$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft File: tr-xkXvTGlViMihYRudjoUMyymg.mft (raw, json) Hash identifier: 6aZZVKzg34JuIy2Bobs0i9tBiEYSVKIi42l+VKOC/pA= Subject key identifier: 36:CC:2D:F6:BD:D5:CE:7E:AF:81:E8:53:F1:19:13:AB:8B:BF:C5:22 Authority key identifier: B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 Certificate issuer: /CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Certificate serial: 0468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft Manifest number: 0468 Signing time: Sun 19 May 2024 01:45:05 +0000 Manifest this update: Sun 19 May 2024 01:45:05 +0000 Manifest next update: Sun 26 May 2024 01:45:05 +0000 Files and hashes: 1: tr-xkXvTGlViMihYRudjoUMyymg.crl (hash: qlS7ZYj46sGBOJESZGr2VD/iZ3a208pzpV7SP/mOyn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Validity Not Before: May 19 01:45:05 2024 GMT Not After : May 26 01:45:05 2024 GMT Subject: CN=664959a1-8bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:51:a7:e3:61:b1:6a:e2:81:c3:c7:9a:b4: e4:50:d0:e3:a7:1a:96:80:97:45:46:06:0d:68:77: e1:5b:ce:9e:49:bd:97:68:b4:bf:1f:20:81:39:31: 15:61:03:3f:bb:22:a3:cf:03:bd:57:77:d5:05:c4: e8:23:1e:38:b6:c6:37:17:7a:f2:92:da:25:c6:10: d9:fc:45:bc:d7:80:4c:fd:6e:69:d2:cb:df:d6:aa: 4d:c5:19:02:74:fd:23:70:c1:54:a6:6e:50:68:6c: 44:e5:e8:5f:2a:79:45:a1:07:77:60:21:25:4e:4d: ae:d9:95:80:b0:36:bb:36:dc:68:aa:5a:7c:41:90: 61:e2:df:04:95:57:43:b4:9d:7b:b1:ef:83:7a:5b: 2b:0e:93:17:bd:54:f1:64:a3:7c:46:fb:54:09:99: 13:77:02:66:c5:ec:12:1e:6a:a5:47:e9:b6:2d:ca: 56:be:f1:1e:db:50:51:c1:67:38:91:37:13:8f:37: 5a:35:d6:cf:c3:cf:ea:9d:2e:df:f7:f3:39:45:16: a3:d7:cb:f0:cd:92:ab:53:79:9f:1d:31:53:17:4b: 10:03:01:e1:f1:75:2c:3f:c7:79:94:d8:b5:c6:0e: 90:1f:08:a7:a6:7d:d5:e2:c8:d0:a4:15:18:6e:e2: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CC:2D:F6:BD:D5:CE:7E:AF:81:E8:53:F1:19:13:AB:8B:BF:C5:22 X509v3 Authority Key Identifier: keyid:B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:60:7c:90:6f:01:32:98:b9:b0:58:90:6f:59:17:bf:31:b1: 34:11:f1:23:72:ac:31:ed:68:20:7b:8a:d7:55:61:fe:b6:c2: 99:07:b0:bd:7a:d1:15:b4:a2:38:b7:13:d8:43:ac:1d:c7:a3: 68:fd:e2:f1:a0:ff:b9:cc:8b:2f:db:3b:3f:c2:df:82:d7:fe: 2c:5c:af:3c:94:a9:ca:37:60:21:ff:8f:35:e5:52:df:10:1a: 27:29:d0:59:ed:19:b2:c8:04:af:f0:27:d8:91:a2:e2:c5:d9: d3:20:bc:b4:20:1c:9d:24:e1:9a:a0:a2:8b:c1:72:f1:0a:4e: ed:d7:49:9c:c1:27:49:af:c6:e1:17:76:dc:5b:d4:27:95:ae: e4:e7:3b:f1:40:da:04:6c:5f:5e:0a:b6:22:40:37:b0:4f:a9: 61:7c:a3:60:a9:b5:79:d0:16:8c:ac:bf:d6:60:03:be:ad:c4: 6a:dc:b6:6b:e9:d7:41:33:be:c8:7e:26:9a:74:52:3e:44:e3: 5b:6a:a8:1c:96:05:20:11:76:77:14:96:fa:6f:60:89:a5:cb: c2:8f:33:03:ca:de:89:e9:ac:c3:3f:de:91:19:61:e0:1e:d0: 22:99:bb:c9:04:8b:46:81:63:9f:fb:20:38:58:d9:f1:c9:a5: 83:f1:dd:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFNEQxMTAvBgNVBAUTKEI2QkZCMTkxN0JEMzFBNTU2MjMyMjg1ODQ2RTc2M0Ex NDMzMkNBNjgwHhcNMjQwNTE5MDE0NTA1WhcNMjQwNTI2MDE0NTA1WjAYMRYwFAYD VQQDEw02NjQ5NTlhMS04YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr5Rp+NhsWrigcPHmrTkUNDjpxqWgJdFRgYNaHfhW86eSb2XaLS/HyCBOTEV YQM/uyKjzwO9V3fVBcToIx44tsY3F3ryktolxhDZ/EW814BM/W5p0svf1qpNxRkC dP0jcMFUpm5QaGxE5ehfKnlFoQd3YCElTk2u2ZWAsDa7Ntxoqlp8QZBh4t8ElVdD tJ17se+DelsrDpMXvVTxZKN8RvtUCZkTdwJmxewSHmqlR+m2LcpWvvEe21BRwWc4 kTcTjzdaNdbPw8/qnS7f9/M5RRaj18vwzZKrU3mfHTFTF0sQAwHh8XUsP8d5lNi1 xg6QHwinpn3V4sjQpBUYbuKaHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbMLfa9 1c5+r4HoU/EZE6uLv8UiMB8GA1UdIwQYMBaAFLa/sZF70xpVYjIoWEbnY6FDMspo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkU0RC9EM0NDMEQ2NEZC NDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEdsVmlNaWhZUnVkam9VTXl5 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RyLXhrWHZUR2xWaU1paFlSdWRqb1VNeXltZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkU0RC9EM0NDMEQ2NEZCNDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEds VmlNaWhZUnVkam9VTXl5bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArYHyQbwEymLmwWJBvWRe/MbE0EfEjcqwx7Wgge4rXVWH+tsKZB7C9 etEVtKI4txPYQ6wdx6No/eLxoP+5zIsv2zs/wt+C1/4sXK88lKnKN2Ah/4815VLf EBonKdBZ7RmyyASv8CfYkaLixdnTILy0IBydJOGaoKKLwXLxCk7t10mcwSdJr8bh F3bcW9Qnla7k5zvxQNoEbF9eCrYiQDewT6lhfKNgqbV50BaMrL/WYAO+rcRq3LZr 6ddBM77IfiaadFI+RONbaqgclgUgEXZ3FJb6b2CJpcvCjzMDyt6J6azDP96RGWHg HtAimbvJBItGgWOf+yA4WNnxyaWD8d3z -----END CERTIFICATE-----Generated at Sun May 19 02:59:11 2024 by rpki-client on console-ams.rpki-client.org