$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: ZEqEuco8d27jOdEdKITFV3+Z40T0BtyTIqrikyXq0gw= Subject key identifier: 49:BB:E4:61:90:2D:49:7C:45:AB:2D:5C:3A:BF:6F:BE:81:1D:D9:0C Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 0472 Signing time: Sun 19 May 2024 01:48:51 +0000 Manifest this update: Sun 19 May 2024 01:48:51 +0000 Manifest next update: Sun 26 May 2024 01:48:51 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: ZD2ooc0QIFAROC6Rmil6g1DOcLC4bO3iafwszMaOslM=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: MkuXLduwgMRE6SWb3Dh7/c59HVeD3A/VTs/2YsS9+78=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: bNNSJFnup1JZq7O01x97W0DgU8x7B5elbJ6Ai6OxWdM=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: KGYq8ECCJ1LG1bk9CxBMWB8BJeNY2cZInj8VZnN1qgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: May 19 01:48:51 2024 GMT Not After : May 26 01:48:51 2024 GMT Subject: CN=66495a83-3475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:d0:bd:dd:1f:11:b9:2e:26:5d:8b:ce:f1: 83:e2:03:44:ed:59:a9:d4:f2:1d:50:38:a2:f2:3e: dc:36:4d:7a:6f:cf:13:97:38:b3:1e:01:d9:1d:6d: 54:c9:69:01:e6:71:b8:e3:70:c9:66:f8:e2:7c:4b: 4e:98:13:d7:a5:03:db:b6:8c:7f:ac:2f:d9:e9:ea: 00:dd:c9:52:bd:11:e3:c4:8b:f4:9f:a9:5e:7a:c3: 5a:73:4c:46:ce:2c:f7:ed:61:a7:32:85:ea:f1:f4: 07:e8:d5:75:fc:f6:81:48:e7:00:af:a5:39:79:f3: d9:39:08:b8:04:c0:08:d5:0b:2c:9d:6d:03:78:3c: e1:55:52:31:39:18:94:6e:eb:f4:af:02:88:0c:d3: b4:34:b5:45:b1:c1:25:5d:b4:82:f0:a7:df:7c:14: 02:09:d4:2a:14:e7:5b:bb:3e:f8:b3:1b:5c:4a:4b: 8f:14:5c:c7:42:7c:77:7e:96:5d:4f:3b:9a:e1:3a: 22:3d:15:47:86:ef:37:e7:05:9d:a7:76:e9:2d:79: 48:e7:d4:cf:dc:7a:d0:b9:6c:05:86:ef:eb:cc:f6: 6c:22:2f:ad:0e:20:7d:19:2c:4a:c0:ee:be:1c:89: 16:be:47:65:a7:3d:d0:cc:06:42:a5:f5:2a:5e:45: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BB:E4:61:90:2D:49:7C:45:AB:2D:5C:3A:BF:6F:BE:81:1D:D9:0C X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:16:83:7c:eb:ca:b1:b1:e9:8c:02:a8:3b:42:b3:6b:fe:cf: 4d:7b:d6:93:4f:5b:c2:44:57:6f:ce:fe:8b:e4:bd:65:87:9e: 78:07:fa:1c:a8:1d:9a:df:c4:01:d9:93:36:0f:f3:7c:68:e2: dc:46:c0:71:f4:73:26:c1:54:4d:68:4e:a2:76:8c:10:74:8c: 63:49:67:5d:e6:6f:88:40:87:0d:32:c5:9f:53:83:5f:8c:81: 9e:ae:3b:2e:69:0d:05:18:7b:e5:d3:fe:ec:b4:c9:0d:1c:15: ba:ce:b1:18:41:98:17:4a:78:a4:a5:21:d5:f6:67:3d:64:18: cf:ef:62:63:a9:cf:11:bf:12:33:3a:93:68:5b:c0:07:3d:8d: 22:d6:6e:c2:ed:69:29:f2:e3:05:f5:e3:e0:18:06:c7:34:b1: c9:6c:6e:ae:ee:be:e7:04:35:1e:00:91:d0:c4:ea:75:39:58: 20:c6:40:c5:86:91:4c:89:37:db:ba:e6:73:e3:4c:57:de:ee: 8b:24:c7:0d:f5:20:c2:a7:e6:4b:24:b9:79:de:bf:c2:1c:d8: 12:d4:9c:da:99:61:3b:89:ec:7f:83:cc:53:08:20:58:62:ea: 14:c7:77:c0:e0:46:44:16:03:a4:9a:6c:5b:00:68:18:21:c6: 8c:f4:ad:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjQwNTE5MDE0ODUxWhcNMjQwNTI2MDE0ODUxWjAYMRYwFAYD VQQDEw02NjQ5NWE4My0zNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCvQvd0fEbkuJl2LzvGD4gNE7Vmp1PIdUDii8j7cNk16b88TlzizHgHZHW1U yWkB5nG443DJZvjifEtOmBPXpQPbtox/rC/Z6eoA3clSvRHjxIv0n6leesNac0xG ziz37WGnMoXq8fQH6NV1/PaBSOcAr6U5efPZOQi4BMAI1QssnW0DeDzhVVIxORiU buv0rwKIDNO0NLVFscElXbSC8KfffBQCCdQqFOdbuz74sxtcSkuPFFzHQnx3fpZd Tzua4ToiPRVHhu835wWdp3bpLXlI59TP3HrQuWwFhu/rzPZsIi+tDiB9GSxKwO6+ HIkWvkdlpz3QzAZCpfUqXkUE0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm75GGQ LUl8RastXDq/b76BHdkMMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbFoN868qxsemMAqg7QrNr/s9Ne9aTT1vCRFdvzv6L5L1lh554B/oc qB2a38QB2ZM2D/N8aOLcRsBx9HMmwVRNaE6idowQdIxjSWdd5m+IQIcNMsWfU4Nf jIGerjsuaQ0FGHvl0/7stMkNHBW6zrEYQZgXSnikpSHV9mc9ZBjP72Jjqc8RvxIz OpNoW8AHPY0i1m7C7Wkp8uMF9ePgGAbHNLHJbG6u7r7nBDUeAJHQxOp1OVggxkDF hpFMiTfbuuZz40xX3u6LJMcN9SDCp+ZLJLl53r/CHNgS1JzamWE7iex/g8xTCCBY YuoUx3fA4EZEFgOkmmxbAGgYIcaM9K3T -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org