$ rpki-client -vvf rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft File: TLgV1pdFW8swK3TXnapq5Bu3t4k.mft (raw, json) Hash identifier: FRIcN4x0Cqz0ZuyvOzGGU7w8yig8/+NFtSbCJwruSN4= Subject key identifier: AD:26:EC:E9:2F:F3:8C:43:14:0C:4F:62:F0:75:BC:E4:7E:A7:B8:DC Authority key identifier: 4C:B8:15:D6:97:45:5B:CB:30:2B:74:D7:9D:AA:6A:E4:1B:B7:B7:89 Certificate issuer: /CN=A91395A9/serialNumber=4CB815D697455BCB302B74D79DAA6AE41BB7B789 Certificate serial: 071A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLgV1pdFW8swK3TXnapq5Bu3t4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft Manifest number: 1B02 Signing time: Sat 18 May 2024 17:27:00 +0000 Manifest this update: Sat 18 May 2024 17:27:00 +0000 Manifest next update: Sat 25 May 2024 17:27:00 +0000 Files and hashes: 1: TLgV1pdFW8swK3TXnapq5Bu3t4k.crl (hash: 8O+zU6wiTkdME0bMkMWNe1wnTGDyqdY1zGnjsTvjSq4=) 2: 19C035C6F3EF11EA82F3C251C4F9AE02.roa (hash: FUGlXdXF81JPx5LHKvaIKbXTVuBi7QATMPLpsYgWq5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.crl rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLgV1pdFW8swK3TXnapq5Bu3t4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91395A9/serialNumber=4CB815D697455BCB302B74D79DAA6AE41BB7B789 Validity Not Before: May 18 17:27:00 2024 GMT Not After : May 25 17:27:00 2024 GMT Subject: CN=6648e4e4-4d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ee:5f:95:b1:76:f9:84:6c:01:85:8a:ad:a9: b2:2c:53:56:5d:f7:45:8c:fa:72:fc:86:c6:6d:c7: 28:93:83:e8:0f:2b:73:ed:cc:df:63:49:81:07:59: ae:56:b4:34:c1:83:7e:2e:ca:6e:4b:03:e4:c4:e1: 82:3a:25:c7:29:a5:2e:f7:ac:eb:be:c3:97:46:d3: 12:aa:c4:a2:a9:a1:da:f4:d7:c6:e8:68:65:ce:dc: d5:a2:fd:f6:56:b2:c7:cb:7b:62:a3:ed:8c:a4:3d: 8e:5d:73:46:65:59:9c:ad:dc:38:48:e9:41:fb:d0: a7:f0:e1:9e:68:0b:7b:b2:d0:16:a2:8b:85:ed:c9: 64:28:78:30:7e:a7:9c:2a:d7:71:f5:cd:0b:5c:ab: ac:0c:5e:a5:63:6a:32:a6:2d:42:0e:83:04:c2:a3: 17:4b:92:5b:18:30:62:78:f1:fb:f6:dd:44:f0:86: 41:6c:1a:25:7f:13:38:39:e7:10:49:17:52:80:96: 66:90:65:6f:b3:80:24:71:89:84:b6:be:74:c1:c3: 05:19:16:d8:e4:c8:2c:a5:1b:27:02:4a:c8:9d:67: ed:39:0e:9d:4d:57:55:e3:1a:fc:da:85:2b:7d:55: f9:c3:c4:e4:f0:3a:dd:7d:c3:3a:3f:1c:13:5a:4c: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:26:EC:E9:2F:F3:8C:43:14:0C:4F:62:F0:75:BC:E4:7E:A7:B8:DC X509v3 Authority Key Identifier: keyid:4C:B8:15:D6:97:45:5B:CB:30:2B:74:D7:9D:AA:6A:E4:1B:B7:B7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLgV1pdFW8swK3TXnapq5Bu3t4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0a:ad:e6:77:69:c7:47:21:b4:ff:94:65:48:19:cf:49:38: 76:2e:c2:49:df:2d:76:36:26:66:d0:51:17:75:34:19:2c:02: 13:93:b8:a9:72:e2:d1:aa:b7:12:36:8c:d5:95:a3:82:fe:12: 7e:34:5c:3d:5f:14:92:a0:2f:65:e1:49:ff:fc:01:7c:8b:84: 51:c8:f3:2d:59:d9:45:dd:d4:80:c1:44:2f:25:57:aa:f1:55: 56:78:e5:9e:29:50:18:83:37:20:5a:0c:23:04:58:a9:7c:a5: f0:3b:a5:7e:e6:54:21:3c:28:e7:ff:53:d6:66:e5:e6:b9:3f: 2d:e4:1f:9e:0e:42:cc:bb:bb:19:68:7e:e2:74:50:20:9e:6f: b4:b0:d4:69:af:39:86:3d:52:ee:cf:9d:6b:33:a3:60:bc:5e: 6b:66:09:0d:14:b1:09:86:9f:b4:f0:43:16:54:1a:a9:a1:a8: 35:cd:41:96:dc:9b:94:d8:c1:9c:97:88:1b:78:08:b1:15:d7: e0:71:b9:99:37:64:d9:a8:aa:9b:a3:5b:72:48:c3:86:22:a1: 66:fd:43:ac:64:49:2c:7c:b2:20:30:58:ba:21:1c:e6:9b:2f: bb:40:22:c7:8f:f7:3a:0f:fb:3e:60:55:43:21:5c:71:98:8e: 13:59:81:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk1QTkxMTAvBgNVBAUTKDRDQjgxNUQ2OTc0NTVCQ0IzMDJCNzRENzlEQUE2QUU0 MUJCN0I3ODkwHhcNMjQwNTE4MTcyNzAwWhcNMjQwNTI1MTcyNzAwWjAYMRYwFAYD VQQDEw02NjQ4ZTRlNC00ZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA++5flbF2+YRsAYWKramyLFNWXfdFjPpy/IbGbccok4PoDytz7czfY0mBB1mu VrQ0wYN+LspuSwPkxOGCOiXHKaUu96zrvsOXRtMSqsSiqaHa9NfG6GhlztzVov32 VrLHy3tio+2MpD2OXXNGZVmcrdw4SOlB+9Cn8OGeaAt7stAWoouF7clkKHgwfqec Ktdx9c0LXKusDF6lY2oypi1CDoMEwqMXS5JbGDBiePH79t1E8IZBbBolfxM4OecQ SRdSgJZmkGVvs4AkcYmEtr50wcMFGRbY5MgspRsnAkrInWftOQ6dTVdV4xr82oUr fVX5w8Tk8DrdfcM6PxwTWkwhhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0m7Okv 84xDFAxPYvB1vOR+p7jcMB8GA1UdIwQYMBaAFEy4FdaXRVvLMCt0152qauQbt7eJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTVBOS82N0FFREU4QzVE MTkxMUU4OERERTM5M0VDNEY5QUUwMi9UTGdWMXBkRlc4c3dLM1RYbmFwcTVCdTN0 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMZ1YxcGRGVzhzd0szVFhuYXBxNUJ1M3Q0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTVBOS82N0FFREU4QzVEMTkxMUU4OERERTM5M0VDNEY5QUUwMi9UTGdWMXBkRlc4 c3dLM1RYbmFwcTVCdTN0NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnCq3md2nHRyG0/5RlSBnPSTh2LsJJ3y12NiZm0FEXdTQZLAITk7ip cuLRqrcSNozVlaOC/hJ+NFw9XxSSoC9l4Un//AF8i4RRyPMtWdlF3dSAwUQvJVeq 8VVWeOWeKVAYgzcgWgwjBFipfKXwO6V+5lQhPCjn/1PWZuXmuT8t5B+eDkLMu7sZ aH7idFAgnm+0sNRprzmGPVLuz51rM6NgvF5rZgkNFLEJhp+08EMWVBqpoag1zUGW 3JuU2MGcl4gbeAixFdfgcbmZN2TZqKqbo1tySMOGIqFm/UOsZEksfLIgMFi6IRzm my+7QCLHj/c6D/s+YFVDIVxxmI4TWYH6 -----END CERTIFICATE-----Generated at Sat May 18 18:12:31 2024 by rpki-client on console-fra.rpki-client.org