$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft File: tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json) Hash identifier: eETGBGNZqAhCDk9G5fvGphdn3H3nfA/htPLZ7R2shQA= Subject key identifier: A1:56:AD:8C:B4:FD:8C:50:30:95:BC:83:57:B5:EC:53:71:A9:2F:50 Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft Manifest number: 01BB Signing time: Fri 17 May 2024 04:57:12 +0000 Manifest this update: Fri 17 May 2024 04:57:12 +0000 Manifest next update: Fri 24 May 2024 04:57:12 +0000 Files and hashes: 1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: FVEiauF5E0a1iiuETPcdXqWCnq70Fzr6FXPM0G7hGbg=) 2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: B/zgiN9MS0iQF43gYmMn2kejnWQniViVlNn30/WInIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 04:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD Validity Not Before: May 17 04:57:12 2024 GMT Not After : May 24 04:57:12 2024 GMT Subject: CN=6646e3a8-15fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3f:a7:b0:3a:db:dc:5e:62:d2:07:bb:10:83: 93:5b:3f:54:98:5f:32:13:38:46:25:5a:17:e0:ae: 9d:4f:63:e5:da:34:11:f8:70:c4:00:e4:e3:45:66: 67:0c:c4:08:f8:66:03:ae:65:36:73:0f:3f:2e:16: c8:87:46:7e:6f:86:71:ab:74:7b:8e:8e:36:12:36: e3:28:90:fc:e6:27:8f:06:c4:b8:4b:8f:74:ee:29: 18:9c:a9:c0:01:ca:66:16:10:ea:8f:0f:20:d2:52: e3:58:0f:be:e2:1e:d0:cb:8d:4e:e8:7b:59:d9:89: 65:4d:56:92:ca:73:d1:c3:71:86:42:3c:85:50:fd: 8a:54:f5:ff:36:9e:f9:57:8b:64:56:54:4a:14:db: 99:20:eb:12:42:14:53:56:53:ce:db:9c:5c:27:9c: f1:62:0a:a3:76:f1:b5:07:61:c6:7a:62:c9:c2:58: 88:2f:f0:7a:1f:05:db:1f:d7:d8:37:72:1c:28:a8: 56:c1:42:cb:79:0e:4c:a6:4d:8a:95:3c:bb:0c:75: f1:f0:e6:a1:0c:75:52:5f:29:e4:c4:20:81:4a:a2: 71:df:f2:f0:18:c4:cb:88:e3:80:76:79:9e:14:ea: b7:f4:fa:e8:f8:b1:d3:1d:d9:64:30:44:58:cb:58: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:AD:8C:B4:FD:8C:50:30:95:BC:83:57:B5:EC:53:71:A9:2F:50 X509v3 Authority Key Identifier: keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:49:7e:1f:96:1d:6d:14:a2:9e:5e:26:53:2a:29:bf:d6:ee: 8c:ad:54:31:dc:cc:10:3b:27:a0:ca:5d:b7:39:44:02:9f:2a: 5e:14:a9:01:27:38:b2:60:e9:d8:b5:d2:ad:32:1a:47:f5:2f: e0:6c:59:9c:e8:8c:88:05:3f:12:89:60:4e:59:66:bf:74:6c: bc:d8:3f:36:35:4a:4e:84:8a:7e:5c:cb:d7:7e:a2:9b:30:4b: 4f:e9:d7:a6:e1:83:ad:f8:03:12:9a:2b:12:78:4b:31:c1:5c: 03:76:b4:a9:9c:13:42:89:91:eb:f4:1e:ef:8f:86:c6:6d:8e: dd:e2:98:b1:74:b2:f7:76:83:81:7b:d1:f7:8b:9b:b8:a6:7f: 67:12:38:d7:74:0f:bb:70:0a:55:1a:7e:3f:07:9c:4b:6b:3d: 05:87:60:8c:0f:ac:ee:e6:66:41:9a:f0:21:93:d7:d3:42:c4: e5:17:eb:27:37:64:0d:0c:7f:9f:e9:cf:1e:aa:c7:03:85:a5: f9:61:3f:fe:f3:f4:97:7b:ae:56:c0:2f:4b:89:7a:83:3e:65: 5c:eb:c8:34:28:a7:47:4f:38:ee:ae:2a:40:0c:33:5b:0b:f3: 86:1f:f2:08:81:a1:50:46:c9:e0:fc:f6:44:d1:8d:f4:9b:6c: fa:01:a2:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MENGMzExMC8GA1UEBRMoQjQ4Q0IxODA4MjYyQjgwOTlCODcyNzJBNTc2RkZFREMx OUEzOTZCRDAeFw0yNDA1MTcwNDU3MTJaFw0yNDA1MjQwNDU3MTJaMBgxFjAUBgNV BAMTDTY2NDZlM2E4LTE1ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhP6ewOtvcXmLSB7sQg5NbP1SYXzITOEYlWhfgrp1PY+XaNBH4cMQA5ONFZmcM xAj4ZgOuZTZzDz8uFsiHRn5vhnGrdHuOjjYSNuMokPzmJ48GxLhLj3TuKRicqcAB ymYWEOqPDyDSUuNYD77iHtDLjU7oe1nZiWVNVpLKc9HDcYZCPIVQ/YpU9f82nvlX i2RWVEoU25kg6xJCFFNWU87bnFwnnPFiCqN28bUHYcZ6YsnCWIgv8HofBdsf19g3 chwoqFbBQst5DkymTYqVPLsMdfHw5qEMdVJfKeTEIIFKonHf8vAYxMuI44B2eZ4U 6rf0+uj4sdMd2WQwRFjLWM29AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoVatjLT9 jFAwlbyDV7XsU3GpL1AwHwYDVR0jBBgwFoAUtIyxgIJiuAmbhycqV2/+3Bmjlr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwQ0YzLzAyOEY5RUZFMkU4 NjExRUQ5RDJFREM0REM0RjlBRTAyL3RJeXhnSUppdUFtYmh5Y3FWMl8tM0Jtamxy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEl5eGdJSml1QW1iaHljcVYyXy0zQm1qbHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUw Q0YzLzAyOEY5RUZFMkU4NjExRUQ5RDJFREM0REM0RjlBRTAyL3RJeXhnSUppdUFt Ymh5Y3FWMl8tM0JtamxyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBJfh+WHW0Uop5eJlMqKb/W7oytVDHczBA7J6DKXbc5RAKfKl4UqQEn OLJg6di10q0yGkf1L+BsWZzojIgFPxKJYE5ZZr90bLzYPzY1Sk6Ein5cy9d+opsw S0/p16bhg634AxKaKxJ4SzHBXAN2tKmcE0KJkev0Hu+PhsZtjt3imLF0svd2g4F7 0feLm7imf2cSONd0D7twClUafj8HnEtrPQWHYIwPrO7mZkGa8CGT19NCxOUX6yc3 ZA0Mf5/pzx6qxwOFpflhP/7z9Jd7rlbAL0uJeoM+ZVzryDQop0dPOO6uKkAMM1sL 84Yf8giBoVBGyeD89kTRjfSbbPoBopk= -----END CERTIFICATE-----Generated at Fri May 17 06:18:05 2024 by rpki-client on console-fra.rpki-client.org