$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json) Hash identifier: J8gN8Jf+LM6kYbPv+ujOawLrQ3C/Nq/Ozz87bri41qg= Subject key identifier: 6F:6F:07:C7:DE:F1:40:AF:7E:08:17:DA:7A:E9:28:6A:68:5D:99:55 Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft Manifest number: 5B Signing time: Sun 19 May 2024 07:52:25 +0000 Manifest this update: Sun 19 May 2024 07:52:24 +0000 Manifest next update: Sun 26 May 2024 07:52:24 +0000 Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: zT4tblpp1cmTbzNSKoxQ4VqI0V9aO9ABjiHSpf233qE=) 2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: Lf6SXJlubwVeZ9CNSFtJKx7lUWNwb+NpSYdLt1vEz7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Validity Not Before: May 19 07:52:24 2024 GMT Not After : May 26 07:52:24 2024 GMT Subject: CN=6649afb9-94d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:ad:92:88:af:e2:c5:a7:b5:43:f5:b4:ff: 88:3b:cd:a9:af:86:38:c7:10:58:52:9a:64:c5:22: 92:12:ca:31:12:30:83:d1:a0:38:39:70:4e:e5:7f: 43:7c:48:76:ee:40:95:10:05:47:a7:2f:86:e0:df: 2c:0e:1f:4d:ba:94:0f:18:33:86:19:49:c8:62:ad: 11:4e:ed:6b:96:b7:22:1b:8a:47:38:4a:0e:36:de: ee:71:09:24:5a:86:1e:32:15:94:a8:d1:11:c7:69: 98:26:1a:b1:af:30:98:1d:64:43:f0:3f:b6:73:76: c0:05:e5:ea:77:cc:f9:a2:b6:4e:ec:a7:3f:47:6a: 4a:8d:c9:86:f6:be:7e:c1:75:7b:a2:30:14:59:44: 78:38:4a:10:cc:f3:a7:22:ca:ce:02:0d:8b:7b:b7: e0:28:ac:6a:25:ad:23:e7:8d:38:56:8b:fd:57:97: 2e:84:cb:39:d6:66:a9:f3:6b:ee:02:d6:cb:ae:3d: 07:96:1f:15:50:28:7f:d2:8b:68:0b:76:11:78:38: c4:d3:f7:b2:91:af:0f:84:d2:22:4e:6a:41:3f:15: da:7c:e1:15:da:00:0e:8d:80:83:bb:c6:1d:47:57: f0:f3:91:3f:8d:a7:61:25:69:35:00:68:4f:b4:a8: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6F:07:C7:DE:F1:40:AF:7E:08:17:DA:7A:E9:28:6A:68:5D:99:55 X509v3 Authority Key Identifier: keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a0:4c:68:71:24:68:4d:a6:be:27:7c:1b:17:e4:3c:08:68: 0b:28:83:15:0b:d0:d3:94:de:3e:90:aa:37:d0:15:da:2b:63: f0:d6:f1:aa:66:d5:66:e0:56:59:e3:14:b3:ac:c2:6a:0c:ae: db:da:4b:80:e6:79:66:f8:a3:a9:46:2e:29:62:a6:33:01:10: 1e:93:e3:b9:59:c5:60:d8:a0:26:54:ca:0c:80:8a:6f:00:bd: 48:36:4c:0c:4b:2e:d8:29:c5:38:ad:ef:b6:1d:be:f9:c8:10: fa:42:75:76:b8:a8:c9:ba:f5:8c:35:49:bb:b1:4f:a9:ba:5d: e8:4a:69:34:a1:f0:17:48:8f:77:b0:72:c4:b1:ab:88:39:87: 01:c7:8a:44:f7:ef:27:e0:94:4d:69:c1:73:0e:6d:1e:59:72: e8:68:74:70:ca:00:8d:4a:1e:13:16:24:d5:06:c6:ad:3c:19: a4:e8:bb:65:07:6b:66:90:21:b8:41:9f:7e:a0:71:a9:31:77: 8c:c4:30:99:3c:92:7f:9f:c5:4e:bd:c9:64:44:3a:13:3e:51: 11:10:9e:74:e8:58:56:60:31:4d:e1:dd:45:b4:d4:e6:ca:5b: 6c:ba:fd:31:1f:9e:b6:88:7d:52:80:07:15:3a:66:28:3b:21: b6:49:e8:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OTM1MTExMC8GA1UEBRMoQjU0NzYyODFGMzU5NEQzODY0OUNDQ0ZGNTJGNThCQjQ5 QjQ3NUYwOTAeFw0yNDA1MTkwNzUyMjRaFw0yNDA1MjYwNzUyMjRaMBgxFjAUBgNV BAMTDTY2NDlhZmI5LTk0ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN+a2SiK/ixae1Q/W0/4g7zamvhjjHEFhSmmTFIpISyjESMIPRoDg5cE7lf0N8 SHbuQJUQBUenL4bg3ywOH026lA8YM4YZSchirRFO7WuWtyIbikc4Sg423u5xCSRa hh4yFZSo0RHHaZgmGrGvMJgdZEPwP7ZzdsAF5ep3zPmitk7spz9HakqNyYb2vn7B dXuiMBRZRHg4ShDM86ciys4CDYt7t+AorGolrSPnjThWi/1Xly6EyznWZqnza+4C 1suuPQeWHxVQKH/Si2gLdhF4OMTT97KRrw+E0iJOakE/Fdp84RXaAA6NgIO7xh1H V/DzkT+Np2ElaTUAaE+0qD9PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb28Hx97x QK9+CBfaeukoamhdmVUwHwYDVR0jBBgwFoAUtUdigfNZTThknMz/UvWLtJtHXwkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5MzUxLzMxQTBEMTgyOTQw NTExRUVBODY4NzU0N0M0RjlBRTAyL3RVZGlnZk5aVFRoa25Nel9VdldMdEp0SFh3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFVkaWdmTlpUVGhrbk16X1V2V0x0SnRIWHdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 MzUxLzMxQTBEMTgyOTQwNTExRUVBODY4NzU0N0M0RjlBRTAyL3RVZGlnZk5aVFRo a25Nel9VdldMdEp0SFh3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACKgTGhxJGhNpr4nfBsX5DwIaAsogxUL0NOU3j6QqjfQFdorY/DW8apm 1WbgVlnjFLOswmoMrtvaS4DmeWb4o6lGLilipjMBEB6T47lZxWDYoCZUygyAim8A vUg2TAxLLtgpxTit77YdvvnIEPpCdXa4qMm69Yw1SbuxT6m6XehKaTSh8BdIj3ew csSxq4g5hwHHikT37yfglE1pwXMObR5ZcuhodHDKAI1KHhMWJNUGxq08GaTou2UH a2aQIbhBn36gcakxd4zEMJk8kn+fxU69yWREOhM+UREQnnToWFZgMU3h3UW01ObK W2y6/TEfnraIfVKABxU6Zig7IbZJ6FE= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org