$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft File: tYgfusqd6_Rspghj0pd8U_3WwZA.mft (raw, json) Hash identifier: MEJBlHmpiGi1sx3HjhHs6RLljuHWuz527mv8V0fKUVg= Subject key identifier: 3A:14:01:4C:D0:96:66:52:62:96:BF:BC:F0:6A:E9:EA:03:F3:ED:DB Authority key identifier: B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90 Certificate issuer: /CN=A9188D2D/serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft Manifest number: FE Signing time: Sun 19 May 2024 05:37:48 +0000 Manifest this update: Sun 19 May 2024 05:37:48 +0000 Manifest next update: Sun 26 May 2024 05:37:48 +0000 Files and hashes: 1: tYgfusqd6_Rspghj0pd8U_3WwZA.crl (hash: YDo4JHHtVugwk4EdCxqwsoCx3vWJXZYZeCZaIYNnUgw=) 2: D9D943568FFC11ED9776CB38C4F9AE02.roa (hash: m8z9odaUiOzo2Q6HnCo0kOXTVmgFRhiSBzilAVOt71c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D2D/serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190 Validity Not Before: May 19 05:37:48 2024 GMT Not After : May 26 05:37:48 2024 GMT Subject: CN=6649902c-a247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c9:57:d2:95:d5:a1:94:9a:8d:22:56:20:0c: 05:47:2e:99:c3:b4:b4:d4:43:ca:3c:a5:86:99:62: db:c1:c5:b5:6b:88:5c:63:51:fa:c0:3b:aa:f4:1d: 3f:d2:80:3e:df:d4:73:19:fe:9b:34:43:f5:7d:7e: a8:de:84:68:d9:27:57:64:8f:2b:72:40:cf:cd:22: 3b:84:b8:a7:d7:d3:84:98:0a:f9:34:4d:77:ce:c9: 40:14:77:8b:aa:25:9a:fd:76:ad:98:4b:a4:cc:05: b0:d1:4b:39:22:a1:35:6a:45:10:74:41:fa:80:9e: 1d:66:c2:1b:17:53:1d:eb:49:7d:b8:5d:95:85:86: 19:87:50:db:ba:87:71:8a:72:92:38:f7:18:27:15: 63:41:66:f6:c4:96:0c:af:dc:c1:97:4d:e0:41:22: ed:cb:8d:be:10:38:30:62:93:36:b2:8d:fb:10:13: 3a:73:a0:9c:89:cf:06:dc:9c:73:1b:1b:8d:5e:a9: 5f:5e:e9:ea:a8:82:3f:52:ef:40:96:cf:d5:e9:b6: 26:e6:22:c7:e5:70:43:03:aa:2c:b3:90:84:a4:68: eb:aa:56:b0:ed:cf:a6:af:bb:b8:1d:7e:b9:32:73: f6:23:43:6d:47:38:96:2a:ca:d5:f6:e8:f6:95:e6: e2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:14:01:4C:D0:96:66:52:62:96:BF:BC:F0:6A:E9:EA:03:F3:ED:DB X509v3 Authority Key Identifier: keyid:B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:17:92:35:cc:ad:07:c4:a9:8f:c8:fc:9c:b8:83:60:7a:49: 1d:9a:d7:9b:b6:ec:dc:ba:8a:06:0f:b2:b5:d8:00:da:a0:9b: 9c:b6:2a:d3:2e:a6:ad:5f:1c:1e:e7:99:2c:a3:22:6b:0c:7e: ab:76:d9:6b:f0:d9:06:a0:b6:b7:27:ab:75:c8:f5:64:28:9e: b7:0e:4b:e9:6f:40:b7:98:38:1c:3f:e6:10:a7:08:c1:47:78: 04:95:30:3e:af:0f:d7:bc:24:2c:9f:80:ea:af:91:eb:6b:b4: 3b:83:a9:1d:de:bf:1e:ef:79:ca:b1:4e:23:29:2d:b4:a2:3b: 0f:58:d5:56:6f:11:8c:f6:34:22:bc:0e:92:d9:ca:e9:84:2c: b9:b9:ab:d1:2b:a1:20:20:16:52:59:94:2a:9b:cf:06:83:f0: f7:49:3b:3f:11:8e:40:2a:c4:68:40:5e:3e:23:8a:6f:0f:2b: 73:de:49:70:6c:6d:b0:27:a9:e3:de:a2:b0:74:db:5f:6d:38: 3b:73:67:6e:52:90:a5:82:cb:2b:01:36:73:1a:74:81:10:33: fb:9b:09:9e:8c:f4:66:b5:54:2d:1c:f8:ef:4b:35:5a:54:c1: 41:c7:0e:6e:2a:d4:ad:30:a4:61:b4:7a:32:71:6c:f6:af:2b: 21:35:73:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEMkQxMTAvBgNVBAUTKEI1ODgxRkJBQ0E5REVCRjQ2Q0E2MDg2M0QyOTc3QzUz RkRENkMxOTAwHhcNMjQwNTE5MDUzNzQ4WhcNMjQwNTI2MDUzNzQ4WjAYMRYwFAYD VQQDEw02NjQ5OTAyYy1hMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8slX0pXVoZSajSJWIAwFRy6Zw7S01EPKPKWGmWLbwcW1a4hcY1H6wDuq9B0/ 0oA+39RzGf6bNEP1fX6o3oRo2SdXZI8rckDPzSI7hLin19OEmAr5NE13zslAFHeL qiWa/XatmEukzAWw0Us5IqE1akUQdEH6gJ4dZsIbF1Md60l9uF2VhYYZh1Dbuodx inKSOPcYJxVjQWb2xJYMr9zBl03gQSLty42+EDgwYpM2so37EBM6c6Ccic8G3Jxz GxuNXqlfXunqqII/Uu9Als/V6bYm5iLH5XBDA6oss5CEpGjrqlaw7c+mr7u4HX65 MnP2I0NtRziWKsrV9uj2lebiOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoUAUzQ lmZSYpa/vPBq6eoD8+3bMB8GA1UdIwQYMBaAFLWIH7rKnev0bKYIY9KXfFP91sGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQyRC9BMDY4MkEwNDhG RjkxMUVEQUJFQzI1MzdDNEY5QUUwMi90WWdmdXNxZDZfUnNwZ2hqMHBkOFVfM1d3 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RZZ2Z1c3FkNl9Sc3BnaGowcGQ4VV8zV3daQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQyRC9BMDY4MkEwNDhGRjkxMUVEQUJFQzI1MzdDNEY5QUUwMi90WWdmdXNxZDZf UnNwZ2hqMHBkOFVfM1d3WkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpF5I1zK0HxKmPyPycuINgekkdmtebtuzcuooGD7K12ADaoJuctirT LqatXxwe55ksoyJrDH6rdtlr8NkGoLa3J6t1yPVkKJ63Dkvpb0C3mDgcP+YQpwjB R3gElTA+rw/XvCQsn4Dqr5Hra7Q7g6kd3r8e73nKsU4jKS20ojsPWNVWbxGM9jQi vA6S2crphCy5uavRK6EgIBZSWZQqm88Gg/D3STs/EY5AKsRoQF4+I4pvDytz3klw bG2wJ6nj3qKwdNtfbTg7c2duUpClgssrATZzGnSBEDP7mwmejPRmtVQtHPjvSzVa VMFBxw5uKtStMKRhtHoycWz2ryshNXPS -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org