$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: KqgFV2KOvzQTFkxPFrMJpFXPeN/0qvvpr2Ek2N4WoF8= Subject key identifier: 91:B5:17:40:C7:8B:65:CA:E2:1B:C8:D4:D7:D8:B2:B4:45:49:12:0A Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 82 Signing time: Sun 19 May 2024 07:11:13 +0000 Manifest this update: Sun 19 May 2024 07:11:13 +0000 Manifest next update: Sun 26 May 2024 07:11:13 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: CucVsIeFz8dmP4WgVpTDtSqaZgYQwxkBrQX/nuWtrsk=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: Iz3zUvxtHSNWZfpL5BCeiQjySJjNZ9tgs9jYAv22K5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: May 19 07:11:13 2024 GMT Not After : May 26 07:11:13 2024 GMT Subject: CN=6649a611-165d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:12:a8:b7:c1:cd:78:67:7d:03:53:f9:92: 14:9d:33:26:8d:8b:f0:c1:2a:39:4b:69:77:d1:31: 7e:9a:57:9d:c2:c6:4c:48:3b:20:d5:59:5e:f5:5c: 50:80:6c:ba:29:76:fd:15:9d:88:f3:8c:5e:66:00: cf:fc:67:0c:a9:2d:7d:33:b9:72:17:4b:ce:d8:bc: e4:f0:f8:c9:89:ca:27:b3:39:58:24:80:49:7a:7f: fa:c3:11:fa:3e:60:80:cb:d0:c2:c3:eb:52:1d:5c: 4e:60:e0:d9:5d:e4:8b:ea:95:a3:e0:01:d8:8d:bf: 2f:d2:e0:03:fb:7b:d2:49:94:40:99:e2:57:e3:32: 76:56:b3:be:8e:e5:39:3c:fd:59:2b:8c:0b:66:53: 94:44:8d:2f:bf:5a:ac:31:03:e5:b8:dd:f2:03:11: 8f:79:1f:dc:d3:d0:33:86:06:2a:d5:b7:de:a3:83: 47:d3:e5:0a:27:c0:3f:b4:81:8c:82:dd:3c:39:15: a9:f3:f2:3d:df:96:90:52:85:91:05:63:f7:cd:53: 62:f1:41:e4:f9:ab:3b:cd:09:81:51:b8:e4:7c:b6: 6a:e3:33:7e:33:67:73:1d:f2:d5:90:79:db:52:ba: a4:a4:0e:86:e1:46:f8:14:43:d3:0f:b4:f7:81:fd: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B5:17:40:C7:8B:65:CA:E2:1B:C8:D4:D7:D8:B2:B4:45:49:12:0A X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:0b:e2:24:b5:11:a3:2b:fd:26:72:25:a9:c9:d2:2a:3a:52: 49:94:48:4b:d5:20:00:8a:b2:b3:b0:3f:e8:ce:35:38:41:62: a1:f7:c3:f7:32:12:cf:33:4f:01:d9:88:e4:dd:46:cd:a9:3e: 29:12:6c:84:f1:46:e6:18:db:49:a9:14:56:3b:ec:04:16:99: 38:30:10:92:63:f4:0c:c7:24:24:d8:5d:27:c1:aa:63:56:8e: da:06:97:f5:ef:3c:5f:2c:99:46:2b:59:48:0d:c9:e4:eb:ab: f4:0c:69:52:28:90:20:f6:fb:52:ba:2c:b6:4c:42:58:9e:ac: e3:95:74:d8:71:3c:88:99:be:6b:43:7a:8e:f8:80:b3:1b:b3: 37:0a:e1:5e:28:31:c9:a1:82:c3:70:ab:25:8f:67:13:6a:b2: c8:92:e6:6f:00:65:3e:1c:77:f8:3a:78:68:2c:24:8d:6c:8e: 01:2d:ef:2d:39:2e:b3:45:b7:5a:02:36:69:d5:ad:fe:80:8e: 27:e5:2b:12:93:3f:9e:e0:7f:37:9b:10:a4:6e:63:23:85:c2: a5:d6:1e:22:c3:d6:a8:19:6f:e0:9a:d5:b6:62:3d:e0:61:90: 35:ab:03:2d:f6:7c:da:56:5a:58:98:50:d3:74:3c:c1:dd:05: b9:8e:d9:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjQwNTE5MDcxMTEzWhcNMjQwNTI2MDcxMTEzWjAYMRYwFAYD VQQDEw02NjQ5YTYxMS0xNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBYSqLfBzXhnfQNT+ZIUnTMmjYvwwSo5S2l30TF+mledwsZMSDsg1Vle9VxQ gGy6KXb9FZ2I84xeZgDP/GcMqS19M7lyF0vO2Lzk8PjJiconszlYJIBJen/6wxH6 PmCAy9DCw+tSHVxOYODZXeSL6pWj4AHYjb8v0uAD+3vSSZRAmeJX4zJ2VrO+juU5 PP1ZK4wLZlOURI0vv1qsMQPluN3yAxGPeR/c09AzhgYq1bfeo4NH0+UKJ8A/tIGM gt08ORWp8/I935aQUoWRBWP3zVNi8UHk+as7zQmBUbjkfLZq4zN+M2dzHfLVkHnb UrqkpA6G4Ub4FEPTD7T3gf0WjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG1F0DH i2XK4hvI1NfYsrRFSRIKMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbC+IktRGjK/0mciWpydIqOlJJlEhL1SAAirKzsD/ozjU4QWKh98P3 MhLPM08B2Yjk3UbNqT4pEmyE8UbmGNtJqRRWO+wEFpk4MBCSY/QMxyQk2F0nwapj Vo7aBpf17zxfLJlGK1lIDcnk66v0DGlSKJAg9vtSuiy2TEJYnqzjlXTYcTyImb5r Q3qO+ICzG7M3CuFeKDHJoYLDcKslj2cTarLIkuZvAGU+HHf4OnhoLCSNbI4BLe8t OS6zRbdaAjZp1a3+gI4n5SsSkz+e4H83mxCkbmMjhcKl1h4iw9aoGW/gmtW2Yj3g YZA1qwMt9nzaVlpYmFDTdDzB3QW5jtlT -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org