$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: 1Z5KB+QPpKbMUGrFO7TaEFQAA43UYxPdIIi3k6Vrahc= Subject key identifier: 51:1B:F5:0D:87:3A:E4:62:8D:DD:71:6D:2F:CB:3E:E5:FB:FF:E8:A0 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: E9 Signing time: Sun 19 May 2024 05:51:27 +0000 Manifest this update: Sun 19 May 2024 05:51:26 +0000 Manifest next update: Sun 26 May 2024 05:51:26 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: 1wS1X4MTFM/yUQblpKSTxb25/GxxH9eDr/1yq4hl/m4=) 2: FD91D382FDFE11EEA991412FC4F9AE02.roa (hash: UJVqZVv2LvOtLV0E0fDBrYAFdyi9fTFpHu6AEr0aBjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: May 19 05:51:26 2024 GMT Not After : May 26 05:51:26 2024 GMT Subject: CN=6649935e-1043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:8a:c4:d8:d3:b5:fa:86:9f:e6:ce:0e:67: 84:3b:82:ee:a6:33:a3:58:24:25:bc:fb:ed:d7:70: 79:00:c5:b5:96:82:8c:a2:66:64:8c:2c:77:e9:48: 09:e1:8d:d1:b4:e4:74:bc:26:f1:97:79:c0:32:0e: eb:5a:f4:d5:c5:21:07:b6:68:53:52:38:bb:09:44: 96:ca:58:25:98:1f:c9:69:db:16:27:d4:0e:89:42: 34:4e:e0:2c:71:27:a3:4b:62:13:3b:cf:74:68:77: 0b:d4:92:6e:0e:e4:4a:5a:ff:c6:fa:fd:35:b3:2e: 66:c8:fe:c6:0d:92:d8:66:39:6f:94:19:2b:6e:08: dd:9d:e0:29:99:53:89:33:8a:eb:a7:a9:17:4b:c6: 77:f9:23:8b:bc:4a:33:b2:7e:9e:0b:1a:dd:8d:40: 6b:bc:7e:90:13:5d:ff:36:ad:74:41:fa:8e:38:e3: c3:ae:05:83:35:c4:58:48:f9:e2:c3:18:38:3f:7c: 09:09:5e:b8:26:7b:0d:0c:fe:48:6d:7e:ae:a2:fb: 2d:ab:fb:bc:86:9a:f6:47:ff:44:cb:03:68:c0:c2: 96:01:d5:46:3b:43:2c:43:9e:e1:1b:c8:bd:e1:02: 6c:a1:b5:fd:86:d2:2f:2f:c8:1c:d5:47:c0:e2:13: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1B:F5:0D:87:3A:E4:62:8D:DD:71:6D:2F:CB:3E:E5:FB:FF:E8:A0 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e7:cc:b1:b1:1f:22:4b:86:86:d9:93:22:cd:38:af:0a:a7: fe:76:9e:2a:ca:fc:42:06:a0:1a:da:18:ee:97:61:b6:f0:b5: 47:50:43:ec:5f:8f:69:d9:56:bd:08:64:3d:c1:22:5c:43:d8: 4e:bc:1e:99:c2:5f:51:5e:2c:cb:d3:44:2f:5c:cf:e2:7f:b8: 70:0f:36:42:86:c6:d9:9f:ef:ff:1f:01:98:56:07:9a:b8:83: 58:09:5c:61:e9:e9:4a:42:bc:26:bd:48:f4:b4:d4:98:6b:8b: e6:e5:69:83:29:ee:f2:60:88:ef:f0:16:4d:e0:81:99:4a:41: 86:e3:7d:db:27:75:a1:4c:e8:4f:63:64:c0:97:ec:e7:4b:c7: 4c:bf:63:c0:76:be:4b:05:d4:87:80:ab:7d:1b:0b:f6:d8:98: e5:53:00:b6:44:1c:19:94:1f:56:fe:06:0b:12:21:7f:89:65: 6d:31:27:94:13:42:26:c2:ba:da:9f:bc:75:36:33:08:b1:80: 08:a1:2f:10:20:3e:09:7e:6f:b7:2d:81:e6:e0:e4:37:9c:03: 26:9c:0e:8e:b1:20:e5:55:d4:d0:ff:46:ad:d5:60:e2:eb:6f: 38:35:a1:83:af:57:cf:35:b0:a3:cc:6e:92:ea:2f:91:af:76: 38:c9:12:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjQwNTE5MDU1MTI2WhcNMjQwNTI2MDU1MTI2WjAYMRYwFAYD VQQDEw02NjQ5OTM1ZS0xMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLKKxNjTtfqGn+bODmeEO4LupjOjWCQlvPvt13B5AMW1loKMomZkjCx36UgJ 4Y3RtOR0vCbxl3nAMg7rWvTVxSEHtmhTUji7CUSWylglmB/JadsWJ9QOiUI0TuAs cSejS2ITO890aHcL1JJuDuRKWv/G+v01sy5myP7GDZLYZjlvlBkrbgjdneApmVOJ M4rrp6kXS8Z3+SOLvEozsn6eCxrdjUBrvH6QE13/Nq10QfqOOOPDrgWDNcRYSPni wxg4P3wJCV64JnsNDP5IbX6uovstq/u8hpr2R/9EywNowMKWAdVGO0MsQ57hG8i9 4QJsobX9htIvL8gc1UfA4hMPWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEb9Q2H OuRijd1xbS/LPuX7/+igMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw58yxsR8iS4aG2ZMizTivCqf+dp4qyvxCBqAa2hjul2G28LVHUEPs X49p2Va9CGQ9wSJcQ9hOvB6Zwl9RXizL00QvXM/if7hwDzZChsbZn+//HwGYVgea uINYCVxh6elKQrwmvUj0tNSYa4vm5WmDKe7yYIjv8BZN4IGZSkGG433bJ3WhTOhP Y2TAl+znS8dMv2PAdr5LBdSHgKt9Gwv22JjlUwC2RBwZlB9W/gYLEiF/iWVtMSeU E0Imwrran7x1NjMIsYAIoS8QID4Jfm+3LYHm4OQ3nAMmnA6OsSDlVdTQ/0at1WDi 6284NaGDr1fPNbCjzG6S6i+Rr3Y4yRIw -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org