$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: xpR3Q6eKL8ef8+Y/CeiEkNZlBYJYZkH9zW1puRrbkX4= Subject key identifier: BF:F7:56:82:D0:47:87:5B:99:25:63:73:2D:78:95:E7:45:E7:17:74 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 06C1 Signing time: Sat 04 May 2024 23:13:22 +0000 Manifest this update: Sat 04 May 2024 23:13:21 +0000 Manifest next update: Sat 11 May 2024 23:13:21 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: 7plazjjue5IG2eIrhm5QAuMrqW7MFkho7+FgssB+8XU=) 2: 90C5BDF013F011EBA31BF948C4F9AE02.roa (hash: Kj36KmNfFdkRcV28mvAKtxE5L96/nJfLHFIFp5dBrXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: May 4 23:13:21 2024 GMT Not After : May 11 23:13:21 2024 GMT Subject: CN=6636c111-11e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:88:1f:ca:64:b5:73:3f:fd:77:8d:5c:cd:a6: 0b:ae:5b:0d:b9:12:23:d2:92:ea:26:17:e8:2a:79: ce:ab:4d:6c:2b:70:b2:3b:77:7d:b9:fe:22:f5:04: f0:da:23:54:2b:48:f7:4b:24:e7:0d:5a:d5:5b:84: 3a:48:2e:74:f7:63:da:da:b0:a3:11:2d:7a:2d:be: 32:c1:b5:76:2b:02:2c:3c:6f:b2:71:b2:54:d3:63: 38:89:9d:d9:12:dd:66:90:20:2a:6a:19:0a:56:a8: eb:d0:96:9f:e8:c7:28:5e:68:c7:f9:35:a4:1c:d5: 9e:15:1a:c4:a8:11:5d:5e:4c:12:eb:d7:25:02:04: 21:fc:31:a0:d0:66:f8:b7:80:66:57:72:4c:fb:17: 9c:d5:35:79:63:78:e0:38:ad:21:0d:dc:2c:21:dd: e2:15:bf:de:54:04:41:8d:76:69:82:1c:c2:5c:ef: 3a:22:35:0e:07:9b:02:39:5c:5c:6e:60:e6:e0:3f: ce:6c:92:04:00:d2:c3:ba:1c:5c:88:75:24:10:04: 41:fa:41:39:51:3d:6b:83:40:d2:8f:99:37:2a:2b: 05:9d:67:a1:05:c9:d0:07:96:88:28:a5:34:3f:fb: fd:50:f1:02:61:6b:63:a5:37:03:93:d5:58:65:16: 2d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F7:56:82:D0:47:87:5B:99:25:63:73:2D:78:95:E7:45:E7:17:74 X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:22:b5:46:fe:4d:27:a9:71:6a:dc:7e:c3:75:16:6b:9b:08: 8c:7f:a9:63:bb:5e:52:0b:7d:f2:97:4c:c1:30:96:00:ed:b2: 94:b0:6d:09:4e:02:ea:8f:56:61:66:2c:fa:24:91:ab:86:97: 3c:58:2c:6d:ef:79:a6:3a:68:09:82:a4:e2:4d:21:76:99:58: 21:ce:dc:db:76:54:1d:59:09:ef:e2:52:7e:d0:3c:ec:21:4e: 02:35:12:ab:f5:d8:00:2e:0a:5f:96:88:d4:75:56:2e:9c:8f: 01:af:7a:58:5a:e7:3d:9f:c8:f0:1e:fc:0d:7e:47:01:c4:db: b2:f7:24:27:67:32:7f:1f:96:a6:32:f0:11:16:3d:ee:a4:77: e2:0a:f7:81:57:c8:ec:e2:fa:1d:af:93:85:30:21:94:5a:6f: 59:79:df:7e:69:06:db:f7:4a:c1:0c:85:89:32:12:f7:01:e6: f8:b5:c4:8e:cb:fe:eb:be:8c:1e:a7:8b:7c:21:07:55:82:db: 38:09:4a:a6:28:28:4b:6a:19:ae:29:e4:db:d6:cb:14:30:d8: 1b:f2:3e:67:7a:e8:7a:a9:bc:74:0f:00:10:98:45:a9:3a:12: 29:94:e2:62:24:3f:f4:ba:30:5c:f7:3d:e8:da:cf:57:81:17: b2:89:d2:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjQwNTA0MjMxMzIxWhcNMjQwNTExMjMxMzIxWjAYMRYwFAYD VQQDEw02NjM2YzExMS0xMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ogfymS1cz/9d41czaYLrlsNuRIj0pLqJhfoKnnOq01sK3CyO3d9uf4i9QTw 2iNUK0j3SyTnDVrVW4Q6SC5092Pa2rCjES16Lb4ywbV2KwIsPG+ycbJU02M4iZ3Z Et1mkCAqahkKVqjr0Jaf6McoXmjH+TWkHNWeFRrEqBFdXkwS69clAgQh/DGg0Gb4 t4BmV3JM+xec1TV5Y3jgOK0hDdwsId3iFb/eVARBjXZpghzCXO86IjUOB5sCOVxc bmDm4D/ObJIEANLDuhxciHUkEARB+kE5UT1rg0DSj5k3KisFnWehBcnQB5aIKKU0 P/v9UPECYWtjpTcDk9VYZRYtrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/3VoLQ R4dbmSVjcy14ledF5xd0MB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEIrVG/k0nqXFq3H7DdRZrmwiMf6lju15SC33yl0zBMJYA7bKUsG0J TgLqj1ZhZiz6JJGrhpc8WCxt73mmOmgJgqTiTSF2mVghztzbdlQdWQnv4lJ+0Dzs IU4CNRKr9dgALgpflojUdVYunI8Br3pYWuc9n8jwHvwNfkcBxNuy9yQnZzJ/H5am MvARFj3upHfiCveBV8js4vodr5OFMCGUWm9Zed9+aQbb90rBDIWJMhL3Aeb4tcSO y/7rvowep4t8IQdVgts4CUqmKChLahmuKeTb1ssUMNgb8j5neuh6qbx0DwAQmEWp OhIplOJiJD/0ujBc9z3o2s9XgReyidLp -----END CERTIFICATE-----Generated at Sun May 5 00:12:30 2024 by rpki-client on console-fra.rpki-client.org