$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json) Hash identifier: uVUtdIIwgpTNEjn37K4T3mWkbNohDShjXs0Zd9jl+rU= Subject key identifier: E9:E5:BE:90:EB:82:76:36:A0:22:18:7A:8F:9F:80:C6:8B:65:1A:1F Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft Manifest number: 0255 Signing time: Sun 19 May 2024 03:54:08 +0000 Manifest this update: Sun 19 May 2024 03:54:08 +0000 Manifest next update: Sun 26 May 2024 03:54:08 +0000 Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: LjowwdWSt4LcNBmroPXF28IGQGC9Di3MBN1zHbnG1+k=) 2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: MKwVD6iOGCLPePsnv4Iiz8mw/fMV5lQCmmZ15neKnH4=) 3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: ZAHPHHGkDMPS/uHUmK2Uvhf3gWEw3lktGxDWra4siWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Validity Not Before: May 19 03:54:08 2024 GMT Not After : May 26 03:54:08 2024 GMT Subject: CN=664977e0-5c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8c:6e:de:83:0b:a4:1b:0c:66:79:ac:20:46: db:06:70:1a:03:8f:47:78:6e:f8:e1:ca:24:66:c3: 0b:0d:a7:38:17:fb:fb:0e:e6:06:d5:38:16:fd:f9: f9:da:50:9a:7d:d2:49:ee:9f:97:e6:28:80:15:4e: 0f:9b:5b:b4:c1:e6:54:ce:93:b6:5d:15:54:74:69: 75:d5:80:6d:42:1f:f2:4f:7c:be:76:af:35:ec:21: bd:a4:dd:74:d0:e5:0c:f0:cb:f8:0a:f0:99:a6:13: 5f:8c:0f:63:aa:ab:26:f2:ed:9a:9a:19:1d:5a:05: 43:c6:30:75:bf:28:4e:ba:40:15:37:13:c4:3d:8d: 1e:01:db:93:6d:97:5d:72:21:fa:3f:85:a4:b0:ca: d9:bb:a3:d6:ed:89:6e:52:05:98:8e:8d:ec:48:d5: 54:11:4f:7d:75:8a:f8:ea:aa:fa:58:40:d8:92:15: 55:c6:79:38:30:94:bb:02:00:e1:b5:63:34:f9:03: d2:75:e6:86:fc:65:b7:92:f2:0e:89:cd:58:fa:b2: 16:93:91:16:8c:e0:40:ce:2c:05:36:1b:db:2a:52: 6e:66:49:39:64:2c:b3:64:2a:c6:60:3d:8b:a3:23: 2d:7c:b3:50:c7:b1:1b:7b:ca:86:6f:0b:10:e9:8b: 32:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E5:BE:90:EB:82:76:36:A0:22:18:7A:8F:9F:80:C6:8B:65:1A:1F X509v3 Authority Key Identifier: keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:85:e9:06:e8:12:da:cd:14:eb:5d:9e:89:9b:da:87:11:c9: 44:fb:e5:e7:b4:10:ee:16:56:0b:89:c9:a9:b0:3a:90:bd:73: d0:e7:dc:d6:ba:3b:9f:28:ac:e5:1f:fe:37:22:d8:1f:a6:56: ac:79:0c:e5:42:52:58:3e:a7:01:0f:44:f2:38:9d:a1:46:2d: 39:05:ee:97:6a:af:5c:4b:ca:55:8b:f3:d9:a1:8f:71:af:b5: 4a:23:ca:8a:a2:ed:3c:63:b0:0b:88:53:7f:79:ed:5d:69:75: 09:5d:64:8a:d2:4d:ef:96:6e:bd:00:01:50:6a:88:ab:37:eb: 44:d8:c4:ac:03:1b:ed:f7:5c:1b:3d:73:86:e8:8f:0b:c7:e7: e6:ab:4c:01:41:1b:bc:44:b7:3d:62:be:d0:7b:a4:b2:4e:f5: 97:f6:14:46:6d:bf:57:f4:7b:bb:1f:b4:b9:22:3c:09:4e:23: b4:94:7f:92:1f:d4:87:fb:dd:7b:43:1c:78:25:d4:48:06:9a: 87:26:43:7b:a5:82:57:96:0e:dc:6b:8e:32:10:7b:c7:56:75: c8:62:68:93:9f:bb:e0:2e:dc:a3:87:7d:94:76:e1:30:0d:90: c6:67:7c:eb:9a:b9:e5:35:10:09:e0:08:ee:1b:c1:09:41:99: 09:43:e3:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0 QUJBQkUyQkIwHhcNMjQwNTE5MDM1NDA4WhcNMjQwNTI2MDM1NDA4WjAYMRYwFAYD VQQDEw02NjQ5NzdlMC01YzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Yxu3oMLpBsMZnmsIEbbBnAaA49HeG744cokZsMLDac4F/v7DuYG1TgW/fn5 2lCafdJJ7p+X5iiAFU4Pm1u0weZUzpO2XRVUdGl11YBtQh/yT3y+dq817CG9pN10 0OUM8Mv4CvCZphNfjA9jqqsm8u2amhkdWgVDxjB1vyhOukAVNxPEPY0eAduTbZdd ciH6P4WksMrZu6PW7YluUgWYjo3sSNVUEU99dYr46qr6WEDYkhVVxnk4MJS7AgDh tWM0+QPSdeaG/GW3kvIOic1Y+rIWk5EWjOBAziwFNhvbKlJuZkk5ZCyzZCrGYD2L oyMtfLNQx7Ebe8qGbwsQ6YsyAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnlvpDr gnY2oCIYeo+fgMaLZRofMB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFERC9FREM2NzYxNEQwRDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRT RE1uTHhMX0JmdFZLdXI0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZhekG6BLazRTrXZ6Jm9qHEclE++XntBDuFlYLicmpsDqQvXPQ59zW ujufKKzlH/43ItgfplaseQzlQlJYPqcBD0TyOJ2hRi05Be6Xaq9cS8pVi/PZoY9x r7VKI8qKou08Y7ALiFN/ee1daXUJXWSK0k3vlm69AAFQaoirN+tE2MSsAxvt91wb PXOG6I8Lx+fmq0wBQRu8RLc9Yr7Qe6SyTvWX9hRGbb9X9Hu7H7S5IjwJTiO0lH+S H9SH+917Qxx4JdRIBpqHJkN7pYJXlg7ca44yEHvHVnXIYmiTn7vgLtyjh32UduEw DZDGZ3zrmrnlNRAJ4AjuG8EJQZkJQ+N8 -----END CERTIFICATE-----Generated at Sun May 19 04:22:05 2024 by rpki-client on console-fra.rpki-client.org