$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft File: TihN8oxlIKdxEwQV85PINH1ubek.mft (raw, json) Hash identifier: JbjTc7RGWsxcqBeepl29Y78HSske/l1oESAg0TmmIAo= Subject key identifier: 3A:E9:2D:97:63:7E:D8:60:F2:66:6B:33:E4:85:7F:1A:95:21:AC:93 Authority key identifier: 4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9 Certificate issuer: /CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9 Certificate serial: 1D7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft Manifest number: 1D75 Signing time: Sat 18 May 2024 16:28:18 +0000 Manifest this update: Sat 18 May 2024 16:28:18 +0000 Manifest next update: Sat 25 May 2024 16:28:18 +0000 Files and hashes: 1: TihN8oxlIKdxEwQV85PINH1ubek.crl (hash: 60yM1FjgL7Jpr+4ybIPWg9X9uvHj2rZc8X/2hmeLGTM=) 2: 9071A5E690CB11E6A804EF84C4F9AE02.roa (hash: ruVgrGKXbrrrPmrpNQkG+dlO1fJg2p5pHhv0e/zgj3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7549 (0x1d7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC765/serialNumber=4E284DF28C6520A771130415F393C8347D6E6DE9 Validity Not Before: May 18 16:28:18 2024 GMT Not After : May 25 16:28:18 2024 GMT Subject: CN=6648d722-4478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:41:42:b3:c8:5b:57:ce:c7:f9:a9:16:ee: 94:e4:41:d5:d3:7c:e0:65:b9:a0:ec:c7:1a:53:76: b0:65:b8:d0:3d:fd:68:3f:c0:18:57:14:c9:13:86: 62:9f:84:62:f2:35:d7:58:61:c9:5f:a5:90:d4:89: 4d:5a:d7:82:7b:f8:15:06:1e:3e:76:c2:53:ab:16: 84:8a:ad:bc:6e:46:3d:8c:ae:6f:dd:8f:fa:f2:6d: 00:14:8a:0b:f8:f6:ca:97:3b:eb:28:b6:ad:26:d0: 40:f7:91:b8:89:58:79:ac:41:54:21:7c:56:96:58: d7:71:59:94:cd:00:11:4b:5a:90:dd:13:e8:53:5e: eb:84:52:32:3b:3f:6d:4b:15:cc:38:3a:1e:28:f2: 25:d3:e8:9c:05:e4:e4:74:80:e6:15:ed:2c:41:76: 37:1b:7d:cd:e2:1a:fd:51:33:f0:a5:f6:4a:1c:ea: c9:01:83:53:2e:72:e0:73:03:3b:80:b2:17:9f:06: 4d:8d:94:55:a5:1d:80:65:8a:69:eb:fd:b1:1e:ed: 98:ff:60:01:9e:2f:12:a2:96:d9:53:25:a1:7a:6f: 46:25:78:3c:8d:98:3f:3b:4f:5f:54:c4:4f:93:44: c6:cc:f5:12:87:cf:79:05:0c:6c:82:5d:c8:36:aa: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E9:2D:97:63:7E:D8:60:F2:66:6B:33:E4:85:7F:1A:95:21:AC:93 X509v3 Authority Key Identifier: keyid:4E:28:4D:F2:8C:65:20:A7:71:13:04:15:F3:93:C8:34:7D:6E:6D:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TihN8oxlIKdxEwQV85PINH1ubek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC765/E5C74BAA7F8111E6898E5F45C4F9AE02/TihN8oxlIKdxEwQV85PINH1ubek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e6:b3:74:ab:2a:56:61:d9:ad:69:f2:b2:30:b2:e2:c7:37: 9d:19:d8:ef:75:a5:03:2a:97:21:64:94:9b:77:30:dc:39:d4: 9c:a5:8a:06:43:e3:31:e2:7c:56:8b:44:2a:22:93:78:0e:97: 06:11:f5:b5:7d:2c:7c:d9:ed:50:c1:1d:80:87:3e:dd:9e:16: 85:03:77:18:2c:99:c3:00:31:db:bf:04:d3:f8:e4:10:b8:6e: 16:04:4a:58:11:7d:bd:20:2b:c2:17:7d:7d:77:3e:1c:d7:06: bb:f4:8b:55:5f:b7:fe:41:9a:84:5d:8b:23:c3:31:49:9e:98: f0:0c:5a:05:88:4d:cc:11:bc:32:3b:a3:cf:d9:2f:b2:43:e1: f4:ea:72:e7:79:c9:63:58:3a:95:9c:38:b0:9f:66:43:a2:6f: 87:4b:2f:7c:13:cb:44:9e:93:c6:8b:0b:c4:e6:c1:b8:0c:87: 9a:a8:4a:9f:9a:74:f2:56:ee:f3:c9:e5:66:36:74:99:1c:1d: 1a:73:86:34:c4:e5:d5:8c:dc:90:24:3a:9e:a9:2a:cf:0c:cd: 88:b5:3b:90:97:fa:1d:28:80:f4:49:98:ed:38:4b:25:85:7b: 8a:7a:ea:e6:a1:bd:9f:14:0a:b4:a7:9d:50:68:07:67:e4:54: c8:ae:f6:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3NjUxMTAvBgNVBAUTKDRFMjg0REYyOEM2NTIwQTc3MTEzMDQxNUYzOTNDODM0 N0Q2RTZERTkwHhcNMjQwNTE4MTYyODE4WhcNMjQwNTI1MTYyODE4WjAYMRYwFAYD VQQDEw02NjQ4ZDcyMi00NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcVBQrPIW1fOx/mpFu6U5EHV03zgZbmg7McaU3awZbjQPf1oP8AYVxTJE4Zi n4Ri8jXXWGHJX6WQ1IlNWteCe/gVBh4+dsJTqxaEiq28bkY9jK5v3Y/68m0AFIoL +PbKlzvrKLatJtBA95G4iVh5rEFUIXxWlljXcVmUzQARS1qQ3RPoU17rhFIyOz9t SxXMODoeKPIl0+icBeTkdIDmFe0sQXY3G33N4hr9UTPwpfZKHOrJAYNTLnLgcwM7 gLIXnwZNjZRVpR2AZYpp6/2xHu2Y/2ABni8SopbZUyWhem9GJXg8jZg/O09fVMRP k0TGzPUSh895BQxsgl3INqot+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrpLZdj fthg8mZrM+SFfxqVIayTMB8GA1UdIwQYMBaAFE4oTfKMZSCncRMEFfOTyDR9bm3p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc2NS9FNUM3NEJBQTdG ODExMUU2ODk4RTVGNDVDNEY5QUUwMi9UaWhOOG94bElLZHhFd1FWODVQSU5IMXVi ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpaE44b3hsSUtkeEV3UVY4NVBJTkgxdWJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzc2NS9FNUM3NEJBQTdGODExMUU2ODk4RTVGNDVDNEY5QUUwMi9UaWhOOG94bElL ZHhFd1FWODVQSU5IMXViZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG5rN0qypWYdmtafKyMLLixzedGdjvdaUDKpchZJSbdzDcOdScpYoG Q+Mx4nxWi0QqIpN4DpcGEfW1fSx82e1QwR2Ahz7dnhaFA3cYLJnDADHbvwTT+OQQ uG4WBEpYEX29ICvCF319dz4c1wa79ItVX7f+QZqEXYsjwzFJnpjwDFoFiE3MEbwy O6PP2S+yQ+H06nLnecljWDqVnDiwn2ZDom+HSy98E8tEnpPGiwvE5sG4DIeaqEqf mnTyVu7zyeVmNnSZHB0ac4Y0xOXVjNyQJDqeqSrPDM2ItTuQl/odKID0SZjtOEsl hXuKeurmob2fFAq0p51QaAdn5FTIrvZh -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org