$ rpki-client -vvf rpki.apnic.net/member_repository/A916F5D7/F7A1BB9C963D11E89FF3BD1AC4F9AE02/dryi-syf58hAsQNN0qWbb2kWXMU.mft File: dryi-syf58hAsQNN0qWbb2kWXMU.mft (raw, json) Hash identifier: T/Aq6cjTyxhcfyWNXDFiI51Oua1bpqUkkqneRe4+cw4= Subject key identifier: DB:26:3E:55:16:E0:DA:F6:3D:92:4F:9A:2C:C3:A5:5E:E6:57:E4:08 Authority key identifier: 76:BC:A2:FA:CC:9F:E7:C8:40:B1:03:4D:D2:A5:9B:6F:69:16:5C:C5 Certificate issuer: /CN=A916F5D7/serialNumber=76BCA2FACC9FE7C840B1034DD2A59B6F69165CC5 Certificate serial: 12D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dryi-syf58hAsQNN0qWbb2kWXMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F5D7/F7A1BB9C963D11E89FF3BD1AC4F9AE02/dryi-syf58hAsQNN0qWbb2kWXMU.mft Manifest number: 12D0 Signing time: Mon 06 May 2024 17:40:25 +0000 Manifest this update: Mon 06 May 2024 17:40:25 +0000 Manifest next update: Mon 13 May 2024 17:40:25 +0000 Files and hashes: 1: dryi-syf58hAsQNN0qWbb2kWXMU.crl (hash: KF0QrgXcoRP8UXYRh37uUn076VIteBZOlqCtiWZ8wLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F5D7/F7A1BB9C963D11E89FF3BD1AC4F9AE02/dryi-syf58hAsQNN0qWbb2kWXMU.crl rsync://rpki.apnic.net/member_repository/A916F5D7/F7A1BB9C963D11E89FF3BD1AC4F9AE02/dryi-syf58hAsQNN0qWbb2kWXMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dryi-syf58hAsQNN0qWbb2kWXMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4824 (0x12d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F5D7/serialNumber=76BCA2FACC9FE7C840B1034DD2A59B6F69165CC5 Validity Not Before: May 6 17:40:25 2024 GMT Not After : May 13 17:40:25 2024 GMT Subject: CN=66391609-0975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:0b:53:66:b9:46:6b:a7:be:eb:ca:11:a4: a7:e4:84:b4:e1:87:e0:05:1b:d2:54:00:3a:6e:0e: c7:9c:fb:38:74:42:30:6c:62:d9:dc:c8:c4:2f:dc: 47:6f:74:dc:2f:b4:d5:24:1a:d9:63:c9:f1:47:6f: 53:7f:fc:07:8c:19:db:fe:07:cc:10:6d:42:1f:c7: f9:6d:6c:db:9c:46:dc:65:0a:53:d7:fa:9f:35:ae: bf:b5:79:ce:81:21:f2:16:3a:c8:49:16:07:eb:7c: fc:cb:82:69:19:ce:07:1c:c0:00:52:a1:2a:31:c7: 76:df:4e:80:7b:2b:20:a7:dc:a9:26:f3:6e:16:e6: e8:d0:51:c8:82:73:a1:b0:40:26:5c:fa:3b:79:99: f4:e1:30:4f:7f:dc:4d:dc:16:96:ed:ca:f8:ea:9b: 87:8d:d6:81:22:0d:40:b4:3f:56:a1:9c:bd:ce:a8: 21:cf:3c:59:c8:a3:3b:53:8d:c9:34:c4:fb:da:a7: 31:86:24:dc:ad:fb:9e:de:01:ad:7f:f0:b4:0f:71: 88:85:11:24:54:79:d8:a2:09:53:0b:cd:48:cb:91: 92:09:09:2a:0d:23:88:31:0f:63:4b:cc:2b:20:75: 6c:29:98:96:a9:21:3d:f5:e0:3e:81:5d:2c:be:b3: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:26:3E:55:16:E0:DA:F6:3D:92:4F:9A:2C:C3:A5:5E:E6:57:E4:08 X509v3 Authority Key Identifier: keyid:76:BC:A2:FA:CC:9F:E7:C8:40:B1:03:4D:D2:A5:9B:6F:69:16:5C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F5D7/F7A1BB9C963D11E89FF3BD1AC4F9AE02/dryi-syf58hAsQNN0qWbb2kWXMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dryi-syf58hAsQNN0qWbb2kWXMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F5D7/F7A1BB9C963D11E89FF3BD1AC4F9AE02/dryi-syf58hAsQNN0qWbb2kWXMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0d:81:29:f6:e9:1a:29:8f:9e:24:41:24:b5:57:b1:c3:38: e8:51:10:8a:6d:fb:17:eb:c2:8f:b2:6b:49:f6:d1:27:d9:6f: 50:61:c9:3f:ad:96:81:a5:bc:de:e2:af:3a:80:cf:a5:dd:19: 7c:b1:16:b0:6f:40:50:e8:a8:e0:30:a7:aa:c3:7b:3a:76:ae: ac:fd:3e:83:29:f5:95:13:a4:9a:9f:28:21:e8:d4:6e:f9:61: 50:27:d0:61:ec:28:4d:e2:2e:4e:58:71:dd:93:52:3e:9f:3c: 8c:c9:34:93:d3:d2:5d:b3:88:da:51:fd:80:7b:5e:3f:87:61: 02:7e:9e:50:39:bd:be:7c:79:86:d2:ca:41:1c:0d:2c:b5:a1: 18:c5:c5:0d:ad:90:bf:26:f9:95:d5:9c:24:ce:99:5d:1b:a7: 9f:37:52:c8:43:dc:e4:c7:6a:bf:21:00:72:45:87:d6:c7:49: 67:60:20:3e:64:df:36:d0:5e:4f:63:ce:a1:81:72:a7:72:fe: 67:f3:b8:85:18:a3:b5:c2:74:09:62:15:a3:be:10:91:bc:54: 5b:50:8a:81:2d:b4:76:25:76:85:dd:91:39:5d:8a:50:1b:c7: 50:78:49:91:d2:a1:ad:05:28:6b:92:ec:b6:dc:95:c7:c0:cf: 71:6d:d0:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY1RDcxMTAvBgNVBAUTKDc2QkNBMkZBQ0M5RkU3Qzg0MEIxMDM0REQyQTU5QjZG NjkxNjVDQzUwHhcNMjQwNTA2MTc0MDI1WhcNMjQwNTEzMTc0MDI1WjAYMRYwFAYD VQQDEw02NjM5MTYwOS0wOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa8LU2a5RmunvuvKEaSn5IS04YfgBRvSVAA6bg7HnPs4dEIwbGLZ3MjEL9xH b3TcL7TVJBrZY8nxR29Tf/wHjBnb/gfMEG1CH8f5bWzbnEbcZQpT1/qfNa6/tXnO gSHyFjrISRYH63z8y4JpGc4HHMAAUqEqMcd2306Aeysgp9ypJvNuFubo0FHIgnOh sEAmXPo7eZn04TBPf9xN3BaW7cr46puHjdaBIg1AtD9WoZy9zqghzzxZyKM7U43J NMT72qcxhiTcrfue3gGtf/C0D3GIhREkVHnYoglTC81Iy5GSCQkqDSOIMQ9jS8wr IHVsKZiWqSE99eA+gV0svrN3YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsmPlUW 4Nr2PZJPmizDpV7mV+QIMB8GA1UdIwQYMBaAFHa8ovrMn+fIQLEDTdKlm29pFlzF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjVENy9GN0ExQkI5Qzk2 M0QxMUU4OUZGM0JEMUFDNEY5QUUwMi9kcnlpLXN5ZjU4aEFzUU5OMHFXYmIya1dY TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RyeWktc3lmNThoQXNRTk4wcVdiYjJrV1hNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjVENy9GN0ExQkI5Qzk2M0QxMUU4OUZGM0JEMUFDNEY5QUUwMi9kcnlpLXN5ZjU4 aEFzUU5OMHFXYmIya1dYTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/DYEp9ukaKY+eJEEktVexwzjoURCKbfsX68KPsmtJ9tEn2W9QYck/ rZaBpbze4q86gM+l3Rl8sRawb0BQ6KjgMKeqw3s6dq6s/T6DKfWVE6Sanygh6NRu +WFQJ9Bh7ChN4i5OWHHdk1I+nzyMyTST09Jds4jaUf2Ae14/h2ECfp5QOb2+fHmG 0spBHA0staEYxcUNrZC/JvmV1ZwkzpldG6efN1LIQ9zkx2q/IQByRYfWx0lnYCA+ ZN820F5PY86hgXKncv5n87iFGKO1wnQJYhWjvhCRvFRbUIqBLbR2JXaF3ZE5XYpQ G8dQeEmR0qGtBShrkuy23JXHwM9xbdCs -----END CERTIFICATE-----Generated at Mon May 6 20:19:13 2024 by rpki-client on console-fra.rpki-client.org