$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: 6yzvF05rn2m4tfG9n7wIW4CoZmjg15XGCqIaW9JYSNk= Subject key identifier: FE:5F:7F:06:77:F8:05:AC:4C:46:4C:7D:7D:F0:08:6F:7A:22:5B:AF Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 0123 Signing time: Fri 03 May 2024 05:14:37 +0000 Manifest this update: Fri 03 May 2024 05:14:36 +0000 Manifest next update: Fri 10 May 2024 05:14:36 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: klvgdtD93VPavDdn3jAR06c/LAwS7yIJrNbLf+hS1I4=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: s9lJG+Z0E0MfohIZewJo6sJJ0DeLoO8nyC5DM7qx6gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: May 3 05:14:36 2024 GMT Not After : May 10 05:14:36 2024 GMT Subject: CN=663472bd-93e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:22:d8:e0:81:6b:2f:97:3b:e2:a5:b3:64: 36:26:04:47:95:71:d9:40:7a:e7:94:bd:cb:a8:5f: 10:13:86:62:7a:19:07:9e:9d:82:da:62:d0:3b:3d: 68:b4:50:29:7e:c7:71:dd:92:79:b8:29:58:2a:1e: 73:6e:53:6e:f3:9e:45:10:8f:a0:39:38:59:cb:2c: b8:3c:56:44:bb:28:4f:08:33:99:f4:ff:fd:66:df: 85:00:21:f6:16:1d:5c:e1:d3:a5:3c:59:da:bb:0d: 07:b5:60:f5:7c:58:d7:9b:ae:32:90:2e:7b:21:66: 6b:64:2f:bd:2e:8a:55:49:8b:1c:25:20:ba:ff:c0: 0f:a8:42:7f:06:bd:de:cc:c7:99:4c:87:32:f5:b5: 69:77:ce:19:6d:c8:86:6f:8f:ea:e7:ae:b9:47:d2: c1:7b:94:da:4f:31:87:2a:f0:70:03:1e:89:d6:eb: de:b2:60:5a:ab:d9:5b:97:21:c9:ea:a0:d1:f8:b0: 71:83:ef:eb:3a:36:89:54:a1:9d:cf:b5:9b:69:97: 8f:78:ed:90:46:b0:62:be:b2:9b:0b:f0:f1:b8:59: 07:22:99:6c:79:e9:1e:e7:96:52:a4:bd:14:86:a1: 27:84:35:59:54:ee:aa:f7:d1:8d:d7:f5:89:49:88: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5F:7F:06:77:F8:05:AC:4C:46:4C:7D:7D:F0:08:6F:7A:22:5B:AF X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a6:2c:34:c8:e3:1f:9e:5a:3b:b5:98:ff:67:ac:43:4f:2f: 63:7c:b9:89:ae:8f:d8:88:65:0f:02:68:19:70:92:89:34:6f: 60:f8:d0:c0:c8:fa:96:7a:00:d1:3c:96:30:b2:e0:2c:36:22: 7d:2c:69:43:e6:e1:6d:6a:00:ff:1d:11:ea:10:e5:bd:f5:a2: c3:6c:75:e4:f5:b1:74:5f:9f:62:41:21:e8:4d:80:ad:84:a7: 48:45:32:81:25:6c:1a:bf:d8:ed:f0:be:46:a3:90:b4:5c:c4: a7:7c:6a:50:37:3e:f2:53:a6:31:81:2c:0c:91:e0:27:55:05: a2:1a:f7:b8:2d:26:d0:e6:89:da:1e:5a:a1:8a:35:9b:91:cd: 1e:33:c8:78:c1:62:73:09:e2:f9:bd:82:26:f9:37:56:1c:08: 57:7c:54:cd:aa:a3:bb:1c:20:90:7c:88:20:53:a4:37:ce:5a: f0:9f:e4:f2:b5:1a:2a:0b:c2:05:fa:d2:72:26:99:15:24:64: bc:2a:bb:49:82:3d:38:72:a0:e7:61:40:df:4e:23:04:d1:8c: 48:19:f2:c8:fb:fa:ce:48:2d:c0:e4:0c:bd:a1:86:7f:de:fa: 9e:39:27:65:37:1d:40:10:32:18:dd:df:ad:82:3b:5b:4a:66: 69:37:06:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjQwNTAzMDUxNDM2WhcNMjQwNTEwMDUxNDM2WjAYMRYwFAYD VQQDEw02NjM0NzJiZC05M2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5soi2OCBay+XO+Kls2Q2JgRHlXHZQHrnlL3LqF8QE4ZiehkHnp2C2mLQOz1o tFApfsdx3ZJ5uClYKh5zblNu855FEI+gOThZyyy4PFZEuyhPCDOZ9P/9Zt+FACH2 Fh1c4dOlPFnauw0HtWD1fFjXm64ykC57IWZrZC+9LopVSYscJSC6/8APqEJ/Br3e zMeZTIcy9bVpd84ZbciGb4/q5665R9LBe5TaTzGHKvBwAx6J1uvesmBaq9lblyHJ 6qDR+LBxg+/rOjaJVKGdz7WbaZePeO2QRrBivrKbC/DxuFkHIplseeke55ZSpL0U hqEnhDVZVO6q99GN1/WJSYiS4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5ffwZ3 +AWsTEZMfX3wCG96IluvMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYpiw0yOMfnlo7tZj/Z6xDTy9jfLmJro/YiGUPAmgZcJKJNG9g+NDA yPqWegDRPJYwsuAsNiJ9LGlD5uFtagD/HRHqEOW99aLDbHXk9bF0X59iQSHoTYCt hKdIRTKBJWwav9jt8L5Go5C0XMSnfGpQNz7yU6YxgSwMkeAnVQWiGve4LSbQ5ona HlqhijWbkc0eM8h4wWJzCeL5vYIm+TdWHAhXfFTNqqO7HCCQfIggU6Q3zlrwn+Ty tRoqC8IF+tJyJpkVJGS8KrtJgj04cqDnYUDfTiME0YxIGfLI+/rOSC3A5Ay9oYZ/ 3vqeOSdlNx1AEDIY3d+tgjtbSmZpNwZ3 -----END CERTIFICATE-----Generated at Fri May 3 06:28:42 2024 by rpki-client on console-fra.rpki-client.org