$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: POq1HkRACJ9yM8TyBi8Yfdop94RtLaj78w8hlwuH4PA= Subject key identifier: E6:08:51:A0:94:DD:F8:1B:5B:2F:34:C3:B9:05:8E:A2:3B:62:F5:C8 Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 0686 Signing time: Sat 18 May 2024 23:23:52 +0000 Manifest this update: Sat 18 May 2024 23:23:52 +0000 Manifest next update: Sat 25 May 2024 23:23:52 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: R1UhJJzhwrcQgAN1nLMs80NJNoq56f6f5WVHh26fJmM=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: qgWNvHVH5SwuekdN03AX71dEPGp995XXlAE+vCyPqus=) 3: 102C7C702D2111EBB741A15CC4F9AE02.roa (hash: 0QuQ1fp4fruXYJeama15NTzAuJxLEotWeOskkwIthSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: May 18 23:23:52 2024 GMT Not After : May 25 23:23:52 2024 GMT Subject: CN=66493888-445f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:04:2a:91:76:db:4d:28:28:e3:df:7a:65: c5:2b:98:4c:5f:2a:79:af:41:ad:9e:61:76:cf:5d: e5:1e:4b:a2:e8:a9:a7:b5:c3:70:65:dc:15:9d:92: 4f:a8:5e:8f:7b:17:3a:4c:14:2d:b0:f2:d5:c9:22: 40:16:e9:0b:8f:1d:8f:75:75:fe:0a:80:f1:e0:50: bc:a3:9d:75:29:4f:b3:06:87:b1:91:36:fe:f7:e3: 4d:22:19:37:d9:39:57:cc:4e:22:d4:c7:45:7b:39: e0:57:22:c6:41:b6:e3:64:ae:c2:50:88:96:bc:ae: c3:ee:3b:2e:55:a6:fc:ef:8f:12:cc:36:0f:b8:e9: 9b:44:9d:8a:d6:25:9e:32:f3:63:51:98:e9:cb:cd: f3:f1:fd:00:05:fb:92:45:f7:52:20:96:5c:01:53: 44:1f:b7:dd:0e:88:68:31:13:02:7a:48:42:3d:57: f7:73:27:2b:06:04:79:4d:a8:1a:1c:31:62:1d:fd: 86:2b:24:9b:13:0b:1b:f6:9c:e6:a8:17:ac:4c:b0: 33:e1:14:6a:1e:cb:2e:43:ec:a4:b3:32:aa:e0:27: 5a:4e:9a:e2:dd:4e:1f:3a:84:f6:d0:a7:12:0b:6a: 86:00:e6:b8:a9:9f:d5:eb:47:c5:54:d2:4f:27:5f: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:08:51:A0:94:DD:F8:1B:5B:2F:34:C3:B9:05:8E:A2:3B:62:F5:C8 X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:77:14:92:43:47:f4:09:4d:5a:4c:d3:45:f5:f4:a8:9d:85: 5c:6f:08:60:c1:14:60:70:a9:7b:0e:3b:46:68:11:7b:92:21: 4d:b0:3f:bd:6a:1e:76:54:ba:e5:2f:a9:21:2a:63:1d:3c:5e: 28:32:f4:cf:86:58:07:ac:8b:bd:a6:04:19:59:2c:92:2e:5c: fb:fe:0e:c2:a1:e3:67:99:56:7b:31:93:58:bc:bc:98:f6:c2: 9d:95:c1:4f:d6:4c:46:0a:e5:14:c8:21:aa:e0:82:2b:a4:42: 67:82:5d:b1:b2:fb:ab:67:04:94:ff:fc:46:b4:00:4a:fa:df: 48:ae:ce:4a:f1:c9:22:a2:43:9c:31:79:f8:61:c9:d8:fd:d0: a4:51:4c:76:5e:ae:9f:20:a2:e2:a1:ea:89:7e:41:26:c2:b0: 9b:c4:69:d9:3e:16:a4:47:f2:ba:df:28:38:7d:19:e5:09:d4: ec:7d:b2:39:25:17:04:6a:9d:c6:79:23:ea:2f:94:6e:cf:97: db:f7:bc:6b:59:a5:84:84:c0:15:20:b3:1e:98:af:f7:32:b0: 97:2d:a0:d9:35:5d:43:6e:1e:66:21:49:d9:24:82:46:41:30: 14:e4:76:44:31:ec:ff:95:81:0e:e0:02:41:57:08:d0:ab:bf: 62:59:f6:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjQwNTE4MjMyMzUyWhcNMjQwNTI1MjMyMzUyWjAYMRYwFAYD VQQDEw02NjQ5Mzg4OC00NDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6QEKpF2200oKOPfemXFK5hMXyp5r0GtnmF2z13lHkui6KmntcNwZdwVnZJP qF6Pexc6TBQtsPLVySJAFukLjx2PdXX+CoDx4FC8o511KU+zBoexkTb+9+NNIhk3 2TlXzE4i1MdFezngVyLGQbbjZK7CUIiWvK7D7jsuVab8748SzDYPuOmbRJ2K1iWe MvNjUZjpy83z8f0ABfuSRfdSIJZcAVNEH7fdDohoMRMCekhCPVf3cycrBgR5Taga HDFiHf2GKySbEwsb9pzmqBesTLAz4RRqHssuQ+ykszKq4CdaTpri3U4fOoT20KcS C2qGAOa4qZ/V60fFVNJPJ1/x6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYIUaCU 3fgbWy80w7kFjqI7YvXIMB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNdxSSQ0f0CU1aTNNF9fSonYVcbwhgwRRgcKl7DjtGaBF7kiFNsD+9 ah52VLrlL6khKmMdPF4oMvTPhlgHrIu9pgQZWSySLlz7/g7CoeNnmVZ7MZNYvLyY 9sKdlcFP1kxGCuUUyCGq4IIrpEJngl2xsvurZwSU//xGtABK+t9Irs5K8ckiokOc MXn4YcnY/dCkUUx2Xq6fIKLioeqJfkEmwrCbxGnZPhakR/K63yg4fRnlCdTsfbI5 JRcEap3GeSPqL5Ruz5fb97xrWaWEhMAVILMemK/3MrCXLaDZNV1Dbh5mIUnZJIJG QTAU5HZEMez/lYEO4AJBVwjQq79iWfbb -----END CERTIFICATE-----Generated at Sun May 19 00:16:15 2024 by rpki-client on console-fra.rpki-client.org