$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: yxcIZr+sdQfbPNrmhDcwTQmlBirE8T8mqf4P98oUPag= Subject key identifier: 31:55:9C:FE:6C:AC:F2:FC:BE:B9:8D:C8:8D:B6:2F:00:A6:D7:2A:49 Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0B55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0B4E Signing time: Fri 31 May 2024 20:20:22 +0000 Manifest this update: Fri 31 May 2024 20:20:21 +0000 Manifest next update: Fri 07 Jun 2024 20:20:21 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: g/cYJ/i4DBsYGM0daEWTnJPkk+eBGApK7IGT866mEUQ=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: zl2/KyvOYO11VNEUno+KY1iGQk0Qm8eGwpcW6ERpUeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2901 (0xb55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: May 31 20:20:21 2024 GMT Not After : Jun 7 20:20:21 2024 GMT Subject: CN=665a3106-4cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:64:e0:cc:43:81:cb:9c:ee:6d:06:7a:d4: 42:ef:92:01:98:86:ec:0e:14:37:88:8c:90:c3:89: 31:cd:a1:22:9a:bb:32:9f:be:ac:e8:88:e4:ca:de: bf:17:85:f9:50:03:be:9b:0f:79:be:32:f3:b6:d5: d7:b2:bc:c1:42:77:ee:f6:3c:5e:ed:72:b5:a5:c7: fb:1b:c0:e8:8b:52:b6:16:6c:ba:88:1e:62:55:ff: 88:af:85:e2:a1:69:1e:75:70:45:45:b3:64:a4:74: 42:de:b7:32:62:27:07:14:4d:ae:2e:b8:51:af:67: 96:6e:13:1e:65:86:3f:71:a1:dd:24:a0:d2:66:94: 6f:0f:89:49:e4:a2:e8:c2:a4:81:b7:3e:e4:8f:87: 44:9a:72:b3:44:11:3d:91:dc:f9:34:9a:e5:23:65: 06:df:06:1a:10:ab:3f:03:05:1e:9b:e3:ca:46:0a: 7f:58:09:f1:84:76:7b:4b:d6:75:26:7c:b7:a9:8b: e3:25:55:fb:28:55:2e:e8:fb:d8:e7:f9:69:61:6e: 39:e2:20:83:25:19:87:a4:69:48:5d:ae:85:29:af: 6f:7e:9e:88:63:07:91:dd:03:9a:d0:ae:64:03:48: 89:2a:45:fb:5e:8d:32:cc:02:86:1e:91:77:23:fb: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:55:9C:FE:6C:AC:F2:FC:BE:B9:8D:C8:8D:B6:2F:00:A6:D7:2A:49 X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:55:50:bf:a1:4a:f9:19:6d:6b:d1:cc:15:7f:c9:71:88:83: 5a:c5:a9:06:2f:f3:fc:33:21:e8:1b:51:30:cf:07:2d:a5:57: 39:4f:e6:70:1d:1e:eb:5c:73:19:61:7f:fe:18:32:ee:cf:21: 98:e9:c3:9a:1c:8a:c4:06:d9:26:f4:25:42:f5:07:2a:c6:74: 39:1d:b4:a0:e2:ee:e4:22:bd:cc:fe:b1:11:ef:b4:d5:e5:0e: 16:fd:de:ee:32:39:d6:7c:16:25:e7:26:b5:f7:f5:70:95:f8: a8:06:6b:38:e6:d4:53:b6:36:4e:0a:10:63:80:57:0f:33:f3: 56:bc:84:a2:32:c5:dc:29:f7:f6:b6:45:95:1c:67:68:90:58: 90:b0:65:f0:d8:e7:04:fd:9f:7a:d6:aa:17:c7:05:50:b8:84: 49:18:08:21:7b:06:1a:6a:a1:cc:fc:ef:14:34:fe:72:1c:5f: 56:57:92:a5:4a:87:16:44:a4:73:85:f9:49:cf:08:0c:89:6e: e3:29:16:a4:e4:8c:d8:74:08:b5:b3:a6:09:00:25:26:84:b3: 01:4e:7c:cf:c4:5e:d7:db:52:0f:fe:ac:26:6a:12:02:93:86: 79:27:47:f4:f3:eb:cb:04:b3:91:f9:12:0c:b7:09:04:f2:f3: 66:d6:20:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjQwNTMxMjAyMDIxWhcNMjQwNjA3MjAyMDIxWjAYMRYwFAYD VQQDEw02NjVhMzEwNi00Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlU9k4MxDgcuc7m0GetRC75IBmIbsDhQ3iIyQw4kxzaEimrsyn76s6Ijkyt6/ F4X5UAO+mw95vjLzttXXsrzBQnfu9jxe7XK1pcf7G8Doi1K2Fmy6iB5iVf+Ir4Xi oWkedXBFRbNkpHRC3rcyYicHFE2uLrhRr2eWbhMeZYY/caHdJKDSZpRvD4lJ5KLo wqSBtz7kj4dEmnKzRBE9kdz5NJrlI2UG3wYaEKs/AwUem+PKRgp/WAnxhHZ7S9Z1 Jny3qYvjJVX7KFUu6PvY5/lpYW454iCDJRmHpGlIXa6FKa9vfp6IYweR3QOa0K5k A0iJKkX7Xo0yzAKGHpF3I/t7ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFVnP5s rPL8vrmNyI22LwCm1ypJMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMVVC/oUr5GW1r0cwVf8lxiINaxakGL/P8MyHoG1EwzwctpVc5T+Zw HR7rXHMZYX/+GDLuzyGY6cOaHIrEBtkm9CVC9QcqxnQ5HbSg4u7kIr3M/rER77TV 5Q4W/d7uMjnWfBYl5ya19/VwlfioBms45tRTtjZOChBjgFcPM/NWvISiMsXcKff2 tkWVHGdokFiQsGXw2OcE/Z961qoXxwVQuIRJGAghewYaaqHM/O8UNP5yHF9WV5Kl SocWRKRzhflJzwgMiW7jKRak5IzYdAi1s6YJACUmhLMBTnzPxF7X21IP/qwmahIC k4Z5J0f08+vLBLOR+RIMtwkE8vNm1iAs -----END CERTIFICATE-----Generated at Fri May 31 22:13:10 2024 by rpki-client on console-fra.rpki-client.org