$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft File: TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json) Hash identifier: McjiM1i6GX/z7kTCq2olnPWr3Oc2GBXZDUS3SqugIzM= Subject key identifier: 25:B9:FF:64:3C:8F:BC:9C:7D:98:AF:24:68:F1:85:7C:B7:3E:74:AD Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B Certificate issuer: /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft Manifest number: AE Signing time: Sun 19 May 2024 06:40:26 +0000 Manifest this update: Sun 19 May 2024 06:40:25 +0000 Manifest next update: Sun 26 May 2024 06:40:25 +0000 Files and hashes: 1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: /DRrq3VVTh8ORZdH3r3i46usAa5Jem30Ggn//qfNx+g=) 2: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: koUJJwZOQQMXfdjC5f6EY+/6KGmD30sTH2971XhJ6hE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B Validity Not Before: May 19 06:40:25 2024 GMT Not After : May 26 06:40:25 2024 GMT Subject: CN=66499eda-9343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:ff:1b:70:4e:f2:95:0b:81:4c:51:80:b3: 3c:a4:2e:e1:cd:41:26:ac:0f:36:eb:45:cb:89:66: d4:47:9e:99:4e:7f:9a:b4:5a:ee:37:a3:93:e3:c4: e0:12:40:8d:95:a9:1f:1e:dd:82:b0:f4:24:83:3f: e1:47:ae:e4:16:38:c9:78:47:4a:8c:ca:1f:5b:fd: bf:88:73:dd:82:70:68:f3:ec:3d:14:da:57:87:14: b1:9b:e0:35:72:a0:45:28:f4:67:d4:d5:17:36:09: 25:97:09:d3:91:9d:e3:4f:ae:12:e4:30:c0:cc:bd: 28:a3:09:ff:d9:8e:f6:d5:c4:a4:00:28:59:0d:7c: 00:20:07:8d:f1:bc:21:bc:6e:16:7d:0c:ad:e7:93: c4:77:c6:53:78:d4:9b:b5:a7:7b:7a:ca:94:33:e3: 37:cd:9a:53:4b:04:18:68:8c:2d:d3:2a:a7:8d:6c: 57:36:99:c8:05:82:ea:bc:1c:c2:89:10:6a:04:3c: 19:38:ea:0d:88:69:40:34:dc:90:5e:88:d1:fa:ac: 6c:43:1d:f9:de:79:bc:3b:6e:69:8a:31:dc:52:16: 49:21:be:49:e3:c8:02:03:a8:bb:ab:b8:34:95:06: 1a:09:e0:1b:e6:40:4b:ac:59:75:5b:1a:06:75:15: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B9:FF:64:3C:8F:BC:9C:7D:98:AF:24:68:F1:85:7C:B7:3E:74:AD X509v3 Authority Key Identifier: keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:22:e3:00:94:23:5a:48:48:b0:55:c1:f1:26:f6:2a:95:a7: 1d:05:db:1d:36:50:25:57:9b:f5:08:d2:0d:13:9f:da:a1:4c: 8c:6c:c9:bf:c8:5c:d2:dd:24:3c:86:8a:1b:61:fa:46:3a:c9: d5:7d:bb:e7:19:e3:e5:8e:f0:b9:4a:12:cb:15:1e:26:44:20: 08:0e:ce:10:fd:4c:04:31:0d:3f:4d:25:95:2b:35:6c:37:1f: 31:01:6d:d0:63:4d:84:76:7e:e2:ca:b9:8c:f7:ac:b0:0f:65: 16:47:cb:d0:48:b2:3b:91:4a:3a:a0:4b:ef:ef:94:33:22:3f: 33:37:85:64:99:9b:70:3b:2e:25:86:99:1b:4e:a0:7c:ee:65: 02:a7:81:a7:62:7b:c7:b0:bb:62:b5:e9:03:6a:84:4d:57:23: 5c:53:ee:bd:e6:b6:9a:c0:f7:9e:f0:d6:c5:20:f5:29:63:b8: 7d:99:77:1b:c7:b2:5b:cc:fa:70:85:93:ca:60:30:4c:d6:ef: fe:9b:53:76:51:98:fd:d4:1a:b1:cc:5a:38:64:7d:2a:af:27: 7b:58:69:1d:33:ab:27:2f:a2:38:f1:05:89:3a:16:e7:09:53: 05:45:4e:e3:51:ab:52:4f:06:a5:fe:5d:2e:79:aa:15:92:dd: 77:a3:95:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIwMEYxMTAvBgNVBAUTKDREOTA5MDg3QkRERkExNTA1RTJCQkEwM0YyMDYxMTJF QUVGRkIxMUIwHhcNMjQwNTE5MDY0MDI1WhcNMjQwNTI2MDY0MDI1WjAYMRYwFAYD VQQDEw02NjQ5OWVkYS05MzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsj/G3BO8pULgUxRgLM8pC7hzUEmrA8260XLiWbUR56ZTn+atFruN6OT48Tg EkCNlakfHt2CsPQkgz/hR67kFjjJeEdKjMofW/2/iHPdgnBo8+w9FNpXhxSxm+A1 cqBFKPRn1NUXNgkllwnTkZ3jT64S5DDAzL0oown/2Y721cSkAChZDXwAIAeN8bwh vG4WfQyt55PEd8ZTeNSbtad7esqUM+M3zZpTSwQYaIwt0yqnjWxXNpnIBYLqvBzC iRBqBDwZOOoNiGlANNyQXojR+qxsQx353nm8O25pijHcUhZJIb5J48gCA6i7q7g0 lQYaCeAb5kBLrFl1WxoGdRVWHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCW5/2Q8 j7ycfZivJGjxhXy3PnStMB8GA1UdIwQYMBaAFE2QkIe936FQXiu6A/IGES6u/7Eb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjAwRi8yNTc4NzQwMjE2 NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9WQmVLN29EOGdZUkxxN19z UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQ1FoNzNmb1ZCZUs3b0Q4Z1lSTHE3X3NScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjAwRi8yNTc4NzQwMjE2NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9W QmVLN29EOGdZUkxxN19zUnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGIuMAlCNaSEiwVcHxJvYqlacdBdsdNlAlV5v1CNINE5/aoUyMbMm/ yFzS3SQ8hoobYfpGOsnVfbvnGePljvC5ShLLFR4mRCAIDs4Q/UwEMQ0/TSWVKzVs Nx8xAW3QY02Edn7iyrmM96ywD2UWR8vQSLI7kUo6oEvv75QzIj8zN4VkmZtwOy4l hpkbTqB87mUCp4GnYnvHsLtitekDaoRNVyNcU+695raawPee8NbFIPUpY7h9mXcb x7JbzPpwhZPKYDBM1u/+m1N2UZj91BqxzFo4ZH0qryd7WGkdM6snL6I48QWJOhbn CVMFRU7jUatSTwal/l0ueaoVkt13o5UO -----END CERTIFICATE-----Generated at Sun May 19 07:40:45 2024 by rpki-client on console-fra.rpki-client.org