$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json) Hash identifier: ktlw5pMJ+TeNeMihbCLxblHQ6XX+yNxHMlih8XzdlF4= Subject key identifier: A1:02:73:64:40:70:C6:A8:F0:05:31:03:46:52:5A:1A:25:51:89:7C Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft Manifest number: 087E Signing time: Mon 06 May 2024 21:42:43 +0000 Manifest this update: Mon 06 May 2024 21:42:43 +0000 Manifest next update: Mon 13 May 2024 21:42:43 +0000 Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: hXLtpx1CA/lTTlaJE8hACAExNugweqtVNKKvMybYthc=) 2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: 6ka+anrAZuDwvYkDqguq9yKal0r9GRDduYlXVYx/bRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: May 6 21:42:43 2024 GMT Not After : May 13 21:42:43 2024 GMT Subject: CN=66394ed3-b9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fa:2e:03:4e:71:e6:d3:c8:ea:d6:17:a9:60: 90:32:42:9b:a7:b6:fe:86:88:46:be:e8:9b:92:04: d9:75:a3:e8:25:22:6a:7e:ec:eb:93:d7:ad:55:d2: f1:2d:d3:0b:ec:7f:eb:52:7f:c7:7e:8d:6b:13:9c: 41:19:9f:08:bc:5e:81:41:1f:0a:6f:4d:be:31:8f: ca:e3:39:2f:6c:a4:6f:17:fe:d9:62:a9:7e:a1:a5: 20:4d:f5:7f:5d:d3:c7:ec:9b:2e:de:35:51:5b:3a: 42:16:e6:de:23:40:1c:5c:88:ad:fc:a1:0f:07:19: 8e:89:2e:84:78:36:02:83:0b:2f:16:12:36:b8:e9: 94:c5:63:0d:88:5d:a7:c9:7c:30:62:d2:9d:53:63: f8:d3:0b:74:10:d4:21:02:9b:ee:cf:25:5e:f1:d1: 21:e2:14:d8:dd:4f:89:2a:0a:38:cd:d7:fe:ac:ac: cd:e5:dc:86:13:dc:76:93:4a:0d:a1:47:81:bc:5f: 95:a6:b7:7e:9f:c3:30:f7:c0:e7:7c:35:b8:b5:71: e1:06:da:80:55:9e:b7:33:70:f6:4b:c3:e9:b3:f1: ad:f0:1a:54:e2:a4:35:cb:a8:ad:e3:c6:9b:4e:75: e0:c3:c8:7c:c8:c0:2d:74:6a:ef:eb:84:17:a1:31: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:02:73:64:40:70:C6:A8:F0:05:31:03:46:52:5A:1A:25:51:89:7C X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c2:d8:59:f6:88:88:cf:72:c8:73:52:c9:35:1d:93:90:0e: de:42:f2:b0:af:71:01:db:43:bd:73:f7:dd:dd:d7:d4:b3:2c: 85:80:be:8e:07:f8:69:b0:59:98:a8:d1:22:ff:3a:ca:e5:17: 2b:63:18:2c:8e:6c:a3:a7:29:17:d1:45:be:22:45:aa:11:7b: 1f:1e:43:76:97:81:d1:1b:5c:d2:c6:d4:c7:2f:5a:5a:65:26: 86:0b:45:cb:10:6b:85:09:93:ae:7e:88:83:7b:7c:c9:dd:d8: f6:76:8e:73:d2:41:65:75:39:8e:57:96:f6:23:6a:44:1d:6d: a4:8f:71:6c:e5:30:e0:67:be:4f:ba:05:37:20:93:dc:0a:d2: 36:1f:78:27:11:6a:89:f0:e1:ba:9f:6c:12:ea:0b:df:48:b5: 3c:d3:18:99:4b:6d:fd:c2:a8:4f:01:62:5e:2a:a5:98:1b:16: 00:c4:ad:2f:50:b3:57:3a:d1:bd:ae:d4:47:8d:45:83:16:f7: 34:ce:2d:df:a8:f0:95:05:6a:56:59:cc:a1:cf:47:99:2a:57: f5:a3:0b:74:97:5f:20:24:77:e5:34:4b:f0:5f:ab:14:3f:8f: 6b:05:6a:96:a8:84:2e:4c:e0:b0:cf:f8:6f:48:30:49:1a:5c: fd:c3:f2:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjQwNTA2MjE0MjQzWhcNMjQwNTEzMjE0MjQzWjAYMRYwFAYD VQQDEw02NjM5NGVkMy1iOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/ouA05x5tPI6tYXqWCQMkKbp7b+hohGvuibkgTZdaPoJSJqfuzrk9etVdLx LdML7H/rUn/Hfo1rE5xBGZ8IvF6BQR8Kb02+MY/K4zkvbKRvF/7ZYql+oaUgTfV/ XdPH7Jsu3jVRWzpCFubeI0AcXIit/KEPBxmOiS6EeDYCgwsvFhI2uOmUxWMNiF2n yXwwYtKdU2P40wt0ENQhApvuzyVe8dEh4hTY3U+JKgo4zdf+rKzN5dyGE9x2k0oN oUeBvF+Vprd+n8Mw98DnfDW4tXHhBtqAVZ63M3D2S8Pps/Gt8BpU4qQ1y6it48ab TnXgw8h8yMAtdGrv64QXoTFG5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKECc2RA cMao8AUxA0ZSWholUYl8MB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj N0FiVE9aU1JXSHBJSlpITHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkwthZ9oiIz3LIc1LJNR2TkA7eQvKwr3EB20O9c/fd3dfUsyyFgL6O B/hpsFmYqNEi/zrK5RcrYxgsjmyjpykX0UW+IkWqEXsfHkN2l4HRG1zSxtTHL1pa ZSaGC0XLEGuFCZOufoiDe3zJ3dj2do5z0kFldTmOV5b2I2pEHW2kj3Fs5TDgZ75P ugU3IJPcCtI2H3gnEWqJ8OG6n2wS6gvfSLU80xiZS239wqhPAWJeKqWYGxYAxK0v ULNXOtG9rtRHjUWDFvc0zi3fqPCVBWpWWcyhz0eZKlf1owt0l18gJHflNEvwX6sU P49rBWqWqIQuTOCwz/hvSDBJGlz9w/KX -----END CERTIFICATE-----Generated at Mon May 6 22:40:53 2024 by rpki-client on console-ams.rpki-client.org