$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft File: dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft (raw, json) Hash identifier: eTOjI2eeGuGru46ZGc0qipwuqqBKkWi0BiJrId1Dpaw= Subject key identifier: 81:EC:BE:2B:FA:A2:4B:C6:FE:CC:1F:D9:C7:34:2B:28:43:0F:EF:2D Authority key identifier: 75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED Certificate issuer: /CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft Manifest number: 031D Signing time: Fri 03 May 2024 03:09:53 +0000 Manifest this update: Fri 03 May 2024 03:09:52 +0000 Manifest next update: Fri 10 May 2024 03:09:52 +0000 Files and hashes: 1: dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl (hash: QIWtPbaiTTipdMmWpzAT8Nkpc1cjzVWT9xP5rFogAIU=) 2: 14AD3D427E9D11EC914D4A6DC4F9AE02.roa (hash: rucSOvDUlPs/cm3Q5kFV8pvarNxcY2no81UvR20k9hU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85C5/serialNumber=759A6E03F0CE7D7C2DDA8048FBA8133ECC663EED Validity Not Before: May 3 03:09:52 2024 GMT Not After : May 10 03:09:52 2024 GMT Subject: CN=66345580-4b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:21:d3:7d:24:9b:39:f9:64:61:6c:7d:ae: 69:f2:bf:e1:db:11:9d:6d:50:b3:76:4f:65:99:cc: 7f:ed:0e:aa:12:df:61:be:12:f4:d5:fe:1f:9e:de: 67:95:0d:13:60:0e:03:27:02:60:59:c5:ac:1e:42: e8:58:77:fd:79:05:87:86:ce:28:41:51:c6:96:81: 14:57:a1:29:77:c9:37:58:62:12:3a:cf:4e:c9:c3: 8c:e7:76:45:39:37:ef:6e:41:b4:60:1b:56:29:1a: a8:d4:86:cc:ff:4e:d2:4e:54:d6:95:48:02:8e:74: 1f:98:2c:b4:e9:2a:08:8b:ea:97:ff:1c:4c:ea:f7: 2b:bb:fd:ec:f6:03:73:d5:5c:b3:f3:d3:a3:95:ca: 0c:e0:cc:b9:d3:2b:fa:53:fd:4f:eb:67:2d:2d:a2: 70:92:d7:17:b2:f9:de:11:3a:66:32:a6:83:1c:a2: 08:3e:2d:57:3e:38:d0:e9:da:3d:04:58:a8:47:6c: fd:5d:ff:8d:cb:03:e1:71:a4:78:24:51:01:0e:97: 5b:04:8a:a9:d6:3f:e1:d4:5b:14:a3:d5:c8:c9:28: c6:21:53:df:e2:83:03:00:96:24:f7:a7:e8:60:2d: c2:ea:78:c2:df:e0:f8:cf:76:43:98:2c:38:18:1a: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EC:BE:2B:FA:A2:4B:C6:FE:CC:1F:D9:C7:34:2B:28:43:0F:EF:2D X509v3 Authority Key Identifier: keyid:75:9A:6E:03:F0:CE:7D:7C:2D:DA:80:48:FB:A8:13:3E:CC:66:3E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dZpuA_DOfXwt2oBI-6gTPsxmPu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85C5/893C64F67E9A11ECA5AD676BC4F9AE02/dZpuA_DOfXwt2oBI-6gTPsxmPu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:7d:cd:3c:73:c6:54:d2:71:79:a8:19:78:90:b6:2f:5a:d6: 4f:13:20:a4:7d:15:a8:c1:d1:9b:18:c3:e0:04:51:92:1b:0f: 6f:19:1a:32:4e:3c:54:2d:46:ba:58:2d:c4:c8:32:65:90:cd: f2:70:5c:a4:42:fe:c2:27:17:34:87:d6:ea:76:f5:ea:5a:48: 34:9e:78:3f:ea:9b:23:7a:34:1c:66:c7:65:29:f6:73:e4:e1: 1d:a5:3b:a1:d1:4f:ef:74:b6:3a:3f:82:df:ee:78:5d:14:8a: 35:5c:51:d7:33:ea:5e:9c:17:32:5c:23:df:fb:36:fa:e4:3b: af:50:d2:84:0c:f1:45:bd:31:4b:cc:22:82:39:6c:26:a3:32: 55:06:74:2f:0f:5e:68:0e:3e:8f:55:f6:5b:21:e7:16:8d:c8: 0a:9d:0f:1a:54:99:fa:e2:20:4f:0a:7e:f8:bf:49:89:42:d0: 74:64:15:06:2f:2f:a8:35:43:8c:85:66:4e:34:a0:47:41:ce: b5:b2:4e:c7:93:00:33:57:e4:5f:71:f8:e8:9f:82:97:af:d5: 5e:d7:62:c9:86:ff:a2:a3:44:a9:17:7c:bc:0d:5c:48:16:23: 16:93:7e:cd:d1:04:61:03:50:b4:11:c2:9c:b1:cf:30:41:21: 1e:f4:89:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1QzUxMTAvBgNVBAUTKDc1OUE2RTAzRjBDRTdEN0MyRERBODA0OEZCQTgxMzNF Q0M2NjNFRUQwHhcNMjQwNTAzMDMwOTUyWhcNMjQwNTEwMDMwOTUyWjAYMRYwFAYD VQQDEw02NjM0NTU4MC00YjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiQh030kmzn5ZGFsfa5p8r/h2xGdbVCzdk9lmcx/7Q6qEt9hvhL01f4fnt5n lQ0TYA4DJwJgWcWsHkLoWHf9eQWHhs4oQVHGloEUV6Epd8k3WGISOs9OycOM53ZF OTfvbkG0YBtWKRqo1IbM/07STlTWlUgCjnQfmCy06SoIi+qX/xxM6vcru/3s9gNz 1Vyz89OjlcoM4My50yv6U/1P62ctLaJwktcXsvneETpmMqaDHKIIPi1XPjjQ6do9 BFioR2z9Xf+NywPhcaR4JFEBDpdbBIqp1j/h1FsUo9XIySjGIVPf4oMDAJYk96fo YC3C6njC3+D4z3ZDmCw4GBqC7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHsviv6 okvG/swf2cc0KyhDD+8tMB8GA1UdIwQYMBaAFHWabgPwzn18LdqASPuoEz7MZj7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVDNS84OTNDNjRGNjdF OUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZYd3Qyb0JJLTZnVFBzeG1Q dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RacHVBX0RPZlh3dDJvQkktNmdUUHN4bVB1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVDNS84OTNDNjRGNjdFOUExMUVDQTVBRDY3NkJDNEY5QUUwMi9kWnB1QV9ET2ZY d3Qyb0JJLTZnVFBzeG1QdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwfc08c8ZU0nF5qBl4kLYvWtZPEyCkfRWowdGbGMPgBFGSGw9vGRoy TjxULUa6WC3EyDJlkM3ycFykQv7CJxc0h9bqdvXqWkg0nng/6psjejQcZsdlKfZz 5OEdpTuh0U/vdLY6P4Lf7nhdFIo1XFHXM+penBcyXCPf+zb65DuvUNKEDPFFvTFL zCKCOWwmozJVBnQvD15oDj6PVfZbIecWjcgKnQ8aVJn64iBPCn74v0mJQtB0ZBUG Ly+oNUOMhWZONKBHQc61sk7HkwAzV+Rfcfjon4KXr9Ve12LJhv+io0SpF3y8DVxI FiMWk37N0QRhA1C0EcKcsc8wQSEe9ImB -----END CERTIFICATE-----Generated at Fri May 3 04:36:54 2024 by rpki-client on console-ams.rpki-client.org