$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: ql37w8FOyH/cxlwj7nfl7i1p+ig9Fol98nlYg88fGaQ= Subject key identifier: 60:AA:D1:18:57:0A:74:76:36:5E:2C:9B:30:BC:C3:A1:F8:69:75:10 Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 19A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 1998 Signing time: Mon 06 May 2024 16:53:32 +0000 Manifest this update: Mon 06 May 2024 16:53:32 +0000 Manifest next update: Mon 13 May 2024 16:53:32 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: l7YkIVb47efHaT6yXaObP5a/Nj4BmZgHq1WgzxHl5t8=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: RisbfuJJzaRwnSTXbblXr9BK361KaCscEIHy8SrD2Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6562 (0x19a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: May 6 16:53:32 2024 GMT Not After : May 13 16:53:32 2024 GMT Subject: CN=66390b0c-5cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:10:94:2f:5c:ba:26:90:6e:3d:42:35:af: 2b:35:db:dd:b8:be:53:8a:19:9f:38:81:9a:f6:19: 4f:e3:63:63:13:b8:25:e6:da:0d:58:2e:a0:ae:e2: 6e:9d:10:39:e6:dd:7b:19:dc:80:d1:29:69:69:99: b3:7a:0a:96:23:79:a1:df:12:a3:de:cc:79:03:51: ef:8e:f1:73:46:e1:89:1e:66:b2:6e:17:f0:9d:1a: 61:e0:3e:57:b5:7f:5e:8b:5c:15:8a:b0:56:c8:67: e4:85:ee:91:33:e4:f0:9c:5c:24:79:8a:d5:b8:35: 1f:61:58:6d:84:39:8d:34:1f:93:9d:28:31:15:a7: be:6b:29:eb:74:16:f4:5e:e3:63:8f:e0:53:68:6c: ca:4d:cf:6d:a9:4e:b9:b3:67:ba:58:12:b6:9c:82: f8:f3:73:64:61:3a:91:94:7f:91:ee:53:76:f5:79: 67:7f:cc:93:9c:99:b2:5c:1d:9d:2f:b0:5c:20:dc: 65:72:b4:79:6f:6a:7e:97:5c:fc:c6:f0:6b:b5:95: 8f:87:de:03:0f:e0:a2:01:3d:7f:87:75:aa:12:94: f1:65:78:31:73:e7:e8:cc:5a:eb:c4:e0:09:35:fd: 30:cb:4c:1b:92:14:dc:8a:83:da:b2:bb:d6:1a:21: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AA:D1:18:57:0A:74:76:36:5E:2C:9B:30:BC:C3:A1:F8:69:75:10 X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:64:e5:d4:d3:70:10:1b:fb:13:09:62:a8:93:f4:a7:90:9a: c6:dc:31:c1:c2:78:62:a0:03:b9:3e:d0:f4:70:bd:ee:e7:e0: 47:53:c3:b0:5c:44:65:8a:71:96:41:87:c0:c0:f6:06:a8:2e: 34:1f:b5:a8:0d:8c:3b:52:80:5d:ee:e8:cb:ca:e1:8f:6e:19: 13:72:11:28:d4:66:3a:dd:4d:13:b7:e1:70:26:b5:15:8e:0e: 60:84:33:0c:42:d0:d3:e1:82:59:9c:30:9a:76:78:34:33:39: 55:6c:45:21:73:ca:96:e6:10:fd:d0:e5:32:c1:d7:d7:17:52: cd:4b:1b:9c:5e:94:c2:d0:be:e7:24:4e:64:7e:c1:a6:90:3d: c0:43:e8:2e:85:f1:70:01:d0:34:a2:a9:90:34:45:a4:fe:b4: bd:5f:19:0a:76:66:d1:99:dc:de:59:c2:c5:76:27:20:c5:a7: ec:fb:ff:5e:66:a2:97:e1:d6:fa:16:a0:75:8b:f2:ed:be:36: 0f:c6:a5:d7:7f:66:19:df:f2:d9:58:ee:fd:61:c5:c1:8a:c4: a4:df:7c:31:1d:8f:31:f1:d3:f0:b0:6b:67:15:a6:26:89:0d: f4:a2:73:5c:ec:55:e7:30:5d:a2:8d:fd:18:be:27:dc:29:60: 0c:b1:d4:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjQwNTA2MTY1MzMyWhcNMjQwNTEzMTY1MzMyWjAYMRYwFAYD VQQDEw02NjM5MGIwYy01Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoi8QlC9cuiaQbj1CNa8rNdvduL5TihmfOIGa9hlP42NjE7gl5toNWC6gruJu nRA55t17GdyA0SlpaZmzegqWI3mh3xKj3sx5A1HvjvFzRuGJHmaybhfwnRph4D5X tX9ei1wVirBWyGfkhe6RM+TwnFwkeYrVuDUfYVhthDmNNB+TnSgxFae+aynrdBb0 XuNjj+BTaGzKTc9tqU65s2e6WBK2nIL483NkYTqRlH+R7lN29Xlnf8yTnJmyXB2d L7BcINxlcrR5b2p+l1z8xvBrtZWPh94DD+CiAT1/h3WqEpTxZXgxc+fozFrrxOAJ Nf0wy0wbkhTcioPasrvWGiEoFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCq0RhX CnR2Nl4smzC8w6H4aXUQMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSZOXU03AQG/sTCWKok/SnkJrG3DHBwnhioAO5PtD0cL3u5+BHU8Ow XERlinGWQYfAwPYGqC40H7WoDYw7UoBd7ujLyuGPbhkTchEo1GY63U0Tt+FwJrUV jg5ghDMMQtDT4YJZnDCadng0MzlVbEUhc8qW5hD90OUywdfXF1LNSxucXpTC0L7n JE5kfsGmkD3AQ+guhfFwAdA0oqmQNEWk/rS9XxkKdmbRmdzeWcLFdicgxafs+/9e ZqKX4db6FqB1i/LtvjYPxqXXf2YZ3/LZWO79YcXBisSk33wxHY8x8dPwsGtnFaYm iQ30onNc7FXnMF2ijf0YvifcKWAMsdSv -----END CERTIFICATE-----Generated at Mon May 6 17:36:20 2024 by rpki-client on console-fra.rpki-client.org