$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json) Hash identifier: A0jXJLxJgWgv5x1NDdy6ODuh8uFO8vH68Ttr1JJj5hY= Subject key identifier: 86:1B:B6:D7:8F:35:F8:85:D4:B9:52:AD:E8:39:5A:13:4D:7F:05:2D Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft Manifest number: 0123 Signing time: Sun 19 May 2024 05:09:08 +0000 Manifest this update: Sun 19 May 2024 05:09:08 +0000 Manifest next update: Sun 26 May 2024 05:09:08 +0000 Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: Mliht3tjmHPVEuGkfpUmOumTleEJv8S9k3vtgEePTDw=) 2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: 2LI3hsctrVmuInQBZ3jfIWPFtGhhM4eQLTl2IYITdCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Validity Not Before: May 19 05:09:08 2024 GMT Not After : May 26 05:09:08 2024 GMT Subject: CN=66498974-2ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:ac:09:51:4e:33:6f:99:fa:67:f5:55:d8: 5b:88:f6:ce:a0:80:5c:84:40:da:c5:f4:3c:b6:66: 89:7e:90:4d:5f:5c:66:dd:4b:a3:ff:3d:e9:f3:d3: 9e:48:76:ae:6c:aa:9d:00:eb:1c:23:65:ac:43:cf: ff:35:85:0e:e7:9a:85:42:fe:62:bd:80:41:65:f1: 63:54:c6:e6:02:48:9a:bb:49:de:08:04:8d:86:6f: 41:0a:a1:47:43:ca:df:81:00:6b:d9:30:9e:fb:e9: 82:88:07:9c:69:9b:18:e8:c5:ec:94:1d:d0:7a:c3: e2:8d:c5:85:56:aa:86:e5:55:d6:9b:8b:e8:ad:fe: 7f:05:43:42:6e:fa:da:57:a0:f7:ef:ea:11:2d:b4: cc:ef:13:9e:c9:6d:99:c0:b6:4f:ab:f4:13:eb:b1: cc:fd:81:87:df:b9:13:6c:70:7e:ce:38:92:03:2d: 1e:3a:f7:6d:56:f4:2c:86:f8:a7:2d:35:99:03:65: 02:af:f5:91:c9:65:84:e8:13:ce:b3:c8:93:75:c3: bb:85:12:d7:24:4a:3a:c1:4f:51:10:76:30:1c:4e: 7c:1d:e6:3e:84:b6:6d:24:20:de:6a:6a:75:b0:04: 69:39:c3:5a:48:33:56:39:67:6a:48:46:c1:59:93: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1B:B6:D7:8F:35:F8:85:D4:B9:52:AD:E8:39:5A:13:4D:7F:05:2D X509v3 Authority Key Identifier: keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:27:2b:47:ca:c8:2b:b5:ed:7e:41:71:7b:96:45:fc:6f:2a: d5:9b:de:bb:64:ca:05:a2:f6:92:00:6a:ec:c2:e6:02:26:c2: 13:66:f5:48:53:7f:e1:d4:f3:0e:70:a3:f7:c6:7d:80:03:fb: a9:bc:0b:94:e2:ce:2d:85:f1:af:36:6d:d1:e7:87:f2:c7:6d: ae:d7:a5:2e:0c:3b:13:db:6a:f9:10:58:21:b1:39:b8:bf:63: f5:25:69:b0:5f:62:03:c5:94:e6:13:5f:37:9a:11:16:03:a3: 74:58:7a:b6:5c:a4:cd:7b:c4:ee:52:3c:85:3f:f8:95:b1:1c: ee:64:b8:56:1a:86:79:32:7a:98:40:e2:32:48:fe:d5:0f:8f: 1a:73:1b:b3:5c:45:f6:70:2c:7b:b2:2a:b0:23:56:1d:58:17: 22:9e:63:70:be:0d:76:7c:16:21:d7:04:13:a8:e8:1b:29:11: f8:fb:e1:9d:1f:07:b1:7e:e5:26:35:ff:a8:38:20:89:89:18: 73:8a:a9:ba:c7:59:ab:a9:c1:3b:80:55:1e:ec:06:d2:44:75: 48:c3:9a:92:8f:72:5a:6a:ed:ce:70:73:66:0d:61:5b:87:b3: be:06:ca:fd:f4:3f:0b:7c:9b:3b:7e:dd:3e:a2:6a:93:db:f9: bb:2f:c4:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQTcxMTAvBgNVBAUTKEZGNUQxMzJCQzY2QUFBMkJCQ0Y2NUMzRTVGRTg5QTBD MzcxRDhCM0EwHhcNMjQwNTE5MDUwOTA4WhcNMjQwNTI2MDUwOTA4WjAYMRYwFAYD VQQDEw02NjQ5ODk3NC0yZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwESsCVFOM2+Z+mf1VdhbiPbOoIBchEDaxfQ8tmaJfpBNX1xm3Uuj/z3p89Oe SHaubKqdAOscI2WsQ8//NYUO55qFQv5ivYBBZfFjVMbmAkiau0neCASNhm9BCqFH Q8rfgQBr2TCe++mCiAecaZsY6MXslB3QesPijcWFVqqG5VXWm4vorf5/BUNCbvra V6D37+oRLbTM7xOeyW2ZwLZPq/QT67HM/YGH37kTbHB+zjiSAy0eOvdtVvQshvin LTWZA2UCr/WRyWWE6BPOs8iTdcO7hRLXJEo6wU9REHYwHE58HeY+hLZtJCDeamp1 sARpOcNaSDNWOWdqSEbBWZMkIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYbtteP NfiF1LlSreg5WhNNfwUtMB8GA1UdIwQYMBaAFP9dEyvGaqorvPZcPl/omgw3HYs6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBNy8yRDk5MUNEMDU5 OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFpdTg5bHctWC1pYUREY2Rp em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xMFRLOFpxcWl1ODlsdy1YLWlhRERjZGl6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBNy8yRDk5MUNEMDU5OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFp dTg5bHctWC1pYUREY2Rpem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPJytHysgrte1+QXF7lkX8byrVm967ZMoFovaSAGrswuYCJsITZvVI U3/h1PMOcKP3xn2AA/upvAuU4s4thfGvNm3R54fyx22u16UuDDsT22r5EFghsTm4 v2P1JWmwX2IDxZTmE183mhEWA6N0WHq2XKTNe8TuUjyFP/iVsRzuZLhWGoZ5MnqY QOIySP7VD48acxuzXEX2cCx7siqwI1YdWBcinmNwvg12fBYh1wQTqOgbKRH4++Gd HwexfuUmNf+oOCCJiRhziqm6x1mrqcE7gFUe7AbSRHVIw5qSj3Jaau3OcHNmDWFb h7O+Bsr99D8LfJs7ft0+omqT2/m7L8Tr -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org