$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: 1tN0ag2F26nkcmW/FUBFJbPWAK5RIB2SFxEBCmLJTWA= Subject key identifier: 86:E5:E0:F4:DD:BC:FF:0B:04:85:05:4C:69:B1:33:6C:8A:EF:1E:BD Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1E8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1E64 Signing time: Tue 30 Apr 2024 16:30:13 +0000 Manifest this update: Tue 30 Apr 2024 16:30:13 +0000 Manifest next update: Tue 07 May 2024 16:30:12 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: 7l+NEa28yjNHuoxWdIFQrHIWnJjvtKZxT1+P0pvDEAw=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: RIwHYJzTiAWJxrJm6ZlI9pwCw54A8DHzjwyPnvWV7go=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dCOIN/2nmGcz+3ww4TNjjrCMZCl/2EWyMlSqG1WrmiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7818 (0x1e8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Apr 30 16:30:13 2024 GMT Not After : May 7 16:30:12 2024 GMT Subject: CN=66311c95-e9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:c8:6c:bd:53:24:96:ea:52:cd:ad:1b:f9: 56:49:9c:77:41:5c:c5:2e:ba:1d:31:2b:1f:7c:22: 2f:fc:b7:e2:9f:3f:a3:40:35:52:aa:98:ca:c4:73: ee:08:ea:e1:80:18:c4:37:c0:0a:61:31:62:7d:d6: 3c:11:83:d8:ae:e9:6a:b3:1f:8e:50:db:37:d8:ab: de:c2:23:46:a8:bb:75:69:d1:16:ca:8f:88:77:f4: 14:f1:5c:5b:4f:a0:45:2e:66:59:d5:34:8b:53:00: 62:ee:87:1e:ca:2d:4b:6c:9f:5d:a4:6a:5a:fc:82: 66:cb:a7:27:b3:de:a4:f4:6b:b9:6c:1d:37:b8:13: 67:0f:9e:d0:d6:da:d3:cd:29:2b:7b:2b:cf:19:4f: 73:81:e5:c6:3b:aa:b1:0f:ea:97:79:80:52:a6:9e: 19:64:16:87:76:a2:ce:59:a9:c5:d6:fb:45:b0:a9: a9:57:72:b8:bb:d9:8d:b8:0e:16:c5:a2:05:68:7f: 4a:eb:7f:b2:e1:60:61:2c:b3:2c:9e:b3:f6:2f:19: 81:d0:9e:ee:3c:70:0d:47:3d:af:96:05:d0:85:7f: a7:3b:42:ec:56:23:65:34:d5:1e:0d:a4:ea:77:16: e1:ca:00:91:fe:51:bf:1a:52:e1:81:8d:fe:cf:01: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E5:E0:F4:DD:BC:FF:0B:04:85:05:4C:69:B1:33:6C:8A:EF:1E:BD X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:72:8c:81:af:e6:2e:3d:dd:3f:73:0f:e7:14:e2:b9:49:5e: 36:96:dc:de:fa:2d:da:48:13:39:7b:5a:0a:65:40:6f:87:21: 8f:0b:17:fb:4f:6e:32:f9:b8:e9:eb:27:9a:fc:f2:9e:11:76: 50:1e:48:3e:46:3b:d7:8d:83:26:e6:fa:42:76:a8:2b:9a:b5: b6:0b:83:80:63:ba:cf:f3:81:0d:14:d7:dd:e1:ad:6a:34:84: 46:54:dd:30:ac:6d:8a:a5:02:1a:b5:a0:8d:f3:78:73:d5:a2: 5b:b0:d4:4a:ab:76:a1:73:bc:d2:14:45:2d:1e:ba:3f:f8:91: 97:dd:fe:53:9e:59:59:2c:08:90:eb:bd:c9:51:7a:41:23:15: 72:93:99:d0:26:9c:c1:38:1d:17:4a:2f:16:f3:2d:6a:e1:21: 72:39:8a:48:32:97:72:1c:39:5c:b6:24:5f:2b:16:56:67:17: 16:7e:9a:b0:c8:3d:fa:f8:29:76:5c:d7:cf:63:23:d1:68:0e: 1f:c4:0c:ad:35:6a:dd:71:74:77:81:f7:45:72:39:15:ee:8b: 8f:84:7b:b6:41:85:26:b4:3f:17:4b:01:fc:54:28:91:62:e2: 6c:67:a6:f0:cd:1d:25:c9:df:ee:d1:47:ac:a3:be:aa:b3:03: ad:c4:70:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjQwNDMwMTYzMDEzWhcNMjQwNTA3MTYzMDEyWjAYMRYwFAYD VQQDEw02NjMxMWM5NS1lOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz63IbL1TJJbqUs2tG/lWSZx3QVzFLrodMSsffCIv/Lfinz+jQDVSqpjKxHPu COrhgBjEN8AKYTFifdY8EYPYrulqsx+OUNs32KvewiNGqLt1adEWyo+Id/QU8Vxb T6BFLmZZ1TSLUwBi7oceyi1LbJ9dpGpa/IJmy6cns96k9Gu5bB03uBNnD57Q1trT zSkreyvPGU9zgeXGO6qxD+qXeYBSpp4ZZBaHdqLOWanF1vtFsKmpV3K4u9mNuA4W xaIFaH9K63+y4WBhLLMsnrP2LxmB0J7uPHANRz2vlgXQhX+nO0LsViNlNNUeDaTq dxbhygCR/lG/GlLhgY3+zwFkvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbl4PTd vP8LBIUFTGmxM2yK7x69MB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhcoyBr+YuPd0/cw/nFOK5SV42ltze+i3aSBM5e1oKZUBvhyGPCxf7 T24y+bjp6yea/PKeEXZQHkg+RjvXjYMm5vpCdqgrmrW2C4OAY7rP84ENFNfd4a1q NIRGVN0wrG2KpQIataCN83hz1aJbsNRKq3ahc7zSFEUtHro/+JGX3f5TnllZLAiQ 673JUXpBIxVyk5nQJpzBOB0XSi8W8y1q4SFyOYpIMpdyHDlctiRfKxZWZxcWfpqw yD36+Cl2XNfPYyPRaA4fxAytNWrdcXR3gfdFcjkV7ouPhHu2QYUmtD8XSwH8VCiR YuJsZ6bwzR0lyd/u0Ueso76qswOtxHAX -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:03 2024 by rpki-client on console-fra.rpki-client.org