$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft File: dOHLgzYmhzR4kyyiEYioj98uneA.mft (raw, json) Hash identifier: LH8oV7abZBGHcth6CS6oFE3tqx4JYsUg+KqfsJFjA2c= Subject key identifier: BA:F3:39:C5:32:B8:EA:A5:E4:1E:26:97:8C:49:DB:9E:27:8E:DD:3E Authority key identifier: 74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0 Certificate issuer: /CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0 Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft Manifest number: 0583 Signing time: Thu 02 May 2024 14:54:05 +0000 Manifest this update: Thu 02 May 2024 14:54:05 +0000 Manifest next update: Thu 09 May 2024 14:54:05 +0000 Files and hashes: 1: dOHLgzYmhzR4kyyiEYioj98uneA.crl (hash: hnAKBj7N3zoRI53wZyieOKynL+5mBJomN3tRNCeecx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E13/serialNumber=74E1CB833626873478932CA21188A88FDF2E9DE0 Validity Not Before: May 2 14:54:05 2024 GMT Not After : May 9 14:54:05 2024 GMT Subject: CN=6633a90d-cb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:3d:73:27:99:14:c8:4c:ba:a1:7f:22:ae: 4e:9c:da:ad:f5:a3:09:c8:2c:44:0a:a7:fe:52:a5: 5f:68:f8:2d:d1:9d:71:9a:40:be:f1:04:14:82:90: de:db:2a:bf:0b:c1:93:e2:73:b0:ae:b6:3a:27:4b: df:c2:d1:49:6e:8e:89:5d:8a:fb:b1:0a:cf:72:99: cc:93:b8:9e:37:77:7d:8e:26:e0:74:70:4a:b4:de: 64:63:c2:bd:3f:75:77:30:51:9d:f4:24:aa:b8:d1: 57:fb:03:ce:a4:68:53:08:fc:d8:a7:3f:e9:d7:ac: cc:8b:51:5d:1c:c6:54:0e:57:43:8b:a0:57:d5:b6: 21:3d:f2:38:37:67:40:53:f3:a0:f4:d1:e8:e4:c6: 3f:5b:f1:3b:a0:a6:a4:f8:19:61:09:7f:af:9a:e0: 2e:d4:86:9a:c5:f0:33:aa:fc:b3:15:af:9c:8f:18: 0d:be:2b:c6:26:62:c0:d6:fe:57:90:d2:da:07:91: ec:19:69:19:3f:52:d4:4a:dd:38:30:36:73:1f:06: 04:66:aa:c9:7a:32:f4:18:7e:81:19:f4:ec:a8:1f: ae:d9:d4:9b:c0:86:19:cb:3f:66:69:58:99:10:8d: 58:24:09:bd:9e:b9:6e:5d:9c:80:fe:d3:5e:1b:91: ca:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F3:39:C5:32:B8:EA:A5:E4:1E:26:97:8C:49:DB:9E:27:8E:DD:3E X509v3 Authority Key Identifier: keyid:74:E1:CB:83:36:26:87:34:78:93:2C:A2:11:88:A8:8F:DF:2E:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOHLgzYmhzR4kyyiEYioj98uneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E13/183F99FA8D7B11EB8D8BD60BC4F9AE02/dOHLgzYmhzR4kyyiEYioj98uneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c4:73:12:4a:1a:d7:60:f9:e8:80:20:a3:3a:39:6b:4a:93: b2:33:ab:c8:ca:54:0c:21:87:43:a8:37:a1:71:4b:9c:2a:dd: 93:eb:e8:9c:72:0f:31:17:f1:e2:48:2b:a8:c9:3f:97:a6:d2: 83:75:7b:ec:b8:1f:c6:48:9e:4d:3d:e3:71:f9:17:96:89:3d: 43:91:b7:df:33:e5:cd:01:77:ee:9f:ce:4c:5e:46:24:07:d9: 7e:53:2d:42:a6:49:2e:06:3e:2f:7d:02:ca:91:0d:2d:02:e3: 55:54:bf:dc:af:5a:6a:ce:4d:f9:29:72:b4:eb:99:38:3e:cb: 97:bb:f6:a8:7d:ac:42:bf:65:5d:aa:cc:14:8f:af:a5:a9:20: 82:71:4e:a6:c6:55:97:3f:6b:1f:ec:33:b3:d7:ac:f5:0a:8c: 15:82:19:3f:50:77:66:9a:ca:10:78:26:69:83:c7:c6:59:72: a0:b3:7e:b7:92:c2:2f:13:fc:46:9b:25:9a:b2:3d:22:cf:0d: 45:40:34:48:3a:48:10:3b:23:b2:fb:e2:05:d6:7a:53:b1:c6: 4f:44:b6:6d:2a:5a:b1:e7:fc:84:ee:79:73:1d:35:30:74:37: bd:cf:23:f2:e2:f0:59:c7:cc:bd:c2:dd:1a:01:7a:09:34:1c: 7b:9c:91:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFFMTMxMTAvBgNVBAUTKDc0RTFDQjgzMzYyNjg3MzQ3ODkzMkNBMjExODhBODhG REYyRTlERTAwHhcNMjQwNTAyMTQ1NDA1WhcNMjQwNTA5MTQ1NDA1WjAYMRYwFAYD VQQDEw02NjMzYTkwZC1jYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmh49cyeZFMhMuqF/Iq5OnNqt9aMJyCxECqf+UqVfaPgt0Z1xmkC+8QQUgpDe 2yq/C8GT4nOwrrY6J0vfwtFJbo6JXYr7sQrPcpnMk7ieN3d9jibgdHBKtN5kY8K9 P3V3MFGd9CSquNFX+wPOpGhTCPzYpz/p16zMi1FdHMZUDldDi6BX1bYhPfI4N2dA U/Og9NHo5MY/W/E7oKak+BlhCX+vmuAu1IaaxfAzqvyzFa+cjxgNvivGJmLA1v5X kNLaB5HsGWkZP1LUSt04MDZzHwYEZqrJejL0GH6BGfTsqB+u2dSbwIYZyz9maViZ EI1YJAm9nrluXZyA/tNeG5HKtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrzOcUy uOql5B4ml4xJ254njt0+MB8GA1UdIwQYMBaAFHThy4M2Joc0eJMsohGIqI/fLp3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUUxMy8xODNGOTlGQThE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6UjRreXlpRVlpb2o5OHVu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RPSExnelltaHpSNGt5eWlFWWlvajk4dW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUUxMy8xODNGOTlGQThEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9kT0hMZ3pZbWh6 UjRreXlpRVlpb2o5OHVuZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCExHMSShrXYPnogCCjOjlrSpOyM6vIylQMIYdDqDehcUucKt2T6+ic cg8xF/HiSCuoyT+XptKDdXvsuB/GSJ5NPeNx+ReWiT1DkbffM+XNAXfun85MXkYk B9l+Uy1CpkkuBj4vfQLKkQ0tAuNVVL/cr1pqzk35KXK065k4PsuXu/aofaxCv2Vd qswUj6+lqSCCcU6mxlWXP2sf7DOz16z1CowVghk/UHdmmsoQeCZpg8fGWXKgs363 ksIvE/xGmyWasj0izw1FQDRIOkgQOyOy++IF1npTscZPRLZtKlqx5/yE7nlzHTUw dDe9zyPy4vBZx8y9wt0aAXoJNBx7nJHx -----END CERTIFICATE-----Generated at Thu May 2 17:43:03 2024 by rpki-client on console-fra.rpki-client.org