$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft File: Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft (raw, json) Hash identifier: dgMLNjJCrU4eGDYMcs5F8dfWAFsJiXdQ7LlhnUUyGxM= Subject key identifier: CB:35:3F:03:8D:E1:C2:8B:98:73:8E:F6:18:F3:F3:2F:3A:D1:6D:C6 Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4 Certificate issuer: /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4 Certificate serial: 1905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft Manifest number: 18F4 Signing time: Thu 02 May 2024 16:56:09 +0000 Manifest this update: Thu 02 May 2024 16:56:09 +0000 Manifest next update: Thu 09 May 2024 16:56:09 +0000 Files and hashes: 1: Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl (hash: OllnArMhVjUHr0dUrawq4KdVl065slYwlCXWyJM1T7Y=) 2: 3D9FCF3CB74511EBB4D47C23C4F9AE02.roa (hash: OnUTjOUk2MwajKtzvTlLRw6Ykx/iadP7x/bhIrkV5nc=) 3: 3E8CF3CAB74511EBB4D47C23C4F9AE02.roa (hash: ZDK3agyqk9aX1xOqBH+TPVmW6h7xORsUhCd+fZTH/Z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6405 (0x1905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4 Validity Not Before: May 2 16:56:09 2024 GMT Not After : May 9 16:56:09 2024 GMT Subject: CN=6633c5a9-01a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:a0:e6:30:8b:90:1c:eb:67:10:54:80:14: 2c:ab:19:9c:8a:4b:39:f0:43:b5:19:7d:c0:d4:35: bc:46:d0:bf:25:e5:a2:52:90:77:1e:ac:27:e0:15: ed:ec:1d:83:42:e5:9f:d6:74:cc:ef:a7:5a:32:4f: b4:3d:6c:95:cb:60:4a:ca:06:f7:35:c4:1a:b8:f2: f1:06:bd:f0:2e:ea:a8:a9:7d:25:e3:84:08:d7:3b: 6a:fc:21:0b:cb:27:8c:3c:ee:c9:37:36:f9:0c:f1: b7:2c:43:d8:3c:64:c1:17:12:27:48:b4:fa:bc:a7: d0:20:d7:ed:3f:ce:c2:a9:e7:2e:59:79:f3:b2:a9: 55:ce:57:55:96:01:9d:71:ff:44:7f:44:f0:15:e3: ad:f4:79:6a:d6:66:54:d4:01:72:74:79:2d:53:1c: 2f:f2:c5:4b:34:bf:c8:7d:05:b3:7c:c4:4f:cd:dd: 22:08:1d:7f:02:35:48:14:57:12:ce:fc:d0:8f:62: d1:ff:a8:09:65:68:1c:50:21:0e:35:c4:46:ec:5f: d1:98:33:14:ba:b2:74:e6:31:e2:94:d9:b7:a6:bd: 11:81:92:57:71:00:09:f4:82:ea:46:c0:88:32:a9: 69:63:26:04:72:09:3f:11:f5:02:33:21:25:6d:d1: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:35:3F:03:8D:E1:C2:8B:98:73:8E:F6:18:F3:F3:2F:3A:D1:6D:C6 X509v3 Authority Key Identifier: keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:7e:bf:4f:e8:10:69:41:8b:44:ef:c7:f9:fb:2e:0d:e9: ed:75:77:a9:04:22:34:93:76:68:57:2d:dd:82:ce:89:83:e7: 5a:d0:38:63:c2:55:3b:29:ad:be:ad:de:ef:3c:e8:4a:34:4f: 2e:bf:39:9e:12:d6:2b:01:2f:d0:e7:e1:84:d2:0e:df:58:3a: ae:03:64:d0:a6:f9:83:5d:8f:e0:8f:82:17:98:21:db:f1:be: ce:bd:c2:a7:82:7a:c6:e2:7c:27:bc:43:07:58:88:3a:aa:41: d9:23:7d:ef:da:e8:3e:b6:fa:01:aa:9e:e8:c9:cb:80:49:3c: c6:e7:78:c0:bd:fe:32:0d:e6:4f:7e:a7:c2:60:d7:60:c0:72: 48:3d:63:2b:2a:e6:c0:9a:11:4a:9e:fc:d4:a1:75:e7:b2:92: 31:ec:b4:44:32:e1:20:78:58:3a:eb:4c:25:21:a1:23:34:ce: 5c:3f:83:6b:e1:2a:a0:45:bc:ed:ce:fa:6f:01:00:32:d4:45: d8:5e:c2:d8:77:8b:eb:b3:95:dd:ed:49:44:2e:fa:c8:33:53: 38:ba:ef:f2:5e:03:68:70:1c:1c:28:61:d1:29:4a:9f:1b:bd: c9:f6:59:0c:ae:93:3b:37:e2:24:d9:7e:17:91:0d:80:4a:5d: 7a:10:aa:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyQUUxMTAvBgNVBAUTKDREQUE3NzZGODc5MjgwMEY0MkI4OTc4MEYzMkQ5RTcz Mjc2MTU1RDQwHhcNMjQwNTAyMTY1NjA5WhcNMjQwNTA5MTY1NjA5WjAYMRYwFAYD VQQDEw02NjMzYzVhOS0wMWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Cg5jCLkBzrZxBUgBQsqxmciks58EO1GX3A1DW8RtC/JeWiUpB3Hqwn4BXt 7B2DQuWf1nTM76daMk+0PWyVy2BKygb3NcQauPLxBr3wLuqoqX0l44QI1ztq/CEL yyeMPO7JNzb5DPG3LEPYPGTBFxInSLT6vKfQINftP87CqecuWXnzsqlVzldVlgGd cf9Ef0TwFeOt9Hlq1mZU1AFydHktUxwv8sVLNL/IfQWzfMRPzd0iCB1/AjVIFFcS zvzQj2LR/6gJZWgcUCEONcRG7F/RmDMUurJ05jHilNm3pr0RgZJXcQAJ9ILqRsCI MqlpYyYEcgk/EfUCMyElbdEhTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs1PwON 4cKLmHOO9hjz8y860W3GMB8GA1UdIwQYMBaAFE2qd2+HkoAPQriXgPMtnnMnYVXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTJBRS8zMzZFRjY3NjYw RTgxMUU3QUMxNzUyNTlDNEY5QUUwMi9UYXAzYjRlU2dBOUN1SmVBOHkyZWN5ZGhW ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RhcDNiNGVTZ0E5Q3VKZUE4eTJlY3lkaFZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTJBRS8zMzZFRjY3NjYwRTgxMUU3QUMxNzUyNTlDNEY5QUUwMi9UYXAzYjRlU2dB OUN1SmVBOHkyZWN5ZGhWZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGcn6/T+gQaUGLRO/H+fsuDentdXepBCI0k3ZoVy3dgs6Jg+da0Dhj wlU7Ka2+rd7vPOhKNE8uvzmeEtYrAS/Q5+GE0g7fWDquA2TQpvmDXY/gj4IXmCHb 8b7OvcKngnrG4nwnvEMHWIg6qkHZI33v2ug+tvoBqp7oycuASTzG53jAvf4yDeZP fqfCYNdgwHJIPWMrKubAmhFKnvzUoXXnspIx7LREMuEgeFg660wlIaEjNM5cP4Nr 4SqgRbztzvpvAQAy1EXYXsLYd4vrs5Xd7UlELvrIM1M4uu/yXgNocBwcKGHRKUqf G73J9lkMrpM7N+Ik2X4XkQ2ASl16EKof -----END CERTIFICATE-----Generated at Thu May 2 17:43:05 2024 by rpki-client on console-fra.rpki-client.org