$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: iedo0FKQpmO4TjpmMShORsxKraPUYT7wk1SAZKgz/Ko= Subject key identifier: 3E:27:F3:D1:8A:EE:09:EC:61:57:65:25:42:B5:36:4A:7C:05:17:76 Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: B2 Signing time: Sun 19 May 2024 06:31:12 +0000 Manifest this update: Sun 19 May 2024 06:31:12 +0000 Manifest next update: Sun 26 May 2024 06:31:12 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: YZLGe8iQIC61TbWvJ0lP8HtYP/p7C/pr9DpQHbnareI=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: 4lTwXJNy8UAsVUNrxw2jbFpsl+WyFB6Z2ysqzLuaypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: May 19 06:31:12 2024 GMT Not After : May 26 06:31:12 2024 GMT Subject: CN=66499cb0-86cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:7b:2f:ce:8a:55:6c:a2:c1:d8:5a:eb:f1: e4:f6:c6:69:02:e0:5b:33:13:05:4b:c0:df:8b:6b: 59:34:74:f1:92:97:fd:42:f9:31:e0:7b:a3:44:9b: 67:fb:37:8e:49:7e:1a:49:b9:a2:1e:34:0d:bc:21: 41:9c:76:08:4c:74:c0:7f:80:3e:8a:71:77:6e:31: e5:41:02:2e:f5:a0:52:3c:77:de:ac:7a:62:13:85: 00:98:92:4c:67:23:24:09:0a:c2:ba:48:09:52:11: 0b:97:65:77:4e:2f:b5:d4:45:08:a8:bc:3b:3f:49: bd:bf:66:f3:53:29:99:e8:fe:2f:b7:49:ea:20:48: 59:88:80:99:d9:31:65:6d:3d:14:8d:98:40:8e:da: 9e:f3:66:7b:e4:28:1a:23:5b:f8:fd:a2:d0:39:7c: 6f:cc:43:18:c1:5f:09:03:33:36:9b:c8:15:26:77: d4:c1:2d:7d:85:d0:59:23:20:10:24:6f:e4:61:b6: 1b:1d:5f:bd:b9:a5:f6:6f:ac:52:44:09:cb:e5:39: aa:f8:de:fc:09:e2:95:90:c7:d3:23:30:17:3d:66: ca:13:6c:e6:3c:9f:1d:0f:8a:96:ec:a6:f5:2c:c4: c2:66:f2:4d:0a:db:0e:1e:b6:e6:fe:df:ab:1e:c9: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:27:F3:D1:8A:EE:09:EC:61:57:65:25:42:B5:36:4A:7C:05:17:76 X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d7:57:97:0f:cf:fa:5f:5b:5b:c3:77:e4:fb:8e:03:0f:97: 8c:f0:74:14:90:8f:63:dc:17:e4:f7:c2:f8:f2:ec:6f:d6:ef: db:6d:db:74:b4:be:2e:13:c7:8d:45:e1:3d:47:61:19:db:d7: 61:85:aa:ee:41:47:22:2c:c7:2a:35:3c:00:56:65:b1:e7:25: 76:23:41:ea:93:63:89:17:d4:00:7c:38:05:c2:55:79:cd:b3: 4b:bb:6b:17:b1:47:e1:54:b8:b2:6d:b6:fa:a8:ca:d9:dc:90: 5f:a1:fb:55:59:63:d6:dd:e0:36:7a:b4:38:4d:13:c4:59:71: 25:df:c4:b6:06:51:79:ec:88:e5:46:2b:5e:93:51:72:37:a2: 76:37:35:75:e7:2d:dd:82:2f:52:d0:eb:91:64:dc:d7:19:44: 1e:de:15:71:8e:92:b8:3f:21:52:ce:99:dc:bb:bb:f2:65:8d: 29:5a:d1:a1:fc:ca:b6:ea:38:ae:43:50:a4:d3:a4:41:dd:14: d2:2d:17:b2:5c:ad:aa:c3:2a:d0:9e:ea:7f:6a:7e:b5:7c:a2: f8:ac:a6:19:f5:36:66:73:20:c7:2a:ac:be:37:fe:db:e3:75: 82:c2:20:94:1a:9d:f5:87:a0:d7:b2:c2:83:26:48:ea:de:da: 77:41:a8:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjQwNTE5MDYzMTEyWhcNMjQwNTI2MDYzMTEyWjAYMRYwFAYD VQQDEw02NjQ5OWNiMC04NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvh7L86KVWyiwdha6/Hk9sZpAuBbMxMFS8Dfi2tZNHTxkpf9Qvkx4HujRJtn +zeOSX4aSbmiHjQNvCFBnHYITHTAf4A+inF3bjHlQQIu9aBSPHferHpiE4UAmJJM ZyMkCQrCukgJUhELl2V3Ti+11EUIqLw7P0m9v2bzUymZ6P4vt0nqIEhZiICZ2TFl bT0UjZhAjtqe82Z75CgaI1v4/aLQOXxvzEMYwV8JAzM2m8gVJnfUwS19hdBZIyAQ JG/kYbYbHV+9uaX2b6xSRAnL5Tmq+N78CeKVkMfTIzAXPWbKE2zmPJ8dD4qW7Kb1 LMTCZvJNCtsOHrbm/t+rHslFTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4n89GK 7gnsYVdlJUK1Nkp8BRd2MB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA11eXD8/6X1tbw3fk+44DD5eM8HQUkI9j3Bfk98L48uxv1u/bbdt0 tL4uE8eNReE9R2EZ29dhharuQUciLMcqNTwAVmWx5yV2I0Hqk2OJF9QAfDgFwlV5 zbNLu2sXsUfhVLiybbb6qMrZ3JBfoftVWWPW3eA2erQ4TRPEWXEl38S2BlF57Ijl Ritek1FyN6J2NzV15y3dgi9S0OuRZNzXGUQe3hVxjpK4PyFSzpncu7vyZY0pWtGh /Mq26jiuQ1Ck06RB3RTSLReyXK2qwyrQnup/an61fKL4rKYZ9TZmcyDHKqy+N/7b 43WCwiCUGp31h6DXssKDJkjq3tp3QagH -----END CERTIFICATE-----Generated at Sun May 19 08:25:07 2024 by rpki-client on console-ams.rpki-client.org