$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: ZlxUElzEzFvpHpGd8V3NJiZv/fqKgLo1Q6mYrkgp/bY= Subject key identifier: 5D:98:1E:B8:65:AB:43:6E:82:40:52:0A:F1:ED:DC:82:31:FC:49:33 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 032D Signing time: Tue 07 May 2024 03:03:58 +0000 Manifest this update: Tue 07 May 2024 03:03:57 +0000 Manifest next update: Tue 14 May 2024 03:03:57 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: o7twMBo66YLkfJZH32fQsZEkzPZOhj8cMGBx8+nDOfo=) 2: 5FEAFF2082EB11EEB854FA63C4F9AE02.roa (hash: zyPJEBN9OhrONmnlGPIVrxz1MzOdL5M5XjHLz01e0Hs=) 3: 03B667B2853911EE86CB377CC4F9AE02.roa (hash: Nt7ZeaJxcaF8JBryxsq86WPMWWz1bMn8hJbR3D7+nN8=) 4: 4A6E6E5282EB11EEB8BBB763C4F9AE02.roa (hash: B7kNc0t3usyhvkz1xRDQSZpkmPJrpX0sVxBusRmgsxs=) 5: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: zfYVy5hvFb9iNgoQ6kEzPojQ/uq5MxFePtWyjJxsOCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: May 7 03:03:57 2024 GMT Not After : May 14 03:03:57 2024 GMT Subject: CN=66399a1d-820f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:04:c2:89:fa:ba:62:fa:cb:66:6f:80:64: 2f:22:0d:b7:3c:57:4e:98:c7:78:3a:e5:21:51:9f: 91:41:73:08:cf:6f:a2:45:f7:6a:6e:56:cb:f3:ce: 9d:0d:8f:76:2a:f8:25:e3:65:f9:9c:10:43:ce:65: 12:55:db:4a:5f:89:b6:bf:02:d1:11:cc:9e:5f:f4: 00:7c:ab:7d:1b:6b:ff:95:ec:0e:3a:60:d0:ed:4c: 80:cf:a5:00:87:07:87:4a:44:cc:46:64:28:7c:b4: 75:fa:c0:5f:d2:f9:8c:ff:e1:c6:09:ac:c1:ed:27: fd:9c:2e:6e:03:51:f8:8b:21:fc:44:66:dd:00:24: f5:6f:32:de:a8:65:f9:af:35:11:77:76:5b:30:f6: 46:11:f2:65:ec:d8:43:71:aa:76:16:38:66:9a:61: d0:44:a7:94:97:8f:18:0b:12:33:d2:bf:22:fe:d4: 6c:09:6e:04:28:bc:b4:e1:45:87:b5:d1:12:37:b2: 07:c9:22:4d:fa:d8:ea:05:92:d4:ef:b5:80:6a:9d: 5d:3f:b6:32:2b:3b:f7:81:ae:03:e3:34:9a:20:4b: dc:6a:3f:ba:bd:cb:09:79:cc:db:0d:09:5a:4c:4f: e2:1b:53:7f:6a:ac:c6:13:3e:77:3b:48:a2:c5:f1: 26:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:98:1E:B8:65:AB:43:6E:82:40:52:0A:F1:ED:DC:82:31:FC:49:33 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:6b:d3:df:96:07:75:48:bc:7b:d2:e8:61:86:46:dc:e1:e3: 88:a9:54:cd:31:00:cb:ba:ff:8c:85:d8:74:60:83:7d:15:2f: fb:dc:84:c5:67:1e:0f:ff:cf:12:a8:c0:af:72:0c:70:e9:b0: 6f:f5:b1:64:74:c5:ba:07:9a:a8:f7:db:cb:60:3c:81:22:2d: 20:38:c0:e3:45:c9:05:36:9e:50:96:a1:4c:0d:17:9f:98:ef: 9b:d7:63:56:16:58:56:92:ee:f7:ed:7e:de:e1:e8:5e:f6:a4: ad:d2:73:c1:ca:98:07:ce:f4:4e:10:f7:17:ea:52:fd:60:a9: 2b:cb:e2:0e:d0:63:9b:c6:48:3c:2a:ab:89:6d:77:b7:61:55: c8:ef:04:e8:66:ca:9d:a5:84:d7:93:e0:10:c1:eb:2d:67:c5: 02:f9:94:06:53:41:f6:56:30:f6:c8:7a:26:d8:e5:6f:8c:dd: a3:f1:51:24:41:b4:d3:c1:bc:c4:82:00:3d:fc:12:97:2e:77: ae:0e:16:78:5b:33:30:e2:43:87:f3:2e:42:77:63:f1:64:b2: 49:43:f9:88:88:9c:14:0e:c2:a7:b0:f1:0a:dc:c5:a7:e2:37: 7a:e2:9d:7e:34:a0:a6:24:9e:d1:de:86:e3:b6:23:8a:33:7f: e5:d2:3c:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjQwNTA3MDMwMzU3WhcNMjQwNTE0MDMwMzU3WjAYMRYwFAYD VQQDEw02NjM5OWExZC04MjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujkEwon6umL6y2ZvgGQvIg23PFdOmMd4OuUhUZ+RQXMIz2+iRfdqblbL886d DY92Kvgl42X5nBBDzmUSVdtKX4m2vwLREcyeX/QAfKt9G2v/lewOOmDQ7UyAz6UA hweHSkTMRmQofLR1+sBf0vmM/+HGCazB7Sf9nC5uA1H4iyH8RGbdACT1bzLeqGX5 rzURd3ZbMPZGEfJl7NhDcap2FjhmmmHQRKeUl48YCxIz0r8i/tRsCW4EKLy04UWH tdESN7IHySJN+tjqBZLU77WAap1dP7YyKzv3ga4D4zSaIEvcaj+6vcsJeczbDQla TE/iG1N/aqzGEz53O0iixfEmsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2YHrhl q0NugkBSCvHt3IIx/EkzMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVa9Pflgd1SLx70uhhhkbc4eOIqVTNMQDLuv+Mhdh0YIN9FS/73ITF Zx4P/88SqMCvcgxw6bBv9bFkdMW6B5qo99vLYDyBIi0gOMDjRckFNp5QlqFMDRef mO+b12NWFlhWku737X7e4ehe9qSt0nPBypgHzvROEPcX6lL9YKkry+IO0GObxkg8 KquJbXe3YVXI7wToZsqdpYTXk+AQwestZ8UC+ZQGU0H2VjD2yHom2OVvjN2j8VEk QbTTwbzEggA9/BKXLneuDhZ4WzMw4kOH8y5Cd2PxZLJJQ/mIiJwUDsKnsPEK3MWn 4jd64p1+NKCmJJ7R3objtiOKM3/l0jyI -----END CERTIFICATE-----Generated at Tue May 7 03:53:38 2024 by rpki-client on console-fra.rpki-client.org