$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: X3pW+y/c1Y442swioIJgqxELsxKl1EUd1RE6AXhhDMQ= Subject key identifier: C9:93:F6:B0:DD:28:40:B2:12:19:E9:0A:AF:62:BA:9F:8C:46:3C:72 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 33C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 33C5 Signing time: Sun 26 May 2024 15:26:31 +0000 Manifest this update: Sun 26 May 2024 15:26:30 +0000 Manifest next update: Sun 02 Jun 2024 15:26:30 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: zwFHqDrhAYrnbStFopN3JpeszTNTgBgmYETzvyH5wV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13253 (0x33c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: May 26 15:26:30 2024 GMT Not After : Jun 2 15:26:30 2024 GMT Subject: CN=665354a6-d1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:48:94:ac:9b:b2:bc:3d:4a:85:25:68:8a: ce:af:a9:48:2a:14:4a:d1:5f:dd:2a:5d:32:03:f2: 60:8c:42:87:e3:28:84:49:eb:b2:d5:74:6d:ed:fb: 0a:fa:83:0c:98:93:64:92:50:7c:a9:a6:f9:25:3e: 03:2e:90:48:3c:10:79:93:72:91:fd:3f:19:cc:c6: 39:87:dd:f2:bc:55:36:9e:61:f1:37:6e:be:64:23: 1a:60:e4:1f:9d:61:fd:72:84:1d:bd:26:56:20:21: ac:9c:36:fc:db:93:45:ba:f1:21:e2:f3:9d:dc:94: 77:c7:38:14:70:83:68:4c:af:27:64:b7:1f:be:22: d8:e5:2c:b6:2d:9e:50:84:0e:c9:22:be:52:c6:75: 39:c3:4e:e4:d3:74:55:a7:60:24:1d:31:d9:be:51: 97:f3:07:37:23:1e:ed:f4:b6:38:e0:dc:3b:d5:07: 92:9c:aa:da:d5:48:a7:02:cd:6b:09:03:cf:c1:e4: 53:05:6a:c8:a4:eb:dd:4e:f4:27:31:33:da:ae:01: 6c:28:f1:9f:7b:2a:8b:04:f7:70:25:6f:5a:04:b2: f6:09:42:fa:0b:dc:94:a7:e0:12:fa:43:75:c8:82: 6f:81:4d:88:9e:44:56:34:53:d4:9f:82:17:05:64: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:F6:B0:DD:28:40:B2:12:19:E9:0A:AF:62:BA:9F:8C:46:3C:72 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:58:9c:f8:49:4c:c6:d5:3b:b9:cd:35:c7:76:71:c3:de:92: 4d:0a:00:dc:9b:ec:ce:86:d4:36:84:3f:a9:75:2b:49:18:50: 20:88:33:5c:9b:ef:8d:bd:b6:c3:d6:e9:a0:d3:e8:51:e9:f4: 80:14:a2:b4:a9:63:e2:29:c0:67:87:3a:d2:0c:ff:49:33:88: e6:b5:ca:cc:15:94:a3:38:f7:df:14:66:37:0b:16:25:20:4b: 48:00:1c:bf:39:93:d6:eb:0d:68:cb:14:1f:3a:5e:c1:1d:89: fb:f0:1b:ce:ac:ea:6e:45:48:af:90:98:b6:d3:c9:17:e5:d3: 0a:a0:33:7e:ec:74:20:ec:e2:cb:88:40:db:88:99:a9:6b:d1: 83:da:18:50:ac:0f:4c:f5:69:25:4d:7b:d3:0b:ef:98:51:b9: dd:2f:86:ab:60:5c:fb:88:63:21:31:fd:b9:26:06:10:e2:52: 16:76:8c:8b:f6:49:fc:12:7a:04:54:e7:b8:12:0b:fb:23:b5: d9:b1:d9:87:54:97:8b:6f:0b:3f:cb:db:44:19:29:e9:dd:18: 7d:fc:7b:18:6f:af:ce:55:5d:e2:4b:e9:4a:cd:bd:24:9a:4e: be:d2:d6:4c:b1:e6:98:73:6f:1b:68:d8:a4:3c:f5:af:9a:36: 64:29:c8:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjQwNTI2MTUyNjMwWhcNMjQwNjAyMTUyNjMwWjAYMRYwFAYD VQQDEw02NjUzNTRhNi1kMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHtIlKybsrw9SoUlaIrOr6lIKhRK0V/dKl0yA/JgjEKH4yiESeuy1XRt7fsK +oMMmJNkklB8qab5JT4DLpBIPBB5k3KR/T8ZzMY5h93yvFU2nmHxN26+ZCMaYOQf nWH9coQdvSZWICGsnDb825NFuvEh4vOd3JR3xzgUcINoTK8nZLcfviLY5Sy2LZ5Q hA7JIr5SxnU5w07k03RVp2AkHTHZvlGX8wc3Ix7t9LY44Nw71QeSnKra1UinAs1r CQPPweRTBWrIpOvdTvQnMTPargFsKPGfeyqLBPdwJW9aBLL2CUL6C9yUp+AS+kN1 yIJvgU2InkRWNFPUn4IXBWQYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmT9rDd KECyEhnpCq9iup+MRjxyMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+WJz4SUzG1Tu5zTXHdnHD3pJNCgDcm+zOhtQ2hD+pdStJGFAgiDNc m++NvbbD1umg0+hR6fSAFKK0qWPiKcBnhzrSDP9JM4jmtcrMFZSjOPffFGY3CxYl IEtIABy/OZPW6w1oyxQfOl7BHYn78BvOrOpuRUivkJi208kX5dMKoDN+7HQg7OLL iEDbiJmpa9GD2hhQrA9M9WklTXvTC++YUbndL4arYFz7iGMhMf25JgYQ4lIWdoyL 9kn8EnoEVOe4Egv7I7XZsdmHVJeLbws/y9tEGSnp3Rh9/HsYb6/OVV3iS+lKzb0k mk6+0tZMseaYc28baNikPPWvmjZkKcjT -----END CERTIFICATE-----Generated at Sun May 26 16:40:37 2024 by rpki-client on console-fra.rpki-client.org