$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json) Hash identifier: +VbYBJ4VYWv2kbdgKb1JV2t3ixW6TLpJUtoQR9/jrTQ= Subject key identifier: E5:16:74:B4:FA:35:5E:1D:11:8B:9E:EE:C7:FB:10:B1:A2:C9:62:F4 Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Certificate serial: 0D27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft Manifest number: 0D1D Signing time: Thu 02 May 2024 18:47:06 +0000 Manifest this update: Thu 02 May 2024 18:47:06 +0000 Manifest next update: Thu 09 May 2024 18:47:06 +0000 Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: XvUNA4oXJFL4aeDPuS5j2rETfrmvKdVyvJlG3qKzzYw=) 2: BD61E6A2B36D11E992BC3F0BC4F9AE02.roa (hash: RnwEhFdSsDTYs7JASMXXEqAIxLKExPIM9GyDMqe1oDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Validity Not Before: May 2 18:47:06 2024 GMT Not After : May 9 18:47:06 2024 GMT Subject: CN=6633dfaa-0226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:7b:90:23:d1:4f:fa:0f:ca:85:46:43:21: 01:18:c1:48:1e:61:0f:7c:d0:96:c6:c1:ca:93:90: 41:9e:73:10:d7:8f:f8:1e:70:57:b0:12:9c:7e:2c: af:7e:41:98:8d:1d:3f:80:2e:47:22:66:9a:6d:25: e0:e8:03:be:4b:d5:f8:f5:a4:ed:73:a1:89:6f:4e: 49:06:0a:5f:ef:95:46:97:18:64:76:94:24:0e:8d: 26:3d:00:12:37:89:b8:10:0c:08:c9:62:41:df:36: 1d:b1:6a:d1:33:a3:77:25:11:b8:b1:36:cf:24:e0: f8:2c:62:0e:9f:8c:66:9a:29:64:02:b9:15:7a:14: 9e:71:f9:df:02:e0:77:a1:38:2e:fd:1e:1b:4c:46: 17:c6:ea:29:5d:fe:e6:5e:2d:82:bf:49:67:73:0b: cb:91:d4:9f:c7:6a:e8:d3:67:aa:e0:5d:e5:73:f3: 08:1e:4d:18:bc:9e:f5:7f:d7:bb:30:d5:00:32:20: 76:d4:63:99:4b:70:17:66:96:09:aa:13:70:9e:c6: 76:ca:ad:93:7c:4c:c3:3e:4c:59:da:d4:62:2f:db: 12:ed:e5:0d:c2:70:0f:8a:26:ea:43:55:27:d6:bd: 65:1e:ff:eb:f7:a9:02:68:28:c8:ce:b0:04:3a:e8: b3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:16:74:B4:FA:35:5E:1D:11:8B:9E:EE:C7:FB:10:B1:A2:C9:62:F4 X509v3 Authority Key Identifier: keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:2b:fb:ce:56:0a:4c:98:32:39:f4:70:af:79:4a:22:0b:d5: a1:d9:bd:b6:37:36:f6:a7:2c:ca:ca:cb:ed:6a:78:fb:87:e0: 6e:f4:3e:b8:1a:2a:9c:57:35:a8:d4:6a:00:5b:b2:ee:41:0b: fb:12:2d:d0:27:9c:6f:72:a3:00:ae:63:d4:16:8c:bc:05:06: 04:c1:64:ee:51:d8:22:59:d8:cb:eb:ca:88:6f:5b:68:33:1a: 63:8e:9e:35:d2:86:0b:0f:08:f5:90:55:a4:64:bf:8c:b9:77: ea:4c:f6:59:77:17:0f:d5:cf:15:62:4f:06:97:5a:d7:ae:0c: 09:d6:3c:fd:c8:c6:ee:e3:cb:f0:35:53:43:7e:8c:87:51:5f: e2:f9:85:fa:b5:95:d2:de:f3:12:ce:f1:60:13:4f:a7:32:bf: 15:d8:04:a3:83:16:09:c0:58:79:c7:fe:6a:bd:80:0a:94:bd: 6f:9f:04:b6:f8:55:0f:df:d4:aa:99:42:ff:f7:31:c5:4c:e4: 80:fa:42:c1:ba:a1:17:c5:b5:6f:93:ea:07:da:9c:0b:3d:4c: e0:9a:d3:dd:a6:69:4d:e5:8f:d8:c0:3b:33:09:93:ac:e9:8c: 76:82:73:11:76:af:5d:7e:d4:dd:22:e7:b2:91:9f:a3:82:99: b4:21:99:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKDBERjk5RTMyNEIwRTNBNTNFOEU1NkQ3MDIwRkY2RkJD NUJGMUNCMDIwHhcNMjQwNTAyMTg0NzA2WhcNMjQwNTA5MTg0NzA2WjAYMRYwFAYD VQQDEw02NjMzZGZhYS0wMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziR7kCPRT/oPyoVGQyEBGMFIHmEPfNCWxsHKk5BBnnMQ14/4HnBXsBKcfiyv fkGYjR0/gC5HImaabSXg6AO+S9X49aTtc6GJb05JBgpf75VGlxhkdpQkDo0mPQAS N4m4EAwIyWJB3zYdsWrRM6N3JRG4sTbPJOD4LGIOn4xmmilkArkVehSecfnfAuB3 oTgu/R4bTEYXxuopXf7mXi2Cv0lncwvLkdSfx2ro02eq4F3lc/MIHk0YvJ71f9e7 MNUAMiB21GOZS3AXZpYJqhNwnsZ2yq2TfEzDPkxZ2tRiL9sS7eUNwnAPiibqQ1Un 1r1lHv/r96kCaCjIzrAEOuizJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUWdLT6 NV4dEYue7sf7ELGiyWL0MB8GA1UdIwQYMBaAFA35njJLDjpT6OVtcCD/b7xb8csC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09sUG81VzF3SVA5dnZGdnh5 d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmbWVNa3NPT2xQbzVXMXdJUDl2dkZ2eHl3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09s UG81VzF3SVA5dnZGdnh5d0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyK/vOVgpMmDI59HCveUoiC9Wh2b22Nzb2pyzKysvtanj7h+Bu9D64 GiqcVzWo1GoAW7LuQQv7Ei3QJ5xvcqMArmPUFoy8BQYEwWTuUdgiWdjL68qIb1to Mxpjjp410oYLDwj1kFWkZL+MuXfqTPZZdxcP1c8VYk8Gl1rXrgwJ1jz9yMbu48vw NVNDfoyHUV/i+YX6tZXS3vMSzvFgE0+nMr8V2ASjgxYJwFh5x/5qvYAKlL1vnwS2 +FUP39SqmUL/9zHFTOSA+kLBuqEXxbVvk+oH2pwLPUzgmtPdpmlN5Y/YwDszCZOs 6Yx2gnMRdq9dftTdIueykZ+jgpm0IZnA -----END CERTIFICATE-----Generated at Thu May 2 20:50:37 2024 by rpki-client on console-fra.rpki-client.org