$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json) Hash identifier: 0DN/qvRGrBbs1Dk84ryovz8Vjnw91g+j1qJEYaSfBVs= Subject key identifier: 73:C3:B4:65:5B:C2:5B:B2:DD:AA:5E:29:DE:6E:04:BF:9C:57:0D:21 Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft Manifest number: 031F Signing time: Sun 05 May 2024 03:13:31 +0000 Manifest this update: Sun 05 May 2024 03:13:31 +0000 Manifest next update: Sun 12 May 2024 03:13:31 +0000 Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: 5hsvYRzg76vHzf5gAqNCNLM8M58kpqb9mdhuS1L6Apo=) 2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: m8FloIsH28VEFYR4VSnaFgU3R518CnbZZxE+Tn5D20s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Validity Not Before: May 5 03:13:31 2024 GMT Not After : May 12 03:13:31 2024 GMT Subject: CN=6636f95b-dc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5c:f8:5e:81:0c:20:78:c7:c4:0a:bc:1b:f0: 08:1f:4d:ce:11:96:b1:9a:cd:2b:f7:27:c2:c8:70: 57:57:7f:3e:b9:95:33:fb:a4:ab:6e:30:9e:1e:83: 3b:66:16:da:51:66:56:e6:d5:09:f4:ad:3c:8b:d3: de:a8:e0:4a:1f:3e:5a:07:d9:36:38:3c:41:e9:f2: 8f:ee:92:cd:e0:5c:1f:44:3f:5f:0f:69:0f:cb:2d: 1e:a2:c3:80:97:44:d5:39:3d:71:08:87:eb:40:43: 26:4c:74:2c:f5:98:f9:c5:5b:5b:8d:6d:69:fd:9e: 67:6e:ab:40:00:88:32:82:63:18:b2:90:18:57:90: 21:2b:11:9d:06:2c:c5:50:ce:48:ee:c3:dc:6a:46: e3:ba:71:26:9e:66:18:9d:7e:89:cd:73:ef:3b:56: 4f:75:3e:29:86:18:a5:d6:8b:01:63:b1:1a:32:0f: 4b:f6:73:4d:c1:14:3e:3e:3e:d0:89:9c:e6:08:29: ef:79:5e:32:14:c4:b4:18:7f:29:b1:d5:bb:ec:12: 15:90:76:a9:89:39:28:96:bc:24:b0:54:86:11:60: 52:1f:48:e3:c9:cf:44:77:c8:81:b0:f9:63:f3:08: f5:b3:70:d1:bd:aa:82:fe:cd:c1:5d:9f:e9:3d:5d: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C3:B4:65:5B:C2:5B:B2:DD:AA:5E:29:DE:6E:04:BF:9C:57:0D:21 X509v3 Authority Key Identifier: keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e3:e0:3b:24:87:d1:ac:14:d6:92:c0:6b:d3:f5:91:40:50: 18:02:42:d4:df:07:2e:e7:1b:ec:3c:68:2f:6b:0d:b1:90:45: 19:fc:da:c7:6f:84:fa:f4:ae:a6:cd:1f:43:f2:f2:34:00:09: 53:78:d0:80:a4:95:3e:f9:2b:84:fb:bb:07:e9:e2:3d:a2:66: ce:82:c9:ae:79:54:2c:6e:13:15:ea:83:3d:a0:39:0e:3f:ff: f5:93:3a:31:36:61:7c:98:13:1a:7b:a1:cd:d0:f9:1f:5c:e7: 8c:59:34:cc:e1:3a:bf:05:da:28:7f:5f:e2:17:7d:07:24:3f: c0:60:6f:bb:f9:32:e6:a7:cd:0b:97:ef:e2:bd:eb:88:9d:6a: 3e:7d:b1:0f:2e:be:f0:3c:b9:3b:a2:ee:4a:c1:f6:90:1a:cf: d4:da:0f:30:1e:12:e7:58:ab:9c:2f:44:e9:ad:35:5a:bb:ea: b0:0a:17:56:fa:bb:b1:d4:d2:36:3f:d0:37:66:b2:c6:fd:34: 62:99:81:9c:5a:bd:98:50:54:81:a1:67:05:6b:31:2c:63:70: 6b:a1:7b:a7:06:7c:ea:64:af:95:90:64:bd:4c:87:0c:94:30: 4a:79:3d:78:cd:b3:66:59:92:37:c2:47:98:42:5f:b3:30:7c: be:9e:54:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx QjU2N0I1RTIwHhcNMjQwNTA1MDMxMzMxWhcNMjQwNTEyMDMxMzMxWjAYMRYwFAYD VQQDEw02NjM2Zjk1Yi1kYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lz4XoEMIHjHxAq8G/AIH03OEZaxms0r9yfCyHBXV38+uZUz+6SrbjCeHoM7 ZhbaUWZW5tUJ9K08i9PeqOBKHz5aB9k2ODxB6fKP7pLN4FwfRD9fD2kPyy0eosOA l0TVOT1xCIfrQEMmTHQs9Zj5xVtbjW1p/Z5nbqtAAIgygmMYspAYV5AhKxGdBizF UM5I7sPcakbjunEmnmYYnX6JzXPvO1ZPdT4phhil1osBY7EaMg9L9nNNwRQ+Pj7Q iZzmCCnveV4yFMS0GH8psdW77BIVkHapiTkolrwksFSGEWBSH0jjyc9Ed8iBsPlj 8wj1s3DRvaqC/s3BXZ/pPV2NSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPDtGVb wluy3apeKd5uBL+cVw0hMB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh4+A7JIfRrBTWksBr0/WRQFAYAkLU3wcu5xvsPGgvaw2xkEUZ/NrH b4T69K6mzR9D8vI0AAlTeNCApJU++SuE+7sH6eI9ombOgsmueVQsbhMV6oM9oDkO P//1kzoxNmF8mBMae6HN0PkfXOeMWTTM4Tq/Bdoof1/iF30HJD/AYG+7+TLmp80L l+/iveuInWo+fbEPLr7wPLk7ou5KwfaQGs/U2g8wHhLnWKucL0TprTVau+qwChdW +rux1NI2P9A3ZrLG/TRimYGcWr2YUFSBoWcFazEsY3BroXunBnzqZK+VkGS9TIcM lDBKeT14zbNmWZI3wkeYQl+zMHy+nlT9 -----END CERTIFICATE-----Generated at Sun May 5 03:47:49 2024 by rpki-client on console-fra.rpki-client.org