$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft File: tGhODWIsua_RLLX6PkiF382FAE0.mft (raw, json) Hash identifier: 9VCCyayF9R/v1ynve7+mZ+vKc7wrbJ0rZhqxxieVJ9U= Subject key identifier: C2:11:92:A6:1A:C1:7C:BE:49:99:2B:F9:D5:72:96:33:F0:C2:35:D7 Authority key identifier: B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D Certificate issuer: /CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft Manifest number: 02E8 Signing time: Sun 19 May 2024 03:18:56 +0000 Manifest this update: Sun 19 May 2024 03:18:56 +0000 Manifest next update: Sun 26 May 2024 03:18:56 +0000 Files and hashes: 1: tGhODWIsua_RLLX6PkiF382FAE0.crl (hash: 2aGIIK6aHinALqX93K1fVrAR5gfKdVdqC40bAeSTtsk=) 2: C458350E979C11EC8E769C43C4F9AE02.roa (hash: pRD2/Xc09WMuV5T/BVjU3glttxFS+epAFpK+qxSMCsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4636/serialNumber=B4684E0D622CB9AFD12CB5FA3E4885DFCD85004D Validity Not Before: May 19 03:18:56 2024 GMT Not After : May 26 03:18:56 2024 GMT Subject: CN=66496fa0-907a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:98:8a:41:9c:be:98:df:54:a5:70:f2:82: 31:b5:49:67:84:8f:78:5f:4a:e0:63:db:5a:3e:3c: b3:33:9e:0a:30:2a:9a:fc:de:6b:5c:8e:c2:aa:1e: 1e:e8:a1:44:7c:16:5e:a1:b9:46:ec:52:6b:1b:73: 10:57:45:d1:bc:e8:ad:90:fd:d0:01:95:a8:f1:dd: 40:e8:b7:5c:57:40:89:43:0f:39:7a:35:c3:7e:f5: 43:a3:2f:56:40:f7:78:1b:10:8c:0b:f2:46:c1:38: 38:04:a4:46:58:cb:58:f5:bf:47:31:07:cf:f6:07: c5:d7:53:de:c9:04:ba:b0:0d:50:18:84:77:24:76: 64:17:e9:c9:52:67:19:37:9f:4a:86:39:09:68:33: af:0c:9c:c7:1f:90:c2:8c:d0:e7:21:dc:32:66:e6: c7:19:e3:c8:9d:b5:36:13:ed:57:fa:f2:d4:8b:bb: 50:9b:f1:72:ed:c3:6f:d1:c7:57:d0:44:04:8a:d9: 17:ef:43:18:2b:05:c0:06:88:10:0f:b0:8e:ef:ce: 48:86:9f:e1:48:da:70:1d:d8:30:7f:40:6e:40:35: 8f:e1:0d:11:db:7e:c6:4a:50:64:d0:6a:eb:67:fe: cd:b5:0a:24:99:83:d3:09:b3:6d:29:d3:a2:03:df: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:11:92:A6:1A:C1:7C:BE:49:99:2B:F9:D5:72:96:33:F0:C2:35:D7 X509v3 Authority Key Identifier: keyid:B4:68:4E:0D:62:2C:B9:AF:D1:2C:B5:FA:3E:48:85:DF:CD:85:00:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGhODWIsua_RLLX6PkiF382FAE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4636/2C9BC33C979911ECBE725A3CC4F9AE02/tGhODWIsua_RLLX6PkiF382FAE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d6:f0:42:e0:23:8f:81:f3:95:0e:d2:36:30:39:3d:3a:3a: c1:5c:2a:05:9d:a1:cb:44:8c:51:d0:36:f8:ad:c8:66:eb:8e: e7:5d:20:b5:1a:32:26:09:86:de:ec:f9:30:6e:38:bc:bb:bf: ce:6c:e1:00:e3:8d:37:15:4b:20:b7:94:b0:1f:1f:53:f9:e6: 5f:2b:08:8b:ac:41:1e:c9:dd:0a:58:2b:17:fe:dd:31:22:f0: d5:d9:df:bb:6f:e7:1a:de:98:6e:0c:86:db:bb:0b:aa:8d:f9: 6e:10:6e:27:6c:41:13:66:4f:da:82:2c:1f:d8:cf:c8:3c:d7: 8f:b5:87:f0:e4:0c:c1:2d:a3:f7:e2:95:4b:6d:dc:7b:f5:4e: f1:5d:57:30:7e:2a:fa:15:a4:fd:de:35:81:80:af:8b:56:aa: 6b:15:c7:2f:cf:9d:4e:ac:e0:ff:f1:0c:00:95:ec:bb:26:ed: 3f:14:6b:56:fa:f4:62:87:78:62:d5:46:62:16:35:54:ad:bd: 29:4a:f3:fe:fe:c0:c9:41:59:f5:88:b3:7e:ab:78:5c:9c:7a: 9f:06:2e:28:fc:ad:2a:35:b9:8a:99:15:ca:15:82:c2:ed:aa: c7:f5:54:01:e5:9b:0e:ca:7c:f6:3c:bc:33:c3:a0:8a:83:ef: f4:b7:bf:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MzYxMTAvBgNVBAUTKEI0Njg0RTBENjIyQ0I5QUZEMTJDQjVGQTNFNDg4NURG Q0Q4NTAwNEQwHhcNMjQwNTE5MDMxODU2WhcNMjQwNTI2MDMxODU2WjAYMRYwFAYD VQQDEw02NjQ5NmZhMC05MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutCYikGcvpjfVKVw8oIxtUlnhI94X0rgY9taPjyzM54KMCqa/N5rXI7Cqh4e 6KFEfBZeoblG7FJrG3MQV0XRvOitkP3QAZWo8d1A6LdcV0CJQw85ejXDfvVDoy9W QPd4GxCMC/JGwTg4BKRGWMtY9b9HMQfP9gfF11PeyQS6sA1QGIR3JHZkF+nJUmcZ N59KhjkJaDOvDJzHH5DCjNDnIdwyZubHGePInbU2E+1X+vLUi7tQm/Fy7cNv0cdX 0EQEitkX70MYKwXABogQD7CO785Ihp/hSNpwHdgwf0BuQDWP4Q0R237GSlBk0Grr Z/7NtQokmYPTCbNtKdOiA9/YiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIRkqYa wXy+SZkr+dVyljPwwjXXMB8GA1UdIwQYMBaAFLRoTg1iLLmv0Sy1+j5Ihd/NhQBN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYzNi8yQzlCQzMzQzk3 OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3VhX1JMTFg2UGtpRjM4MkZB RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHaE9EV0lzdWFfUkxMWDZQa2lGMzgyRkFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYzNi8yQzlCQzMzQzk3OTkxMUVDQkU3MjVBM0NDNEY5QUUwMi90R2hPRFdJc3Vh X1JMTFg2UGtpRjM4MkZBRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB51vBC4COPgfOVDtI2MDk9OjrBXCoFnaHLRIxR0Db4rchm647nXSC1 GjImCYbe7Pkwbji8u7/ObOEA4403FUsgt5SwHx9T+eZfKwiLrEEeyd0KWCsX/t0x IvDV2d+7b+ca3phuDIbbuwuqjfluEG4nbEETZk/agiwf2M/IPNePtYfw5AzBLaP3 4pVLbdx79U7xXVcwfir6FaT93jWBgK+LVqprFccvz51OrOD/8QwAley7Ju0/FGtW +vRih3hi1UZiFjVUrb0pSvP+/sDJQVn1iLN+q3hcnHqfBi4o/K0qNbmKmRXKFYLC 7arH9VQB5ZsOynz2PLwzw6CKg+/0t78J -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org