$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: FQZfHvTqM+Ss5noHergqX1UNvzVmp+/Q50HDWUPNyRY= Subject key identifier: 34:CB:63:26:2D:80:4A:F8:BB:B2:BF:5D:C0:FC:11:88:8D:21:F5:D8 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 026F Signing time: Fri 17 May 2024 03:52:08 +0000 Manifest this update: Fri 17 May 2024 03:52:08 +0000 Manifest next update: Fri 24 May 2024 03:52:08 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: IxsDiXl7GnA5V553znzQ3K7UQmg37N2bgc7QBy9EUEE=) 2: D6A35008C53811ECB4EAFD1AC4F9AE02.roa (hash: 2X0d3XaRVlyEv6o6Oz6Zuu3w3Y7KES84+qdWvzxEZqU=) 3: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: YkXY2G5nfceribQOD7X+MmmAaaINrn8ptZy+JVJffag=) 4: D4D3CCDAC53811ECB4EAFD1AC4F9AE02.roa (hash: y5qT01H1BREmYiDlGr8J+8ElXF3KvSh7J+XIUQSF/hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: May 17 03:52:08 2024 GMT Not After : May 24 03:52:08 2024 GMT Subject: CN=6646d468-c1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ad:48:23:22:25:88:27:b6:bf:ad:0a:61:39: 61:c3:71:f0:8f:75:b4:5d:20:89:91:63:78:4f:53: d3:2c:01:30:31:cd:c6:99:4d:54:82:68:1c:26:46: bb:f3:04:a1:8b:93:cf:f5:36:3a:1e:bf:e3:82:1c: 22:af:50:7e:5f:91:e7:4d:87:37:e1:f2:9f:ee:f7: f5:82:bf:b2:8b:8f:2c:ff:ab:72:f8:79:67:5e:d9: 24:66:db:4f:96:4e:56:40:23:9e:ab:c3:db:42:3e: 04:d7:1f:4e:b8:b8:6d:82:45:d7:70:2f:e8:2a:a1: d8:75:20:ad:b8:20:4a:1f:76:8d:fa:25:3d:a5:f5: f9:23:5f:7a:03:31:35:3b:9b:6f:78:31:e7:bb:02: 52:61:5a:bb:4c:ec:0e:0a:1b:b4:c1:63:52:e0:ec: 3f:46:80:54:95:f3:20:27:8a:50:b4:d6:49:61:09: 48:8a:2b:6f:7c:6a:13:86:22:08:ce:e3:e0:f4:cc: 8a:ed:2e:6c:9d:a7:e8:2d:ec:43:c8:c9:df:ba:1a: a4:6f:03:2c:b8:1f:bb:10:27:c1:d6:92:41:ac:d8: 34:12:35:36:d6:5c:68:11:cc:28:53:95:3f:c5:89: e6:df:54:53:81:cf:8c:61:bc:b9:04:b6:78:1f:27: f1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CB:63:26:2D:80:4A:F8:BB:B2:BF:5D:C0:FC:11:88:8D:21:F5:D8 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0a:06:a3:62:69:94:a2:7e:8e:ee:32:4e:2d:3e:0e:10:a3: e0:3c:5b:02:53:43:90:23:c8:ec:74:3a:6e:67:6b:b4:0c:bc: c4:e3:24:ce:d0:02:98:ef:49:23:48:20:6c:31:7c:2c:bd:0d: 19:e6:2c:2e:48:04:2e:d3:81:78:dd:66:c1:d0:2b:ca:6a:bf: 0c:14:89:16:97:98:95:2b:70:e1:44:92:b6:53:06:ca:25:7c: 5d:0d:d2:78:ec:98:a6:f2:3f:fb:df:f9:e5:a7:c6:9c:95:d5: d5:77:4c:06:ff:01:d5:30:ed:70:e5:21:2f:3c:17:71:2d:21: 87:fc:8a:86:2d:24:25:4a:5e:3a:fa:a4:c1:ed:ba:4e:21:62: 45:3f:97:32:70:be:d8:f8:30:88:ee:5d:75:63:91:59:75:5f: c7:fc:d2:fb:2d:08:d7:a7:2d:62:7d:7d:fb:a4:be:f2:bb:89: 0d:b1:63:47:e5:ee:a7:ae:7b:90:66:a3:4d:a6:09:df:39:8d: b4:9d:a9:de:da:ac:45:c1:48:48:f7:c8:0f:9a:31:35:36:f9: bf:3c:4a:82:7a:72:65:d5:b7:6a:e4:b4:d1:6e:92:9a:c0:38: 8e:72:f8:5a:72:f0:c6:b1:48:2c:4f:ec:f8:d7:ec:34:81:12: 81:76:9d:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjQwNTE3MDM1MjA4WhcNMjQwNTI0MDM1MjA4WjAYMRYwFAYD VQQDEw02NjQ2ZDQ2OC1jMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA761IIyIliCe2v60KYTlhw3Hwj3W0XSCJkWN4T1PTLAEwMc3GmU1UgmgcJka7 8wShi5PP9TY6Hr/jghwir1B+X5HnTYc34fKf7vf1gr+yi48s/6ty+HlnXtkkZttP lk5WQCOeq8PbQj4E1x9OuLhtgkXXcC/oKqHYdSCtuCBKH3aN+iU9pfX5I196AzE1 O5tveDHnuwJSYVq7TOwOChu0wWNS4Ow/RoBUlfMgJ4pQtNZJYQlIiitvfGoThiII zuPg9MyK7S5snafoLexDyMnfuhqkbwMsuB+7ECfB1pJBrNg0EjU21lxoEcwoU5U/ xYnm31RTgc+MYby5BLZ4HyfxmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTLYyYt gEr4u7K/XcD8EYiNIfXYMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRCgajYmmUon6O7jJOLT4OEKPgPFsCU0OQI8jsdDpuZ2u0DLzE4yTO 0AKY70kjSCBsMXwsvQ0Z5iwuSAQu04F43WbB0CvKar8MFIkWl5iVK3DhRJK2UwbK JXxdDdJ47Jim8j/73/nlp8acldXVd0wG/wHVMO1w5SEvPBdxLSGH/IqGLSQlSl46 +qTB7bpOIWJFP5cycL7Y+DCI7l11Y5FZdV/H/NL7LQjXpy1ifX37pL7yu4kNsWNH 5e6nrnuQZqNNpgnfOY20nane2qxFwUhI98gPmjE1Nvm/PEqCenJl1bdq5LTRbpKa wDiOcvhacvDGsUgsT+z41+w0gRKBdp0+ -----END CERTIFICATE-----Generated at Fri May 17 04:44:33 2024 by rpki-client on console-ams.rpki-client.org