$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: Dpw8Cpy4s26vW1Hywme8CRCwKo3frCACV2VV5O3oagk= Subject key identifier: 3C:B7:63:9F:8C:7A:01:1B:C8:81:88:09:0C:CE:9C:83:F1:E5:64:32 Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 010E Signing time: Fri 31 May 2024 17:03:29 +0000 Manifest this update: Fri 31 May 2024 17:03:29 +0000 Manifest next update: Fri 07 Jun 2024 17:03:29 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: yzZyKS3SKhtBavP7BTM7juTyIc0Y8CyJN6T3n8N6IzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: May 31 17:03:29 2024 GMT Not After : Jun 7 17:03:29 2024 GMT Subject: CN=665a02e1-b526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:aa:b0:c2:a2:76:a7:aa:08:88:8c:d9:73: c8:6b:b3:f5:05:10:0e:96:aa:0b:66:22:f3:9e:6b: c5:ee:29:5d:2e:aa:9e:f5:39:ff:65:84:82:88:4f: 5e:09:3e:35:29:f5:52:42:06:3c:0e:46:9b:f0:30: 9c:3b:b4:7e:77:b4:d9:5e:88:7e:52:e4:cb:5e:6d: bb:6d:26:1a:b9:3f:9e:68:9b:68:c1:4b:6a:d8:4c: 99:0a:4e:73:79:c0:54:57:b9:da:5b:4b:3e:ea:5a: 25:10:87:22:39:c6:01:05:73:eb:41:1b:78:e2:22: 86:5d:0e:70:f7:2f:a5:8e:0f:b5:a3:a6:13:79:74: b8:0a:98:41:c6:37:30:5d:ad:a2:ef:81:f3:5e:6d: 3f:21:60:df:eb:bf:0d:cc:a4:ac:6f:62:29:61:ea: 77:7f:fa:f3:a7:a2:28:af:39:99:b8:8d:d8:1f:aa: 06:d2:c6:f6:25:15:d4:e7:35:80:b5:a9:f7:a2:3f: 1c:6e:10:82:51:50:86:18:58:f3:c0:fb:a1:43:1f: 23:07:69:7f:14:40:c5:2d:77:ae:d9:b3:0c:39:4c: 89:e4:cf:1e:c2:3c:89:07:be:1e:30:8b:8d:56:97: ec:d2:09:ed:ae:cc:1e:71:59:7c:4e:e4:11:07:66: 84:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B7:63:9F:8C:7A:01:1B:C8:81:88:09:0C:CE:9C:83:F1:E5:64:32 X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:95:96:03:f1:f6:88:f5:a2:4b:51:4b:51:5f:ba:38:0e:e2: 07:eb:38:ff:99:6e:34:63:cf:20:c9:d2:69:c9:8d:6c:44:7c: 46:87:3a:4e:ce:24:1a:da:91:f2:f5:38:ac:91:cb:a0:de:3c: 54:8a:e3:8b:a3:1e:f5:12:a6:79:ff:06:a6:34:80:c2:85:7f: be:07:0b:42:d2:04:ca:d0:66:84:d1:9c:b6:27:0a:2e:1f:0e: be:4a:1d:4f:2f:76:21:38:71:fc:e7:6f:9c:8c:d3:52:16:2a: d5:54:cb:3a:7f:4d:d9:c3:52:e8:86:83:98:7b:ef:4d:b5:6c: 75:f9:b9:c6:df:10:f9:5d:f4:f1:17:46:94:d7:da:3e:5c:a2: 24:64:ff:14:1f:e6:90:55:09:42:80:33:08:76:d8:de:0d:33: 3a:1e:32:9e:8c:28:7b:0d:f1:88:fa:c4:e3:44:60:bd:1f:4b: 56:02:19:9f:be:24:28:fc:08:32:06:77:25:5d:62:38:61:49: 86:ff:02:49:12:e2:db:5e:18:60:cd:20:8e:d5:ce:df:f6:66: 96:aa:9d:8a:ef:ba:5e:03:85:a5:1d:9d:37:9b:ed:9e:57:c2: 5f:e1:e7:f9:07:58:b6:07:67:97:4f:43:6c:f8:b0:9a:fe:fc: df:a2:71:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjQwNTMxMTcwMzI5WhcNMjQwNjA3MTcwMzI5WjAYMRYwFAYD VQQDEw02NjVhMDJlMS1iNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3WqsMKidqeqCIiM2XPIa7P1BRAOlqoLZiLznmvF7ildLqqe9Tn/ZYSCiE9e CT41KfVSQgY8Dkab8DCcO7R+d7TZXoh+UuTLXm27bSYauT+eaJtowUtq2EyZCk5z ecBUV7naW0s+6lolEIciOcYBBXPrQRt44iKGXQ5w9y+ljg+1o6YTeXS4CphBxjcw Xa2i74HzXm0/IWDf678NzKSsb2IpYep3f/rzp6IorzmZuI3YH6oG0sb2JRXU5zWA tan3oj8cbhCCUVCGGFjzwPuhQx8jB2l/FEDFLXeu2bMMOUyJ5M8ewjyJB74eMIuN Vpfs0gntrswecVl8TuQRB2aE0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy3Y5+M egEbyIGICQzOnIPx5WQyMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAalZYD8faI9aJLUUtRX7o4DuIH6zj/mW40Y88gydJpyY1sRHxGhzpO ziQa2pHy9Tiskcug3jxUiuOLox71EqZ5/wamNIDChX++BwtC0gTK0GaE0Zy2Jwou Hw6+Sh1PL3YhOHH852+cjNNSFirVVMs6f03Zw1LohoOYe+9NtWx1+bnG3xD5XfTx F0aU19o+XKIkZP8UH+aQVQlCgDMIdtjeDTM6HjKejCh7DfGI+sTjRGC9H0tWAhmf viQo/AgyBnclXWI4YUmG/wJJEuLbXhhgzSCO1c7f9maWqp2K77peA4WlHZ03m+2e V8Jf4ef5B1i2B2eXT0Ns+LCa/vzfonEz -----END CERTIFICATE-----Generated at Fri May 31 17:44:52 2024 by rpki-client on console-fra.rpki-client.org