$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: +rIvuiSJ2cJhwEVXvlDtmQz9J7cUqj1NDKVg75bJI/s= Subject key identifier: E6:81:35:19:B0:E1:0E:6E:A3:DA:12:AB:BA:B5:85:C8:9B:CE:01:0A Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 0783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 077E Signing time: Tue 30 Apr 2024 22:32:56 +0000 Manifest this update: Tue 30 Apr 2024 22:32:55 +0000 Manifest next update: Tue 07 May 2024 22:32:55 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: zLyz1UiF6T44OOi5xeIpn4VZACdk5SeKidbE9kO+tHk=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: eM0/ieW68pT/1mH+cnfWrxugWCGoyMvD9LF24IpYcvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Apr 30 22:32:55 2024 GMT Not After : May 7 22:32:55 2024 GMT Subject: CN=66317197-18f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d3:f3:d1:14:78:a0:91:93:ba:f7:71:25:15: c9:29:df:63:6f:9b:b6:1c:cf:f7:61:cb:3c:cc:d0: cc:e7:dc:57:af:ee:c6:84:93:12:5e:cb:33:f1:c3: 20:91:cb:b3:01:ab:76:05:50:92:1b:1c:96:28:11: b9:de:94:da:67:c7:8d:14:4a:3e:c1:7f:80:e3:02: 31:2b:ac:5c:62:8b:ff:c8:a0:c7:9c:5a:96:c6:9c: 88:25:41:7b:56:5d:f9:83:ca:23:8a:67:df:48:ea: 31:67:bf:8b:83:d5:b6:6b:85:47:ae:06:1e:c0:a3: 47:c0:72:f7:22:19:85:5a:9e:6c:6a:74:ad:ff:ed: ff:26:a3:98:f4:45:55:0e:a7:44:8f:dd:cb:e6:57: f8:21:44:38:71:38:03:c6:ba:ab:78:86:1f:bb:ec: f4:23:0f:01:cf:5a:13:d9:ef:5d:51:09:08:9e:77: e7:f5:8a:c3:f4:58:4e:41:85:a3:e8:c0:26:27:9a: 72:02:24:9a:87:05:58:0e:1f:b1:3d:15:6e:bb:4d: fd:ce:c4:2d:cc:37:70:a0:61:4c:f2:95:58:54:ec: 55:9d:14:6f:09:22:21:16:8b:2c:a4:30:c1:c3:23: 78:e0:ca:91:7f:0a:fd:dc:8a:49:c8:8c:fb:e2:5b: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:81:35:19:B0:E1:0E:6E:A3:DA:12:AB:BA:B5:85:C8:9B:CE:01:0A X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:59:c0:e3:c3:77:78:94:74:b6:87:03:b2:fc:d2:f4:8d:a3: a1:ee:df:9d:e3:08:a2:6d:5d:cb:72:ee:b5:7c:8a:df:90:8c: d9:02:14:b6:fa:9a:95:39:93:39:cb:61:c3:f2:80:a9:1e:89: 33:1a:c7:c7:9f:61:cc:17:58:9b:ef:b1:6a:a2:7d:e9:db:bd: 4c:34:72:22:db:ae:dc:e7:33:62:61:4d:e3:c8:b6:4c:aa:26: 07:31:77:f2:52:ff:71:20:92:b5:b3:c8:be:ed:79:d1:19:c9: 97:6c:c2:f1:c4:ea:ee:a8:fa:13:4b:70:60:96:e3:38:c6:cb: de:a0:12:11:2e:26:23:48:f6:3e:5b:a0:14:58:52:fa:16:58: d7:ce:b1:57:b5:d5:c5:b7:4c:5c:96:5c:19:6f:c4:ae:7a:3f: 66:1b:02:1a:50:d3:df:ec:3c:38:7d:d7:37:df:21:d6:06:ad: ab:23:5e:f3:d3:38:9a:aa:e8:23:bd:1b:69:66:14:e4:e3:2f: 70:f0:30:50:3a:2c:95:60:6e:60:4c:54:c5:a5:5f:7e:64:32: b0:33:6e:62:11:d9:b0:b7:7c:be:c3:99:da:7d:eb:82:f9:46: 94:93:d7:4d:ca:a4:79:31:e0:86:78:c6:46:b0:9b:89:2c:59: 28:8e:88:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjQwNDMwMjIzMjU1WhcNMjQwNTA3MjIzMjU1WjAYMRYwFAYD VQQDEw02NjMxNzE5Ny0xOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dPz0RR4oJGTuvdxJRXJKd9jb5u2HM/3Ycs8zNDM59xXr+7GhJMSXssz8cMg kcuzAat2BVCSGxyWKBG53pTaZ8eNFEo+wX+A4wIxK6xcYov/yKDHnFqWxpyIJUF7 Vl35g8ojimffSOoxZ7+Lg9W2a4VHrgYewKNHwHL3IhmFWp5sanSt/+3/JqOY9EVV DqdEj93L5lf4IUQ4cTgDxrqreIYfu+z0Iw8Bz1oT2e9dUQkInnfn9YrD9FhOQYWj 6MAmJ5pyAiSahwVYDh+xPRVuu039zsQtzDdwoGFM8pVYVOxVnRRvCSIhFosspDDB wyN44MqRfwr93IpJyIz74lu3fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaBNRmw 4Q5uo9oSq7q1hcibzgEKMB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfWcDjw3d4lHS2hwOy/NL0jaOh7t+d4wiibV3Lcu61fIrfkIzZAhS2 +pqVOZM5y2HD8oCpHokzGsfHn2HMF1ib77Fqon3p271MNHIi267c5zNiYU3jyLZM qiYHMXfyUv9xIJK1s8i+7XnRGcmXbMLxxOruqPoTS3BgluM4xsveoBIRLiYjSPY+ W6AUWFL6FljXzrFXtdXFt0xcllwZb8Suej9mGwIaUNPf7Dw4fdc33yHWBq2rI17z 0ziaqugjvRtpZhTk4y9w8DBQOiyVYG5gTFTFpV9+ZDKwM25iEdmwt3y+w5nafeuC +UaUk9dNyqR5MeCGeMZGsJuJLFkojojR -----END CERTIFICATE-----Generated at Tue Apr 30 23:40:16 2024 by rpki-client on console-fra.rpki-client.org