$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft File: dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft (raw, json) Hash identifier: iQp6qdnwtD5ThEupNOB/RYGEGRyEOlhicU7vG65WR84= Subject key identifier: CD:AD:51:E6:8F:7F:A1:0D:D1:14:78:9C:A1:60:30:6C:C4:C9:05:C9 Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Certificate serial: 058E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft Manifest number: 058A Signing time: Sun 05 May 2024 00:39:28 +0000 Manifest this update: Sun 05 May 2024 00:39:28 +0000 Manifest next update: Sun 12 May 2024 00:39:28 +0000 Files and hashes: 1: dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl (hash: t1Yy8P1o84rSi2v7rAnI57LjOs9doP4tXU6xq1pQDPo=) 2: 87F6FDDC880911EB96D8882DC4F9AE02.roa (hash: suHvTQAomyIkUqlAyt38u4ad/m8Cw95cixcJetHke24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1422 (0x58e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F Validity Not Before: May 5 00:39:28 2024 GMT Not After : May 12 00:39:28 2024 GMT Subject: CN=6636d540-d502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:e3:fb:6e:51:c7:dd:67:9f:47:c9:f1:fb: f3:2d:54:28:1e:64:f4:a2:2f:87:7b:ee:c8:08:47: eb:69:a7:de:36:c1:6f:80:b6:ca:37:1b:3b:9e:54: e1:1d:d5:b7:d0:89:90:97:4b:62:9f:f3:e1:64:21: 78:85:e4:0a:09:87:08:33:f0:10:9a:b1:f3:9f:29: fc:90:da:5b:fe:e8:1e:31:da:27:58:aa:39:aa:b4: 1f:d2:72:c0:61:47:e8:d5:3c:81:17:08:af:02:c7: 0a:07:c7:62:54:82:a4:7d:88:57:8a:53:4c:19:07: df:e4:df:a7:e1:82:9a:dc:c2:4f:4c:0a:54:eb:2f: 81:4b:f5:3f:ea:40:68:b0:dd:c9:7d:6c:47:99:52: 52:3d:7d:ad:5b:f8:80:9a:0c:80:2b:37:73:57:cb: 68:06:aa:b7:db:68:f7:eb:62:58:f4:e7:d3:ee:8e: 92:15:36:5f:12:03:40:cf:7e:f4:7c:2d:39:f3:00: 38:29:0f:1f:c0:01:c9:7b:b3:c0:6f:2b:23:9f:75: 73:c8:3b:48:1e:4b:0d:bb:f0:83:2e:53:47:c0:04: 68:b9:2a:2b:23:9a:4a:d0:89:04:4b:1b:0b:87:5a: bd:d9:c6:31:83:07:09:5d:ac:43:87:f5:49:a7:a8: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AD:51:E6:8F:7F:A1:0D:D1:14:78:9C:A1:60:30:6C:C4:C9:05:C9 X509v3 Authority Key Identifier: keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ce:36:09:95:e0:ff:e4:54:d7:6b:76:e4:b5:6a:87:b5:3d: 72:0a:67:6d:92:a0:72:66:6d:f9:ce:5f:de:a0:b8:66:d5:cb: 11:50:86:b1:e7:1e:4c:21:7c:e0:8d:3e:68:bb:2c:df:b5:d9: 3d:88:4e:a1:b0:cf:1e:ec:0d:52:14:c4:1c:02:1e:4f:cd:a4: 06:7d:80:a9:c3:bb:b5:85:48:b7:61:48:7a:d5:17:42:d9:80: 4f:91:2d:da:a5:89:83:7d:c4:61:1a:0f:90:52:50:82:0a:be: 99:9e:f6:9b:30:18:94:3d:e4:bc:99:3b:a5:bf:5c:ba:d1:4f: 7f:42:c2:f3:32:c3:f2:e9:55:90:dd:4a:68:55:ea:32:c5:ae: 1c:5b:a8:14:fe:a7:4f:72:83:36:28:85:60:d5:f1:5f:4c:9c: d9:1d:97:29:6f:aa:1d:e0:60:1f:f0:9f:b1:2a:10:d9:0c:ea: 07:aa:81:77:e4:dc:86:ef:22:a9:6f:ef:e9:af:eb:e7:8d:56: cb:1b:7e:44:1e:88:ed:f4:dc:9b:8a:91:56:f0:6d:e4:d9:7f: 25:4f:8f:3e:c3:eb:41:f0:00:19:66:5e:ac:43:7b:0a:df:cf: ba:57:2e:70:b6:66:ca:15:c7:e6:e6:3a:2b:8d:d1:45:a0:60: dc:b3:35:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdFMTcxMTAvBgNVBAUTKDc2RDFGNjZDMDE2REMxODQ3MzRFNkQ5QkUxQkVFOTA4 MDFGRkEwMUYwHhcNMjQwNTA1MDAzOTI4WhcNMjQwNTEyMDAzOTI4WjAYMRYwFAYD VQQDEw02NjM2ZDU0MC1kNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlnj+25Rx91nn0fJ8fvzLVQoHmT0oi+He+7ICEfraafeNsFvgLbKNxs7nlTh HdW30ImQl0tin/PhZCF4heQKCYcIM/AQmrHznyn8kNpb/ugeMdonWKo5qrQf0nLA YUfo1TyBFwivAscKB8diVIKkfYhXilNMGQff5N+n4YKa3MJPTApU6y+BS/U/6kBo sN3JfWxHmVJSPX2tW/iAmgyAKzdzV8toBqq322j362JY9OfT7o6SFTZfEgNAz370 fC058wA4KQ8fwAHJe7PAbysjn3VzyDtIHksNu/CDLlNHwARouSorI5pK0IkESxsL h1q92cYxgwcJXaxDh/VJp6iooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2tUeaP f6EN0RR4nKFgMGzEyQXJMB8GA1UdIwQYMBaAFHbR9mwBbcGEc05tm+G+6QgB/6Af MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0UxNy83QUIwQjU2Njg4 MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZUnpUbTJiNGI3cENBSF9v QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0SDJiQUZ0d1lSelRtMmI0YjdwQ0FIX29COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0UxNy83QUIwQjU2Njg4MDcxMUVCQTBBOUI2MkFDNEY5QUUwMi9kdEgyYkFGdHdZ UnpUbTJiNGI3cENBSF9vQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9zjYJleD/5FTXa3bktWqHtT1yCmdtkqByZm35zl/eoLhm1csRUIax 5x5MIXzgjT5ouyzftdk9iE6hsM8e7A1SFMQcAh5PzaQGfYCpw7u1hUi3YUh61RdC 2YBPkS3apYmDfcRhGg+QUlCCCr6ZnvabMBiUPeS8mTulv1y60U9/QsLzMsPy6VWQ 3UpoVeoyxa4cW6gU/qdPcoM2KIVg1fFfTJzZHZcpb6od4GAf8J+xKhDZDOoHqoF3 5NyG7yKpb+/pr+vnjVbLG35EHojt9NybipFW8G3k2X8lT48+w+tB8AAZZl6sQ3sK 38+6Vy5wtmbKFcfm5jorjdFFoGDcszUh -----END CERTIFICATE-----Generated at Sun May 5 01:22:24 2024 by rpki-client on console-fra.rpki-client.org