$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: TZVSPaNavfHc66wNiBWF7s01yAFwaf1Hlq8qtTOpAQ4= Subject key identifier: 0C:D0:FE:E7:E1:4B:4C:0B:67:2A:22:A9:A1:E8:2C:AF:FC:8E:7E:0E Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 012A Signing time: Sun 05 May 2024 05:08:43 +0000 Manifest this update: Sun 05 May 2024 05:08:42 +0000 Manifest next update: Sun 12 May 2024 05:08:42 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: +1T6EcfquYPEMkqImcVQaQv2Hc9NAoze6/po4bjPlyg=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: KwOCx1HwVxDbe/cyg2TY3/5ujdh02KPfGUg26AakCTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: May 5 05:08:42 2024 GMT Not After : May 12 05:08:42 2024 GMT Subject: CN=6637145b-8cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:94:e5:76:0e:54:6e:cd:71:98:a9:91:8c:b7: 32:d8:e7:fd:d3:c0:31:66:38:2b:dc:86:33:dc:d1: 5e:73:aa:9e:a7:5e:40:e1:34:8d:52:88:98:4d:d0: ee:c6:a4:ea:61:f8:7e:23:0d:b2:6d:ce:67:46:8b: 37:9e:6f:f8:a3:a3:58:d7:7d:0f:a4:70:0b:df:ef: 51:fd:fc:31:49:ca:ef:91:7b:6d:a6:ab:17:eb:d8: 0b:53:1a:6e:8d:9d:67:d2:48:fa:19:9f:71:c3:ff: 01:5d:57:50:82:7e:d3:0b:c5:d5:9d:97:ba:90:53: 81:39:80:cc:c9:8a:d6:ac:96:1b:ba:92:ea:23:48: 93:01:ec:a9:0c:eb:df:f5:7d:21:0b:8f:74:18:49: 21:4a:8c:4f:e9:69:e4:d4:01:ba:e0:d7:47:4f:3b: 73:e2:54:8a:60:5a:ee:21:e1:39:c0:2a:d9:b5:f4: 5d:60:dc:fd:f8:33:d8:e7:9d:f0:78:20:b3:c1:0d: f3:10:59:b6:bd:35:96:b3:31:df:5c:c6:15:57:da: fb:a3:62:fe:b7:29:e9:2c:c8:2a:d0:d5:ce:4d:9e: 66:5d:e6:d0:98:58:46:a7:e1:09:de:2b:a5:38:b8: 5c:a2:48:29:65:7c:92:b6:21:54:fb:bd:7f:e2:77: d1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D0:FE:E7:E1:4B:4C:0B:67:2A:22:A9:A1:E8:2C:AF:FC:8E:7E:0E X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ef:d9:09:0e:66:dc:49:3a:30:6a:7e:4d:b1:ff:de:72:83: 6f:5d:31:95:00:59:13:98:b2:c4:af:6d:d4:e4:32:13:21:4a: 96:29:2a:46:ec:d2:19:db:4d:5b:09:7e:5f:42:99:ff:1c:11: e7:08:1b:a3:e7:a8:66:b7:22:18:8c:f4:58:1b:26:fa:d0:47: 08:c6:cf:11:3c:03:53:5c:03:a8:f8:36:3e:ee:54:3b:18:45: 8e:35:36:ea:5e:5c:73:38:2f:7c:17:ef:4a:2e:2c:65:eb:24: 42:6f:ef:69:0c:52:fa:10:af:a6:25:2c:96:bf:5d:70:44:d1: eb:8b:de:0a:e1:42:03:7d:35:41:15:fb:78:d1:4c:a2:a9:28: a8:d6:4b:09:e4:89:9d:1e:b9:a8:fc:16:d5:0b:c2:88:9b:5b: bb:71:d4:81:cb:44:32:3f:ed:f8:80:9f:f5:b6:65:05:9c:fc: 57:d7:0a:43:73:67:16:18:3e:3e:fd:62:ca:43:79:a3:33:a8: e0:80:d0:44:2b:0a:23:5e:cd:a8:d7:91:2f:5d:a9:2b:08:14: 14:82:cc:ec:49:11:67:84:b7:9f:1c:3b:af:a3:89:2a:01:2d: 3e:73:1f:60:c7:1d:db:13:ef:18:1c:f7:b3:88:12:27:26:1d: 5f:95:be:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjQwNTA1MDUwODQyWhcNMjQwNTEyMDUwODQyWjAYMRYwFAYD VQQDEw02NjM3MTQ1Yi04Y2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZTldg5Ubs1xmKmRjLcy2Of908AxZjgr3IYz3NFec6qep15A4TSNUoiYTdDu xqTqYfh+Iw2ybc5nRos3nm/4o6NY130PpHAL3+9R/fwxScrvkXttpqsX69gLUxpu jZ1n0kj6GZ9xw/8BXVdQgn7TC8XVnZe6kFOBOYDMyYrWrJYbupLqI0iTAeypDOvf 9X0hC490GEkhSoxP6Wnk1AG64NdHTztz4lSKYFruIeE5wCrZtfRdYNz9+DPY553w eCCzwQ3zEFm2vTWWszHfXMYVV9r7o2L+tynpLMgq0NXOTZ5mXebQmFhGp+EJ3iul OLhcokgpZXyStiFU+71/4nfRvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzQ/ufh S0wLZyoiqaHoLK/8jn4OMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB79kJDmbcSTowan5Nsf/ecoNvXTGVAFkTmLLEr23U5DITIUqWKSpG 7NIZ201bCX5fQpn/HBHnCBuj56hmtyIYjPRYGyb60EcIxs8RPANTXAOo+DY+7lQ7 GEWONTbqXlxzOC98F+9KLixl6yRCb+9pDFL6EK+mJSyWv11wRNHri94K4UIDfTVB Fft40UyiqSio1ksJ5ImdHrmo/BbVC8KIm1u7cdSBy0QyP+34gJ/1tmUFnPxX1wpD c2cWGD4+/WLKQ3mjM6jggNBEKwojXs2o15EvXakrCBQUgszsSRFnhLefHDuvo4kq AS0+cx9gxx3bE+8YHPeziBInJh1flb6Y -----END CERTIFICATE-----Generated at Sun May 5 06:01:18 2024 by rpki-client on console-fra.rpki-client.org