$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: nb8GuLFFLg+DDnPqjKWhkT8toWkDzpdCdSMz+mtGxeo= Subject key identifier: C5:6A:31:E0:98:CF:50:12:4C:C2:55:63:64:74:58:F4:32:C0:FA:AC Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: 0F Signing time: Wed 15 May 2024 09:00:25 +0000 Manifest this update: Wed 15 May 2024 09:00:25 +0000 Manifest next update: Wed 22 May 2024 09:00:25 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: AIee4qwjA0y/cgyRCBwuWGwfctrFUjPd8wVA4sXKsx8=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: 8kO5Y6mBbR8uiBBtuQEnY7XxsIn44iqMDq9T/sqgPbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 09:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: May 15 09:00:25 2024 GMT Not After : May 22 09:00:25 2024 GMT Subject: CN=664479a9-3e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ee:f6:e2:28:2f:dc:01:2a:f5:4f:cb:da:20: 15:9b:36:69:61:34:31:ec:22:33:11:77:1a:fc:48: 7f:c2:eb:66:8f:ad:ec:f9:57:b2:61:ea:33:b0:ed: 8e:c5:3a:af:4e:99:26:ce:ff:3c:c7:6c:49:36:5b: ee:c7:3e:87:3e:82:1d:32:65:33:6e:76:9b:cc:bd: 2d:08:b8:e8:b1:23:05:01:d7:fc:37:25:d2:b0:99: 3e:13:12:fe:1c:03:8c:61:b4:de:c6:ac:00:d0:f4: 1e:31:ac:df:3c:0d:2f:1b:27:32:51:a3:95:77:b1: 7f:eb:b6:89:e3:a9:23:fc:6d:bb:f4:6c:14:b5:96: 37:c3:b0:84:a5:e0:b9:07:01:7d:83:22:75:88:f5: e3:bb:1d:e4:3b:f0:70:c5:70:60:88:6d:06:54:c5: 91:07:fa:73:a9:f8:55:0f:1b:cb:49:cd:52:be:bb: 42:81:14:56:86:30:d3:26:94:f2:a0:d1:31:7f:1e: e4:36:43:2a:79:83:90:51:d0:4d:cd:0c:50:ec:14: ea:01:d3:ea:4b:91:cb:88:b5:5f:6b:68:64:ce:4a: 34:30:f1:cc:34:53:23:63:0c:0d:fc:46:97:b0:cb: 8e:8b:cb:fc:4c:ae:a5:95:5c:07:86:12:ae:ad:ac: 68:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6A:31:E0:98:CF:50:12:4C:C2:55:63:64:74:58:F4:32:C0:FA:AC X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:90:61:ff:34:e9:7d:55:f7:c1:4c:12:e5:a8:b5:75:4d:4f: 87:1d:bc:16:32:bd:16:b6:11:66:3b:cf:bb:54:dc:87:ec:fe: e6:ef:11:c0:9a:e5:cd:ff:ce:78:3d:61:53:01:28:49:5e:b2: 98:fe:d0:6e:04:0c:7d:3c:69:59:a8:e8:ef:af:b5:5f:37:f4: 89:6f:c6:43:00:bc:3f:00:84:a9:02:9c:1f:bf:2b:00:95:51: 73:e6:c6:e7:98:11:e0:c7:c7:f9:94:c5:32:72:6e:fd:f2:74: 3c:c9:81:78:f6:4c:a1:57:d8:6e:e3:dd:01:eb:13:93:9c:3b: 83:e3:59:c7:80:93:b7:59:01:31:84:d7:d9:7f:c7:3d:49:6e: 42:ee:fa:c2:2a:84:f4:32:07:ea:b8:84:5f:06:55:8a:1e:77: 4b:c1:a5:12:5d:e4:de:f5:7c:4c:56:0f:69:bd:92:10:4e:a3: 67:cc:8d:14:27:41:a9:e4:e9:51:50:3a:4f:3a:de:9f:ab:f4: bb:dc:f3:eb:1d:77:06:2d:ea:ea:5c:1d:89:cd:27:d9:40:95: 55:dd:4f:e4:6e:15:c1:c3:a8:d8:a4:9f:64:38:15:5a:ee:29: 72:1a:01:a6:6e:89:39:75:ef:a9:df:d6:ba:3e:b0:85:42:7d: 78:bf:4a:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzhFMjExMC8GA1UEBRMoMEVEQjRBMzcyNzBCRjQ5NDE4NEE0NkU2MDIzMTQ4RkVE NkUzM0ExRTAeFw0yNDA1MTUwOTAwMjVaFw0yNDA1MjIwOTAwMjVaMBgxFjAUBgNV BAMTDTY2NDQ3OWE5LTNlMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDr7vbiKC/cASr1T8vaIBWbNmlhNDHsIjMRdxr8SH/C62aPrez5V7Jh6jOw7Y7F Oq9OmSbO/zzHbEk2W+7HPoc+gh0yZTNudpvMvS0IuOixIwUB1/w3JdKwmT4TEv4c A4xhtN7GrADQ9B4xrN88DS8bJzJRo5V3sX/rtonjqSP8bbv0bBS1ljfDsISl4LkH AX2DInWI9eO7HeQ78HDFcGCIbQZUxZEH+nOp+FUPG8tJzVK+u0KBFFaGMNMmlPKg 0TF/HuQ2Qyp5g5BR0E3NDFDsFOoB0+pLkcuItV9raGTOSjQw8cw0UyNjDA38Rpew y46Ly/xMrqWVXAeGEq6trGiNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxWox4JjP UBJMwlVjZHRY9DLA+qwwHwYDVR0jBBgwFoAUDttKNycL9JQYSkbmAjFI/tbjOh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEUyL0FGMzIwODNFRkM2 ODExRUU5OTYxREQ1REM0RjlBRTAyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9o NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHR0S055Y0w5SlFZU2tibUFqRklfdGJqT2g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OEUyL0FGMzIwODNFRkM2ODExRUU5OTYxREQ1REM0RjlBRTAyL0R0dEtOeWNMOUpR WVNrYm1BakZJX3Riak9oNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCQYf806X1V98FMEuWotXVNT4cdvBYyvRa2EWY7z7tU3Ifs/ubvEcCa 5c3/zng9YVMBKElespj+0G4EDH08aVmo6O+vtV839IlvxkMAvD8AhKkCnB+/KwCV UXPmxueYEeDHx/mUxTJybv3ydDzJgXj2TKFX2G7j3QHrE5OcO4PjWceAk7dZATGE 19l/xz1JbkLu+sIqhPQyB+q4hF8GVYoed0vBpRJd5N71fExWD2m9khBOo2fMjRQn Qank6VFQOk863p+r9Lvc8+sddwYt6upcHYnNJ9lAlVXdT+RuFcHDqNikn2Q4FVru KXIaAaZuiTl176nf1ro+sIVCfXi/SjQ= -----END CERTIFICATE-----Generated at Wed May 15 11:17:43 2024 by rpki-client on console-ams.rpki-client.org