$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: 9V1xkzrSZk9F5rY4MdlQJh7ewt3kYR7VGwZj/0j8qHw= Subject key identifier: 1D:F6:DB:9C:E9:61:C4:B2:43:8A:23:52:89:E8:73:96:61:4A:4E:FE Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: EC Signing time: Sun 19 May 2024 05:47:43 +0000 Manifest this update: Sun 19 May 2024 05:47:42 +0000 Manifest next update: Sun 26 May 2024 05:47:42 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: kuyL2qBLhb4lj3cqRa23VCEPtXOxoSnWY0FDqM42M6A=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: IXslxgSJhTlpoVbFwWVy3ZozH3aOAaC1X+unWEQB7Eo=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: oqPAnhsDEfKnS2zRK2RMnNFxqtDUr2e/ue/ry3YcM+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: May 19 05:47:42 2024 GMT Not After : May 26 05:47:42 2024 GMT Subject: CN=6649927e-1646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:75:14:f8:80:b0:83:ba:4a:74:8a:e3:26: 53:d8:fc:62:c3:2a:4a:c1:c6:5c:1e:b9:c3:4d:56: 36:89:ac:e8:26:81:23:bf:45:52:a8:d6:a9:69:8b: 2c:c9:b2:7c:b7:d1:ab:2e:e9:32:fc:77:0c:2b:e2: 05:a0:9e:c4:8a:a3:fa:ae:fc:e4:19:04:39:e6:96: 32:09:55:06:6c:de:2b:a9:2d:c7:5f:66:73:12:0e: 8f:af:a4:01:79:33:3c:1d:46:bc:79:20:8a:d6:b7: ae:93:9a:36:7a:94:ff:3e:c6:a4:93:fa:b0:85:ed: ac:4d:35:c0:ce:c0:f3:5f:5d:82:fb:61:8a:6b:1b: 08:61:3b:a6:4e:00:42:39:42:34:bf:4e:04:2e:88: f5:5c:4d:ca:73:09:a6:19:26:5f:c2:ab:12:8b:95: 85:a8:1d:1c:c2:6d:10:0c:fc:3c:23:bf:81:8f:b5: 25:c8:70:3c:d5:9d:4a:f6:54:d3:7e:0e:69:79:27: 61:aa:2f:6b:97:05:72:a5:0a:5a:4f:62:54:4b:9d: 2a:62:fa:f5:ae:3a:ad:57:8e:b9:74:06:ff:81:9d: 9b:8e:13:19:46:f7:36:a9:9c:3f:c1:b4:23:7b:e0: 8e:6b:02:de:05:7d:59:76:d2:b1:f3:28:41:4f:ab: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F6:DB:9C:E9:61:C4:B2:43:8A:23:52:89:E8:73:96:61:4A:4E:FE X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:10:ea:6f:43:78:5b:38:48:10:29:d1:5b:45:02:02:00:a9: fe:c1:ad:00:7c:8e:f7:04:57:6f:b2:91:67:2b:47:ae:08:15: c0:15:fa:14:a7:f4:b6:b7:df:c2:68:3d:8e:1a:df:b4:fb:51: 06:3e:49:27:19:39:bf:3b:da:67:87:20:8e:f4:80:53:b4:6d: 18:e7:80:24:3d:4d:42:7d:8f:77:8e:d7:a4:b7:97:0a:61:6c: 94:21:1f:fa:c3:6d:b4:b3:4e:ed:65:55:2b:7a:98:0f:66:1b: 47:9c:a9:f8:9f:94:45:90:e1:f6:a7:57:af:f4:9a:09:f1:00: 79:2d:b2:aa:7a:d4:b4:91:08:d8:bd:90:05:bb:6b:b5:87:f8: 78:75:26:b7:5f:ae:b8:33:47:dd:03:ff:3f:bf:f7:68:3e:f1: 32:02:80:c4:26:72:58:31:2b:a9:c2:62:9a:24:f4:a0:71:1a: 24:d9:bb:82:9d:21:09:9c:8b:20:72:4a:4e:91:28:98:e2:4b: f0:a7:ae:cc:fc:57:9e:63:44:70:e0:e2:20:51:bb:23:85:d8: ed:6c:ad:48:ab:e4:8b:1e:fb:aa:97:ae:96:f4:36:8d:60:6f: 36:17:13:8b:97:f4:e0:7e:20:1a:c5:99:f2:6b:48:e5:09:9d: 64:6e:0d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjQwNTE5MDU0NzQyWhcNMjQwNTI2MDU0NzQyWjAYMRYwFAYD VQQDEw02NjQ5OTI3ZS0xNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tl1FPiAsIO6SnSK4yZT2PxiwypKwcZcHrnDTVY2iazoJoEjv0VSqNapaYss ybJ8t9GrLuky/HcMK+IFoJ7EiqP6rvzkGQQ55pYyCVUGbN4rqS3HX2ZzEg6Pr6QB eTM8HUa8eSCK1reuk5o2epT/Psakk/qwhe2sTTXAzsDzX12C+2GKaxsIYTumTgBC OUI0v04ELoj1XE3KcwmmGSZfwqsSi5WFqB0cwm0QDPw8I7+Bj7UlyHA81Z1K9lTT fg5peSdhqi9rlwVypQpaT2JUS50qYvr1rjqtV465dAb/gZ2bjhMZRvc2qZw/wbQj e+COawLeBX1ZdtKx8yhBT6vhRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3225zp YcSyQ4ojUonoc5ZhSk7+MB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzEOpvQ3hbOEgQKdFbRQICAKn+wa0AfI73BFdvspFnK0euCBXAFfoU p/S2t9/CaD2OGt+0+1EGPkknGTm/O9pnhyCO9IBTtG0Y54AkPU1CfY93jtekt5cK YWyUIR/6w220s07tZVUrepgPZhtHnKn4n5RFkOH2p1ev9JoJ8QB5LbKqetS0kQjY vZAFu2u1h/h4dSa3X664M0fdA/8/v/doPvEyAoDEJnJYMSupwmKaJPSgcRok2buC nSEJnIsgckpOkSiY4kvwp67M/FeeY0Rw4OIgUbsjhdjtbK1Iq+SLHvuql66W9DaN YG82FxOLl/TgfiAaxZnya0jlCZ1kbg1R -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org