$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft File: dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json) Hash identifier: 1wIRcMKRJg+27JAHLxiETqhHr+WqxmrEWttQUVY4gL4= Subject key identifier: BC:29:7D:E0:D6:4E:4F:4F:62:6E:55:1C:DD:0A:2D:A8:80:08:B7:F2 Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 Certificate issuer: /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft Manifest number: 052F Signing time: Sat 11 May 2024 01:09:07 +0000 Manifest this update: Sat 11 May 2024 01:09:06 +0000 Manifest next update: Sat 18 May 2024 01:09:06 +0000 Files and hashes: 1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: w0gHkksrVWtIXzkgZP55+lbq6AEikmCvQsfcb7PcPN4=) 2: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: TQKu3Nc5/FjRxOW6/aUczeg6MDtWMA4/C2ZjdqW/R80=) 3: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 8HKS7RMG63E7DZ9IVm0xhKdd0cM0xsTIgNOY7MeyMiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971 Validity Not Before: May 11 01:09:06 2024 GMT Not After : May 18 01:09:06 2024 GMT Subject: CN=663ec532-b7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:66:5a:dc:cc:60:fa:d8:c4:27:29:31:d4:e2: ea:7b:c4:5f:d2:70:3c:9e:3b:f8:0a:63:e8:ec:26: 15:f5:60:2a:09:d9:cd:bb:30:cb:d6:2c:28:6c:2d: 0b:c5:6c:d2:1a:8b:9d:8b:67:40:2e:4a:51:04:67: 64:99:bc:64:b6:f1:e1:ce:6e:9b:43:ea:c8:aa:cc: f5:34:ae:f5:d4:5e:9f:e5:a6:0e:37:de:f8:4c:19: 2e:96:71:f3:9e:64:bf:71:3a:e6:4f:35:33:ca:4b: f4:03:b5:39:cc:fc:61:07:fa:ba:86:11:6b:e6:9e: f7:1d:ea:b4:49:4c:d3:4b:c2:11:c4:e0:30:d7:37: 5c:3b:fa:13:cf:02:03:de:1d:c5:82:65:0c:84:d7: 59:88:5f:fd:b5:d5:26:66:0a:d0:d9:ea:a8:8a:a3: a9:03:0b:43:05:f9:16:fd:a8:81:6b:c5:81:60:17: 83:81:b3:63:88:bc:e5:37:ee:a1:e9:c6:00:f5:bd: ef:34:58:73:a5:f7:8f:65:52:8d:5f:5b:d6:e2:5a: 34:e6:51:23:89:ec:96:7e:89:a1:b5:80:39:db:fa: 0d:38:68:6c:e5:20:71:79:0f:86:52:cc:50:45:96: 61:13:12:6c:a4:df:5b:a5:5f:18:5d:e5:3e:82:44: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:29:7D:E0:D6:4E:4F:4F:62:6E:55:1C:DD:0A:2D:A8:80:08:B7:F2 X509v3 Authority Key Identifier: keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:90:92:de:a5:5b:c6:28:5d:e9:e5:36:d2:ba:ab:29:b0:ce: d3:42:6b:f0:b6:d3:b7:dc:0b:eb:8a:77:a1:88:87:3e:44:0e: b6:52:c6:03:87:8e:b0:72:e1:45:e8:11:68:be:9d:0c:7b:e9: f9:4b:89:bb:59:04:ff:56:81:4b:50:9f:e8:fd:a5:f1:6b:3f: 6b:54:d5:77:83:f0:58:03:7d:55:00:72:7f:f1:dd:38:4f:db: 95:b3:8d:39:45:26:70:ef:f0:fa:0c:36:95:2f:b7:af:67:22: db:1a:dd:a8:19:dd:bd:1f:78:92:5c:43:ec:e6:28:2f:8c:8a: 17:cc:d2:25:82:d2:1b:79:43:15:5d:d4:3a:7c:72:65:d6:9d: c8:a5:98:3d:00:1a:e4:70:70:27:b8:f1:46:c2:ba:13:20:b6: 13:13:6f:99:81:ab:5a:8c:40:43:88:c1:f3:d8:fa:90:57:9a: fb:a9:be:14:89:4b:6e:54:fb:d1:39:ba:fb:5d:a7:35:ef:fd: 3e:57:0f:26:5a:fc:93:b8:4e:23:be:c1:68:0f:2f:c4:64:9c: 2b:a4:cc:d6:8f:66:3a:26:a2:07:2d:1f:d3:f3:1e:0e:cf:b1: f9:89:d2:c8:a1:4c:f4:8a:a4:24:71:91:e3:76:a9:61:f3:73: aa:a5:bb:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExNzYxMTAvBgNVBAUTKDc2NjFGNTk3RUE2OEVGRjRDOTI5NzM2MzlCQjY3NUQ3 RjAzOTA5NzEwHhcNMjQwNTExMDEwOTA2WhcNMjQwNTE4MDEwOTA2WjAYMRYwFAYD VQQDEw02NjNlYzUzMi1iN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WZa3Mxg+tjEJykx1OLqe8Rf0nA8njv4CmPo7CYV9WAqCdnNuzDL1iwobC0L xWzSGoudi2dALkpRBGdkmbxktvHhzm6bQ+rIqsz1NK711F6f5aYON974TBkulnHz nmS/cTrmTzUzykv0A7U5zPxhB/q6hhFr5p73Heq0SUzTS8IRxOAw1zdcO/oTzwID 3h3FgmUMhNdZiF/9tdUmZgrQ2eqoiqOpAwtDBfkW/aiBa8WBYBeDgbNjiLzlN+6h 6cYA9b3vNFhzpfePZVKNX1vW4lo05lEjieyWfomhtYA52/oNOGhs5SBxeQ+GUsxQ RZZhExJspN9bpV8YXeU+gkSwxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwpfeDW Tk9PYm5VHN0KLaiACLfyMB8GA1UdIwQYMBaAFHZh9ZfqaO/0ySlzY5u2ddfwOQlx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE3Ni9BREQzQUVDRUIy OEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdfVEpLWE5qbTdaMTFfQTVD WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtSDFsLXBvN19USktYTmptN1oxMV9BNUNYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE3Ni9BREQzQUVDRUIyOEUxMUVCOTREMjE4NDdDNEY5QUUwMi9kbUgxbC1wbzdf VEpLWE5qbTdaMTFfQTVDWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWkJLepVvGKF3p5TbSuqspsM7TQmvwttO33AvrinehiIc+RA62UsYD h46wcuFF6BFovp0Me+n5S4m7WQT/VoFLUJ/o/aXxaz9rVNV3g/BYA31VAHJ/8d04 T9uVs405RSZw7/D6DDaVL7evZyLbGt2oGd29H3iSXEPs5igvjIoXzNIlgtIbeUMV XdQ6fHJl1p3IpZg9ABrkcHAnuPFGwroTILYTE2+ZgatajEBDiMHz2PqQV5r7qb4U iUtuVPvRObr7Xac17/0+Vw8mWvyTuE4jvsFoDy/EZJwrpMzWj2Y6JqIHLR/T8x4O z7H5idLIoUz0iqQkcZHjdqlh83Oqpbtm -----END CERTIFICATE-----Generated at Sat May 11 02:39:35 2024 by rpki-client on console-fra.rpki-client.org