$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft File: dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json) Hash identifier: q+PRHbU+jyhRckV2gH0qYB8U0rPtmQx3dSrmeJpeyt8= Subject key identifier: 22:35:6E:DA:D6:4E:D1:98:7D:B5:E1:D1:CF:71:E8:76:FC:DC:21:E1 Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft Manifest number: 0587 Signing time: Thu 25 Apr 2024 00:36:12 +0000 Manifest this update: Thu 25 Apr 2024 00:36:12 +0000 Manifest next update: Thu 02 May 2024 00:36:12 +0000 Files and hashes: 1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: lN/vQKa2NroVxfuR5BhTFoKkPdWbow66MFUHUO1K8FY=) 2: 94F5846AE0D011ECAF88A30DC4F9AE02.roa (hash: 896DSl/Ie9Cq4OSO3Lbvg27RkpYXHU4D1YNEjncD07s=) 3: 9056CDF6A6D211EDA1D2862BC4F9AE02.roa (hash: uA9tlBnptzVVUG52OWmsPth+4LeAm/e2CWXfQnsdyqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411 Validity Not Before: Apr 25 00:36:12 2024 GMT Not After : May 2 00:36:12 2024 GMT Subject: CN=6629a57c-146e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:96:e6:09:7b:67:09:3b:11:57:f0:97:64: 83:0c:fc:7c:db:3a:a7:f2:ba:50:24:6d:bb:e0:e2: 84:bb:15:a5:bf:b9:bb:f5:f7:f2:55:63:dc:9c:69: df:c9:ec:7b:e9:37:a1:f7:4c:a7:c2:d5:d5:5a:5d: 81:a4:cb:ad:8e:4f:15:88:f7:a4:53:16:92:3a:99: 9e:ae:4d:35:45:95:52:55:e3:b8:0d:47:dd:81:03: 2f:b0:bf:1c:1d:16:89:a1:71:ec:62:00:32:7e:62: ad:07:c3:b7:09:9d:48:a9:04:cc:14:62:4a:34:ae: e4:ef:b6:dd:9b:2e:fa:41:6d:08:5f:e6:c7:33:61: dc:35:d9:dc:d6:b6:cd:b5:fa:c4:08:3d:54:96:70: cb:34:e8:78:e7:53:66:c3:ee:dd:c6:dc:24:d5:7a: 87:8a:0e:ee:ba:e6:0f:5d:f2:ec:77:39:ec:c4:7c: e1:26:b6:94:43:76:6d:33:50:24:43:ac:aa:a3:45: 87:46:d1:56:20:6f:50:06:7b:d5:e0:8f:dc:c9:6d: d7:c3:4f:9d:95:4f:cf:8c:ed:f0:94:0b:83:31:4e: 2d:f5:b3:46:39:c0:38:8a:79:b3:1c:fd:82:76:92: 79:77:de:47:bc:65:fe:b8:5e:44:44:67:91:24:9b: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:6E:DA:D6:4E:D1:98:7D:B5:E1:D1:CF:71:E8:76:FC:DC:21:E1 X509v3 Authority Key Identifier: keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:40:21:34:a8:49:be:e5:38:25:a1:d9:b3:a0:00:56:06:25: 94:d2:6f:17:b6:26:4a:5f:42:95:69:f5:53:3b:91:fc:d2:64: d1:38:21:56:8c:50:f8:8f:68:b3:04:b9:e5:1b:51:a3:1e:1e: a2:7e:c3:5c:14:09:f8:d6:0f:f7:05:7d:dd:41:67:c2:9b:d1: 3c:11:d1:15:bb:59:9e:16:9a:23:7b:b7:de:e5:14:74:d9:6d: ae:a5:0a:db:fa:46:2c:ab:13:c6:06:6e:23:ee:c9:a6:03:b4: 31:1e:01:f7:93:ad:72:a5:20:51:4c:41:32:c6:5d:52:3e:41: e3:90:f2:e1:92:a2:d1:3e:52:c6:2f:6a:aa:76:bc:a3:3e:b6: 3b:dc:f7:fa:e1:c3:5c:fd:bc:87:69:81:d4:5e:29:c0:ce:b9: 3f:6a:98:3d:ec:b0:8a:3d:d3:5b:b7:29:02:10:20:58:c8:87: 9f:59:99:0c:1a:a2:99:14:a8:93:cd:2b:4c:3f:ef:7c:4b:f2: 33:c6:ab:40:6f:55:8a:36:89:3d:fb:50:d2:c5:79:0e:72:52: 3a:9b:e3:4a:5d:8f:4e:0f:b1:33:4c:1d:df:ea:8a:ed:11:74: b7:13:9b:c6:f2:26:7c:33:bd:6f:0b:37:7c:16:dd:c7:76:9a: 79:1c:3e:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB RjA5Rjg0MTEwHhcNMjQwNDI1MDAzNjEyWhcNMjQwNTAyMDAzNjEyWjAYMRYwFAYD VQQDEw02NjI5YTU3Yy0xNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaaW5gl7Zwk7EVfwl2SDDPx82zqn8rpQJG274OKEuxWlv7m79ffyVWPcnGnf yex76Teh90ynwtXVWl2BpMutjk8ViPekUxaSOpmerk01RZVSVeO4DUfdgQMvsL8c HRaJoXHsYgAyfmKtB8O3CZ1IqQTMFGJKNK7k77bdmy76QW0IX+bHM2HcNdnc1rbN tfrECD1UlnDLNOh451Nmw+7dxtwk1XqHig7uuuYPXfLsdznsxHzhJraUQ3ZtM1Ak Q6yqo0WHRtFWIG9QBnvV4I/cyW3Xw0+dlU/PjO3wlAuDMU4t9bNGOcA4inmzHP2C dpJ5d95HvGX+uF5ERGeRJJs0YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCI1btrW TtGYfbXh0c9x6Hb83CHhMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjlGOC85MkQwQkUwMjkwNjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdh a3Q0aUkyb3FXbEN2Q2ZoQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCQCE0qEm+5TglodmzoABWBiWU0m8XtiZKX0KVafVTO5H80mTROCFW jFD4j2izBLnlG1GjHh6ifsNcFAn41g/3BX3dQWfCm9E8EdEVu1meFpoje7fe5RR0 2W2upQrb+kYsqxPGBm4j7smmA7QxHgH3k61ypSBRTEEyxl1SPkHjkPLhkqLRPlLG L2qqdryjPrY73Pf64cNc/byHaYHUXinAzrk/apg97LCKPdNbtykCECBYyIefWZkM GqKZFKiTzStMP+98S/IzxqtAb1WKNok9+1DSxXkOclI6m+NKXY9OD7EzTB3f6ort EXS3E5vG8iZ8M71vCzd8Ft3Hdpp5HD7d -----END CERTIFICATE-----Generated at Thu Apr 25 01:20:42 2024 by rpki-client on console-fra.rpki-client.org