$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft File: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json) Hash identifier: wODfnL7Z0bBBRI4wn4sHte3NBHB9JrJeqpLAV2Eqkns= Subject key identifier: 31:0F:2C:12:81:34:03:B9:47:AF:80:4B:07:E2:66:79:7A:83:A5:DA Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E Certificate issuer: /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft Manifest number: 34 Signing time: Sun 19 May 2024 08:19:10 +0000 Manifest this update: Sun 19 May 2024 08:19:09 +0000 Manifest next update: Sun 26 May 2024 08:19:09 +0000 Files and hashes: 1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: dit47jzoRXFQyZehQxeej04c6hjJzn9pf5ZocgYjjYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Validity Not Before: May 19 08:19:09 2024 GMT Not After : May 26 08:19:09 2024 GMT Subject: CN=6649b5fe-2157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d4:f7:86:42:30:28:e2:a8:39:30:09:3d:f2: d8:d8:f3:80:01:9e:86:3b:4f:97:a4:5d:95:da:bd: 97:84:87:71:fc:26:9d:95:99:25:69:a9:b1:dd:83: c9:77:7d:b5:c9:4b:2f:3a:ed:ed:89:34:c1:20:d1: d1:92:3f:3b:f9:05:37:36:4e:0d:fe:1e:82:f9:46: ba:78:4a:7c:e9:cc:32:3b:43:3d:3d:82:65:98:b7: 15:bd:51:73:55:26:83:8c:54:35:a4:58:27:28:4b: 3a:46:9b:d6:27:b8:ec:b5:01:e5:d6:34:e4:ef:34: 4e:eb:bb:8d:f9:9c:51:b9:94:c2:38:eb:dc:40:64: 9c:4f:00:c5:a0:d9:d1:a9:ff:77:e7:b0:ef:39:dc: 07:de:8b:44:69:ea:49:c0:62:fd:a2:ed:80:2c:42: ff:e3:86:19:39:93:c2:c1:22:da:9a:74:e6:85:c9: 3e:5b:fb:e2:42:a3:8d:ba:6d:04:c6:57:9c:95:fa: 46:c5:0d:df:ea:ff:fa:fc:b4:8d:d4:e8:da:ef:67: e2:80:2c:98:99:7d:d5:26:40:10:3e:be:4a:9c:86: 98:49:75:ac:fe:cf:ac:72:dd:8b:98:5b:44:e4:ad: 46:b2:a7:c3:e7:23:eb:a4:5d:b7:f4:29:80:fc:08: fb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0F:2C:12:81:34:03:B9:47:AF:80:4B:07:E2:66:79:7A:83:A5:DA X509v3 Authority Key Identifier: keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:83:e4:d2:c3:0d:e5:36:d2:d0:2b:c2:9c:5e:b9:2c:15:21: 75:9b:45:a4:47:c0:f2:bb:39:e4:ae:54:53:c9:dd:ac:3f:f5: b1:a2:67:15:e7:57:6c:95:8b:07:e6:2f:34:60:c2:12:48:81: 82:a7:4c:2e:f3:e5:62:1f:f2:1b:d1:d5:83:68:90:56:90:70: 6e:48:a2:c4:1a:13:6a:d0:93:d4:42:ee:46:23:9f:c9:cf:b7: f3:96:a6:e7:a5:b3:ec:5e:4f:27:65:cd:70:27:42:9e:28:fc: 5b:45:22:63:aa:db:09:12:89:55:24:dd:e8:96:27:92:56:c7: a2:a7:90:0b:fc:45:fb:05:26:75:9b:f9:d1:6d:87:97:2b:4c: 75:82:07:e7:7d:47:36:2c:21:36:38:ec:0a:6f:bd:43:cb:64: 61:3c:00:c5:6e:97:cc:62:85:fc:17:d5:4a:00:63:0f:e1:4c: d0:d7:83:01:fe:7a:66:88:31:0c:71:1e:aa:00:32:da:bb:d5: cd:e5:ac:6a:7c:d6:b6:17:fa:bb:e9:c8:92:6d:ec:ba:96:64: fb:ce:be:8e:be:a6:f9:48:e5:24:46:7c:b1:fc:47:bf:d5:94: 9c:e6:d3:97:3a:46:cf:16:cb:63:4f:c7:0d:b8:0e:12:ec:c0: 3b:eb:ee:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTkzNjExMC8GA1UEBRMoMEUxRjYyNEEyMzU5NTE5OTA4NkUxODJCNUZDN0M1MjQ2 M0E5RTU1RTAeFw0yNDA1MTkwODE5MDlaFw0yNDA1MjYwODE5MDlaMBgxFjAUBgNV BAMTDTY2NDliNWZlLTIxNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDy1PeGQjAo4qg5MAk98tjY84ABnoY7T5ekXZXavZeEh3H8Jp2VmSVpqbHdg8l3 fbXJSy867e2JNMEg0dGSPzv5BTc2Tg3+HoL5Rrp4SnzpzDI7Qz09gmWYtxW9UXNV JoOMVDWkWCcoSzpGm9YnuOy1AeXWNOTvNE7ru435nFG5lMI469xAZJxPAMWg2dGp /3fnsO853Afei0Rp6knAYv2i7YAsQv/jhhk5k8LBItqadOaFyT5b++JCo426bQTG V5yV+kbFDd/q//r8tI3U6NrvZ+KALJiZfdUmQBA+vkqchphJdaz+z6xy3YuYW0Tk rUayp8PnI+ukXbf0KYD8CPujAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMQ8sEoE0 A7lHr4BLB+JmeXqDpdowHwYDVR0jBBgwFoAUDh9iSiNZUZkIbhgrX8fFJGOp5V4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxOTM2Lzc3QTc3RDMwQzYz NjExRUVBQkNDMDQwQkM0RjlBRTAyL0RoOWlTaU5aVVprSWJoZ3JYOGZGSkdPcDVW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGg5aVNpTlpVWmtJYmhnclg4ZkZKR09wNVY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx OTM2Lzc3QTc3RDMwQzYzNjExRUVBQkNDMDQwQkM0RjlBRTAyL0RoOWlTaU5aVVpr SWJoZ3JYOGZGSkdPcDVWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHeD5NLDDeU20tArwpxeuSwVIXWbRaRHwPK7OeSuVFPJ3aw/9bGiZxXn V2yViwfmLzRgwhJIgYKnTC7z5WIf8hvR1YNokFaQcG5IosQaE2rQk9RC7kYjn8nP t/OWpuels+xeTydlzXAnQp4o/FtFImOq2wkSiVUk3eiWJ5JWx6KnkAv8RfsFJnWb +dFth5crTHWCB+d9RzYsITY47ApvvUPLZGE8AMVul8xihfwX1UoAYw/hTNDXgwH+ emaIMQxxHqoAMtq71c3lrGp81rYX+rvpyJJt7LqWZPvOvo6+pvlI5SRGfLH8R7/V lJzm05c6Rs8Wy2NPxw24DhLswDvr7vc= -----END CERTIFICATE-----Generated at Sun May 19 09:04:14 2024 by rpki-client on console-fra.rpki-client.org