$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: 2HqnmyXUlJR7eCBB8aPg/tRhicss9QRti+Hp9XHILRc= Subject key identifier: BA:25:A4:DA:73:AA:38:93:E1:62:E5:22:7C:CC:0F:72:13:D9:C7:8F Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 046C Signing time: Sun 05 May 2024 01:58:20 +0000 Manifest this update: Sun 05 May 2024 01:58:20 +0000 Manifest next update: Sun 12 May 2024 01:58:20 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: sICStCGzMa3mhcnG4V4REJp4FnwX0oaJL8sWi4PrTwY=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: MkuXLduwgMRE6SWb3Dh7/c59HVeD3A/VTs/2YsS9+78=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: bNNSJFnup1JZq7O01x97W0DgU8x7B5elbJ6Ai6OxWdM=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: KGYq8ECCJ1LG1bk9CxBMWB8BJeNY2cZInj8VZnN1qgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: May 5 01:58:20 2024 GMT Not After : May 12 01:58:20 2024 GMT Subject: CN=6636e7bc-56bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7b:13:fb:77:65:14:87:92:83:8a:84:b1:41: fc:95:5d:c1:54:b8:52:e2:71:ad:a3:3f:9c:b4:b3: 72:7c:29:6e:2a:a4:3e:d4:a1:62:6a:5f:27:d8:a4: 31:2e:fe:ff:81:65:47:c6:a9:1a:9e:c8:e8:91:2c: 06:4c:d6:e5:bb:90:6a:1d:91:8f:e7:5f:a9:ff:90: d2:26:60:19:1e:1c:aa:4e:f7:30:f0:45:81:a8:af: 90:0b:c7:4f:cd:d1:43:67:94:77:0d:99:44:51:36: c1:49:fa:dc:ef:24:0e:52:dd:32:c8:56:f5:3e:b1: 02:35:ba:8a:a4:08:84:9a:1d:e2:91:ce:36:b8:10: bb:ce:65:b6:47:4f:3c:38:06:78:b4:22:48:3f:a4: 04:fe:7b:ae:35:0c:ec:1c:0f:ed:fd:ec:de:2e:29: 71:0e:da:23:a9:96:8f:7d:21:f0:02:58:9b:c2:0c: b0:40:85:b1:00:8f:e3:90:d5:cd:5e:40:d8:3c:ee: f7:6c:0e:c5:2f:f7:5f:7d:78:54:a3:fc:f4:94:cb: e4:a4:0e:21:54:58:e1:6c:e2:91:8c:3f:f1:08:64: a7:5b:eb:1f:42:c5:7a:5d:70:57:8d:0c:e9:67:c7: a2:36:30:3c:3a:15:24:42:e4:94:43:ab:0b:9c:9a: 3b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:25:A4:DA:73:AA:38:93:E1:62:E5:22:7C:CC:0F:72:13:D9:C7:8F X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:be:54:a3:ef:52:b3:48:9b:a0:65:76:7b:2d:c3:48:2a:ee: b5:ef:8a:b1:6c:70:4e:fc:21:b1:a2:01:8f:ac:1e:35:00:3c: 0e:4b:d0:9f:52:ba:a4:a8:76:97:67:4c:00:3b:b3:3f:e6:08: 3d:43:b4:2b:2f:2c:c8:70:35:e2:11:0b:8d:ba:96:36:28:19: bf:fd:a9:bd:11:68:5d:1c:d7:96:12:b6:24:47:2b:97:c6:88: 30:8b:5d:92:ce:45:07:4a:ce:90:e2:47:5e:64:c5:d4:a6:3c: 54:8b:c8:35:24:86:53:01:f6:ad:a3:be:50:8f:5a:d8:d3:4d: 88:fb:c8:ad:ed:14:0f:b7:4a:94:cf:7d:1e:ce:75:a2:ae:48: cc:5e:45:c3:eb:f1:61:00:97:cf:7f:74:b9:a1:03:ef:e6:33: 01:9b:e1:32:8c:5b:f1:e4:f8:04:e8:de:62:0b:e4:a6:e0:8d: fe:6b:6a:6c:f6:1f:71:ab:dd:8a:cb:54:20:6b:52:7c:72:a0: 43:67:c1:1e:06:35:53:62:dd:86:4a:b0:0c:07:e9:4d:61:53: 1c:2b:6d:5d:c0:15:81:9a:c5:f4:b4:80:b6:06:04:e8:6f:14: 02:1f:9b:57:bf:85:6b:10:d4:45:ed:76:b5:3b:0d:d8:a7:ba: 4f:1b:f6:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjQwNTA1MDE1ODIwWhcNMjQwNTEyMDE1ODIwWjAYMRYwFAYD VQQDEw02NjM2ZTdiYy01NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33sT+3dlFIeSg4qEsUH8lV3BVLhS4nGtoz+ctLNyfCluKqQ+1KFial8n2KQx Lv7/gWVHxqkansjokSwGTNblu5BqHZGP51+p/5DSJmAZHhyqTvcw8EWBqK+QC8dP zdFDZ5R3DZlEUTbBSfrc7yQOUt0yyFb1PrECNbqKpAiEmh3ikc42uBC7zmW2R088 OAZ4tCJIP6QE/nuuNQzsHA/t/ezeLilxDtojqZaPfSHwAlibwgywQIWxAI/jkNXN XkDYPO73bA7FL/dffXhUo/z0lMvkpA4hVFjhbOKRjD/xCGSnW+sfQsV6XXBXjQzp Z8eiNjA8OhUkQuSUQ6sLnJo7owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLolpNpz qjiT4WLlInzMD3IT2cePMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHvlSj71KzSJugZXZ7LcNIKu6174qxbHBO/CGxogGPrB41ADwOS9Cf UrqkqHaXZ0wAO7M/5gg9Q7QrLyzIcDXiEQuNupY2KBm//am9EWhdHNeWErYkRyuX xogwi12SzkUHSs6Q4kdeZMXUpjxUi8g1JIZTAfato75Qj1rY002I+8it7RQPt0qU z30eznWirkjMXkXD6/FhAJfPf3S5oQPv5jMBm+EyjFvx5PgE6N5iC+Sm4I3+a2ps 9h9xq92Ky1Qga1J8cqBDZ8EeBjVTYt2GSrAMB+lNYVMcK21dwBWBmsX0tIC2BgTo bxQCH5tXv4VrENRF7Xa1Ow3Yp7pPG/ZO -----END CERTIFICATE-----Generated at Sun May 5 02:33:37 2024 by rpki-client on console-fra.rpki-client.org