$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: e7C/P4FnrYB6HVo/YJpGMNWopedYOSMOOToVa1XkSvg= Subject key identifier: C4:E6:E3:87:1E:AF:1F:54:57:D4:58:07:99:C2:20:1B:34:04:05:AA Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 0CF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0C08 Signing time: Sat 18 May 2024 20:11:00 +0000 Manifest this update: Sat 18 May 2024 20:11:00 +0000 Manifest next update: Sat 25 May 2024 20:11:00 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: 5FjeVYlLrHMTYCEtnrTKFGf22xsBSkA5lQmGUnOlBTA=) 2: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: uZ5YDui1RCbBQkk1AIcjpTZBu16nBKp9g9WFb9I9UmQ=) 3: 6CFA8FCA2B0811EBB691DC29C4F9AE02.roa (hash: uKg44TZuFMhB1nYh4rvVnLGzFKlgkqu/ilWZF0H0m6M=) 4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: P8PLziuil4U42Nnqve/PHmI7Y1+H0hWzEptlameEesM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3318 (0xcf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: May 18 20:11:00 2024 GMT Not After : May 25 20:11:00 2024 GMT Subject: CN=66490b54-a17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:b5:c6:46:97:9c:d3:83:11:1e:33:82:a2: af:d5:7a:ea:40:34:d7:b8:00:76:8e:37:68:1d:36: af:93:60:41:2f:20:e8:49:eb:f6:c5:4e:a8:5e:85: 11:c5:61:8c:4d:a6:c1:a4:f2:5f:1b:d6:7b:67:8a: 39:69:04:9c:92:88:61:77:fb:c0:22:cd:90:d5:d2: f4:a9:0d:c1:75:4b:1a:da:5f:07:d3:c2:a0:0d:5b: 67:db:95:de:36:ad:43:4f:86:0d:80:08:1f:63:3a: 63:c5:d1:e2:a0:9c:d1:f9:57:d3:30:05:2b:91:c4: 7f:f9:f9:e8:7b:63:1d:7a:97:d5:c1:22:99:44:e3: 1b:db:fa:e0:75:1f:b3:51:bd:04:b1:39:f7:4d:8b: ca:4f:1b:64:0f:41:35:8e:e4:ff:8c:55:b0:63:97: 56:56:50:26:c1:55:7b:f8:ed:f6:a3:fd:6d:7b:53: cb:39:59:8d:09:70:23:2b:8a:2b:07:78:6e:fd:5a: c2:dd:78:13:d1:24:1b:e6:3b:96:69:be:80:c5:bb: cd:eb:38:ed:53:c6:29:cf:a0:3c:4a:52:f2:d2:89: 2e:b2:ee:6b:93:39:30:36:7e:0a:c7:4a:19:aa:c5: 19:6f:8f:91:f2:42:41:6f:f0:e4:5f:7c:9b:6b:aa: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E6:E3:87:1E:AF:1F:54:57:D4:58:07:99:C2:20:1B:34:04:05:AA X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:5d:9a:66:e2:96:29:59:59:5a:75:44:12:a0:45:83:91:fd: 65:70:3e:39:ef:86:6d:56:93:e4:ae:16:f1:7e:5f:34:24:6b: 30:f7:d2:bc:55:88:10:c9:12:4e:2c:b8:43:c6:7c:97:62:f3: 31:dd:04:60:87:5b:3c:9f:e5:ce:58:82:64:53:e9:61:f4:d0: ae:0b:af:2b:0f:d8:69:14:12:90:5e:69:6b:59:84:76:f9:f9: 98:6a:f7:36:3e:9d:51:8a:0b:2e:2c:d6:12:8b:9b:01:ed:f0: 97:5c:a5:04:11:b3:dd:4f:f4:ff:7f:7c:31:e7:b7:0d:f4:a4: 9a:fe:8b:ef:69:be:55:b5:e3:29:2d:df:cb:91:7a:c5:27:21: ea:73:ff:09:96:85:53:a1:3e:75:9a:02:2b:aa:e7:61:a5:31: 50:06:d4:0f:14:a8:5f:2e:97:69:cc:c8:c2:49:bb:de:d4:34: 9b:25:80:76:4c:93:98:de:a4:08:90:f3:0b:5a:a5:e9:5b:f1: de:b1:6f:8d:b2:bb:ad:91:38:03:8f:fd:3c:ae:24:fe:b6:72: f1:38:9b:33:a5:ae:0c:63:c9:00:01:a9:8c:9a:34:6c:75:14: d8:75:ee:a4:04:c6:2f:00:32:18:66:7d:8b:4f:70:6a:ae:f7: 0f:e0:2e:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjQwNTE4MjAxMTAwWhcNMjQwNTI1MjAxMTAwWjAYMRYwFAYD VQQDEw02NjQ5MGI1NC1hMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl21xkaXnNODER4zgqKv1XrqQDTXuAB2jjdoHTavk2BBLyDoSev2xU6oXoUR xWGMTabBpPJfG9Z7Z4o5aQSckohhd/vAIs2Q1dL0qQ3BdUsa2l8H08KgDVtn25Xe Nq1DT4YNgAgfYzpjxdHioJzR+VfTMAUrkcR/+fnoe2MdepfVwSKZROMb2/rgdR+z Ub0EsTn3TYvKTxtkD0E1juT/jFWwY5dWVlAmwVV7+O32o/1te1PLOVmNCXAjK4or B3hu/VrC3XgT0SQb5juWab6AxbvN6zjtU8Ypz6A8SlLy0okusu5rkzkwNn4Kx0oZ qsUZb4+R8kJBb/DkX3yba6ricQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTm44ce rx9UV9RYB5nCIBs0BAWqMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhXZpm4pYpWVladUQSoEWDkf1lcD4574ZtVpPkrhbxfl80JGsw99K8 VYgQyRJOLLhDxnyXYvMx3QRgh1s8n+XOWIJkU+lh9NCuC68rD9hpFBKQXmlrWYR2 +fmYavc2Pp1RigsuLNYSi5sB7fCXXKUEEbPdT/T/f3wx57cN9KSa/ovvab5VteMp Ld/LkXrFJyHqc/8JloVToT51mgIrqudhpTFQBtQPFKhfLpdpzMjCSbve1DSbJYB2 TJOY3qQIkPMLWqXpW/HesW+NsrutkTgDj/08riT+tnLxOJszpa4MY8kAAamMmjRs dRTYde6kBMYvADIYZn2LT3BqrvcP4C72 -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org