$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json) Hash identifier: lu55kdJfM84A1ym1B6MhnrafwlQB6WL/BzrdzunW3XM= Subject key identifier: 2F:93:2A:B2:A0:38:EA:59:19:4B:10:E8:01:78:F1:F7:C4:D0:2F:29 Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft Manifest number: 0117 Signing time: Fri 31 May 2024 06:05:31 +0000 Manifest this update: Fri 31 May 2024 06:05:30 +0000 Manifest next update: Fri 07 Jun 2024 06:05:30 +0000 Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: 4Gk9SGGtRw5/+d73dBS65tVOBZDRJBN3srJxU1Jx7o4=) 2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: 3vEc00Lhvt9vpvk+3SYKGQbU7UkYV0E+RqierHIRRXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Validity Not Before: May 31 06:05:30 2024 GMT Not After : Jun 7 06:05:30 2024 GMT Subject: CN=665968ab-680b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:02:c9:0d:0a:58:e7:ed:b6:87:18:a0:c9: 33:61:86:53:18:74:50:75:40:a7:d5:f1:a5:57:f0: ec:50:1d:99:ef:32:97:26:ba:6f:f2:51:89:6a:94: 03:4e:a2:38:ef:61:49:fb:b3:c8:06:14:62:83:f2: 32:a3:7a:c1:62:25:d5:d2:b0:fd:f9:c5:6b:c8:c9: a8:8f:5b:1b:53:72:22:7e:8d:48:b2:2c:51:fb:40: 6b:11:15:8c:53:f2:69:f0:3b:da:73:57:64:95:60: 4d:b4:2d:5e:85:23:f8:22:71:38:70:f3:e1:2e:a3: 29:7d:36:cf:8a:29:03:4a:36:67:b4:4e:d1:69:7a: 4f:4c:a9:80:a4:e1:ad:cc:0c:05:4f:b1:04:ac:58: 0c:a7:86:d5:31:45:68:b6:e1:63:3d:36:43:f8:a9: 11:c4:fc:04:bf:b5:c0:43:99:53:78:27:0e:0b:b3: b0:65:b7:30:64:50:7f:16:cb:ab:c6:d8:28:0b:6f: 77:1f:a1:fc:90:1d:34:a6:df:6f:2c:a6:b2:65:8a: df:9c:92:3d:ef:60:c9:2a:d7:ab:93:b2:2d:38:7e: bc:62:88:38:7f:d8:8e:1a:7a:c5:96:f0:78:9c:ed: da:08:fe:4b:cf:ec:1d:25:b9:ab:3d:6a:cc:a2:ef: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:93:2A:B2:A0:38:EA:59:19:4B:10:E8:01:78:F1:F7:C4:D0:2F:29 X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:3a:9b:6e:88:23:09:8f:0e:25:13:db:74:e8:ba:b5:35:9b: 7a:4d:67:5a:9f:32:3f:41:c9:b4:9b:c8:de:98:3e:49:6b:28: a9:84:e0:71:0f:61:25:70:c3:b6:07:fc:eb:c6:ff:88:d4:50: 9a:ff:57:05:b8:ac:a6:1b:98:03:bc:a3:13:d4:4f:f7:df:88: 26:24:c3:8f:19:0a:7c:a2:2c:5f:d2:fd:85:44:74:3d:53:b1: 95:39:7d:86:c8:d6:a1:19:36:d4:50:ab:c6:d8:48:a8:d2:38: f5:46:5f:33:e1:98:c6:98:78:a4:fb:cc:68:4a:a6:85:eb:a0: 26:51:63:85:a6:7e:3a:f7:b9:68:b2:47:e8:93:c9:7b:67:2b: 22:e8:74:cb:e7:39:fd:49:b5:30:c9:d5:4d:7e:28:39:15:1e: 00:ca:2d:75:14:bf:af:78:47:2c:c3:c5:9f:77:cc:af:e5:be: 83:14:80:12:1a:b5:9c:4a:90:5c:78:00:e2:a5:ac:91:50:6f: f3:bc:80:31:9c:0f:ab:89:17:b2:fa:0d:1a:59:40:33:34:00: b3:81:1e:27:43:49:63:52:81:82:5c:42:b1:63:d2:b8:86:6a: e0:02:1d:5b:9b:fe:f2:b2:e1:bb:4b:be:b7:79:c9:09:d2:a1: 30:5d:96:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjQwNTMxMDYwNTMwWhcNMjQwNjA3MDYwNTMwWjAYMRYwFAYD VQQDEw02NjU5NjhhYi02ODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zICyQ0KWOfttocYoMkzYYZTGHRQdUCn1fGlV/DsUB2Z7zKXJrpv8lGJapQD TqI472FJ+7PIBhRig/Iyo3rBYiXV0rD9+cVryMmoj1sbU3Iifo1IsixR+0BrERWM U/Jp8Dvac1dklWBNtC1ehSP4InE4cPPhLqMpfTbPiikDSjZntE7RaXpPTKmApOGt zAwFT7EErFgMp4bVMUVotuFjPTZD+KkRxPwEv7XAQ5lTeCcOC7OwZbcwZFB/Fsur xtgoC293H6H8kB00pt9vLKayZYrfnJI972DJKterk7ItOH68Yog4f9iOGnrFlvB4 nO3aCP5Lz+wdJbmrPWrMou/MQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+TKrKg OOpZGUsQ6AF48ffE0C8pMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZGNC8zQjhFMDJFNDc2QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdX ZFp5T1JYNlBBX0VFMlhWZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyOptuiCMJjw4lE9t06Lq1NZt6TWdanzI/Qcm0m8jemD5JayiphOBx D2ElcMO2B/zrxv+I1FCa/1cFuKymG5gDvKMT1E/334gmJMOPGQp8oixf0v2FRHQ9 U7GVOX2GyNahGTbUUKvG2Eio0jj1Rl8z4ZjGmHik+8xoSqaF66AmUWOFpn4697lo skfok8l7Zysi6HTL5zn9SbUwydVNfig5FR4Ayi11FL+veEcsw8Wfd8yv5b6DFIAS GrWcSpBceADipayRUG/zvIAxnA+riRey+g0aWUAzNACzgR4nQ0ljUoGCXEKxY9K4 hmrgAh1bm/7ysuG7S763eckJ0qEwXZb6 -----END CERTIFICATE-----Generated at Fri May 31 06:33:57 2024 by rpki-client on console-fra.rpki-client.org