$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: VW0SaySNME+rNl0m0ZQ+OH5h6/H6+bR16zx1svu9hBU= Subject key identifier: 9C:FC:D0:B7:95:F4:26:CB:E0:2A:E7:66:C1:37:BA:3A:C8:5E:E4:E1 Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 0CE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0BFC Signing time: Tue 30 Apr 2024 20:31:46 +0000 Manifest this update: Tue 30 Apr 2024 20:31:45 +0000 Manifest next update: Tue 07 May 2024 20:31:45 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: IYbYQlE5hXKi7zpAixlugDkEpRm196cSzcF8GnTFE6I=) 2: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: uZ5YDui1RCbBQkk1AIcjpTZBu16nBKp9g9WFb9I9UmQ=) 3: 6CFA8FCA2B0811EBB691DC29C4F9AE02.roa (hash: k2FpkbA9MGw9YS3hl/E41omveKg8U38v7DWUNn6kZ8E=) 4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: P8PLziuil4U42Nnqve/PHmI7Y1+H0hWzEptlameEesM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Apr 30 20:31:45 2024 GMT Not After : May 7 20:31:45 2024 GMT Subject: CN=66315531-dcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:26:5f:72:87:95:17:6e:5a:67:16:da:b9: 3a:db:82:a9:e1:52:06:62:23:67:a6:7c:69:b7:54: 15:1d:5f:f2:b7:46:d6:24:82:91:fe:b0:8b:a4:c9: d2:8d:97:34:43:4c:6b:c0:fe:24:0c:7e:96:20:c7: a8:23:b4:e4:4b:5b:0c:d6:a8:65:dd:f1:4c:67:93: f8:fa:f9:2e:3d:f8:9c:15:03:1f:9f:20:40:a3:1f: 73:c5:fc:ca:5a:14:70:ad:8a:8d:e8:7d:6b:d4:7e: f0:f8:a9:6c:5e:25:df:6e:06:b1:94:08:7d:dc:e1: 0a:c8:1e:a8:3c:5a:49:a9:79:c5:4c:11:c8:49:ea: ba:cc:6e:62:73:63:22:79:5a:eb:21:86:63:11:32: 8f:a2:d3:0a:ee:10:83:77:cc:65:97:c9:e4:fa:ed: 55:fd:ff:08:1b:bf:3f:60:e9:cc:7c:80:6b:e9:79: 9f:a2:8a:7c:e1:13:5a:4e:7a:87:cc:a5:78:e2:0b: 88:4d:46:6e:4d:ae:7c:dd:94:18:3a:85:03:1a:34: 46:36:98:ea:45:0d:dd:9e:2d:3f:5c:80:c8:91:02: 43:b2:3b:28:51:d6:6c:02:34:b7:27:8b:fd:12:1c: ed:83:17:5e:24:f0:89:44:12:01:c5:ec:4e:31:55: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:D0:B7:95:F4:26:CB:E0:2A:E7:66:C1:37:BA:3A:C8:5E:E4:E1 X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4b:76:be:26:62:5d:c5:43:da:23:85:cf:9e:dc:74:e8:e5: 2d:fb:36:02:0e:30:34:92:17:ea:78:8e:59:7c:bc:55:75:ae: 6a:ca:4a:a1:e7:25:16:68:b6:31:1f:cf:e2:1f:f4:be:0f:57: c8:ca:20:2e:b5:89:3f:c4:e6:f2:ce:f3:9b:c4:97:8e:79:d3: 60:c7:5f:65:5f:e3:b9:a8:b9:7c:8b:bf:9f:ea:98:73:31:9a: 02:d0:79:58:fa:16:22:9e:71:6f:0d:47:9e:3f:3d:44:6c:0f: 00:1e:79:df:b8:5e:95:d6:5b:fe:06:c8:0b:9f:bb:61:27:0e: bd:53:a5:24:f6:f4:7b:15:83:46:62:46:3b:55:b0:24:97:ad: 61:73:4c:9d:38:3a:aa:c7:d0:a3:11:49:d2:31:20:d0:2e:7b: f5:b9:bb:28:98:f5:3b:a8:20:3f:09:70:16:0e:50:41:53:de: 87:7e:ef:f2:74:28:12:c0:05:8e:a0:93:71:2a:97:0d:52:4e: 15:c3:aa:32:f1:e8:47:9f:8c:f0:f4:c0:a7:f0:be:c0:5f:ee: 5c:54:69:e4:f2:84:af:45:20:fc:09:88:97:72:ce:38:66:ca: 7b:b5:48:d5:41:4a:9e:f9:3c:94:54:90:76:53:47:01:ff:b6: 1c:14:51:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjQwNDMwMjAzMTQ1WhcNMjQwNTA3MjAzMTQ1WjAYMRYwFAYD VQQDEw02NjMxNTUzMS1kY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArE8mX3KHlRduWmcW2rk624Kp4VIGYiNnpnxpt1QVHV/yt0bWJIKR/rCLpMnS jZc0Q0xrwP4kDH6WIMeoI7TkS1sM1qhl3fFMZ5P4+vkuPficFQMfnyBAox9zxfzK WhRwrYqN6H1r1H7w+KlsXiXfbgaxlAh93OEKyB6oPFpJqXnFTBHISeq6zG5ic2Mi eVrrIYZjETKPotMK7hCDd8xll8nk+u1V/f8IG78/YOnMfIBr6Xmfoop84RNaTnqH zKV44guITUZuTa583ZQYOoUDGjRGNpjqRQ3dni0/XIDIkQJDsjsoUdZsAjS3J4v9 EhztgxdeJPCJRBIBxexOMVVRDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz80LeV 9CbL4CrnZsE3ujrIXuThMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfS3a+JmJdxUPaI4XPntx06OUt+zYCDjA0khfqeI5ZfLxVda5qykqh 5yUWaLYxH8/iH/S+D1fIyiAutYk/xObyzvObxJeOedNgx19lX+O5qLl8i7+f6phz MZoC0HlY+hYinnFvDUeePz1EbA8AHnnfuF6V1lv+BsgLn7thJw69U6Uk9vR7FYNG YkY7VbAkl61hc0ydODqqx9CjEUnSMSDQLnv1ubsomPU7qCA/CXAWDlBBU96Hfu/y dCgSwAWOoJNxKpcNUk4Vw6oy8ehHn4zw9MCn8L7AX+5cVGnk8oSvRSD8CYiXcs44 Zsp7tUjVQUqe+TyUVJB2U0cB/7YcFFF1 -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:55 2024 by rpki-client on console-ams.rpki-client.org