$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: 2ghAYzWNG2YsVPOUQAVzUYc0aiR9fpxwgpAmfLILNAo= Subject key identifier: E9:4D:02:54:C7:30:C3:CA:4C:F0:AE:59:52:C6:07:C8:0E:3E:1F:CA Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0B6C Signing time: Sat 18 May 2024 19:30:47 +0000 Manifest this update: Sat 18 May 2024 19:30:47 +0000 Manifest next update: Sat 25 May 2024 19:30:47 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: +jMxBQc8/apSasYhe3UcOR3ygDHYh2MVRr+xUGJpdjY=) 2: 7BE1470408FE11EAA003E778C4F9AE02.roa (hash: TFfPXkPhTzfbgxWKAcVkf/eEjOSO4xe5jtJeyRtnr8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2930 (0xb72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: May 18 19:30:47 2024 GMT Not After : May 25 19:30:47 2024 GMT Subject: CN=664901e7-43cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:45:10:96:df:cf:34:27:2b:30:2e:50:85: e1:25:67:f6:01:05:ce:ac:19:8d:17:2e:2b:4f:fd: 9a:c8:c6:ab:84:03:9c:54:66:4c:0b:b9:b3:72:a9: cb:e5:35:cd:72:f4:74:bf:1f:77:e9:1b:f2:84:e8: 14:2e:4a:65:ef:92:da:13:5b:cb:a5:ed:ab:45:c8: 12:eb:ec:29:ec:5c:88:78:45:87:35:be:99:6f:75: 7f:bd:0f:78:98:0f:41:0e:27:87:92:7d:46:43:aa: 42:ec:7a:6e:44:09:7c:ed:46:75:85:83:c9:37:b1: 2c:f3:3f:58:99:00:23:62:79:0a:2f:33:b7:dc:94: c6:01:f5:2f:1d:e8:85:ae:f5:51:2b:6b:53:cc:5a: 80:53:12:cd:a6:0c:72:01:c0:2c:fc:d6:77:22:4a: ed:49:d7:b3:7a:f9:a5:11:56:39:bb:a3:60:21:cd: 01:7c:a7:28:3a:7f:0c:ad:08:27:71:d8:ed:15:fb: 45:6d:78:3b:88:e6:e1:83:ee:d6:07:e8:e8:65:2a: 27:2a:7e:38:f7:12:53:e3:a3:4e:5a:84:d0:e3:65: d9:97:0f:00:76:de:b8:60:27:0f:90:90:b4:2e:90: d6:33:6b:13:0d:af:e0:b9:a0:ac:b8:e6:87:a1:ca: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4D:02:54:C7:30:C3:CA:4C:F0:AE:59:52:C6:07:C8:0E:3E:1F:CA X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:7f:a9:0e:7e:ec:49:cf:ee:30:78:96:d3:f6:9b:e6:39:b3: d6:a0:a1:38:df:84:c0:90:50:b1:6c:a9:28:57:37:4d:fa:77: 1c:eb:84:85:5c:ba:c5:b9:76:bf:a1:44:42:6a:03:6b:95:ad: ce:c1:79:dc:7e:0e:91:58:cf:bf:7b:53:7a:d0:2e:59:d3:e8: 64:7a:aa:90:41:23:ac:b4:ed:02:89:d2:aa:50:cd:31:84:49: 26:cb:98:bb:0f:65:e4:30:e5:ae:58:9a:58:ca:7a:24:d4:ae: e9:6d:18:72:8c:0c:72:d8:e2:6b:85:bb:4d:bf:91:3e:b9:b2: e9:d9:03:83:1f:17:f6:42:01:b0:9c:73:d7:f5:4e:6b:a2:5c: e7:6d:78:ca:2b:84:51:f7:f0:05:10:48:c7:51:2c:20:ab:d0: cb:20:9a:2e:fc:9f:f4:b2:ac:5d:5f:7c:61:5f:74:02:73:6c: 34:30:42:5c:b7:c8:c0:15:ea:42:86:d4:4d:25:0c:80:4f:45: d1:7c:4b:e2:e4:24:15:99:58:64:7f:41:97:47:fd:0c:97:d1: c9:8b:61:b7:a5:e3:b6:64:1c:d4:51:57:9e:33:ad:45:25:25: 45:13:eb:f0:2c:ad:9e:6c:48:eb:cc:b5:78:6b:82:d1:9f:dd: 0e:cf:6b:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjQwNTE4MTkzMDQ3WhcNMjQwNTI1MTkzMDQ3WjAYMRYwFAYD VQQDEw02NjQ5MDFlNy00M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra5FEJbfzzQnKzAuUIXhJWf2AQXOrBmNFy4rT/2ayMarhAOcVGZMC7mzcqnL 5TXNcvR0vx936RvyhOgULkpl75LaE1vLpe2rRcgS6+wp7FyIeEWHNb6Zb3V/vQ94 mA9BDieHkn1GQ6pC7HpuRAl87UZ1hYPJN7Es8z9YmQAjYnkKLzO33JTGAfUvHeiF rvVRK2tTzFqAUxLNpgxyAcAs/NZ3IkrtSdezevmlEVY5u6NgIc0BfKcoOn8MrQgn cdjtFftFbXg7iObhg+7WB+joZSonKn449xJT46NOWoTQ42XZlw8Adt64YCcPkJC0 LpDWM2sTDa/guaCsuOaHocokJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlNAlTH MMPKTPCuWVLGB8gOPh/KMB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQf6kOfuxJz+4weJbT9pvmObPWoKE434TAkFCxbKkoVzdN+ncc64SF XLrFuXa/oURCagNrla3OwXncfg6RWM+/e1N60C5Z0+hkeqqQQSOstO0CidKqUM0x hEkmy5i7D2XkMOWuWJpYynok1K7pbRhyjAxy2OJrhbtNv5E+ubLp2QODHxf2QgGw nHPX9U5rolznbXjKK4RR9/AFEEjHUSwgq9DLIJou/J/0sqxdX3xhX3QCc2w0MEJc t8jAFepChtRNJQyAT0XRfEvi5CQVmVhkf0GXR/0Ml9HJi2G3peO2ZBzUUVeeM61F JSVFE+vwLK2ebEjrzLV4a4LRn90Oz2s/ -----END CERTIFICATE-----Generated at Sat May 18 19:56:06 2024 by rpki-client on console-fra.rpki-client.org