$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: 3V8NaAoonYQD4AW1YZbT07URCTkcyxjcUxZRJZ+HMMA= Subject key identifier: 30:19:F1:F8:C1:71:24:8B:4D:8C:C4:58:B6:93:6A:04:82:E1:AD:22 Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 04A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 04A3 Signing time: Sun 19 May 2024 01:33:34 +0000 Manifest this update: Sun 19 May 2024 01:33:33 +0000 Manifest next update: Sun 26 May 2024 01:33:33 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: EmPMHh65GVf6MzxIpHnQJK/OOSKDB9tHqnq8dnpzIAY=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: KzbXcSqsoOTzYpQav+yPb9SajNcG/VLMi+5XOT5YLHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: May 19 01:33:33 2024 GMT Not After : May 26 01:33:33 2024 GMT Subject: CN=664956ee-4e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:a2:f7:b4:92:13:ef:4a:ac:1c:21:58:03: 2a:55:ce:78:7f:ca:c3:07:fb:29:89:1f:5e:a4:89: 18:f6:44:24:fd:a3:c4:e7:e2:aa:73:f4:dc:7d:4e: f0:ad:80:aa:43:92:fe:07:4f:d3:ce:89:c4:22:fb: c1:85:49:55:b2:d0:9c:04:52:6b:9a:c7:29:cb:f8: bd:df:e8:9c:43:aa:ab:7a:36:a7:1b:43:4d:51:1f: a4:b1:12:d7:ba:3a:bf:0d:13:cc:f0:a2:05:bb:09: a7:bd:d0:66:8b:f4:b4:58:7c:f2:b0:6e:11:c4:7d: c0:0a:dc:7b:c5:2b:cd:a2:57:70:2a:86:42:47:9f: d1:93:c0:76:b3:e7:64:e0:d1:3b:d4:ff:78:65:2b: 3e:69:9a:43:79:4c:98:51:8e:e6:f1:8b:cc:7b:e0: c6:e7:82:e2:ad:40:c6:d1:aa:3b:e8:8c:63:f2:29: 73:06:9e:3c:aa:2a:15:9c:8a:64:1d:a1:e9:bb:b9: 82:38:0e:42:5a:26:57:b4:bb:67:30:85:4a:5f:b6: eb:56:5a:9d:0c:55:07:56:4b:d1:a1:be:51:7d:65: c5:e6:2e:69:7e:e4:9d:1b:61:73:fd:93:94:46:9c: 77:87:78:74:4b:2f:ea:c2:a4:6f:a7:c6:45:35:2e: 51:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:19:F1:F8:C1:71:24:8B:4D:8C:C4:58:B6:93:6A:04:82:E1:AD:22 X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:84:5c:cd:2b:e6:69:fb:f8:70:fe:54:2c:63:5c:d7:26:ae: 37:db:54:36:45:4e:fe:91:8d:44:5c:85:c3:5e:87:89:c8:fe: 5b:f8:dc:a7:e4:9f:d7:cd:57:7d:03:c9:83:23:6e:64:8d:f6: cc:4e:e8:65:6d:46:8b:46:33:00:fe:25:a3:f0:3b:ed:61:30: 65:6a:cb:0f:aa:d8:6f:5c:69:70:99:d8:30:ab:3c:52:f2:63: 2d:78:55:d6:2c:3d:ff:64:26:cc:a8:99:b0:15:a9:8a:0d:b6: c1:24:a3:c4:4f:e3:c5:be:b0:09:ec:0f:4e:f3:d1:db:a8:16: 12:40:5d:ec:68:43:45:00:30:7b:4c:0c:3e:16:de:34:bc:84: 77:67:b4:9a:36:18:b6:8d:06:02:99:b0:1f:f3:c4:23:0e:7e: 97:ff:0c:75:5a:01:b6:a3:96:1b:46:c2:50:68:d2:97:9a:40: e1:9e:d5:85:f5:5f:7e:92:64:c2:36:32:04:f5:5f:be:09:d7: eb:a0:87:06:69:e4:79:d4:ca:a9:bb:37:66:f4:b4:46:cb:91: 9b:a7:db:05:a7:c1:62:a9:a5:8c:75:03:d6:d6:74:de:a7:b2: b2:32:72:ca:3f:5e:af:69:29:91:54:ab:06:3e:d6:97:e8:1f: 03:36:50:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjQwNTE5MDEzMzMzWhcNMjQwNTI2MDEzMzMzWjAYMRYwFAYD VQQDEw02NjQ5NTZlZS00ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/Gi97SSE+9KrBwhWAMqVc54f8rDB/spiR9epIkY9kQk/aPE5+Kqc/TcfU7w rYCqQ5L+B0/TzonEIvvBhUlVstCcBFJrmscpy/i93+icQ6qrejanG0NNUR+ksRLX ujq/DRPM8KIFuwmnvdBmi/S0WHzysG4RxH3ACtx7xSvNoldwKoZCR5/Rk8B2s+dk 4NE71P94ZSs+aZpDeUyYUY7m8YvMe+DG54LirUDG0ao76Ixj8ilzBp48qioVnIpk HaHpu7mCOA5CWiZXtLtnMIVKX7brVlqdDFUHVkvRob5RfWXF5i5pfuSdG2Fz/ZOU Rpx3h3h0Sy/qwqRvp8ZFNS5RjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAZ8fjB cSSLTYzEWLaTagSC4a0iMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6hFzNK+Zp+/hw/lQsY1zXJq4321Q2RU7+kY1EXIXDXoeJyP5b+Nyn 5J/XzVd9A8mDI25kjfbMTuhlbUaLRjMA/iWj8DvtYTBlassPqthvXGlwmdgwqzxS 8mMteFXWLD3/ZCbMqJmwFamKDbbBJKPET+PFvrAJ7A9O89HbqBYSQF3saENFADB7 TAw+Ft40vIR3Z7SaNhi2jQYCmbAf88QjDn6X/wx1WgG2o5YbRsJQaNKXmkDhntWF 9V9+kmTCNjIE9V++CdfroIcGaeR51Mqpuzdm9LRGy5Gbp9sFp8FiqaWMdQPW1nTe p7KyMnLKP16vaSmRVKsGPtaX6B8DNlCl -----END CERTIFICATE-----Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org