$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: GtHu3/1zn57tz6s7ezoRa2kUqGwZTFWbi2oZYFMmERg= Subject key identifier: FA:13:1C:97:FD:D8:B5:A9:5F:96:8F:7E:4F:E4:F4:F0:B4:B6:F0:C3 Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 08F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 08F1 Signing time: Sat 18 May 2024 21:20:47 +0000 Manifest this update: Sat 18 May 2024 21:20:47 +0000 Manifest next update: Sat 25 May 2024 21:20:47 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: 6pQq+OCD/1S7SW5qXMQiwzR5uoP3xVhTFNoKOe5sYn4=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: uCKaTzHSq8roKOND3QIAWtaboT0I2xNDmaN9cosgyvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: May 18 21:20:47 2024 GMT Not After : May 25 21:20:47 2024 GMT Subject: CN=66491baf-83f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:0a:09:e1:54:fb:08:c0:42:b3:a5:d8:d1: b8:5d:e1:d9:d0:c6:3c:c2:ac:e1:de:97:da:e0:ad: 49:a4:c0:43:f7:16:b7:90:c6:85:86:73:11:f3:7c: 39:92:89:93:ae:d5:ce:26:d9:9c:cb:85:93:3c:77: e7:7d:9e:ec:ad:64:5d:9a:25:bd:bb:9d:db:d9:7a: 34:ea:eb:bf:e4:99:f8:a4:fa:bf:a5:49:0a:9a:e1: 10:c2:ab:7c:e1:44:e8:1c:b3:78:28:a3:ab:b5:98: 4f:de:49:a8:2d:81:95:e0:6f:4b:fa:0d:64:1c:04: a6:08:87:c0:8a:ee:9d:c0:9a:26:f6:dc:cd:16:52: 78:70:aa:bb:61:06:81:af:d3:68:86:5e:66:db:d4: 90:4b:eb:92:de:c8:b5:cf:5b:fb:33:e4:7d:e5:7b: 03:9e:d7:06:40:d4:41:c0:a7:b0:ad:dd:9f:15:bf: 9c:21:68:01:bc:16:74:6c:c7:77:9f:7d:88:8d:75: 49:44:82:a2:a7:b9:dc:c6:c0:35:4d:fa:3b:e0:2e: fb:b9:cd:e6:99:63:02:29:7d:e7:bd:5f:61:88:d5: 03:67:23:bf:36:42:11:0b:07:9d:5d:d7:0f:bf:7b: a9:eb:51:cb:f2:d5:8d:60:71:ff:28:5c:d9:12:48: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:13:1C:97:FD:D8:B5:A9:5F:96:8F:7E:4F:E4:F4:F0:B4:B6:F0:C3 X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:fe:b2:f5:ce:73:df:90:03:78:c4:14:f1:52:14:8e:02:82: ec:1e:e0:eb:7f:81:29:47:4c:b0:65:67:dd:93:4d:8b:0b:b8: ee:d3:80:a9:38:9d:62:62:86:ea:55:8d:c2:02:30:ac:5d:d1: b9:e0:1f:8b:c1:0d:20:1d:4a:61:88:6a:da:d2:2b:fe:69:f5: ff:22:25:4c:5b:31:2d:a4:7d:ba:f4:34:92:08:70:eb:87:a0: 89:59:d6:69:24:2d:e0:33:c2:de:0f:b3:a4:5a:cb:ae:71:f8: 49:c6:f2:80:4b:8a:7a:f5:89:41:6b:39:d2:01:98:76:0f:0d: 81:7c:32:1e:cb:66:62:5b:4d:d3:98:ed:7e:f6:aa:c3:e1:8b: f3:7b:a0:e2:51:8a:65:be:f3:98:ba:a3:37:d8:de:63:9c:ae: 5a:cd:64:cd:16:ed:7f:20:24:f6:db:0d:28:db:b3:5e:f8:05: 6d:47:c2:3e:00:b6:8f:82:7f:b0:72:86:4b:a3:e7:19:98:2e: 06:da:7f:5d:1a:14:f0:c6:71:31:e1:6c:85:ff:a2:95:4a:77: 3a:88:6d:0e:c4:56:8b:73:68:70:24:83:e9:5d:2d:55:96:0a: d0:31:88:6b:ae:d9:76:32:61:0e:8d:45:41:32:97:89:bc:67: 61:4b:9e:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjQwNTE4MjEyMDQ3WhcNMjQwNTI1MjEyMDQ3WjAYMRYwFAYD VQQDEw02NjQ5MWJhZi04M2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9gKCeFU+wjAQrOl2NG4XeHZ0MY8wqzh3pfa4K1JpMBD9xa3kMaFhnMR83w5 komTrtXOJtmcy4WTPHfnfZ7srWRdmiW9u53b2Xo06uu/5Jn4pPq/pUkKmuEQwqt8 4UToHLN4KKOrtZhP3kmoLYGV4G9L+g1kHASmCIfAiu6dwJom9tzNFlJ4cKq7YQaB r9Nohl5m29SQS+uS3si1z1v7M+R95XsDntcGQNRBwKewrd2fFb+cIWgBvBZ0bMd3 n32IjXVJRIKip7ncxsA1Tfo74C77uc3mmWMCKX3nvV9hiNUDZyO/NkIRCwedXdcP v3up61HL8tWNYHH/KFzZEki2fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoTHJf9 2LWpX5aPfk/k9PC0tvDDMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs/rL1znPfkAN4xBTxUhSOAoLsHuDrf4EpR0ywZWfdk02LC7ju04Cp OJ1iYobqVY3CAjCsXdG54B+LwQ0gHUphiGra0iv+afX/IiVMWzEtpH269DSSCHDr h6CJWdZpJC3gM8LeD7OkWsuucfhJxvKAS4p69YlBaznSAZh2Dw2BfDIey2ZiW03T mO1+9qrD4Yvze6DiUYplvvOYuqM32N5jnK5azWTNFu1/ICT22w0o27Ne+AVtR8I+ ALaPgn+wcoZLo+cZmC4G2n9dGhTwxnEx4WyF/6KVSnc6iG0OxFaLc2hwJIPpXS1V lgrQMYhrrtl2MmEOjUVBMpeJvGdhS55C -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org