$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: GX0rLXSL+FAYohbKoIQrqItStukDwFCKuDkfXzd2+PQ= Subject key identifier: DC:6B:AF:A7:EA:29:26:8D:A7:50:A0:A5:E4:8A:15:43:0E:55:CE:36 Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: DA Signing time: Sun 19 May 2024 06:04:18 +0000 Manifest this update: Sun 19 May 2024 06:04:18 +0000 Manifest next update: Sun 26 May 2024 06:04:18 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: rV+hW0bz59x2xlMPYdAOl7te4y9tYT59famTdr3HPm4=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: uQdj5jTz7pEFdjbztLf6kBlbDqXIgK1CUMCX5/deqpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: May 19 06:04:18 2024 GMT Not After : May 26 06:04:18 2024 GMT Subject: CN=66499662-ddaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:12:43:47:83:c1:de:1b:82:6f:90:be:94: a4:4a:27:55:98:00:01:92:02:9d:11:31:9a:fb:81: 29:20:ae:1d:5c:98:5d:42:07:28:66:dd:78:0d:34: 7a:f6:29:2c:a5:18:66:3c:6d:82:51:40:93:1c:42: 8c:ab:7f:71:69:65:46:13:d9:62:4e:ee:2c:60:90: 2c:6b:fa:9d:20:51:5c:59:20:76:bc:2b:2c:c8:ac: 92:a0:7a:a9:ea:83:bd:0e:7c:ff:7d:25:6f:e0:c5: b9:6b:4f:4b:40:0e:ff:df:87:26:09:14:9c:21:fd: 1f:e3:4a:6a:c1:75:6c:0e:d4:77:18:26:88:5b:93: b1:19:97:82:65:fe:34:2d:49:20:72:5c:a5:9c:92: 10:0e:c9:a6:d5:d1:5e:45:bd:3c:cb:2b:d7:2d:dd: db:a0:e4:c7:b6:e0:12:53:98:c1:c7:0f:bc:d9:48: 38:3f:6b:7a:bd:57:55:89:92:ca:1a:e1:29:61:26: 14:51:3b:c2:c9:ea:e7:06:ab:32:1d:25:72:f4:4a: 6f:89:01:a1:7a:55:90:b5:98:c5:05:d5:1c:8f:2b: 5d:d7:f2:3f:34:a7:aa:15:da:4d:c6:75:9f:7e:f6: d8:32:72:12:02:a6:97:c5:7b:4e:92:97:a2:60:04: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6B:AF:A7:EA:29:26:8D:A7:50:A0:A5:E4:8A:15:43:0E:55:CE:36 X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0a:c3:54:f6:49:86:f1:f2:d4:85:fd:e3:60:a5:45:5c:b9: 3a:16:0c:83:e0:34:5d:a9:a9:85:50:a7:e1:f4:c4:48:22:16: ba:3d:bf:c6:60:dc:64:e3:98:08:38:87:23:38:49:30:09:00: 0b:18:b5:e7:11:48:f7:41:ba:15:0d:62:f0:1c:74:13:fc:ab: e8:4a:85:05:a7:99:0c:d5:d7:f1:af:4a:34:9a:ee:b2:7c:81: 80:3f:92:f8:08:bb:2f:da:50:18:3e:b1:91:5b:92:76:ba:6e: 56:b8:15:9b:23:f0:30:af:ec:47:84:9c:f8:40:64:85:da:0a: b7:7e:01:77:76:00:68:78:9e:d3:83:d9:ec:84:d9:30:36:b2: ad:a6:46:fa:c8:b8:34:65:53:0e:7c:23:fc:2f:4e:9b:e8:e3: 23:8a:d3:3d:36:a1:a0:a8:67:cb:b8:c2:14:ff:25:ec:4c:c1: c8:e4:c6:bd:a3:4f:6a:da:ab:9e:64:e6:f6:06:c2:4c:49:43: 49:f5:8b:a3:11:ea:b4:12:6f:f3:fc:76:75:61:d0:0f:29:64: 54:db:5c:a8:75:f4:0d:28:22:51:e9:c0:b1:ac:49:2b:ff:6b: fa:e7:1b:eb:86:af:42:ed:ee:b3:2c:8e:bb:88:8e:42:52:c7: 8a:ba:66:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjQwNTE5MDYwNDE4WhcNMjQwNTI2MDYwNDE4WjAYMRYwFAYD VQQDEw02NjQ5OTY2Mi1kZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6USQ0eDwd4bgm+QvpSkSidVmAABkgKdETGa+4EpIK4dXJhdQgcoZt14DTR6 9ikspRhmPG2CUUCTHEKMq39xaWVGE9liTu4sYJAsa/qdIFFcWSB2vCssyKySoHqp 6oO9Dnz/fSVv4MW5a09LQA7/34cmCRScIf0f40pqwXVsDtR3GCaIW5OxGZeCZf40 LUkgclylnJIQDsmm1dFeRb08yyvXLd3boOTHtuASU5jBxw+82Ug4P2t6vVdViZLK GuEpYSYUUTvCyernBqsyHSVy9EpviQGhelWQtZjFBdUcjytd1/I/NKeqFdpNxnWf fvbYMnISAqaXxXtOkpeiYAT3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxrr6fq KSaNp1CgpeSKFUMOVc42MB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsCsNU9kmG8fLUhf3jYKVFXLk6FgyD4DRdqamFUKfh9MRIIha6Pb/G YNxk45gIOIcjOEkwCQALGLXnEUj3QboVDWLwHHQT/KvoSoUFp5kM1dfxr0o0mu6y fIGAP5L4CLsv2lAYPrGRW5J2um5WuBWbI/Awr+xHhJz4QGSF2gq3fgF3dgBoeJ7T g9nshNkwNrKtpkb6yLg0ZVMOfCP8L06b6OMjitM9NqGgqGfLuMIU/yXsTMHI5Ma9 o09q2queZOb2BsJMSUNJ9YujEeq0Em/z/HZ1YdAPKWRU21yodfQNKCJR6cCxrEkr /2v65xvrhq9C7e6zLI67iI5CUseKumb6 -----END CERTIFICATE-----Generated at Sun May 19 08:25:11 2024 by rpki-client on console-ams.rpki-client.org