$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: DrPiLLCSX+yEuFq6r3ZehO72zZLofY+BcipDmlcmvX0= Subject key identifier: DA:23:93:EC:D8:49:47:27:2C:AA:25:F3:44:5D:BA:A2:3A:54:16:A3 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: DB Signing time: Sun 05 May 2024 06:04:44 +0000 Manifest this update: Sun 05 May 2024 06:04:44 +0000 Manifest next update: Sun 12 May 2024 06:04:44 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: mZgqsVSe2AhJcdNcNz3Kld2PO+S2JmKBzW4GOX4Li9U=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: V8tQPJgIafOML1xImTfe44DixBLHxhrgUhynPfLWKws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: May 5 06:04:44 2024 GMT Not After : May 12 06:04:44 2024 GMT Subject: CN=6637217c-1799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:a1:b9:91:b6:8f:3b:a5:fa:03:6c:94:cd: 50:b9:2f:e5:83:6d:e3:0b:d9:59:da:d7:b3:a6:6a: 4c:a5:c4:9f:52:16:55:e1:57:52:e7:14:6f:cd:ad: 93:0b:15:ad:69:6e:45:f6:38:29:d2:30:3b:e0:0e: 29:2b:70:b0:76:6d:47:7b:cd:cd:08:dc:bb:24:a8: 39:b2:3c:c2:60:8f:9a:ff:5e:db:b3:8b:7b:e4:3a: 48:95:14:48:d8:28:9a:ed:49:52:75:2c:10:f5:71: 41:9f:48:97:b5:ef:9a:dc:13:2c:96:da:21:a2:c0: 2a:02:b1:a9:69:af:78:a1:1f:27:f0:5c:ee:10:15: 44:7e:55:54:3d:25:40:4f:5b:20:c5:88:63:f6:24: 5a:83:a2:50:dd:4a:ff:1b:9a:dc:e7:b1:63:30:34: d9:a1:43:39:cf:0c:c6:87:a8:11:43:eb:4c:0b:e4: 5d:6c:41:ea:cd:9b:11:bc:ee:2b:d0:3c:b5:0d:82: 63:b3:bd:e6:8d:cd:a8:5b:53:4f:3b:3a:8a:f0:6c: 5a:fd:bd:03:c4:1c:3c:ef:da:a3:f3:ec:07:83:90: 63:aa:fb:89:60:f1:fa:dd:c8:5d:b6:1f:58:ac:9b: 9a:68:e4:e8:7b:65:98:8a:5d:7b:a2:3f:31:c4:01: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:23:93:EC:D8:49:47:27:2C:AA:25:F3:44:5D:BA:A2:3A:54:16:A3 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:db:b2:d7:4d:64:ac:7e:57:3a:ac:c2:ce:39:d0:75:67:c9: b3:b8:f1:32:96:49:74:04:a9:96:8d:74:0a:78:7a:98:8f:1e: 59:b7:4b:88:22:6a:fa:5d:8a:e9:07:e6:97:41:67:2a:72:d7: b1:9f:2c:54:64:10:e3:04:cc:30:75:9c:b6:58:37:c5:1c:02: 8b:f5:5a:b4:06:1b:e3:da:ed:94:f4:b2:db:13:ff:ff:7c:1b: 7b:7d:da:5a:41:88:7b:d7:51:66:50:1a:e1:da:0c:92:82:84: 7a:c7:1a:fd:93:2c:37:aa:7f:22:af:d2:69:7c:0e:7f:5f:18: 4a:31:ec:1c:6e:9f:8b:f7:2c:28:2b:55:f3:97:f1:20:e9:f3: c7:59:18:c0:0d:4e:4c:81:77:32:4b:45:5d:6c:17:b7:b2:17: b2:98:c7:e7:64:f7:29:86:fc:ae:18:9c:84:06:33:8e:9a:12: 8a:fb:af:4b:c5:91:e7:b0:1a:82:9c:6e:82:17:1d:8d:4b:b6: 90:81:81:9f:55:77:ae:d2:3e:4c:11:c3:89:f3:c1:de:6d:87: 88:3e:6e:d3:e2:b8:d5:58:ba:8b:44:16:fe:24:cb:7f:3b:67: 5f:81:96:5c:53:ab:dd:a9:15:f1:bd:21:36:2c:bd:6e:9c:17: 4e:01:39:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjQwNTA1MDYwNDQ0WhcNMjQwNTEyMDYwNDQ0WjAYMRYwFAYD VQQDEw02NjM3MjE3Yy0xNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tyhuZG2jzul+gNslM1QuS/lg23jC9lZ2tezpmpMpcSfUhZV4VdS5xRvza2T CxWtaW5F9jgp0jA74A4pK3Cwdm1He83NCNy7JKg5sjzCYI+a/17bs4t75DpIlRRI 2Cia7UlSdSwQ9XFBn0iXte+a3BMsltohosAqArGpaa94oR8n8FzuEBVEflVUPSVA T1sgxYhj9iRag6JQ3Ur/G5rc57FjMDTZoUM5zwzGh6gRQ+tMC+RdbEHqzZsRvO4r 0Dy1DYJjs73mjc2oW1NPOzqK8Gxa/b0DxBw879qj8+wHg5BjqvuJYPH63chdth9Y rJuaaOToe2WYil17oj8xxAHWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNojk+zY SUcnLKol80RduqI6VBajMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK27LXTWSsflc6rMLOOdB1Z8mzuPEylkl0BKmWjXQKeHqYjx5Zt0uI Imr6XYrpB+aXQWcqctexnyxUZBDjBMwwdZy2WDfFHAKL9Vq0Bhvj2u2U9LLbE/// fBt7fdpaQYh711FmUBrh2gySgoR6xxr9kyw3qn8ir9JpfA5/XxhKMewcbp+L9ywo K1Xzl/Eg6fPHWRjADU5MgXcyS0VdbBe3sheymMfnZPcphvyuGJyEBjOOmhKK+69L xZHnsBqCnG6CFx2NS7aQgYGfVXeu0j5MEcOJ88HebYeIPm7T4rjVWLqLRBb+JMt/ O2dfgZZcU6vdqRXxvSE2LL1unBdOATm+ -----END CERTIFICATE-----Generated at Sun May 5 08:39:11 2024 by rpki-client on console-fra.rpki-client.org