABc+6n4bIO3nOH7EXaqPlbLk61iD9hukC/iUI6+yg8MYQEjU8TnWFA7S iz9WIlw/n15fS12xApsP02MnxyCP0FgUyn+V335iCRFrWqz7/SRzW6OYhtViiTnM 4qBLrrylTpQk9JXt4Gv9WEhL5tXy2AF1WR8wSSg0uPfNVh+Y261ozTZGO/uyoKfp kKe0netKpN/9O39Eic+LVyVvOD0jC6eRVO4XwT04H3Oxbc3X7WBT9AeAL5viON1a WrnwAyPthiHltMi6rPq3V3PSLO1OYufwoi132E6CiIMBCvrVGdIIr55PgEh8Die4 MyaHHWgA2Due4qj0GubE5AgEEtUDPqU= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org