$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft File: ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json) Hash identifier: oohRLQ/PThI4Y8NqZw5OJ9qcehqWAb7+KtM5n5+9ppI= Subject key identifier: FE:BD:68:E6:9A:89:5C:58:A4:A5:E3:6A:6C:BD:5A:7F:13:38:4F:AD Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 263E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft Manifest number: 25EE Signing time: Mon 22 Apr 2024 16:01:13 +0000 Manifest this update: Mon 22 Apr 2024 16:01:12 +0000 Manifest next update: Mon 29 Apr 2024 16:01:12 +0000 Files and hashes: 1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: I87DSV2uu9VUAc54pS2wHhxSvVzOzHCJqoW2qNk1Dz4=) 2: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: +ZE35hE1fee8t/w4EyTvEErTR0iSR4qxpFkuVOGEQtY=) 3: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: trqgTWC4tB8OEFQCOyGU4o4Wfg1S5a/haJyZw5F9aCE=) 4: 8D7B467A09C211EB8B759828C4F9AE02.roa (hash: Hub9wrJJmDyKMBTqCIrJirgrMl2vMMlF3DeN/DXmEi4=) 5: 87E8DFF6F92F11ED85D65069C4F9AE02.roa (hash: NT92D4b/eTtPRk/YO5Ig+EAccGrbLie5mmU8RxYvlQY=) 6: 17E76F7A9EA811EC95EBD87CC4F9AE02.roa (hash: SOC6XE9By1QI4JQN2RyA705PCeM+wsTG+RoYjKvMyu4=) 7: F20038CA44A311E9AEF6F25AC4F9AE02.roa (hash: F/ivONbJr3Hl0IzBLzPbN2a637a+OHUkf5OpMaFrCmU=) 8: 1F8F28E09EB611EC8210607DC4F9AE02.roa (hash: plCH8iZKZP+zUrTUrIE/I46uWq093wgGrwTwyDX4pE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 16:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9790 (0x263e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: Apr 22 16:01:12 2024 GMT Not After : Apr 29 16:01:12 2024 GMT Subject: CN=662689c8-c4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:26:b2:3e:d3:71:db:9a:6c:1f:34:91:14: 73:4f:d6:4f:e0:c7:49:7b:de:a0:d2:a0:17:de:44: 47:76:90:68:3b:f9:79:df:e1:85:fb:f1:6e:7e:77: a0:b9:d0:fc:3f:19:6a:77:77:f0:05:b9:e9:0d:de: 97:79:bd:41:95:3e:8b:b5:1b:07:ad:3a:7f:a7:65: 3b:9e:a0:28:d3:9d:c0:a8:55:ef:63:6a:d2:09:4b: 82:c9:f0:8d:b7:d3:5c:97:3a:ae:c5:38:30:7d:ed: 8b:a4:64:38:31:fb:d2:fc:f7:f9:c0:99:d1:7d:98: ae:47:b8:7c:3b:fe:b0:51:d8:31:c1:31:42:25:2b: d8:69:ee:63:75:11:48:e9:ff:c7:d8:df:7d:23:7d: ff:86:e3:8f:ae:5e:9a:cf:d5:4f:fb:dd:a0:72:05: 75:50:c3:a7:7b:7d:50:5e:85:2c:49:f2:e8:f0:e0: 13:08:61:28:d6:91:35:cc:48:c4:19:31:82:0c:fa: cb:40:81:4b:02:9b:a7:f1:e7:21:39:47:ac:ca:25: a8:63:fa:1b:4c:d4:af:c8:4b:5b:43:ee:ff:eb:82: 27:53:37:b0:86:77:ee:99:10:f6:97:1b:1c:a3:18: 76:7b:9f:89:00:04:dc:00:0a:bc:08:bc:d9:bb:db: 70:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BD:68:E6:9A:89:5C:58:A4:A5:E3:6A:6C:BD:5A:7F:13:38:4F:AD X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fc:12:5d:59:f6:fc:4a:f2:e4:83:75:ed:02:ac:76:61:21: 39:50:26:76:8e:a4:16:18:fc:1c:e1:e4:73:db:07:da:25:94: 10:a1:55:fe:d4:39:a5:4c:9b:b0:86:82:6b:50:ac:a4:1d:22: 8d:d0:33:97:49:40:28:2c:83:c2:1c:b5:fa:16:0a:d7:65:19: 59:a7:7d:17:4e:8b:57:e0:39:4a:f5:d6:fb:9e:11:0d:22:bd: ef:f6:97:2e:3a:da:7c:c7:aa:d4:41:f1:7a:6e:22:43:0e:64: f8:90:14:54:b7:1e:dc:66:69:7e:59:6c:51:c0:74:55:18:75: 43:f7:fb:75:4b:eb:c5:8c:87:7b:9e:43:00:98:21:d7:56:a3: 35:1e:53:d0:5a:64:c2:dc:d7:cc:7f:d7:16:ff:a4:45:05:62: 48:0a:60:87:88:f7:33:05:d6:21:74:6f:25:a0:e4:47:50:07: f9:e0:d5:a0:0f:6f:44:4e:9f:58:16:0e:14:8a:ef:e7:77:58: ba:7b:08:60:e1:62:11:f8:a3:2a:d9:95:57:10:87:2a:20:7b: 38:8f:9e:eb:9d:e2:82:10:07:ad:0c:21:06:7f:c8:16:b2:46: cc:4b:3c:44:67:a6:29:6f:1a:e7:1c:f9:f1:b0:aa:6a:06:34: 44:7a:80:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjQwNDIyMTYwMTEyWhcNMjQwNDI5MTYwMTEyWjAYMRYwFAYD VQQDEw02NjI2ODljOC1jNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx14msj7TcduabB80kRRzT9ZP4MdJe96g0qAX3kRHdpBoO/l53+GF+/Fufneg udD8Pxlqd3fwBbnpDd6Xeb1BlT6LtRsHrTp/p2U7nqAo053AqFXvY2rSCUuCyfCN t9NclzquxTgwfe2LpGQ4MfvS/Pf5wJnRfZiuR7h8O/6wUdgxwTFCJSvYae5jdRFI 6f/H2N99I33/huOPrl6az9VP+92gcgV1UMOne31QXoUsSfLo8OATCGEo1pE1zEjE GTGCDPrLQIFLApun8echOUesyiWoY/obTNSvyEtbQ+7/64InUzewhnfumRD2lxsc oxh2e5+JAATcAAq8CLzZu9twtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP69aOaa iVxYpKXjamy9Wn8TOE+tMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5 czFuSVRkMFdVYnlGR3FpdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt/BJdWfb8SvLkg3XtAqx2YSE5UCZ2jqQWGPwc4eRz2wfaJZQQoVX+ 1DmlTJuwhoJrUKykHSKN0DOXSUAoLIPCHLX6FgrXZRlZp30XTotX4DlK9db7nhEN Ir3v9pcuOtp8x6rUQfF6biJDDmT4kBRUtx7cZml+WWxRwHRVGHVD9/t1S+vFjId7 nkMAmCHXVqM1HlPQWmTC3NfMf9cW/6RFBWJICmCHiPczBdYhdG8loORHUAf54NWg D29ETp9YFg4Uiu/nd1i6ewhg4WIR+KMq2ZVXEIcqIHs4j57rneKCEAetDCEGf8gW skbMSzxEZ6YpbxrnHPnxsKpqBjREeoDB -----END CERTIFICATE-----Generated at Tue Apr 23 18:32:26 2024 by rpki-client on console-fra.rpki-client.org