$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: gZPOsbWXccBDdapFaN91wzeJ91XehOUD7e58DxjR8J8= Subject key identifier: 92:EA:7B:98:D3:EA:98:50:47:FC:69:3E:20:DE:C6:15:4B:D4:92:92 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 340B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 33E9 Signing time: Sun 02 Jun 2024 14:34:09 +0000 Manifest this update: Sun 02 Jun 2024 14:34:09 +0000 Manifest next update: Sun 09 Jun 2024 14:34:09 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: /hBy7cLpBgyyb+NiYpH/VJAxHiQUWeeD47ivzVdqdK4=) 2: 38D2A96C75D911E8A722EC33C4F9AE02.roa (hash: elDFtFSy7NJUJ+IUx0YL2euoTfOLBLZKBmxm8iFbuQM=) 3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: 2Vj+s7DHmkgLhy4IA8FdPfNPgY+cJMYTXFbPkB97l04=) 4: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: KqOdzkW00sNoLJ/OBf5XyYcMrbE8nowEuQW1fHDQD1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13323 (0x340b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Jun 2 14:34:09 2024 GMT Not After : Jun 9 14:34:09 2024 GMT Subject: CN=665c82e1-1cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:71:03:cb:aa:60:f5:10:f9:17:8c:30:d8: de:dd:84:b1:3c:91:e7:3a:ab:b4:3d:35:55:ba:aa: cb:1e:60:84:09:3c:e1:2c:2f:e0:fe:88:b7:f4:f9: d2:76:fb:a4:d9:23:4a:9f:c9:28:a1:36:f5:41:ba: 0f:43:e4:4b:d0:8f:5f:9a:99:3a:50:7c:92:d7:99: d3:2d:dc:43:c1:3b:33:23:76:c7:30:ac:60:95:5b: 24:b8:18:17:45:ff:20:69:78:cb:80:84:64:7c:94: 2a:33:a1:0a:1b:3b:c8:0b:5d:cb:49:65:32:f4:41: 98:50:08:9c:04:b2:1b:53:fa:4a:3c:04:c1:a0:8d: 95:d1:e9:34:b0:13:5d:3c:ec:95:5e:a8:44:ac:c2: 8a:bf:ab:6e:ed:e1:1e:d9:4c:a8:94:ac:ec:dd:17: a5:fb:31:71:fc:07:07:28:8c:26:1f:f8:6e:c5:83: d8:b0:9b:ee:0a:da:0a:54:6f:2f:9d:0d:3f:63:5a: 4f:85:bb:62:de:8f:18:ab:61:a7:21:b8:43:04:a0: 69:59:e7:ef:d2:8a:7d:17:af:67:33:81:cf:83:fb: e0:af:ff:20:e0:87:89:c8:5b:3c:9b:56:4a:ea:96: 7e:57:14:13:6f:9a:55:b4:e2:8b:61:50:69:62:e2: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EA:7B:98:D3:EA:98:50:47:FC:69:3E:20:DE:C6:15:4B:D4:92:92 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1a:93:c7:87:c4:14:9d:2c:66:28:2d:c8:c1:39:18:c7:75: 88:09:a3:a1:88:19:ef:ea:79:5b:54:2d:f4:ca:9e:78:12:dc: 56:ed:21:b1:e8:14:38:d4:37:51:98:01:cd:18:13:b3:22:5f: 0a:f3:2d:5c:32:18:23:6e:5a:4f:98:7f:8a:58:bb:fa:f5:a6: c3:c7:49:7d:9d:04:18:b5:e1:94:76:a0:12:90:36:f7:0f:82: 2d:72:de:fc:2d:c3:1b:63:bf:15:d2:04:8b:e0:50:07:a9:26: f8:19:3c:69:9c:a3:a8:19:b6:d6:77:50:81:04:fb:b4:fa:eb: b3:c4:91:5b:50:e1:cc:ef:da:53:4f:59:87:97:55:33:36:fc: 45:a3:f9:f4:d5:c2:d2:c0:36:ce:17:d0:ab:de:c7:ff:83:6c: 28:36:d7:b2:e7:35:6f:91:f6:63:ab:f8:19:7f:ae:b6:9c:da: 69:b6:22:64:c1:c3:b4:f9:6f:21:d8:24:c1:90:05:5a:d3:da: 99:d4:16:25:88:0c:9b:96:6c:81:b1:cb:af:49:93:13:e5:7a: df:e4:e9:56:e8:12:d2:00:eb:a4:df:13:66:ad:af:d0:f4:b4: cd:4b:6f:e0:30:42:d9:c7:b2:26:43:95:31:f8:1f:da:aa:ae: 5d:7f:ff:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjQwNjAyMTQzNDA5WhcNMjQwNjA5MTQzNDA5WjAYMRYwFAYD VQQDEw02NjVjODJlMS0xY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGxxA8uqYPUQ+ReMMNje3YSxPJHnOqu0PTVVuqrLHmCECTzhLC/g/oi39PnS dvuk2SNKn8kooTb1QboPQ+RL0I9fmpk6UHyS15nTLdxDwTszI3bHMKxglVskuBgX Rf8gaXjLgIRkfJQqM6EKGzvIC13LSWUy9EGYUAicBLIbU/pKPATBoI2V0ek0sBNd POyVXqhErMKKv6tu7eEe2UyolKzs3Rel+zFx/AcHKIwmH/huxYPYsJvuCtoKVG8v nQ0/Y1pPhbti3o8Yq2GnIbhDBKBpWefv0op9F69nM4HPg/vgr/8g4IeJyFs8m1ZK 6pZ+VxQTb5pVtOKLYVBpYuIU7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLqe5jT 6phQR/xpPiDexhVL1JKSMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/GpPHh8QUnSxmKC3IwTkYx3WICaOhiBnv6nlbVC30yp54EtxW7SGx 6BQ41DdRmAHNGBOzIl8K8y1cMhgjblpPmH+KWLv69abDx0l9nQQYteGUdqASkDb3 D4Itct78LcMbY78V0gSL4FAHqSb4GTxpnKOoGbbWd1CBBPu0+uuzxJFbUOHM79pT T1mHl1UzNvxFo/n01cLSwDbOF9Cr3sf/g2woNtey5zVvkfZjq/gZf662nNpptiJk wcO0+W8h2CTBkAVa09qZ1BYliAyblmyBscuvSZMT5Xrf5OlW6BLSAOuk3xNmra/Q 9LTNS2/gMELZx7ImQ5Ux+B/aqq5df/9Y -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:46 2024 by rpki-client on console-fra.rpki-client.org