$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft File: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json) Hash identifier: XlnFtkUpNoKbtJsxzLuizYbgtwrhe0nYyrEBDnAIbug= Subject key identifier: A0:FC:17:CE:05:FB:D6:70:78:A5:07:4E:A6:AB:01:B0:7D:81:C3:9C Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 3414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft Manifest number: 33E1 Signing time: Sat 18 May 2024 15:07:10 +0000 Manifest this update: Sat 18 May 2024 15:07:10 +0000 Manifest next update: Sat 25 May 2024 15:07:10 +0000 Files and hashes: 1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: ximrz1aAvOLt4E6zoLoRoBDJ1qa19o5hd7Ta8aIshmM=) 2: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: Dxxz+0RRzU627PcHaQAquZ9v+JbSol4zXAoOXpPJbsU=) 3: E205744CABA111EAB7C51982C4F9AE02.roa (hash: OxKW8hsqjWscxfPShTM40PQzZKSrlzhnwSut+FEmnlg=) 4: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: M+tGsnWbJZMf38wW2dDWR88TaEadxMXAYwfrmdhBct8=) 5: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: iFCi6WD1Ee2W/w9mVYR65MihhiKOMnJaYvR7pR+MOrA=) 6: CBCB218CD86F11E9A6AF7518C4F9AE02.roa (hash: TkAMkz1M0TvWWG1Mez/kx+WPP+q30v8bmh3WBx9Q358=) 7: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: 3ao6gZOCB7bWk97kdXE8nPqzCHVbDTqlOEH/CfqGuLA=) 8: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: GEK6jcGIe//8LlsnmmOKojpjhgPgAdo098fH+Bv7usk=) 9: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: AzDpfRzBUtomgLnjKPD/8OpUvxfEaOLl7f7ZXs6THbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13332 (0x3414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: May 18 15:07:10 2024 GMT Not After : May 25 15:07:10 2024 GMT Subject: CN=6648c41e-4ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:11:c4:83:10:71:28:2d:f9:01:2c:c6:4f:f1: fa:fc:cf:76:93:20:e0:6c:b3:d8:a0:43:f0:fd:35: 1a:0d:6a:da:40:41:86:b6:ae:8a:9f:27:ca:f1:3b: b4:4b:39:1d:77:f4:c4:5a:0d:d2:f8:77:77:25:10: 26:6e:72:cb:8b:2f:c0:32:4e:a4:13:6d:96:c4:63: 4f:c5:6d:0c:ea:14:4a:cb:80:1d:0f:e2:87:07:21: d6:c9:97:31:38:c2:42:dc:51:0e:65:bb:0f:44:3e: 61:d4:23:d8:23:45:62:e7:22:64:78:0f:0f:77:ac: 89:8a:9f:ba:4c:1f:ca:0d:ff:03:78:44:49:10:87: 5a:20:f4:ee:37:af:91:7f:dd:dc:44:4b:f1:29:c1: ac:03:6b:dc:0c:2e:4b:0c:07:b0:c1:17:e3:cb:1e: ff:c1:84:ef:4d:6e:3d:b9:43:ec:eb:61:9d:e8:a3: 1d:a1:07:b9:c2:a5:b0:00:87:13:62:b5:24:1b:79: 11:f3:5a:4f:cc:1e:28:81:53:b5:e1:d1:62:8c:b3: b7:4d:78:f6:8a:e5:df:08:44:29:dd:f6:ce:c5:28: 19:65:fe:fe:a0:be:15:d5:93:47:61:17:c9:09:71: 6b:29:bf:73:64:f8:08:6e:51:35:ec:2e:35:55:7f: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FC:17:CE:05:FB:D6:70:78:A5:07:4E:A6:AB:01:B0:7D:81:C3:9C X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:32:da:28:4f:8f:32:b2:e6:3b:cf:ca:92:08:0a:af:d1:e4: 8d:bf:68:e4:0c:cb:7e:61:44:9b:10:f8:d8:c5:2d:8e:a3:24: 5e:f5:46:80:97:90:3b:26:8b:be:e9:fa:89:9e:e7:35:56:6c: db:1b:24:47:14:00:4f:45:33:e7:c9:7c:46:77:e6:e1:e8:66: 79:dd:c5:95:76:08:9f:ab:10:d9:78:57:d2:b4:93:7a:be:29: 48:83:9a:18:72:2f:35:dd:89:de:84:64:4e:18:ab:f8:c2:f6: 89:e8:08:38:a2:6b:5a:54:f4:fe:2b:97:e2:e6:09:f2:33:1f: 83:5b:ec:ac:c7:c6:ea:23:58:a3:12:b2:fc:e1:61:c3:ac:0b: e5:a7:ac:74:7f:50:5d:75:29:91:2e:cd:71:9e:80:29:a2:18: e6:cc:e8:63:7a:ff:47:d8:7c:3f:ad:9c:eb:db:f3:a6:b9:6a: 43:11:03:d1:12:87:fb:3e:2c:6c:04:2a:5f:2c:7d:c2:27:ce: 9d:5d:28:d1:13:c8:ee:13:fa:65:3c:3d:70:3a:46:d1:91:90: 4c:fc:75:7d:18:3f:91:b9:90:63:84:4e:12:dd:b4:f8:d1:ed: c5:b3:fc:20:fa:d1:27:14:5e:00:ab:59:9a:84:42:5a:9d:1e: e1:e1:fa:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjQwNTE4MTUwNzEwWhcNMjQwNTI1MTUwNzEwWjAYMRYwFAYD VQQDEw02NjQ4YzQxZS00YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RHEgxBxKC35ASzGT/H6/M92kyDgbLPYoEPw/TUaDWraQEGGtq6KnyfK8Tu0 Szkdd/TEWg3S+Hd3JRAmbnLLiy/AMk6kE22WxGNPxW0M6hRKy4AdD+KHByHWyZcx OMJC3FEOZbsPRD5h1CPYI0Vi5yJkeA8Pd6yJip+6TB/KDf8DeERJEIdaIPTuN6+R f93cREvxKcGsA2vcDC5LDAewwRfjyx7/wYTvTW49uUPs62Gd6KMdoQe5wqWwAIcT YrUkG3kR81pPzB4ogVO14dFijLO3TXj2iuXfCEQp3fbOxSgZZf7+oL4V1ZNHYRfJ CXFrKb9zZPgIblE17C41VX+BWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKD8F84F +9ZweKUHTqarAbB9gcOcMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS9ENTIxNDI3MDFEOUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJ MVZKRG12ams0S0NjajJXUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPMtooT48ysuY7z8qSCAqv0eSNv2jkDMt+YUSbEPjYxS2OoyRe9UaA l5A7Jou+6fqJnuc1VmzbGyRHFABPRTPnyXxGd+bh6GZ53cWVdgifqxDZeFfStJN6 vilIg5oYci813YnehGROGKv4wvaJ6Ag4omtaVPT+K5fi5gnyMx+DW+ysx8bqI1ij ErL84WHDrAvlp6x0f1BddSmRLs1xnoApohjmzOhjev9H2Hw/rZzr2/OmuWpDEQPR Eof7PixsBCpfLH3CJ86dXSjRE8juE/plPD1wOkbRkZBM/HV9GD+RuZBjhE4S3bT4 0e3Fs/wg+tEnFF4Aq1mahEJanR7h4fqw -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org