$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: E3tx7mMMUAtdJDfnO6RYKRNIy+fm8BBvLcm1qZyuaAA= Subject key identifier: 0E:13:63:16:88:E6:65:16:AB:91:71:59:B3:2E:E1:44:86:39:48:57 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 0201 Signing time: Sat 27 Apr 2024 04:06:46 +0000 Manifest this update: Sat 27 Apr 2024 04:06:46 +0000 Manifest next update: Sat 04 May 2024 04:06:46 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: Kuv0YtDAdOKkJ+c5Zof6T9KoW6JhVW0riHU9vLqG2M8=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: 9wjcns0ncw/wGTNs74xbVREIvS/DquHOra1YJnzxANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Apr 27 04:06:46 2024 GMT Not After : May 4 04:06:46 2024 GMT Subject: CN=662c79d6-e9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:52:3e:70:4c:06:2b:3d:9b:cd:47:a0:32: b9:c1:d5:fc:a1:f9:3d:9b:58:78:cb:46:4d:eb:27: 6a:11:60:7d:df:31:8c:a9:f3:47:7a:79:14:c2:5d: e3:65:82:e5:21:de:08:3f:24:12:d0:ad:7c:3f:94: dc:1d:e8:60:9a:20:47:78:95:8e:d9:bb:d2:36:8a: 97:2f:15:34:96:b5:b8:7f:a6:18:0b:22:02:8b:c9: e2:a5:2e:42:6d:f7:09:1e:4c:e0:d0:e4:de:99:9e: 1a:11:ee:60:2f:f4:b6:05:85:6d:28:e0:f8:35:9a: 65:6a:96:16:a6:b5:14:e9:23:50:17:05:40:10:49: a5:ed:3f:62:f4:aa:68:ff:2e:06:c7:4e:2a:48:8c: ad:d5:68:a2:d6:d2:8d:df:93:e6:7a:0c:29:0d:7f: 73:20:eb:66:d9:45:eb:72:d7:af:d9:18:54:f9:45: 86:91:73:f8:7a:20:07:81:40:22:57:33:a3:2e:53: 7c:e3:44:dc:29:1a:79:33:ab:e4:33:d4:dc:e7:74: 78:48:b2:f9:91:c1:2c:bc:29:33:51:f4:c9:dd:53: fe:4f:93:3b:76:1c:aa:2c:76:a6:55:7f:9b:0c:a1: 00:6a:cd:77:e2:1f:2b:50:cf:77:4d:3d:e8:2e:ae: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:13:63:16:88:E6:65:16:AB:91:71:59:B3:2E:E1:44:86:39:48:57 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d8:ea:aa:c0:4c:4b:bc:ef:0a:45:71:72:a3:e9:95:c9:1f: 6b:21:8f:25:17:55:9b:e3:af:e1:05:f6:18:f2:2e:d9:63:37: c2:cc:c9:21:27:6f:20:8a:29:04:02:9b:87:f4:40:0c:30:21: e5:b3:21:7c:67:52:c1:2b:2e:6c:f8:31:5b:18:e2:b9:de:93: 0e:2b:0c:3e:52:11:52:19:46:0a:63:7c:5c:03:ed:3d:1e:dc: 5d:1f:9a:d8:ba:b4:17:d6:f6:9c:12:36:ef:93:48:3d:bd:2d: c2:3c:7c:c8:6b:35:65:88:56:80:90:6e:3e:b8:f3:68:9b:72: fa:9f:89:c7:e3:92:84:56:63:a8:e0:2f:f5:ad:c7:b3:2b:27: 18:0b:f8:be:9b:a7:72:5d:0c:d0:65:02:20:43:cb:d4:ff:ce: 5e:a6:97:ea:c1:3f:17:76:c1:42:dd:69:09:ea:b8:8f:a6:a7: 94:aa:b7:87:cc:68:9d:99:09:5a:03:eb:e8:b2:9d:0d:04:c2: fd:14:07:7b:6d:0d:e9:40:17:eb:6b:f0:d1:67:66:bb:79:a8: 4b:a0:43:a8:b5:ad:e7:f6:71:e8:f7:2d:65:77:77:ce:bf:cf: dd:34:5c:9e:90:ff:3e:fa:bc:8b:31:40:39:e0:0b:8b:bc:ad: 33:dc:df:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjQwNDI3MDQwNjQ2WhcNMjQwNTA0MDQwNjQ2WjAYMRYwFAYD VQQDEw02NjJjNzlkNi1lOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4NSPnBMBis9m81HoDK5wdX8ofk9m1h4y0ZN6ydqEWB93zGMqfNHenkUwl3j ZYLlId4IPyQS0K18P5TcHehgmiBHeJWO2bvSNoqXLxU0lrW4f6YYCyICi8nipS5C bfcJHkzg0OTemZ4aEe5gL/S2BYVtKOD4NZplapYWprUU6SNQFwVAEEml7T9i9Kpo /y4Gx04qSIyt1Wii1tKN35PmegwpDX9zIOtm2UXrctev2RhU+UWGkXP4eiAHgUAi VzOjLlN840TcKRp5M6vkM9Tc53R4SLL5kcEsvCkzUfTJ3VP+T5M7dhyqLHamVX+b DKEAas134h8rUM93TT3oLq4pTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4TYxaI 5mUWq5FxWbMu4USGOUhXMB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc2OqqwExLvO8KRXFyo+mVyR9rIY8lF1Wb46/hBfYY8i7ZYzfCzMkh J28giikEApuH9EAMMCHlsyF8Z1LBKy5s+DFbGOK53pMOKww+UhFSGUYKY3xcA+09 HtxdH5rYurQX1vacEjbvk0g9vS3CPHzIazVliFaAkG4+uPNom3L6n4nH45KEVmOo 4C/1rcezKycYC/i+m6dyXQzQZQIgQ8vU/85eppfqwT8XdsFC3WkJ6riPpqeUqreH zGidmQlaA+vosp0NBML9FAd7bQ3pQBfra/DRZ2a7eahLoEOota3n9nHo9y1ld3fO v8/dNFyekP8++ryLMUA54AuLvK0z3N/8 -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:41 2024 by rpki-client on console-ams.rpki-client.org