$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft File: TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json) Hash identifier: 445/Vgay5Air7N8uztik9Vfzkt6e6LXRNInnnKw2am0= Subject key identifier: DD:F8:3C:83:DA:A7:6A:7D:12:9E:FE:82:21:41:D6:0A:B2:D8:DB:AA Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 3502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft Manifest number: 3455 Signing time: Thu 30 May 2024 14:34:00 +0000 Manifest this update: Thu 30 May 2024 14:33:59 +0000 Manifest next update: Thu 06 Jun 2024 14:33:59 +0000 Files and hashes: 1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: AOLpji62LZruNqNxbFd2DKuwfQAQ6PEJAa97gGZ+szE=) 2: D166652A072211EF9AC24D5BC4F9AE02.roa (hash: 6EnVuw6ZfUYXqCSV2smHwvRY6qKL4X2LNKW/sqTbKds=) 3: AD20058AA15311EDB7EEA166C4F9AE02.roa (hash: 0kjiBakfjScVJjewurb6gTRWeb7Z7CuEpqyiIX0oOgM=) 4: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: YM59NrW9H4UJvcLpw3cpsrcplsTUtR8tSQfAh5D2VVY=) 5: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: 4NK+MhKMKZm2Ucwah4YCjjvRDUptfXHYxwu/ywrQ1XE=) 6: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 7XBk8ORjYWijT3wsCOJ8nDcD/q7UOfGeSFnT4pFgWSc=) 7: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: 21j5VuSiIiFcZKr6TSvSPHqlTOFdzYbVC1rBUAH1qbI=) 8: 5AAF8D62F0CA11EE9E48CD72C4F9AE02.roa (hash: 50JhcfRfXERFUs5k1ez6LLrF7vV3+zy1Z8lXp8yJjDw=) 9: 4B2AFD54ABA611EEA4B59A6AC4F9AE02.roa (hash: 9fmSismXcyTH39qDXu1GtClnVNjxH/12hIIQgygnh2M=) 10: 982AFFA4E2B611EE97AF7309C4F9AE02.roa (hash: vBi4AGzYkidRMSHUwFbybOi16QJPXOsl8kgQKo3/2Lc=) 11: 71F2B10843B611EB9FB8597CC4F9AE02.roa (hash: DR5qaMSL4564H0nya+S0/xchH7Yi3cgTTW4HlyMJu4c=) 12: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: kvr5IK6CaNUKo5drZu35gpH8jaxL84ltu+eFuUUFqZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 14:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13570 (0x3502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: May 30 14:33:59 2024 GMT Not After : Jun 6 14:33:59 2024 GMT Subject: CN=66588e58-ea4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:d0:d1:8f:61:33:48:03:6e:46:7e:82:9d: e6:09:6e:81:f0:14:5e:92:d1:b4:c3:4e:50:16:c6: 0a:d6:4b:6f:b6:89:14:d0:ba:d4:39:c0:a6:36:4d: 4c:8f:7a:a8:7b:f6:3f:59:83:ee:d1:a4:df:fd:07: 7a:db:ca:55:0c:63:f3:29:07:8f:90:eb:8c:bb:75: 26:fa:6f:74:e7:4b:2b:e1:f6:c2:c0:cd:01:b4:19: 0d:57:05:52:bc:cb:32:c3:87:38:20:81:c1:24:c7: 9b:1d:75:6d:07:af:ae:39:84:e2:e4:f3:42:5d:55: bb:dc:c1:1e:d0:29:50:36:76:9b:c3:46:84:1a:bb: 99:5f:d8:28:1c:4d:79:0d:8d:ec:c3:d8:72:77:a6: 96:9f:dc:85:93:96:38:54:e8:e5:ad:13:d7:e1:07: d9:bb:a0:de:4d:86:39:ac:93:94:4f:c3:02:ec:26: 75:ff:16:96:b8:82:e5:d0:36:19:10:56:ed:13:90: f7:f4:1d:fc:9a:f2:47:4c:fe:6f:db:dd:e3:bc:ca: 56:31:f2:16:f6:5c:3b:2b:0e:e3:fa:1e:cb:ae:c3: e7:de:39:03:eb:a9:87:5b:36:cd:e1:5f:52:ba:df: e1:38:f3:ee:63:c9:d7:af:b7:ee:bd:74:74:00:b3: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F8:3C:83:DA:A7:6A:7D:12:9E:FE:82:21:41:D6:0A:B2:D8:DB:AA X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:90:a7:41:0c:12:98:1b:6c:95:b1:2e:c5:25:e9:b7:28:a5: 17:0a:12:27:14:e3:12:d0:22:2b:8e:6e:e9:3e:57:a8:a2:1d: 28:d3:58:63:a4:e8:3b:6f:ee:4a:5b:86:8f:9b:40:38:38:7d: fd:02:3f:33:db:6d:37:87:e1:2d:dc:5a:e0:65:14:fa:9d:1a: 5c:69:d3:d3:d9:1c:e0:84:46:d5:3c:be:08:78:57:cd:88:68: 0e:c0:69:dc:e9:b9:c1:d4:22:b0:b2:f4:10:a4:be:1c:8c:c1: e5:7b:5f:5d:fc:13:d4:42:21:b0:b7:cf:a0:1f:bf:e6:9e:ff: 35:2e:a7:90:57:3b:0d:09:c9:8f:b5:5a:b5:a8:59:97:d8:90: 6c:ef:12:7e:8f:66:c1:e3:6e:f6:7c:6e:43:f1:11:be:ac:2f: f2:e5:be:87:dd:51:9a:58:8c:00:15:3c:3a:5b:b2:3d:30:d3: ae:2e:de:1c:f2:6b:df:50:08:32:72:a1:17:59:1f:c7:4d:eb: 2c:eb:dc:1f:0e:e4:43:a0:7c:e8:f8:a9:57:6f:24:63:f6:a8: 2f:65:ec:dd:03:39:61:7c:06:30:48:3b:3c:22:8b:27:17:6f: 1e:44:94:35:5a:c6:bb:24:8b:a2:e4:7b:0f:a1:84:0c:59:95: 48:71:db:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjQwNTMwMTQzMzU5WhcNMjQwNjA2MTQzMzU5WjAYMRYwFAYD VQQDEw02NjU4OGU1OC1lYTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ/Q0Y9hM0gDbkZ+gp3mCW6B8BRektG0w05QFsYK1ktvtokU0LrUOcCmNk1M j3qoe/Y/WYPu0aTf/Qd628pVDGPzKQePkOuMu3Um+m9050sr4fbCwM0BtBkNVwVS vMsyw4c4IIHBJMebHXVtB6+uOYTi5PNCXVW73MEe0ClQNnabw0aEGruZX9goHE15 DY3sw9hyd6aWn9yFk5Y4VOjlrRPX4QfZu6DeTYY5rJOUT8MC7CZ1/xaWuILl0DYZ EFbtE5D39B38mvJHTP5v293jvMpWMfIW9lw7Kw7j+h7LrsPn3jkD66mHWzbN4V9S ut/hOPPuY8nXr7fuvXR0ALMQRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN34PIPa p2p9Ep7+giFB1gqy2NuqMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUQ3RS9FQ0E2ODIzNDFEODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2ly M2JtYnpPNVBwYWtXMFZlelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIkKdBDBKYG2yVsS7FJem3KKUXChInFOMS0CIrjm7pPleooh0o01hj pOg7b+5KW4aPm0A4OH39Aj8z2203h+Et3FrgZRT6nRpcadPT2RzghEbVPL4IeFfN iGgOwGnc6bnB1CKwsvQQpL4cjMHle19d/BPUQiGwt8+gH7/mnv81LqeQVzsNCcmP tVq1qFmX2JBs7xJ+j2bB4272fG5D8RG+rC/y5b6H3VGaWIwAFTw6W7I9MNOuLt4c 8mvfUAgycqEXWR/HTess69wfDuRDoHzo+KlXbyRj9qgvZezdAzlhfAYwSDs8Iosn F28eRJQ1Wsa7JIui5HsPoYQMWZVIcdu3 -----END CERTIFICATE-----Generated at Thu May 30 16:04:47 2024 by rpki-client on console-fra.rpki-client.org