$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: AjNEN9psUVFoug4WxO+mMOSiyK3c7BaMXhSKIdk66Fw= Subject key identifier: 82:DA:61:0A:BD:9C:6D:3C:44:B1:0D:80:03:D7:94:78:7F:E3:FC:AD Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 012A Signing time: Sun 19 May 2024 05:06:26 +0000 Manifest this update: Sun 19 May 2024 05:06:26 +0000 Manifest next update: Sun 26 May 2024 05:06:26 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: ATwlRuWjEAfy5dL1H/sShaaHk6kCTaVgEBDjRU+czmc=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: s9lJG+Z0E0MfohIZewJo6sJJ0DeLoO8nyC5DM7qx6gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: May 19 05:06:26 2024 GMT Not After : May 26 05:06:26 2024 GMT Subject: CN=664988d2-054d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ba:97:27:2d:7e:6b:6d:30:85:40:98:b1:1f: 3f:b7:37:cf:4c:02:68:ae:4a:60:9a:8f:79:c0:2e: 80:17:7f:b5:ab:bb:10:35:b4:88:ee:40:f3:1b:1b: 94:f8:32:45:14:81:d2:70:b8:62:50:dc:15:30:f5: c6:a0:ed:b3:dd:4a:ef:9b:72:72:1d:42:fb:ca:6c: 85:fb:51:c5:90:f0:8a:9c:67:9d:47:f1:0c:f8:cc: 24:33:ba:4c:9e:d3:1f:9d:e9:f7:f9:19:8c:54:9c: 93:c7:01:75:75:6e:d4:6d:f3:49:55:df:9d:0e:d3: d9:7c:99:05:36:72:3d:c0:62:3b:8f:75:76:f2:94: 9a:fe:ef:ae:c6:88:8c:0a:22:8b:f6:cf:c5:e4:2f: f2:6d:b9:e2:a9:9e:2f:31:46:f4:03:0f:43:bf:00: 02:78:85:ac:f4:b1:16:e0:6f:54:20:28:f9:cc:92: 25:58:f7:c1:05:22:c3:83:ca:03:4e:df:ae:62:c3: b3:aa:db:da:8f:1f:75:74:b1:3c:ca:c1:4e:7d:0e: 94:79:b1:f8:0f:0d:2e:82:12:08:8e:7f:43:bc:ef: f5:49:9d:2f:4a:91:b0:3c:ab:1a:4f:5f:45:53:fe: 70:3c:7a:b5:e3:bd:dc:21:a7:9f:e3:38:de:b0:8e: 87:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DA:61:0A:BD:9C:6D:3C:44:B1:0D:80:03:D7:94:78:7F:E3:FC:AD X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:80:e6:14:79:a5:19:90:1b:14:f2:8d:ec:b3:42:4e:a9:7f: b7:c4:97:b3:fb:a9:04:69:d6:e4:5d:5a:fa:07:3a:cb:ae:3a: 79:f5:f0:ac:0d:bb:da:0b:54:02:7c:32:dc:11:ca:2b:14:2f: 22:39:6e:1c:5d:ea:35:46:7a:0c:da:81:e1:aa:8d:67:f1:d0: 44:d5:48:e6:bf:9b:96:83:32:61:3a:be:51:97:29:34:b6:65: 69:e9:ed:d2:35:22:aa:e8:52:a5:ff:fa:ec:62:fb:2e:22:56: e7:45:66:a5:ba:53:7b:8d:19:1b:8b:ed:42:7b:12:c8:05:cb: 72:d3:7d:5c:bd:5e:9f:36:24:62:cd:64:db:4c:bf:c3:53:4f: e0:2a:88:bb:c2:9b:9a:7c:a0:21:26:af:fd:87:6b:26:85:e8: 13:37:84:87:27:5e:fe:b7:62:37:6b:ac:ac:22:fc:e8:71:70: fd:6d:55:a4:aa:26:f6:a7:b4:d5:46:49:40:42:cd:7f:82:8d: 4f:f9:b0:06:30:96:7b:b0:4e:c1:4e:fa:e6:4d:ca:f6:8e:60: b9:2c:70:a1:02:ee:01:9d:24:4c:c5:a3:df:0d:55:cf:76:14: 1e:bb:6f:76:2f:8c:88:f9:d9:80:6c:20:fa:ac:40:8b:f6:be: 4a:31:d4:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjQwNTE5MDUwNjI2WhcNMjQwNTI2MDUwNjI2WjAYMRYwFAYD VQQDEw02NjQ5ODhkMi0wNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9rqXJy1+a20whUCYsR8/tzfPTAJorkpgmo95wC6AF3+1q7sQNbSI7kDzGxuU +DJFFIHScLhiUNwVMPXGoO2z3Urvm3JyHUL7ymyF+1HFkPCKnGedR/EM+MwkM7pM ntMfnen3+RmMVJyTxwF1dW7UbfNJVd+dDtPZfJkFNnI9wGI7j3V28pSa/u+uxoiM CiKL9s/F5C/ybbniqZ4vMUb0Aw9DvwACeIWs9LEW4G9UICj5zJIlWPfBBSLDg8oD Tt+uYsOzqtvajx91dLE8ysFOfQ6UebH4Dw0ughIIjn9DvO/1SZ0vSpGwPKsaT19F U/5wPHq1473cIaef4zjesI6HewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILaYQq9 nG08RLENgAPXlHh/4/ytMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFgOYUeaUZkBsU8o3ss0JOqX+3xJez+6kEadbkXVr6BzrLrjp59fCs DbvaC1QCfDLcEcorFC8iOW4cXeo1RnoM2oHhqo1n8dBE1Ujmv5uWgzJhOr5Rlyk0 tmVp6e3SNSKq6FKl//rsYvsuIlbnRWalulN7jRkbi+1CexLIBcty031cvV6fNiRi zWTbTL/DU0/gKoi7wpuafKAhJq/9h2smhegTN4SHJ17+t2I3a6ysIvzocXD9bVWk qib2p7TVRklAQs1/go1P+bAGMJZ7sE7BTvrmTcr2jmC5LHChAu4BnSRMxaPfDVXP dhQeu292L4yI+dmAbCD6rECL9r5KMdTK -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org