$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: OOPj0kM1gNou7BM17lO4uBY2d7Gq9qvUeW9yYCseFP0= Subject key identifier: F1:7E:E6:3B:5E:0B:6A:58:A9:A3:FE:AA:D4:7C:9A:15:D5:7B:86:F9 Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 02D0 Signing time: Sun 19 May 2024 03:25:08 +0000 Manifest this update: Sun 19 May 2024 03:25:07 +0000 Manifest next update: Sun 26 May 2024 03:25:07 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: XXxK/tAQdDm+DWf4vpjad555NNEnqUlj5ttrp9/n7g4=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: 8HFiuoEkuOCg+QdpD10PuBQC+1LXfTtw3kiyaOdbRTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: May 19 03:25:07 2024 GMT Not After : May 26 03:25:07 2024 GMT Subject: CN=66497113-b946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c9:05:a1:48:29:78:19:59:0e:4a:4b:45:85: 35:7a:49:1e:9a:6a:61:c0:59:2c:5d:24:78:68:1f: 80:36:7b:4c:b1:ab:24:d1:25:bc:6d:e9:ce:56:52: 84:f2:06:bd:a9:ea:cf:05:b5:ef:11:de:11:c1:d9: 0d:50:41:d4:b5:22:ff:7d:5a:8c:0a:92:48:60:ce: 95:6b:50:75:12:5b:22:64:83:7d:76:be:f0:aa:f4: de:4a:57:b0:22:8b:83:44:26:21:fd:6b:76:22:ff: ac:4a:63:65:4a:f4:bd:a4:ba:45:51:c8:00:a1:71: 24:0b:64:19:5b:f3:05:22:16:3c:23:b0:ac:95:56: 61:0f:6c:58:10:c8:7a:89:c5:97:f0:92:65:73:b7: 9f:2f:ab:0d:6a:74:9f:d4:90:f5:cd:48:60:29:06: 99:ff:2a:0f:7a:98:88:df:0a:56:53:c9:b0:ba:f2: 14:9c:11:f4:92:1a:00:01:bc:10:90:96:ea:65:8a: c5:1d:82:03:35:0b:7e:39:3d:d2:b8:7a:c6:98:a4: fc:4d:cf:c4:0d:4e:31:d4:e2:09:99:15:80:0a:bd: 0d:4a:27:67:dc:73:a6:d9:c9:e0:a4:46:b4:f7:ba: 37:f5:63:8d:c1:61:2c:79:e2:f8:07:1a:e0:41:03: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7E:E6:3B:5E:0B:6A:58:A9:A3:FE:AA:D4:7C:9A:15:D5:7B:86:F9 X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e1:75:76:0d:ce:01:e4:7b:5b:91:86:fe:59:4c:1c:2c:e3: a1:ca:25:4c:87:91:3d:ef:76:87:00:75:5c:96:48:c8:ba:60: 40:06:f9:6d:fe:56:28:ab:9e:b9:45:d8:7c:37:f1:8a:ee:0c: fa:d5:b5:ce:f4:ea:d1:e7:ee:dc:13:50:60:c2:ad:7c:b4:2e: 3e:2a:76:4b:4b:0a:45:35:11:e7:e8:58:c6:b1:0a:ff:da:22: f6:10:ee:cf:9a:bb:bd:0c:ae:80:97:21:28:fc:8c:e9:bf:76: 92:67:c1:ab:c6:67:1d:cc:25:c2:2f:88:4f:a0:c7:c7:2c:92: 2d:cf:b6:9f:bc:d1:9d:af:0b:ca:bf:d3:30:e6:5e:ba:a3:a6: ac:07:ab:f6:2b:05:ba:ee:44:95:52:e1:c7:c4:68:d0:c0:fa: b5:47:ba:65:4c:95:bb:c7:d3:f8:64:8b:47:78:be:2d:1e:4f: 54:4b:14:75:30:7a:8c:d3:f5:2e:bf:00:6e:bb:43:fb:31:9c: 3f:a6:d0:fd:d2:1d:6a:12:5a:28:95:37:ff:cf:6c:d1:3f:9d: 2e:ae:6e:50:55:b7:58:25:7c:ed:40:08:ec:39:0f:48:9d:32: ac:23:bc:ad:de:20:18:e0:ae:ab:58:bb:73:97:01:ff:27:f5: 00:b2:19:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjQwNTE5MDMyNTA3WhcNMjQwNTI2MDMyNTA3WjAYMRYwFAYD VQQDEw02NjQ5NzExMy1iOTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2skFoUgpeBlZDkpLRYU1ekkemmphwFksXSR4aB+ANntMsask0SW8benOVlKE 8ga9qerPBbXvEd4RwdkNUEHUtSL/fVqMCpJIYM6Va1B1ElsiZIN9dr7wqvTeSlew IouDRCYh/Wt2Iv+sSmNlSvS9pLpFUcgAoXEkC2QZW/MFIhY8I7CslVZhD2xYEMh6 icWX8JJlc7efL6sNanSf1JD1zUhgKQaZ/yoPepiI3wpWU8mwuvIUnBH0khoAAbwQ kJbqZYrFHYIDNQt+OT3SuHrGmKT8Tc/EDU4x1OIJmRWACr0NSidn3HOm2cngpEa0 97o39WONwWEseeL4BxrgQQNdPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF+5jte C2pYqaP+qtR8mhXVe4b5MB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU4XV2Dc4B5HtbkYb+WUwcLOOhyiVMh5E973aHAHVclkjIumBABvlt /lYoq565Rdh8N/GK7gz61bXO9OrR5+7cE1Bgwq18tC4+KnZLSwpFNRHn6FjGsQr/ 2iL2EO7Pmru9DK6AlyEo/Izpv3aSZ8GrxmcdzCXCL4hPoMfHLJItz7afvNGdrwvK v9Mw5l66o6asB6v2KwW67kSVUuHHxGjQwPq1R7plTJW7x9P4ZItHeL4tHk9USxR1 MHqM0/UuvwBuu0P7MZw/ptD90h1qEloolTf/z2zRP50urm5QVbdYJXztQAjsOQ9I nTKsI7yt3iAY4K6rWLtzlwH/J/UAshnQ -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org