$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft File: TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json) Hash identifier: hOtKsrouxj4YN304DbD7bYFwGmxzWExfTAvElp9t1EY= Subject key identifier: 35:0F:81:B4:BE:EF:6C:4F:E4:7E:4E:1E:24:75:0B:2F:C3:20:15:8F Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 Certificate issuer: /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft Manifest number: 04E7 Signing time: Fri 03 May 2024 01:25:55 +0000 Manifest this update: Fri 03 May 2024 01:25:55 +0000 Manifest next update: Fri 10 May 2024 01:25:55 +0000 Files and hashes: 1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: FvGlELnvLz2CFXdANJb3g+dgIA0xXKZv3vFlN8ODjsI=) 2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: 6JZm6Br4RJ0RGyHFYdZcYN333EgiD1xDWee5162vbHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051 Validity Not Before: May 3 01:25:55 2024 GMT Not After : May 10 01:25:55 2024 GMT Subject: CN=66343d23-1561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f1:84:ce:48:3a:f6:1a:40:76:80:56:10:fb: e3:a5:d0:af:f6:0e:80:b4:53:e3:bc:93:bd:2f:aa: f6:f5:33:6a:79:b8:91:70:67:66:04:b5:9c:52:c9: 83:b7:81:13:c2:95:a1:a4:0d:6d:22:14:b0:40:41: 10:e4:d9:0d:0f:d4:bb:53:85:35:c1:05:bd:0c:13: b2:57:96:1a:7f:07:85:77:d6:b4:ea:71:3d:cd:ec: 6f:63:54:3b:17:b7:6b:81:40:12:1e:ef:8d:be:ce: da:62:57:7f:78:01:13:ff:bc:ce:85:2d:d6:00:ba: ce:70:21:4a:4d:1e:06:49:70:6c:2a:a7:80:c2:12: c6:73:85:98:4e:c8:94:7b:ee:da:0c:74:49:e6:21: 7b:e4:72:c1:eb:6b:0b:60:ef:f1:f9:76:46:69:9f: 23:b2:0c:7b:fa:c9:83:03:f6:95:55:85:c2:63:b6: db:e9:4f:16:8c:0d:df:e1:bc:ae:11:57:96:60:42: bf:96:f4:37:cc:f0:2d:fc:68:7e:d0:3f:b8:d9:d3: 5c:d8:97:9e:db:f2:c9:0b:7d:e6:77:55:b8:b2:92: ab:2b:85:86:b5:bd:46:0f:b8:93:d1:1a:60:4b:94: 9a:4d:69:d3:d5:f9:3b:ae:51:4c:ee:c0:4a:9f:f1: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0F:81:B4:BE:EF:6C:4F:E4:7E:4E:1E:24:75:0B:2F:C3:20:15:8F X509v3 Authority Key Identifier: keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:c2:87:a6:e6:b1:6d:e1:a2:da:93:2d:2e:4b:cc:9c:39:2d: cc:25:a8:f6:cd:3d:78:e8:73:57:17:fb:a1:09:46:0c:b7:6e: 69:38:6d:4c:d8:63:db:11:8d:31:2a:3b:ad:4d:00:1e:fd:b9: ab:7e:30:95:bb:3d:ee:0f:cd:66:2f:64:fc:a2:c5:9f:73:7f: ed:6a:d3:a5:bf:77:d8:05:08:28:30:77:46:cc:fa:92:08:d0: b6:c0:a6:1f:43:7d:df:ae:0f:68:b5:c7:bf:0d:4b:fe:90:33: 04:8c:1c:4c:4d:db:36:fa:30:f9:4b:93:d1:9e:0c:cc:18:17: 9c:85:e3:d4:a3:e3:14:22:d6:0b:ef:d8:45:69:9c:7e:a1:57: 07:0a:6b:94:b0:c6:7a:a3:6b:3e:75:31:f4:d8:d6:b9:c1:be: f1:7c:bc:db:95:14:df:b4:57:66:a4:19:43:6c:0b:ad:f1:db: 79:5d:63:b5:eb:88:bf:4a:4d:eb:d7:ed:64:28:0a:6e:d9:2c: d8:29:9f:3c:d0:07:e4:14:7c:8d:05:c5:4f:af:98:4d:06:86: 3e:a1:bb:69:bb:fb:9c:74:ea:27:de:04:98:41:ca:eb:de:c3: 7e:8e:56:26:5d:72:9d:fe:f3:9c:43:c8:fe:c0:42:6f:88:7b: aa:13:a7:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRDgxMTAvBgNVBAUTKDREMjc5ODhCMjlFNTJCMjY1MDNEQ0FCQzA0MUFCM0Y2 MUYyNDEwNTEwHhcNMjQwNTAzMDEyNTU1WhcNMjQwNTEwMDEyNTU1WjAYMRYwFAYD VQQDEw02NjM0M2QyMy0xNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkvGEzkg69hpAdoBWEPvjpdCv9g6AtFPjvJO9L6r29TNqebiRcGdmBLWcUsmD t4ETwpWhpA1tIhSwQEEQ5NkND9S7U4U1wQW9DBOyV5YafweFd9a06nE9zexvY1Q7 F7drgUASHu+Nvs7aYld/eAET/7zOhS3WALrOcCFKTR4GSXBsKqeAwhLGc4WYTsiU e+7aDHRJ5iF75HLB62sLYO/x+XZGaZ8jsgx7+smDA/aVVYXCY7bb6U8WjA3f4byu EVeWYEK/lvQ3zPAt/Gh+0D+42dNc2Jee2/LJC33md1W4spKrK4WGtb1GD7iT0Rpg S5SaTWnT1fk7rlFM7sBKn/FjgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUPgbS+ 72xP5H5OHiR1Cy/DIBWPMB8GA1UdIwQYMBaAFE0nmIsp5SsmUD3KvAQas/YfJBBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNEOC8wOUNDMzYwQ0NB MkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5WlFQY3E4QkJxejloOGtF RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RTZVlpeW5sS3laUVBjcThCQnF6OWg4a0VGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNEOC8wOUNDMzYwQ0NBMkIxMUVCQURGNTQ1NUVDNEY5QUUwMi9UU2VZaXlubEt5 WlFQY3E4QkJxejloOGtFRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhwoem5rFt4aLaky0uS8ycOS3MJaj2zT146HNXF/uhCUYMt25pOG1M 2GPbEY0xKjutTQAe/bmrfjCVuz3uD81mL2T8osWfc3/tatOlv3fYBQgoMHdGzPqS CNC2wKYfQ33frg9otce/DUv+kDMEjBxMTds2+jD5S5PRngzMGBechePUo+MUItYL 79hFaZx+oVcHCmuUsMZ6o2s+dTH02Na5wb7xfLzblRTftFdmpBlDbAut8dt5XWO1 64i/Sk3r1+1kKApu2SzYKZ880AfkFHyNBcVPr5hNBoY+obtpu/ucdOon3gSYQcrr 3sN+jlYmXXKd/vOcQ8j+wEJviHuqE6eZ -----END CERTIFICATE-----Generated at Fri May 3 04:45:10 2024 by rpki-client on console-fra.rpki-client.org