$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: FNyWb/aesui+Hl/hWUdMWgXtz25oF6wn+KO/kTq85cc= Subject key identifier: AB:3E:FB:16:13:BC:F5:DA:F7:8D:64:38:23:A0:8B:41:4C:40:45:E7 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 070E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 070E Signing time: Sat 18 May 2024 22:33:31 +0000 Manifest this update: Sat 18 May 2024 22:33:31 +0000 Manifest next update: Sat 25 May 2024 22:33:31 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: uOwpw7CAUZWOOsznwzXRxq97OPvfSWRh0wLots2FCsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1806 (0x70e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: May 18 22:33:31 2024 GMT Not After : May 25 22:33:31 2024 GMT Subject: CN=66492cbb-0e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:65:45:78:d5:45:59:d8:ec:ac:db:c0:65: 8f:99:b7:b2:54:11:69:9d:fd:94:4b:c3:47:9c:83: aa:ad:f0:f8:ae:21:84:ce:d6:5d:c8:52:d0:65:14: c7:99:a4:f4:66:e7:39:5b:6b:9f:3d:4b:07:df:26: 45:ba:50:8b:7d:28:49:eb:af:9e:30:9f:f8:7c:a2: 45:e3:72:33:8d:bd:c4:20:95:0b:25:f9:f5:e0:41: 64:05:fb:aa:d7:e7:51:10:90:d6:69:4f:ec:c6:3a: ad:84:87:41:fc:5f:d9:04:e5:5f:29:50:31:e0:14: 95:2d:4c:ee:d1:6d:51:7d:54:16:12:67:99:48:ca: 62:9a:2d:9a:26:3a:74:69:d1:12:8f:f6:28:0d:e5: a2:ad:9d:df:33:eb:be:b9:50:76:ba:b9:99:0f:f3: 5c:58:1a:74:18:fa:54:e5:14:db:90:59:49:5c:33: 6c:05:37:d9:ae:d1:10:48:8f:66:ec:68:e2:d6:90: 2d:86:49:7a:ae:0a:1d:56:45:23:7a:68:77:a7:f4: db:d7:82:6f:2a:6e:49:c3:c3:1c:46:48:ff:4e:76: 67:3f:6d:00:d7:08:99:6a:b9:2e:ae:8f:80:f3:c4: 9f:69:11:0a:09:d0:38:3a:99:ea:fc:70:0f:9d:62: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3E:FB:16:13:BC:F5:DA:F7:8D:64:38:23:A0:8B:41:4C:40:45:E7 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:91:93:dd:15:8c:1d:d2:20:7e:79:44:54:d9:16:c2:23:88: c4:7b:93:25:15:b6:82:f9:c0:bb:86:76:be:41:b7:d3:7f:b6: d8:09:1a:86:2c:05:19:c9:fd:11:16:26:49:c6:42:b3:14:0f: ed:52:17:1c:4d:ff:cc:c1:66:5c:bf:7e:11:b8:e1:d4:5e:5b: d7:d8:b7:6d:96:8f:e7:52:11:f0:bb:c3:e6:6e:0a:3a:26:95: da:0a:02:48:fa:30:6e:ba:9b:09:3b:53:d6:c9:f9:32:14:1c: ce:47:d1:c8:18:47:00:2f:e5:be:6d:8c:b5:60:15:97:df:bd: 31:3c:14:92:57:7a:07:77:3d:d1:55:c3:28:c7:9f:78:74:ce: 97:fa:7e:f2:90:a2:7c:2b:92:d9:47:ee:bd:8a:78:7f:e4:99: ce:3c:07:48:55:e0:08:7c:40:e9:69:fc:ed:bd:8d:db:0f:1a: 35:cf:a9:6f:11:da:3e:e9:50:cc:98:79:93:9c:4b:c3:ba:10: 61:f6:0c:83:96:78:1c:49:38:39:31:dd:9b:d7:28:a1:ca:25: 82:17:2e:7b:38:ff:30:1c:dd:18:09:33:65:bc:a9:a3:05:23: 90:a7:a5:89:f8:6f:5a:a6:c0:f6:c4:a6:e0:cb:ad:c4:f5:ea: 61:cd:49:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjQwNTE4MjIzMzMxWhcNMjQwNTI1MjIzMzMxWjAYMRYwFAYD VQQDEw02NjQ5MmNiYi0wZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvo1lRXjVRVnY7KzbwGWPmbeyVBFpnf2US8NHnIOqrfD4riGEztZdyFLQZRTH maT0Zuc5W2ufPUsH3yZFulCLfShJ66+eMJ/4fKJF43Izjb3EIJULJfn14EFkBfuq 1+dREJDWaU/sxjqthIdB/F/ZBOVfKVAx4BSVLUzu0W1RfVQWEmeZSMpimi2aJjp0 adESj/YoDeWirZ3fM+u+uVB2urmZD/NcWBp0GPpU5RTbkFlJXDNsBTfZrtEQSI9m 7Gji1pAthkl6rgodVkUjemh3p/Tb14JvKm5Jw8McRkj/TnZnP20A1wiZarkuro+A 88SfaREKCdA4Opnq/HAPnWJ3nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs++xYT vPXa941kOCOgi0FMQEXnMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8kZPdFYwd0iB+eURU2RbCI4jEe5MlFbaC+cC7hna+QbfTf7bYCRqG LAUZyf0RFiZJxkKzFA/tUhccTf/MwWZcv34RuOHUXlvX2Ldtlo/nUhHwu8Pmbgo6 JpXaCgJI+jBuupsJO1PWyfkyFBzOR9HIGEcAL+W+bYy1YBWX370xPBSSV3oHdz3R VcMox594dM6X+n7ykKJ8K5LZR+69inh/5JnOPAdIVeAIfEDpafztvY3bDxo1z6lv Edo+6VDMmHmTnEvDuhBh9gyDlngcSTg5Md2b1yihyiWCFy57OP8wHN0YCTNlvKmj BSOQp6WJ+G9apsD2xKbgy63E9ephzUlc -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org