$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft File: T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json) Hash identifier: hC7IpmiT+9ie9w94omz2j3mCZliKcIrvn/4t/nAUaXg= Subject key identifier: 82:EE:31:C5:57:12:50:7F:89:31:CF:E1:DD:58:40:A2:FD:8D:85:EF Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft Manifest number: 026C Signing time: Sun 19 May 2024 03:56:08 +0000 Manifest this update: Sun 19 May 2024 03:56:07 +0000 Manifest next update: Sun 26 May 2024 03:56:07 +0000 Files and hashes: 1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: qeN2lxKolO2EYJYIRA7EjyhAkIwHcDjC6yq8jrFotDA=) 2: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: SgfmGbt/pVlUZQRnydWSm6SNx69E4NNPlawKjjfJINc=) 3: A79DC338E2ED11EC92DF2511C4F9AE02.roa (hash: jWnPlqM2E3SOIYzt5WQ5+wk3HRS9QrsRW7iiYnWEKXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B Validity Not Before: May 19 03:56:07 2024 GMT Not After : May 26 03:56:07 2024 GMT Subject: CN=66497858-b0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1f:d4:50:4a:2a:96:e4:6f:13:3b:e6:52:2a: 93:9f:79:50:ec:21:49:0e:a3:f8:c3:99:e6:2c:3b: 95:7a:b6:ea:d5:53:a7:41:39:22:df:3d:92:f2:11: a1:f7:c0:c7:a3:eb:bd:f4:cc:b4:01:a1:9c:89:17: fb:e8:ac:af:c3:4c:ff:16:da:7a:17:cf:18:5c:af: ba:c4:a2:26:77:70:35:d4:de:c3:40:00:ee:1f:6f: 67:04:41:2b:2d:20:a0:c7:40:8e:04:84:cb:1f:61: 78:e7:45:82:9a:03:89:61:d5:cf:33:77:5b:38:55: 60:96:99:67:9f:7a:de:3e:9a:43:03:99:b0:2d:7e: 40:94:5b:c5:5c:a9:ab:f9:3e:1b:89:a9:f9:7f:37: 9e:23:c4:00:4e:5c:b9:b7:a1:f2:48:4a:cf:86:da: 7e:91:38:ac:1f:7a:7b:7b:6e:55:e7:f5:07:cc:a8: fa:75:13:f9:70:af:a4:e1:94:67:ed:6b:b2:be:37: d0:0d:80:3c:9d:07:9d:4e:24:3c:7d:a8:e5:c0:b4: 51:aa:90:30:36:3a:e6:4e:93:34:65:b4:fd:e9:26: 5e:b9:80:54:2c:bc:0a:3c:78:49:32:e9:d9:8a:5d: af:ee:23:46:75:1f:d3:14:51:4c:98:86:aa:29:fa: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EE:31:C5:57:12:50:7F:89:31:CF:E1:DD:58:40:A2:FD:8D:85:EF X509v3 Authority Key Identifier: keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a4:7e:6b:4c:03:19:7e:8a:ec:90:22:aa:3a:9e:85:39:8d: 1e:23:00:f7:02:6a:6d:18:e3:82:2c:e9:7a:b6:da:ad:c5:a9: 53:34:91:ee:1d:83:44:94:1d:60:f2:13:04:4b:4b:a0:7e:01: 77:80:b5:fb:4a:cf:1e:e4:33:f6:02:5d:96:0a:73:16:32:bb: c8:6e:0b:d8:1e:08:38:ec:a6:7e:61:6b:44:8d:15:23:33:0f: 90:66:31:6b:fa:4e:a5:c9:f6:e9:7f:3e:8b:94:9d:d4:9a:0e: 47:25:0e:06:d1:69:e0:02:86:c8:41:a1:af:e3:d5:6e:aa:01: 73:4d:a7:61:37:7c:62:be:e3:b4:e7:12:24:f6:e2:6c:bd:c2: f4:a6:aa:e5:1f:16:74:68:1e:c7:d0:e8:38:b2:44:9b:7f:d9: 36:7c:10:07:7d:bf:e7:b5:f1:37:47:f1:81:b8:5c:38:12:ff: 21:bf:53:e2:e5:34:ec:af:ac:64:b7:67:de:27:ac:8d:e0:1e: 37:79:29:3b:12:32:63:e1:c6:42:a7:16:12:73:08:3a:a9:e0: 33:c8:96:84:c8:6b:39:92:e1:c5:cc:7d:39:2c:54:85:5d:70: 3f:d8:6f:c2:dd:99:d0:b3:a2:e5:aa:3f:c6:f5:01:b5:b2:68: d1:4f:2e:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKDRGRjUyODQ3MjE1QzRBMjJFOUYxMTQ5RTZDQkZFREY3 NEQ2MUNFOEIwHhcNMjQwNTE5MDM1NjA3WhcNMjQwNTI2MDM1NjA3WjAYMRYwFAYD VQQDEw02NjQ5Nzg1OC1iMGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5B/UUEoqluRvEzvmUiqTn3lQ7CFJDqP4w5nmLDuVerbq1VOnQTki3z2S8hGh 98DHo+u99My0AaGciRf76Kyvw0z/Ftp6F88YXK+6xKImd3A11N7DQADuH29nBEEr LSCgx0COBITLH2F450WCmgOJYdXPM3dbOFVglplnn3rePppDA5mwLX5AlFvFXKmr +T4bian5fzeeI8QATly5t6HySErPhtp+kTisH3p7e25V5/UHzKj6dRP5cK+k4ZRn 7WuyvjfQDYA8nQedTiQ8fajlwLRRqpAwNjrmTpM0ZbT96SZeuYBULLwKPHhJMunZ il2v7iNGdR/TFFFMmIaqKfr5uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILuMcVX ElB/iTHP4d1YQKL9jYXvMB8GA1UdIwQYMBaAFE/1KEchXEoi6fEUnmy/7fdNYc6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xMTg3MDk3MkQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1NpTHA4UlNlYkxfdDkwMWh6 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RfVW9SeUZjU2lMcDhSU2ViTF90OTAxaHpvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xMTg3MDk3MkQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1Np THA4UlNlYkxfdDkwMWh6b3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmpH5rTAMZforskCKqOp6FOY0eIwD3AmptGOOCLOl6ttqtxalTNJHu HYNElB1g8hMES0ugfgF3gLX7Ss8e5DP2Al2WCnMWMrvIbgvYHgg47KZ+YWtEjRUj Mw+QZjFr+k6lyfbpfz6LlJ3Umg5HJQ4G0WngAobIQaGv49VuqgFzTadhN3xivuO0 5xIk9uJsvcL0pqrlHxZ0aB7H0Og4skSbf9k2fBAHfb/ntfE3R/GBuFw4Ev8hv1Pi 5TTsr6xkt2feJ6yN4B43eSk7EjJj4cZCpxYScwg6qeAzyJaEyGs5kuHFzH05LFSF XXA/2G/C3ZnQs6Llqj/G9QG1smjRTy7a -----END CERTIFICATE-----Generated at Sun May 19 04:22:06 2024 by rpki-client on console-fra.rpki-client.org