$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft File: -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json) Hash identifier: 6Imt5TQDTM/s/m/X+uAQPIyedZcxpY3QolPiZfrbRSQ= Subject key identifier: AC:47:FB:37:DE:12:15:C7:BD:1B:95:5F:05:3C:47:48:60:72:AB:3E Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 Certificate issuer: /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft Manifest number: 04F9 Signing time: Sun 19 May 2024 01:12:59 +0000 Manifest this update: Sun 19 May 2024 01:12:59 +0000 Manifest next update: Sun 26 May 2024 01:12:59 +0000 Files and hashes: 1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: P5IrL0+sYcmUM/5v/Q8ifqneN/6ALnPSDjxTzzTgxTQ=) 2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: RVfGnSNi7Gc2NDwMnGvANcouUDMPNtTfLB5zmPwCbz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78 Validity Not Before: May 19 01:12:59 2024 GMT Not After : May 26 01:12:59 2024 GMT Subject: CN=6649521b-8e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:ae:03:6c:96:53:83:33:72:74:95:36:30: ff:bc:be:16:37:9d:b2:40:ea:c2:e5:90:72:6c:1c: 38:a4:17:5a:98:19:35:4f:c7:e8:22:d6:26:fc:51: 4f:17:7b:45:f8:4d:21:3b:40:1b:03:81:b3:9a:0d: 36:e5:54:a8:d8:b0:52:22:d9:c8:b6:90:f0:b9:66: 29:8d:c2:94:bc:50:b6:60:b1:d9:6a:50:34:47:18: 4b:f7:17:a3:55:72:bd:c3:ce:3a:0c:34:3e:d9:c1: aa:36:66:d4:ff:77:27:f5:7c:70:c3:fa:a5:5a:2f: 4a:3a:96:2c:be:e3:9f:72:18:7d:08:6b:20:6f:32: 80:cb:b3:bd:5a:70:73:6c:18:71:42:c5:f1:f2:94: 15:e1:0b:82:c6:d2:e5:c5:56:19:9e:6f:8c:79:a7: bf:1f:24:9b:98:44:26:6c:06:69:08:99:7d:63:b0: c6:15:67:d6:8d:2b:22:85:35:c4:eb:50:63:06:96: df:72:e8:9b:33:d5:da:b4:08:ea:f8:a0:04:33:5a: ea:e5:73:62:9d:34:5e:75:5d:0c:9f:b6:d4:e3:ff: 40:71:5b:ab:fc:c7:89:04:cc:89:3f:d5:9c:d5:08: 8a:40:71:3c:37:04:be:5f:1b:86:dc:08:75:81:87: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:47:FB:37:DE:12:15:C7:BD:1B:95:5F:05:3C:47:48:60:72:AB:3E X509v3 Authority Key Identifier: keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:78:91:47:44:70:b0:00:00:8a:95:89:f2:46:16:0b:00:37: b0:5e:ee:51:ff:d3:73:27:1c:cf:a6:dc:6a:53:ca:13:b6:08: 91:f6:29:ed:1b:20:52:5e:08:b7:5f:98:1a:4f:b2:89:06:21: 1d:42:9a:a5:d6:16:8a:1c:e8:6a:64:a0:e7:55:45:32:cf:8b: 96:26:07:bb:9c:c8:7e:b1:23:8f:e4:2e:b4:25:94:2f:bd:e8: 4b:ff:8f:fa:f3:6b:c2:01:bd:67:8b:d2:c5:16:2c:39:83:5f: c2:e7:d8:e5:b1:e6:75:c7:5e:94:1e:a7:21:00:2f:98:4b:39: 52:54:10:d2:a8:d5:63:cf:af:d1:72:c9:2c:b3:8b:d6:aa:f1: 6e:9f:0c:0a:ba:02:d7:e3:4b:e3:0d:91:5d:aa:b5:c7:71:fc: f9:f7:2c:94:6e:4c:e7:18:6e:9f:d4:a4:e7:e7:87:1e:af:f7: 9c:f6:d6:11:cd:68:4c:2d:19:c0:70:66:b9:b4:09:11:13:5f: be:20:8c:1a:b3:1a:d4:87:d2:bd:7c:d2:ce:1c:35:5a:82:c4: 71:64:57:5b:ea:10:29:ad:8d:b0:73:0b:f3:9a:ab:05:cb:3b: 2e:d9:82:74:8d:f1:82:78:62:6f:4f:6e:aa:6f:4c:6f:15:82: f4:46:cb:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMzIxMTAvBgNVBAUTKEZBRENCOTU1QTNBQzE0NjU5OTdEMDhGMjQ4QkY4NkM0 MzM0NEZCNzgwHhcNMjQwNTE5MDExMjU5WhcNMjQwNTI2MDExMjU5WjAYMRYwFAYD VQQDEw02NjQ5NTIxYi04ZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TmuA2yWU4MzcnSVNjD/vL4WN52yQOrC5ZBybBw4pBdamBk1T8foItYm/FFP F3tF+E0hO0AbA4Gzmg025VSo2LBSItnItpDwuWYpjcKUvFC2YLHZalA0RxhL9xej VXK9w846DDQ+2cGqNmbU/3cn9Xxww/qlWi9KOpYsvuOfchh9CGsgbzKAy7O9WnBz bBhxQsXx8pQV4QuCxtLlxVYZnm+Meae/HySbmEQmbAZpCJl9Y7DGFWfWjSsihTXE 61BjBpbfcuibM9XatAjq+KAEM1rq5XNinTRedV0Mn7bU4/9AcVur/MeJBMyJP9Wc 1QiKQHE8NwS+XxuG3Ah1gYeURQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxH+zfe EhXHvRuVXwU8R0hgcqs+MB8GA1UdIwQYMBaAFPrcuVWjrBRlmX0I8ki/hsQzRPt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYzMi9FMDY0NzVDRUM1 NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZHV1pmUWp5U0wtR3hETkUt M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eTVWYU9zRkdXWmZRanlTTC1HeERORS0zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYzMi9FMDY0NzVDRUM1NTUxMUVCOUFFNTlFODZDNEY5QUUwMi8tdHk1VmFPc0ZH V1pmUWp5U0wtR3hETkUtM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeeJFHRHCwAACKlYnyRhYLADewXu5R/9NzJxzPptxqU8oTtgiR9int GyBSXgi3X5gaT7KJBiEdQpql1haKHOhqZKDnVUUyz4uWJge7nMh+sSOP5C60JZQv vehL/4/682vCAb1ni9LFFiw5g1/C59jlseZ1x16UHqchAC+YSzlSVBDSqNVjz6/R cskss4vWqvFunwwKugLX40vjDZFdqrXHcfz59yyUbkznGG6f1KTn54cer/ec9tYR zWhMLRnAcGa5tAkRE1++IIwasxrUh9K9fNLOHDVagsRxZFdb6hAprY2wcwvzmqsF yzsu2YJ0jfGCeGJvT26qb0xvFYL0RsvI -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org