$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: F7AcUtaVtSjmBm/h16maU+tiZvC01xCtiGFHs9VYxYc= Subject key identifier: 5B:F6:10:63:44:96:AE:4C:93:88:EB:88:6C:26:F8:CA:4B:A8:CC:C2 Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 01CB Signing time: Sun 05 May 2024 04:36:22 +0000 Manifest this update: Sun 05 May 2024 04:36:22 +0000 Manifest next update: Sun 12 May 2024 04:36:22 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: z7CWX3bN1o+azQUuEo3E/pKe41zLJEAfnevuuaLJnaU=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: 96IxM18FepvkTX/noztQDGsKZtLDOBE6wy3TrGmA6IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: May 5 04:36:22 2024 GMT Not After : May 12 04:36:22 2024 GMT Subject: CN=66370cc6-259d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:b6:62:14:98:82:16:73:55:e8:4b:5a:ae: f9:d2:28:c6:54:c3:75:8f:a5:ab:7f:ee:18:b2:ff: cf:ff:7c:54:42:44:ac:1c:74:e1:e3:16:4e:2c:55: 5c:fa:27:12:db:2f:08:6d:5d:08:09:87:56:31:8a: fb:2a:34:a7:fa:57:3f:b7:5b:d3:c9:3b:98:29:d3: 26:69:6a:f8:c8:57:57:d1:90:83:af:7a:b0:40:44: de:93:8c:91:78:f5:26:85:3a:20:c3:8a:7f:cd:aa: 19:29:83:3b:64:2b:4c:f9:b2:3d:37:2a:3e:28:4e: 51:30:44:06:6f:48:c5:e2:a4:45:a3:ee:20:5c:c4: 51:f8:1f:48:38:a2:9d:1f:57:2f:e9:c7:d5:61:c5: 9e:84:50:18:cc:a4:d9:d7:9f:52:bf:c5:20:a7:26: 12:6c:78:cf:1b:46:13:7f:a0:17:a9:4e:8f:f9:3d: c2:99:36:89:8f:73:62:4f:32:0e:6a:49:f9:7a:fc: 15:51:aa:87:f3:2f:f7:cf:1f:c4:d4:4a:b1:4f:24: 55:5b:13:be:14:69:90:9c:82:8a:14:fa:1c:ef:4b: 79:3d:d4:67:4d:fc:06:7c:7f:11:50:f7:d7:6c:fb: cb:b2:11:70:f4:e5:84:f7:b4:fa:c8:e2:7d:9d:39: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:10:63:44:96:AE:4C:93:88:EB:88:6C:26:F8:CA:4B:A8:CC:C2 X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ab:0a:92:61:e4:65:60:d7:77:23:d5:a2:57:4d:4b:a7:b6: 77:26:93:61:46:52:cc:03:9f:65:1e:81:10:21:3c:ec:e7:fb: 3c:d2:1c:86:1e:ae:79:8d:23:59:64:74:e0:79:6c:80:5b:86: 4c:fe:d0:90:70:56:67:05:4e:ce:0c:09:17:73:d1:6d:13:b5: 7e:5e:7d:68:63:93:03:6b:9e:72:5e:e3:39:39:a9:ef:a9:d7: db:62:54:3e:51:0a:fc:b6:95:2d:81:fb:e7:44:6f:de:1e:37: 0f:d0:03:94:bf:e4:45:48:b5:09:12:7e:8f:5e:0f:84:93:01: 96:b5:83:cc:75:13:68:43:30:ed:c9:cb:7b:20:11:3a:f1:d6: ac:38:74:8f:6b:d2:8f:e8:5b:fc:89:27:15:3a:62:7b:82:07: 70:86:de:7c:91:00:14:68:a4:6e:83:38:a5:53:27:ab:2b:39: 5d:bb:11:1f:15:b9:05:c6:e8:36:e8:e8:6f:45:06:ca:d9:6a: 6d:83:62:b4:2d:62:e5:a9:84:dc:70:4f:de:eb:c6:f9:13:75: 5f:31:c0:2b:27:dc:bd:5b:d7:6a:ff:10:35:33:fe:0a:a7:c8: 33:e9:fb:79:a8:d6:e5:6f:ca:8a:40:c8:68:fa:db:0d:7b:1e: 66:8a:90:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjQwNTA1MDQzNjIyWhcNMjQwNTEyMDQzNjIyWjAYMRYwFAYD VQQDEw02NjM3MGNjNi0yNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoES2YhSYghZzVehLWq750ijGVMN1j6Wrf+4Ysv/P/3xUQkSsHHTh4xZOLFVc +icS2y8IbV0ICYdWMYr7KjSn+lc/t1vTyTuYKdMmaWr4yFdX0ZCDr3qwQETek4yR ePUmhTogw4p/zaoZKYM7ZCtM+bI9Nyo+KE5RMEQGb0jF4qRFo+4gXMRR+B9IOKKd H1cv6cfVYcWehFAYzKTZ159Sv8UgpyYSbHjPG0YTf6AXqU6P+T3CmTaJj3NiTzIO akn5evwVUaqH8y/3zx/E1EqxTyRVWxO+FGmQnIKKFPoc70t5PdRnTfwGfH8RUPfX bPvLshFw9OWE97T6yOJ9nTmGQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv2EGNE lq5Mk4jriGwm+MpLqMzCMB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/qwqSYeRlYNd3I9WiV01Lp7Z3JpNhRlLMA59lHoEQITzs5/s80hyG Hq55jSNZZHTgeWyAW4ZM/tCQcFZnBU7ODAkXc9FtE7V+Xn1oY5MDa55yXuM5Oanv qdfbYlQ+UQr8tpUtgfvnRG/eHjcP0AOUv+RFSLUJEn6PXg+EkwGWtYPMdRNoQzDt yct7IBE68dasOHSPa9KP6Fv8iScVOmJ7ggdwht58kQAUaKRugzilUyerKzlduxEf FbkFxug26OhvRQbK2Wptg2K0LWLlqYTccE/e68b5E3VfMcArJ9y9W9dq/xA1M/4K p8gz6ft5qNblb8qKQMho+tsNex5mipAr -----END CERTIFICATE-----Generated at Sun May 5 05:21:56 2024 by rpki-client on console-fra.rpki-client.org