$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft File: DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json) Hash identifier: JnZfSvGpWjyQY++THWaUqIpi5Rxhf6mCYPe1sw1fE18= Subject key identifier: 34:DC:D7:D0:63:1F:7B:28:4E:F2:DA:67:42:B6:9D:87:CE:42:E2:D5 Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Certificate serial: 0B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft Manifest number: 0B38 Signing time: Tue 30 Apr 2024 20:05:47 +0000 Manifest this update: Tue 30 Apr 2024 20:05:45 +0000 Manifest next update: Tue 07 May 2024 20:05:45 +0000 Files and hashes: 1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: KRfS24ruICVAtXO3tcGZS2BUSiVxfpcGFPn8URXFX78=) 2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: Dg1teGxb/7J+RLEhdLIJJbvbaUjJVyctMJV2awJCf2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2883 (0xb43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC Validity Not Before: Apr 30 20:05:45 2024 GMT Not After : May 7 20:05:45 2024 GMT Subject: CN=66314f1a-c510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:e2:73:54:69:38:e0:67:5c:54:0c:b4:df: b0:fc:57:45:94:58:74:d7:f9:8f:f2:39:3e:99:37: 72:8e:cd:be:79:7e:a4:a6:f8:6c:f4:a7:ce:db:48: ed:21:8b:06:16:12:08:42:db:bc:60:36:7c:6c:88: d9:51:54:04:fc:f3:6e:7c:4b:70:2e:f4:7b:06:f2: 96:01:73:a6:b1:c3:f7:cf:c6:8a:fa:d6:a7:f9:ab: 88:9d:01:7c:85:3a:9d:3d:f6:53:2e:ca:ac:27:70: 68:80:06:bb:e8:06:17:ea:1b:b7:2f:06:12:a4:38: cc:16:d0:77:2f:a6:0d:9c:a8:68:08:e5:1f:bc:2d: e1:05:16:00:37:87:47:7b:f2:28:b5:9d:8f:69:66: 25:2c:59:6f:d3:54:9b:d5:ef:bd:46:72:f4:54:7b: d8:27:f5:1b:37:a7:06:73:53:a1:72:38:f5:c6:bc: 9f:f9:c1:c8:51:85:e1:65:90:4c:60:ca:24:bc:38: e8:e1:99:23:c2:75:d6:48:cc:e2:13:f1:de:fa:1b: da:b3:0f:95:eb:64:10:31:b8:e8:a1:f1:3a:f6:84: bf:1e:f7:08:34:36:82:d3:9a:1f:41:7a:c6:f4:a7: 7f:fe:45:35:68:ba:c6:98:1d:c6:b5:d8:1d:70:c5: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DC:D7:D0:63:1F:7B:28:4E:F2:DA:67:42:B6:9D:87:CE:42:E2:D5 X509v3 Authority Key Identifier: keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:27:c2:ee:67:57:4e:70:bc:4c:7e:2b:eb:70:0f:62:9b:a7: 8c:52:74:31:5b:78:0a:d9:93:22:f2:35:31:25:a9:9c:e7:db: 88:f6:4e:01:db:2d:84:3e:e8:9c:de:ff:01:e7:cb:d2:bb:1d: f0:31:ba:a1:43:71:b5:0d:05:c8:96:3a:34:e0:3f:d3:36:9e: e3:1a:25:dd:3f:4a:22:f2:7a:a0:d2:11:2d:fc:10:75:87:c1: 39:e3:1e:1f:4b:1e:e5:03:67:a0:8f:00:4b:8b:12:95:d7:b4: bd:d7:2d:6c:09:70:83:46:09:cd:49:cb:eb:53:ca:1b:37:3f: f8:ec:94:3b:84:83:38:11:09:24:f8:15:41:63:a3:4c:c2:69: ac:a4:2f:dc:55:dd:41:1c:15:04:2d:7d:3d:d5:23:46:bc:65: a4:ab:85:30:81:56:28:56:f3:a4:49:01:12:09:04:68:0d:0d: 5b:c5:4a:c7:f4:c0:b4:d2:5d:81:15:de:df:b8:2a:76:01:7f: 18:3b:db:b5:2f:94:5e:36:1b:6d:42:af:f0:95:88:da:b8:bc: 38:74:9d:5f:bd:71:52:7e:e2:3d:0b:fa:1c:59:7b:d1:c4:3b: fb:b2:3b:b0:85:45:bf:af:b8:5f:6c:e7:df:db:74:81:6c:10: db:8d:c3:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB QUZCNzc2Q0MwHhcNMjQwNDMwMjAwNTQ1WhcNMjQwNTA3MjAwNTQ1WjAYMRYwFAYD VQQDEw02NjMxNGYxYS1jNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKjic1RpOOBnXFQMtN+w/FdFlFh01/mP8jk+mTdyjs2+eX6kpvhs9KfO20jt IYsGFhIIQtu8YDZ8bIjZUVQE/PNufEtwLvR7BvKWAXOmscP3z8aK+tan+auInQF8 hTqdPfZTLsqsJ3BogAa76AYX6hu3LwYSpDjMFtB3L6YNnKhoCOUfvC3hBRYAN4dH e/IotZ2PaWYlLFlv01Sb1e+9RnL0VHvYJ/UbN6cGc1Ohcjj1xryf+cHIUYXhZZBM YMokvDjo4ZkjwnXWSMziE/He+hvasw+V62QQMbjoofE69oS/HvcINDaC05ofQXrG 9Kd//kU1aLrGmB3GtdgdcMXkzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTc19Bj H3soTvLaZ0K2nYfOQuLVMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm VXhfMVlUSHJoRldxLTNkc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnJ8LuZ1dOcLxMfivrcA9im6eMUnQxW3gK2ZMi8jUxJamc59uI9k4B 2y2EPuic3v8B58vSux3wMbqhQ3G1DQXIljo04D/TNp7jGiXdP0oi8nqg0hEt/BB1 h8E54x4fSx7lA2egjwBLixKV17S91y1sCXCDRgnNScvrU8obNz/47JQ7hIM4EQkk +BVBY6NMwmmspC/cVd1BHBUELX091SNGvGWkq4UwgVYoVvOkSQESCQRoDQ1bxUrH 9MC00l2BFd7fuCp2AX8YO9u1L5ReNhttQq/wlYjauLw4dJ1fvXFSfuI9C/ocWXvR xDv7sjuwhUW/r7hfbOff23SBbBDbjcNY -----END CERTIFICATE-----Generated at Tue Apr 30 21:37:53 2024 by rpki-client on console-fra.rpki-client.org