$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: JAbJIoAdmXlidBAgkiXCHgM7h9M1tNvTYlJqwoScdnc= Subject key identifier: 40:6F:85:9F:72:71:33:85:A6:9F:8B:D7:79:E5:63:61:F3:B6:89:10 Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 56 Signing time: Sun 19 May 2024 07:55:57 +0000 Manifest this update: Sun 19 May 2024 07:55:56 +0000 Manifest next update: Sun 26 May 2024 07:55:56 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: CdNGmnlTlg9Cpja7QY8m1g644aNtAgez6qDz9sP+dLg=) 2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: vPemC0+Cb61WpL0wN60mXGc+hzmPWM8h3mLXfwGXPxk=) 3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: ecZYutUNN9dukiWdjI7RXtlJlSSR4QXlFMWvlx987w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: May 19 07:55:56 2024 GMT Not After : May 26 07:55:56 2024 GMT Subject: CN=6649b08c-dc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:59:37:8c:50:60:5b:c0:a7:2e:8d:d5:e9: 30:5d:7f:2c:56:ac:03:35:7e:71:73:3c:ea:6b:c9: e7:5c:da:a9:99:84:1a:4f:d9:72:39:51:0c:5e:fc: 6e:86:ac:ba:ee:97:ab:25:80:c1:71:1f:fd:a7:0f: 9d:0e:9e:e4:1a:ff:2f:75:f9:f6:5f:43:77:d5:0c: 54:93:ec:96:c9:9c:8b:fb:50:38:71:d7:bc:5b:dc: ff:ed:b3:d0:71:85:4e:cf:bd:a9:fd:02:ab:78:a3: f0:2b:d1:2e:fa:39:f8:39:1e:7e:11:f3:2b:27:59: a7:5d:df:68:f0:6c:ab:56:ee:f7:17:70:c8:a6:78: 8e:1f:72:15:3d:5d:b2:75:28:03:5f:2a:3d:df:7c: fd:02:65:b8:f4:a8:17:ef:18:42:10:44:66:0b:57: 47:98:b0:eb:4f:c6:0a:51:da:43:f9:71:5a:c4:47: ed:77:79:b2:51:38:90:a2:d9:33:19:11:54:61:e6: 23:2c:3e:9b:2f:64:2a:51:75:eb:34:d6:c0:ce:da: af:73:e3:e3:82:73:a3:0c:6c:79:f5:4c:c8:9b:0d: 74:89:6a:7e:f5:b7:b3:35:c2:18:e3:ce:2e:11:97: 31:b0:24:e0:bf:74:68:1d:fd:7c:9b:dd:26:15:ee: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6F:85:9F:72:71:33:85:A6:9F:8B:D7:79:E5:63:61:F3:B6:89:10 X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:07:9f:ec:a6:e2:4d:64:3c:28:78:b1:6f:c2:71:42:37:77: b0:39:3a:63:c1:8e:21:60:f4:31:69:b6:21:25:7c:97:87:34: 94:9f:ea:b7:12:50:09:0d:71:8f:10:2d:ce:9a:2d:c6:e5:3e: 8b:e4:30:cf:ea:32:eb:ff:ef:31:1c:e7:c6:eb:47:0f:da:ea: ba:68:b0:91:23:46:2c:54:4e:8b:fe:05:9a:67:b5:0b:b6:c5: 66:52:80:bd:d9:f8:fb:08:cd:ed:1d:f0:ee:e9:d2:7d:75:11: 75:ef:e2:87:c1:3a:9a:4c:7d:20:6c:50:15:f8:eb:81:87:ef: 7d:e4:58:91:97:bd:6b:6a:0a:98:64:56:95:75:1f:95:ec:ad: 3c:f4:44:60:98:63:ce:2a:e7:0f:4a:34:45:10:ab:93:12:96: c6:1b:35:1c:b1:5c:90:0c:b8:93:46:a4:f2:41:ad:8b:ce:dc: 23:3a:fb:99:80:21:50:d0:67:52:5e:1b:20:3b:71:07:83:e7: 2d:b0:7c:1b:8d:af:53:f5:1a:f7:5d:b3:3b:f6:02:47:1c:f1: 13:4a:71:9e:ab:57:78:c8:c1:cf:88:d7:07:9f:08:86:95:6e: a8:de:d5:77:b7:6d:de:f8:c4:63:8d:ce:db:17:2d:c7:69:91: f5:0f:2b:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUE2RTExMC8GA1UEBRMoNENBRDI3MkJBRDFEODcwOUIxNkU5OTc1MDA2RTEyMjU1 MjA1QzhGNjAeFw0yNDA1MTkwNzU1NTZaFw0yNDA1MjYwNzU1NTZaMBgxFjAUBgNV BAMTDTY2NDliMDhjLWRjMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2A1k3jFBgW8CnLo3V6TBdfyxWrAM1fnFzPOpryedc2qmZhBpP2XI5UQxe/G6G rLrul6slgMFxH/2nD50OnuQa/y91+fZfQ3fVDFST7JbJnIv7UDhx17xb3P/ts9Bx hU7Pvan9Aqt4o/Ar0S76Ofg5Hn4R8ysnWadd32jwbKtW7vcXcMimeI4fchU9XbJ1 KANfKj3ffP0CZbj0qBfvGEIQRGYLV0eYsOtPxgpR2kP5cVrER+13ebJROJCi2TMZ EVRh5iMsPpsvZCpRdes01sDO2q9z4+OCc6MMbHn1TMibDXSJan71t7M1whjjzi4R lzGwJOC/dGgd/Xyb3SYV7rANAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQG+Fn3Jx M4Wmn4vXeeVjYfO2iRAwHwYDVR0jBBgwFoAUTK0nK60dhwmxbpl1AG4SJVIFyPYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5QTZFL0Y1MUZGODg2OUFG OTExRUVBMTZEQkM1NUM0RjlBRTAyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEswbks2MGRod214YnBsMUFHNFNKVklGeVBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 QTZFL0Y1MUZGODg2OUFGOTExRUVBMTZEQkM1NUM0RjlBRTAyL1RLMG5LNjBkaHdt eGJwbDFBRzRTSlZJRnlQWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI8Hn+ym4k1kPCh4sW/CcUI3d7A5OmPBjiFg9DFptiElfJeHNJSf6rcS UAkNcY8QLc6aLcblPovkMM/qMuv/7zEc58brRw/a6rposJEjRixUTov+BZpntQu2 xWZSgL3Z+PsIze0d8O7p0n11EXXv4ofBOppMfSBsUBX464GH733kWJGXvWtqCphk VpV1H5XsrTz0RGCYY84q5w9KNEUQq5MSlsYbNRyxXJAMuJNGpPJBrYvO3CM6+5mA IVDQZ1JeGyA7cQeD5y2wfBuNr1P1Gvddszv2Akcc8RNKcZ6rV3jIwc+I1wefCIaV bqje1Xe3bd74xGONztsXLcdpkfUPK3c= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org