$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: 5zcSCLj0nSk/UOHScB1qvxePQA43YG06HX6XJfRc5s4= Subject key identifier: 66:EF:9A:2A:0F:A6:A5:EC:73:86:98:73:6A:32:26:06:3F:80:F3:CB Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 08AF Signing time: Sat 18 May 2024 22:10:49 +0000 Manifest this update: Sat 18 May 2024 22:10:48 +0000 Manifest next update: Sat 25 May 2024 22:10:48 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: oUk5vOoDFZs2qLte9xbuJU7AY5O3RJ5ZIjfCS0fU4Gg=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: LMAVU6IlMpA/ZKPM4+7tcXj9rbVtGqoDvGA31wXa8Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: May 18 22:10:48 2024 GMT Not After : May 25 22:10:48 2024 GMT Subject: CN=66492768-9948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:16:28:65:14:1f:39:5a:29:14:02:b7:fc: da:18:e1:6f:10:0b:35:e0:c4:15:c7:a4:48:01:47: d9:56:76:89:21:fa:b3:17:02:5d:a9:d3:1a:87:24: e1:15:aa:b8:24:bf:30:2b:36:d7:5b:ad:58:33:ba: 7f:7d:04:fd:25:b0:2e:d0:f8:72:fe:f6:e4:a6:e2: 0f:dc:31:28:14:67:84:49:be:12:56:68:d5:78:06: 6b:2a:ae:d1:e3:1d:24:82:9f:a2:44:77:09:a7:fc: 9d:71:23:42:28:50:dd:35:a4:2e:f5:45:5b:da:ef: bf:6c:a0:a9:d8:d4:59:c8:5c:c3:93:9d:fc:0f:1c: d5:2b:ea:65:69:03:76:49:12:fb:53:ec:42:94:7c: 7d:7b:a7:a1:91:d8:de:31:ea:0b:3e:72:fc:46:1a: 25:e2:31:ed:ed:b8:b5:cc:c1:30:29:b8:dd:ea:1c: da:35:e2:75:f5:06:65:5d:e4:fc:04:35:72:ea:c7: e3:0c:cd:bf:f2:77:88:f5:52:6f:c0:88:f2:ee:92: d9:06:85:71:91:b2:a0:24:8d:c3:27:6d:15:22:71: 2d:01:b0:ad:ef:04:dc:7d:5d:dd:3e:2b:df:46:bc: be:a1:6f:57:32:de:f1:1a:59:47:92:11:e2:df:d2: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EF:9A:2A:0F:A6:A5:EC:73:86:98:73:6A:32:26:06:3F:80:F3:CB X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:fc:a3:ab:1c:04:19:dd:c6:55:f6:40:1f:eb:cf:07:23:04: 99:9f:13:fd:77:31:f2:d8:9a:59:c6:74:ef:43:2e:d9:b6:92: 52:a5:1f:ae:90:e9:47:28:ed:7e:ed:cf:91:0b:60:dd:1b:75: 43:eb:85:2b:62:ba:dc:56:07:c7:30:4e:68:3c:8d:7d:70:fb: 7b:ff:90:9b:00:2f:4d:50:ad:91:cf:42:96:32:45:ca:c9:f9: 2e:5c:fc:99:40:3b:3c:03:40:d2:87:47:b4:2c:d7:de:14:1d: 1c:7c:1e:44:a4:54:0d:a1:36:5e:b7:b0:a4:d2:b2:c0:1f:6f: 91:d8:ee:e3:71:66:26:1e:bf:86:86:55:5d:9d:5f:30:0e:df: f2:e4:72:20:e5:2f:bf:6a:45:ec:bd:f4:f6:2d:61:a9:bd:e9: 89:62:8f:f7:51:14:b0:b0:5e:27:5f:96:f7:2c:b8:e2:ac:c0: 7e:da:b5:82:73:fa:b1:93:6b:81:74:97:e8:b1:14:a4:24:fd: b8:4a:72:fa:66:f9:97:d5:e2:75:6f:3d:ce:53:c4:5b:56:8c: af:53:ff:cb:1c:aa:3c:a9:0f:c2:ec:73:78:ce:22:c3:92:ac: d1:7e:2f:e5:cd:56:7d:e4:31:8c:2e:f0:ab:35:b1:4b:ac:d0: ca:b3:ea:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjQwNTE4MjIxMDQ4WhcNMjQwNTI1MjIxMDQ4WjAYMRYwFAYD VQQDEw02NjQ5Mjc2OC05OTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1e4WKGUUHzlaKRQCt/zaGOFvEAs14MQVx6RIAUfZVnaJIfqzFwJdqdMahyTh Faq4JL8wKzbXW61YM7p/fQT9JbAu0Phy/vbkpuIP3DEoFGeESb4SVmjVeAZrKq7R 4x0kgp+iRHcJp/ydcSNCKFDdNaQu9UVb2u+/bKCp2NRZyFzDk538DxzVK+plaQN2 SRL7U+xClHx9e6ehkdjeMeoLPnL8Rhol4jHt7bi1zMEwKbjd6hzaNeJ19QZlXeT8 BDVy6sfjDM2/8neI9VJvwIjy7pLZBoVxkbKgJI3DJ20VInEtAbCt7wTcfV3dPivf Rry+oW9XMt7xGllHkhHi39KdBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbvmioP pqXsc4aYc2oyJgY/gPPLMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2/KOrHAQZ3cZV9kAf688HIwSZnxP9dzHy2JpZxnTvQy7ZtpJSpR+u kOlHKO1+7c+RC2DdG3VD64UrYrrcVgfHME5oPI19cPt7/5CbAC9NUK2Rz0KWMkXK yfkuXPyZQDs8A0DSh0e0LNfeFB0cfB5EpFQNoTZet7Ck0rLAH2+R2O7jcWYmHr+G hlVdnV8wDt/y5HIg5S+/akXsvfT2LWGpvemJYo/3URSwsF4nX5b3LLjirMB+2rWC c/qxk2uBdJfosRSkJP24SnL6ZvmX1eJ1bz3OU8RbVoyvU//LHKo8qQ/C7HN4ziLD kqzRfi/lzVZ95DGMLvCrNbFLrNDKs+o1 -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org