$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: y86T0u2UOBgs3mmudNH4Zv3ZULNBsdL+h2t/SVPb/Tg= Subject key identifier: 2F:7B:3D:57:4E:A5:8E:48:B6:DC:6F:C7:14:DB:49:47:79:5C:17:CB Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 019F Signing time: Wed 01 May 2024 04:56:42 +0000 Manifest this update: Wed 01 May 2024 04:56:41 +0000 Manifest next update: Wed 08 May 2024 04:56:41 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: ALFS3g2XuLmjeMAJDoFEpLbLduFru8bDH3pkYegehS4=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: KsUPkgG8JXCSKIWSTTEQ4p7dlp8167y8KTewGqoAc3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: May 1 04:56:41 2024 GMT Not After : May 8 04:56:41 2024 GMT Subject: CN=6631cb8a-6e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ae:20:1e:a5:26:0d:9b:47:0d:3f:41:6e:fc: 4c:c2:13:9a:7a:e7:f6:06:e7:01:b9:3b:d3:a7:39: 53:e8:0d:c3:03:2f:9f:3e:73:66:45:36:02:24:fa: 37:58:72:0a:c9:a1:c8:c0:54:0a:bd:94:77:87:d6: 83:fd:7b:51:5a:36:25:e7:d0:ae:5b:aa:34:8f:ef: 1e:4a:54:ab:f8:db:17:c4:ad:f6:7e:30:20:f8:d3: 90:4c:b5:8e:64:90:4b:95:57:76:35:47:e5:32:3d: 13:c4:ec:63:89:1d:ec:a3:1a:22:1b:bf:20:58:4e: a9:35:4b:98:2f:54:5a:37:92:53:9b:6c:71:93:f3: 25:6c:34:37:da:09:24:80:36:37:b4:26:64:03:37: 3b:f6:ff:16:1b:68:f2:eb:7d:9e:61:fc:59:50:b9: cb:1c:16:84:d7:55:81:1a:d7:8f:05:3f:66:ed:f5: c0:bf:7f:3c:4a:c4:4f:9c:63:86:cb:86:77:b0:70: 96:3a:9a:5b:92:f2:8c:37:5e:7d:76:92:64:78:e4: b2:e8:72:fa:7e:67:b4:b8:40:e5:75:e9:6b:4b:d1: b8:16:09:19:88:d4:59:eb:d1:ad:d2:f7:5d:ee:2c: 53:00:48:22:91:28:9b:63:9a:24:00:78:77:69:2b: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7B:3D:57:4E:A5:8E:48:B6:DC:6F:C7:14:DB:49:47:79:5C:17:CB X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a0:ba:af:64:28:95:69:83:88:fb:ad:53:aa:8e:55:cf:48: 15:a5:9a:b6:53:cb:37:d1:26:0a:e8:91:f5:85:8c:ed:3e:18: 5d:b1:f6:1a:b2:d9:03:35:d9:10:5d:0d:d6:59:12:ef:99:97: 28:a5:71:89:0c:28:d5:a8:0a:d0:c8:2d:9c:df:e8:91:a1:6c: f6:ef:54:83:66:1e:f3:60:2e:04:a4:ef:c4:15:7b:9c:7d:d5: 50:49:66:79:bb:bf:6b:60:98:d1:cd:84:8d:dc:2c:d7:48:c2: 83:7f:04:33:63:05:2d:2f:4e:e2:db:ab:df:c5:19:f5:02:d4: 64:05:63:1e:85:82:31:7a:31:aa:c3:ad:aa:1b:26:58:ef:f3: fb:0e:95:db:53:48:4d:b7:f2:d3:11:44:ac:cc:93:c5:93:39: a3:a7:f7:9d:c1:ab:6c:a3:f1:00:e9:9b:54:d3:55:72:5f:05: cf:72:f1:82:02:e7:5a:51:e3:69:7f:e6:dc:c9:ce:fb:de:1c: fc:33:ec:c6:ca:11:d1:58:3e:df:bb:3a:71:33:61:9c:3f:e3: 3b:cb:ed:7f:41:cd:51:e0:47:c2:2d:4f:c0:b9:af:e3:4a:bf: 1d:0a:a9:b1:96:32:42:e9:b5:c3:f8:2a:4a:6e:e5:76:7b:07: 94:b2:1e:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjQwNTAxMDQ1NjQxWhcNMjQwNTA4MDQ1NjQxWjAYMRYwFAYD VQQDEw02NjMxY2I4YS02ZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5q4gHqUmDZtHDT9BbvxMwhOaeuf2BucBuTvTpzlT6A3DAy+fPnNmRTYCJPo3 WHIKyaHIwFQKvZR3h9aD/XtRWjYl59CuW6o0j+8eSlSr+NsXxK32fjAg+NOQTLWO ZJBLlVd2NUflMj0TxOxjiR3soxoiG78gWE6pNUuYL1RaN5JTm2xxk/MlbDQ32gkk gDY3tCZkAzc79v8WG2jy632eYfxZULnLHBaE11WBGtePBT9m7fXAv388SsRPnGOG y4Z3sHCWOppbkvKMN159dpJkeOSy6HL6fme0uEDldelrS9G4FgkZiNRZ69Gt0vdd 7ixTAEgikSibY5okAHh3aSuf8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC97PVdO pY5IttxvxxTbSUd5XBfLMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOoLqvZCiVaYOI+61Tqo5Vz0gVpZq2U8s30SYK6JH1hYztPhhdsfYa stkDNdkQXQ3WWRLvmZcopXGJDCjVqArQyC2c3+iRoWz271SDZh7zYC4EpO/EFXuc fdVQSWZ5u79rYJjRzYSN3CzXSMKDfwQzYwUtL07i26vfxRn1AtRkBWMehYIxejGq w62qGyZY7/P7DpXbU0hNt/LTEUSszJPFkzmjp/edwatso/EA6ZtU01VyXwXPcvGC AudaUeNpf+bcyc773hz8M+zGyhHRWD7fuzpxM2GcP+M7y+1/Qc1R4EfCLU/Aua/j Sr8dCqmxljJC6bXD+CpKbuV2eweUsh6E -----END CERTIFICATE-----Generated at Wed May 1 05:59:10 2024 by rpki-client on console-fra.rpki-client.org