$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: EuJi1B+9Zk858PtSAp8gdJR/fN7BsciplAvXiBAzuJc= Subject key identifier: 95:AC:34:E0:7D:10:2C:DF:D9:B5:02:C4:9A:80:57:1A:9D:2E:7B:48 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: BC Signing time: Fri 17 May 2024 06:38:16 +0000 Manifest this update: Fri 17 May 2024 06:38:15 +0000 Manifest next update: Fri 24 May 2024 06:38:15 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: 2c4sivxpiucZGif12BpL7KgMhkqCyBWTU51sG2ab5Tg=) 2: 4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa (hash: x/NBe2rp6nuh1iBCW/xjS2/vnJQp2+WXmFpLjt4XHpA=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: 2Wx/HsOA+q9AFCo0dyyEvL8h44+kprNZC1TvyGgQu9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: May 17 06:38:15 2024 GMT Not After : May 24 06:38:15 2024 GMT Subject: CN=6646fb57-8a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b9:fd:25:98:04:01:7f:a3:20:8f:bc:f3:f6: 14:8f:f1:da:1f:33:f4:de:cd:29:2f:bf:c4:05:e2: f4:91:70:83:26:2d:6e:37:64:df:5e:69:cd:ad:77: b2:ea:6c:91:bd:79:b2:f9:55:b2:91:96:d0:13:89: 37:1d:18:0d:2c:12:d2:9e:fa:c4:cb:6b:4d:22:ed: 54:0b:81:0c:46:76:d4:d8:2c:b0:a3:29:56:6f:c8: 9a:f0:57:f2:c4:8b:1a:d6:17:d3:8f:f9:df:f9:96: 1d:4c:d9:15:99:87:b0:b0:15:cc:81:a9:ef:f7:dc: 0b:50:0c:fd:97:40:41:42:b9:de:4b:6d:90:08:a2: 2d:67:b1:24:c2:7d:42:ae:be:51:f8:d1:ae:1c:3e: 4b:cb:c0:3d:37:22:c5:bb:c3:20:39:d0:0b:03:3f: 4b:1a:3b:ac:e7:59:b7:8a:56:40:28:b4:99:df:c8: 86:a6:1b:94:00:88:4d:4a:82:e7:6b:a8:af:9e:67: 39:a5:33:25:c3:ce:91:5d:0d:7c:49:44:ab:38:51: 4e:98:ac:b0:c2:f6:e4:7f:86:c5:79:20:11:e6:22: 96:74:03:d4:03:cd:b7:5d:27:b4:c0:9a:fb:b6:c9: 0e:74:a1:46:4b:1f:57:78:52:0a:60:d5:20:af:e8: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AC:34:E0:7D:10:2C:DF:D9:B5:02:C4:9A:80:57:1A:9D:2E:7B:48 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:09:29:ca:da:83:65:b8:33:64:9f:2e:08:15:a7:f5:6e:2f: 02:b6:12:1e:1d:da:b3:a6:6e:c8:b4:4c:07:0d:7d:fe:13:47: 2f:fb:86:90:2e:60:ff:ac:f2:c8:a8:9b:b9:1b:c1:fc:46:45: e3:cb:16:81:19:e6:ad:30:42:e1:3a:56:0f:09:c7:05:78:16: f2:ac:a1:17:1a:ab:a0:ab:81:b6:24:94:e7:c1:f6:58:0b:fe: c5:d5:e8:6b:86:47:d9:e0:e1:c2:cd:61:d5:a9:95:bc:5b:e7: 32:71:2c:f7:71:e8:cb:6a:98:0f:c0:7e:96:44:92:0c:18:45: 1f:e9:86:81:0b:29:fd:c7:40:f8:ef:0b:3a:5a:7f:02:48:2f: 9d:71:00:ee:cb:a4:5f:91:8f:0a:1c:69:cd:ab:c7:5d:4a:21: ef:ec:c1:17:e8:17:5f:fd:51:ea:f0:c7:95:7d:0f:05:20:97: 5b:49:ec:82:f7:61:5c:1f:f1:06:b2:14:97:82:e0:b8:31:56: 09:93:bd:7e:c4:fe:05:c1:0d:9d:9e:14:7e:51:ee:cb:30:4e: 42:c8:52:f0:3e:19:57:9b:ff:20:27:7b:54:a9:f7:f3:be:85: 14:67:30:3f:93:4e:6c:34:03:40:2c:6b:3e:15:45:d5:90:bd: 44:5f:f6:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjQwNTE3MDYzODE1WhcNMjQwNTI0MDYzODE1WjAYMRYwFAYD VQQDEw02NjQ2ZmI1Ny04YTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl7n9JZgEAX+jII+88/YUj/HaHzP03s0pL7/EBeL0kXCDJi1uN2TfXmnNrXey 6myRvXmy+VWykZbQE4k3HRgNLBLSnvrEy2tNIu1UC4EMRnbU2CywoylWb8ia8Ffy xIsa1hfTj/nf+ZYdTNkVmYewsBXMganv99wLUAz9l0BBQrneS22QCKItZ7Ekwn1C rr5R+NGuHD5Ly8A9NyLFu8MgOdALAz9LGjus51m3ilZAKLSZ38iGphuUAIhNSoLn a6ivnmc5pTMlw86RXQ18SUSrOFFOmKywwvbkf4bFeSAR5iKWdAPUA823XSe0wJr7 tskOdKFGSx9XeFIKYNUgr+jXBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWsNOB9 ECzf2bUCxJqAVxqdLntIMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCCSnK2oNluDNkny4IFaf1bi8CthIeHdqzpm7ItEwHDX3+E0cv+4aQ LmD/rPLIqJu5G8H8RkXjyxaBGeatMELhOlYPCccFeBbyrKEXGqugq4G2JJTnwfZY C/7F1ehrhkfZ4OHCzWHVqZW8W+cycSz3cejLapgPwH6WRJIMGEUf6YaBCyn9x0D4 7ws6Wn8CSC+dcQDuy6RfkY8KHGnNq8ddSiHv7MEX6Bdf/VHq8MeVfQ8FIJdbSeyC 92FcH/EGshSXguC4MVYJk71+xP4FwQ2dnhR+Ue7LME5CyFLwPhlXm/8gJ3tUqffz voUUZzA/k05sNANALGs+FUXVkL1EX/YM -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org