$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft File: T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json) Hash identifier: 8VDz49Wvlb6wmFVLX+VjQd5IZo+dRubYVTLNcRI5Vu8= Subject key identifier: 44:D5:9E:51:36:B8:CD:9E:88:1A:A4:65:2C:17:D0:2B:7E:DD:96:8E Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 Certificate issuer: /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Certificate serial: 17ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft Manifest number: 4431 Signing time: Sat 18 May 2024 16:08:12 +0000 Manifest this update: Sat 18 May 2024 16:08:12 +0000 Manifest next update: Sat 25 May 2024 16:08:12 +0000 Files and hashes: 1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: pgR9kvPLoEwtzORcOFhtIAT7TBuXBmgScYx9+caeZBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6125 (0x17ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Validity Not Before: May 18 16:08:12 2024 GMT Not After : May 25 16:08:12 2024 GMT Subject: CN=6648d26c-a60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ce:e1:99:25:bf:1e:3e:91:b3:ba:14:7e:bb: aa:c6:e4:36:4a:65:e9:4f:88:68:46:fe:5c:e5:43: 5b:fe:79:24:99:43:c0:50:47:32:80:ea:5c:d3:70: 17:e2:4f:16:8f:95:a6:5f:39:a7:30:c7:e7:57:84: 7d:0b:66:39:a4:d1:b5:f8:2c:c3:fd:9b:16:38:48: 6b:db:e9:60:63:fe:52:6f:ee:3d:5f:e6:49:74:f1: 02:95:0f:1e:e4:84:b7:5d:bd:2e:15:ee:fb:b7:18: d6:a6:16:e9:01:30:ca:ca:2c:11:05:f8:36:cf:d9: f4:00:a8:10:19:bd:32:ff:be:e2:d6:a2:c7:1e:3e: 9c:9a:ad:ea:1a:ce:56:0e:ee:4d:8c:03:0e:70:5b: fd:74:ca:93:a4:fe:ae:4a:cf:b7:f6:eb:56:34:b5: 06:93:d4:67:0a:70:11:a3:ec:5d:02:18:46:f9:db: 3d:cc:56:b4:17:6a:28:fc:93:ba:fb:8b:d6:c0:90: 38:c3:77:bb:2e:7b:5e:ca:88:f1:ad:b2:0d:55:05: 30:39:17:35:b4:d9:68:02:1b:11:35:0d:89:4e:7e: 63:e8:03:38:fe:0f:a6:0d:06:15:16:d5:e7:58:4a: 17:9f:36:f3:67:fc:77:7b:a0:77:ab:a1:fe:ff:72: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D5:9E:51:36:B8:CD:9E:88:1A:A4:65:2C:17:D0:2B:7E:DD:96:8E X509v3 Authority Key Identifier: keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f3:e1:b1:5a:8b:ab:19:e7:dd:ee:53:c5:a0:76:ee:da:72: d3:89:bc:51:84:22:6d:03:20:9a:12:7c:17:be:29:fe:83:ba: 00:55:19:15:23:3f:09:d7:3c:a1:d5:85:8c:0e:d8:71:9a:06: 87:5d:1e:8d:8c:4b:92:b8:08:60:fa:02:dc:9f:88:96:d9:d2: f1:c9:18:68:de:15:a6:8b:bb:e1:5f:eb:9a:34:e2:85:61:e5: d9:d8:f1:01:de:ff:1a:94:e6:9f:fa:4d:87:2e:2d:14:95:fe: 9b:be:35:ba:d8:16:c8:7d:86:04:8b:4f:6f:cc:83:49:a9:47: bb:63:86:73:bd:3d:47:2b:2d:28:9d:03:19:4f:44:fc:b6:35: 46:42:26:54:a2:22:39:bc:d1:c2:82:4c:d6:e7:ba:fe:30:d6: 53:79:7c:15:c4:0a:02:dc:dc:b3:4c:e7:94:b3:32:22:8b:a0: db:3c:b1:f9:0a:59:94:35:a8:05:aa:25:b5:3f:9d:67:81:ed: 58:e9:98:86:a2:b9:f1:8d:50:92:68:18:58:42:6e:b8:b9:50: 09:91:b0:c7:32:78:bc:0e:1c:40:e2:1c:c1:86:28:ef:2e:da: 73:05:56:ba:1a:98:24:5d:c0:1f:4a:62:46:99:65:93:92:89: 7b:74:6e:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDRGODEyNTgyQjU3RjRDMTJDNzM2NUU2QUE3RjBGRkNB NzcxMDk0OTEwHhcNMjQwNTE4MTYwODEyWhcNMjQwNTI1MTYwODEyWjAYMRYwFAYD VQQDEw02NjQ4ZDI2Yy1hNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7s7hmSW/Hj6Rs7oUfruqxuQ2SmXpT4hoRv5c5UNb/nkkmUPAUEcygOpc03AX 4k8Wj5WmXzmnMMfnV4R9C2Y5pNG1+CzD/ZsWOEhr2+lgY/5Sb+49X+ZJdPEClQ8e 5IS3Xb0uFe77txjWphbpATDKyiwRBfg2z9n0AKgQGb0y/77i1qLHHj6cmq3qGs5W Du5NjAMOcFv9dMqTpP6uSs+39utWNLUGk9RnCnARo+xdAhhG+ds9zFa0F2oo/JO6 +4vWwJA4w3e7LnteyojxrbINVQUwORc1tNloAhsRNQ2JTn5j6AM4/g+mDQYVFtXn WEoXnzbzZ/x3e6B3q6H+/3KozQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETVnlE2 uM2eiBqkZSwX0Ct+3ZaOMB8GA1UdIwQYMBaAFE+BJYK1f0wSxzZeaqfw/8p3EJSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RCTEhObDVxcF9EX3luY1Fs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0RWxnclZfVEJMSE5sNXFwX0RfeW5jUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RC TEhObDVxcF9EX3luY1FsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM8+GxWourGefd7lPFoHbu2nLTibxRhCJtAyCaEnwXvin+g7oAVRkV Iz8J1zyh1YWMDthxmgaHXR6NjEuSuAhg+gLcn4iW2dLxyRho3hWmi7vhX+uaNOKF YeXZ2PEB3v8alOaf+k2HLi0Ulf6bvjW62BbIfYYEi09vzINJqUe7Y4ZzvT1HKy0o nQMZT0T8tjVGQiZUoiI5vNHCgkzW57r+MNZTeXwVxAoC3NyzTOeUszIii6DbPLH5 ClmUNagFqiW1P51nge1Y6ZiGornxjVCSaBhYQm64uVAJkbDHMni8DhxA4hzBhijv LtpzBVa6GpgkXcAfSmJGmWWTkol7dG4P -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org