$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft File: DkTRm3yVibI0LQUesJRJN0je608.mft (raw, json) Hash identifier: d0eVUYX831x6h7IXxvN3WCjEl4f8+hbjd9zbvdC5n6I= Subject key identifier: B5:51:D2:8A:BD:2D:09:FE:A4:E7:46:86:81:A7:02:BB:86:D6:37:C8 Authority key identifier: 0E:44:D1:9B:7C:95:89:B2:34:2D:05:1E:B0:94:49:37:48:DE:EB:4F Certificate issuer: /CN=A91C6504/serialNumber=0E44D19B7C9589B2342D051EB094493748DEEB4F Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkTRm3yVibI0LQUesJRJN0je608.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft Manifest number: C0 Signing time: Fri 03 May 2024 06:33:03 +0000 Manifest this update: Fri 03 May 2024 06:33:02 +0000 Manifest next update: Fri 10 May 2024 06:33:02 +0000 Files and hashes: 1: DkTRm3yVibI0LQUesJRJN0je608.crl (hash: 9iDnbHBD+JmaZB9qloMyVey3K2L5qPfop/bBtdqBgsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.crl rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkTRm3yVibI0LQUesJRJN0je608.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6504/serialNumber=0E44D19B7C9589B2342D051EB094493748DEEB4F Validity Not Before: May 3 06:33:02 2024 GMT Not After : May 10 06:33:02 2024 GMT Subject: CN=6634851f-8b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d9:e0:dc:ec:60:c4:49:4e:b3:8f:0c:46:79: 63:ab:2c:39:a9:3f:bc:91:ef:1d:61:98:98:0b:e0: 90:ea:46:84:e9:a0:75:28:0e:fb:e8:02:f6:c0:44: 14:05:32:a1:bb:4e:c2:24:91:bb:34:81:4b:dc:3b: fc:16:b5:25:ae:5d:de:df:37:e7:ac:60:ab:c3:96: 10:ad:e9:3b:ea:ab:4e:72:03:7d:e4:2d:d2:d7:66: c9:23:a7:95:a0:d8:1f:09:56:02:80:ad:dd:fd:bb: 13:d1:29:19:22:b9:26:dc:77:c1:24:5c:da:19:ef: ee:55:d3:c3:ad:f3:26:92:11:47:b7:48:46:77:e2: 58:03:22:9e:31:4d:89:6e:ec:fc:70:21:55:13:74: 5d:ce:c9:df:6c:60:2a:e7:47:b5:93:7e:9e:c9:f7: 16:1f:c6:24:4e:cf:11:75:38:a1:b7:2c:c0:a7:c9: d8:f3:27:9c:f2:14:9c:0b:7e:f2:7f:64:9f:74:c9: c7:b4:9b:82:d2:d0:05:11:b2:60:eb:ce:81:34:22: 92:37:b8:c2:e6:e1:e3:10:58:15:f8:db:f4:30:d6: 86:4b:13:02:7b:7d:59:9c:b7:0b:d6:b5:e7:59:09: f0:02:d6:83:3b:a1:e4:8e:6f:cf:08:df:10:df:b5: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:51:D2:8A:BD:2D:09:FE:A4:E7:46:86:81:A7:02:BB:86:D6:37:C8 X509v3 Authority Key Identifier: keyid:0E:44:D1:9B:7C:95:89:B2:34:2D:05:1E:B0:94:49:37:48:DE:EB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkTRm3yVibI0LQUesJRJN0je608.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6504/91E06E84EFA711ED9B27356EC4F9AE02/DkTRm3yVibI0LQUesJRJN0je608.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:6f:82:2f:ac:d5:c4:03:f6:39:c3:e4:84:d2:da:6c:75:25: 9b:cb:00:f8:e6:ad:cf:05:2f:35:ca:39:b1:8b:e7:8b:de:fc: 6b:bf:21:c0:2b:da:de:ab:11:2c:11:29:64:f1:e2:a5:87:d0: 76:9c:f0:1c:25:59:d5:94:4c:ab:92:33:5f:02:be:a4:bb:ca: 69:b6:7b:84:de:44:f4:47:86:2a:79:bf:7f:d4:88:72:1e:39: e5:35:60:ac:19:54:22:3b:7e:78:8a:16:4a:a4:91:d1:86:ba: 2d:bd:fe:cb:10:88:33:72:8a:29:e9:df:6d:c6:be:cf:c2:17: 06:3e:b3:01:33:ee:ee:ea:2a:23:59:ce:5c:02:53:5f:6b:f9: 2e:07:99:22:29:a9:ea:24:5f:80:4e:f9:9a:7e:1b:72:28:fb: 75:50:39:52:7b:98:db:b2:17:71:13:d5:9d:ec:c1:7c:86:e1: eb:e1:74:30:3d:cf:d3:54:77:27:c5:8f:6f:f9:13:ee:3a:84: 66:03:c8:c3:34:06:26:4f:8e:59:72:95:a3:89:34:01:3c:4e: fa:0b:9b:86:13:ea:c1:23:f6:f9:59:23:0a:2d:83:6d:0c:3d: 97:a3:f2:df:a6:6f:ce:34:27:6e:8d:1f:58:89:05:0b:c4:9b: fd:0e:d4:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1MDQxMTAvBgNVBAUTKDBFNDREMTlCN0M5NTg5QjIzNDJEMDUxRUIwOTQ0OTM3 NDhERUVCNEYwHhcNMjQwNTAzMDYzMzAyWhcNMjQwNTEwMDYzMzAyWjAYMRYwFAYD VQQDEw02NjM0ODUxZi04YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49ng3OxgxElOs48MRnljqyw5qT+8ke8dYZiYC+CQ6kaE6aB1KA776AL2wEQU BTKhu07CJJG7NIFL3Dv8FrUlrl3e3zfnrGCrw5YQrek76qtOcgN95C3S12bJI6eV oNgfCVYCgK3d/bsT0SkZIrkm3HfBJFzaGe/uVdPDrfMmkhFHt0hGd+JYAyKeMU2J buz8cCFVE3RdzsnfbGAq50e1k36eyfcWH8YkTs8RdTihtyzAp8nY8yec8hScC37y f2SfdMnHtJuC0tAFEbJg686BNCKSN7jC5uHjEFgV+Nv0MNaGSxMCe31ZnLcL1rXn WQnwAtaDO6Hkjm/PCN8Q37UztQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVR0oq9 LQn+pOdGhoGnAruG1jfIMB8GA1UdIwQYMBaAFA5E0Zt8lYmyNC0FHrCUSTdI3utP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjUwNC85MUUwNkU4NEVG QTcxMUVEOUIyNzM1NkVDNEY5QUUwMi9Ea1RSbTN5VmliSTBMUVVlc0pSSk4wamU2 MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RrVFJtM3lWaWJJMExRVWVzSlJKTjBqZTYwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjUwNC85MUUwNkU4NEVGQTcxMUVEOUIyNzM1NkVDNEY5QUUwMi9Ea1RSbTN5Vmli STBMUVVlc0pSSk4wamU2MDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBb4IvrNXEA/Y5w+SE0tpsdSWbywD45q3PBS81yjmxi+eL3vxrvyHA K9reqxEsESlk8eKlh9B2nPAcJVnVlEyrkjNfAr6ku8pptnuE3kT0R4Yqeb9/1Ihy HjnlNWCsGVQiO354ihZKpJHRhrotvf7LEIgzcoop6d9txr7PwhcGPrMBM+7u6ioj Wc5cAlNfa/kuB5kiKanqJF+ATvmafhtyKPt1UDlSe5jbshdxE9Wd7MF8huHr4XQw Pc/TVHcnxY9v+RPuOoRmA8jDNAYmT45ZcpWjiTQBPE76C5uGE+rBI/b5WSMKLYNt DD2Xo/Lfpm/ONCdujR9YiQULxJv9DtQ1 -----END CERTIFICATE-----Generated at Fri May 3 08:21:39 2024 by rpki-client on console-ams.rpki-client.org