$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json) Hash identifier: p9IjosnQJ95rShYftRUE8thCQk5WqfXu1e3l6W4VZiM= Subject key identifier: 70:AA:5F:96:3D:AA:0A:C2:2F:38:50:9E:33:A3:17:A3:B3:27:38:E8 Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft Manifest number: 30 Signing time: Tue 21 May 2024 08:21:50 +0000 Manifest this update: Tue 21 May 2024 08:21:49 +0000 Manifest next update: Tue 28 May 2024 08:21:49 +0000 Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: VH1VTC8pLjQVYKLLOyu+lEoI957s2NuNQHB0lOAFHgA=) 2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: PgoHOzWdtFAiX9wHLBedgn5FNxi8QWWIqeVZn5s69aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Validity Not Before: May 21 08:21:49 2024 GMT Not After : May 28 08:21:49 2024 GMT Subject: CN=664c599e-509d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:8f:ff:46:64:95:50:ec:b9:6f:d1:b6:57: 3b:c9:91:8f:ef:f8:9c:c3:e7:65:9d:49:81:f5:0b: 87:95:94:7e:55:66:34:05:7d:64:17:90:ab:3d:c4: 22:f3:1c:4c:a7:57:7f:5c:07:8f:9f:4c:56:6f:b5: 12:29:bf:c7:cc:35:0b:69:0f:1c:14:1e:d2:29:a3: 69:3d:fd:07:3a:31:60:1f:4a:0c:f8:4b:33:eb:da: 2a:62:56:5c:8f:eb:2a:29:72:54:42:b0:75:89:76: d8:b0:22:ed:02:a9:d2:f8:7e:34:f4:5c:db:31:37: d6:f7:74:32:a1:1a:24:7a:1b:0a:fd:94:f2:31:c7: 53:9e:2e:fa:73:e0:5d:05:c4:cb:5b:e3:d8:a3:d6: 01:38:19:c3:cc:33:cb:33:b8:e6:46:35:5c:45:a3: b9:84:d0:eb:c1:73:bb:b5:d7:a9:ce:63:f1:f7:3a: cc:54:6d:51:d7:6a:37:f6:05:a4:ef:c1:98:40:59: 27:cc:78:f7:f7:fc:ef:70:0c:1d:68:b6:63:13:a3: ec:8d:e2:19:8d:cb:ca:22:fc:43:ec:46:c3:e1:05: ac:a8:b0:67:5b:bf:6a:ab:fa:63:91:0f:2a:75:81: 02:2d:fa:fe:e5:57:60:98:f3:fa:97:ad:d3:69:a9: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AA:5F:96:3D:AA:0A:C2:2F:38:50:9E:33:A3:17:A3:B3:27:38:E8 X509v3 Authority Key Identifier: keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:3f:1b:2a:05:8d:93:da:71:d4:3f:19:ba:26:76:06:19:66: 49:43:27:11:42:d0:fa:b6:ab:9a:58:f8:a2:da:b6:48:3d:f3: 28:ae:26:77:03:28:96:72:06:9b:97:cb:f1:80:11:b4:aa:be: 61:0c:15:cd:2b:07:ef:7b:65:61:a8:9c:50:28:07:ef:56:be: 2f:75:f9:dd:54:b4:a3:11:5e:ae:40:e3:ea:9f:ef:89:76:90: 12:b3:c5:78:41:a6:64:e0:f1:fb:bb:1b:70:0e:9f:ca:5c:09: 23:22:f4:d9:00:27:ea:51:d7:cf:07:cc:9b:99:1b:b4:cc:58: 06:98:70:ff:27:5e:fe:05:8d:79:05:38:c7:64:cf:40:9a:dc: 11:b5:d9:72:4a:8b:91:34:52:d4:d6:d6:6b:a1:e8:26:04:59: 25:c6:dc:60:f4:ff:26:b3:be:a4:6d:42:cf:34:82:04:06:4e: a9:4b:0a:8f:97:08:dc:83:f2:b9:8e:0f:74:9f:b3:da:30:bb: 6f:28:54:93:c2:f7:54:60:e8:61:26:ef:fe:c0:d2:a3:c9:26: 44:61:76:a9:42:0c:6d:0c:f3:c1:26:18:05:a1:2d:69:eb:6f: 2a:f0:c1:0b:93:e8:7c:fb:a2:b7:1e:84:58:0d:54:80:08:c7: eb:08:ff:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjI0OTExMC8GA1UEBRMoNERGQUYxMjU5OUJDOEE5RjcxREE2MEFCMzkyMEUwQTFG NDAxNThFNTAeFw0yNDA1MjEwODIxNDlaFw0yNDA1MjgwODIxNDlaMBgxFjAUBgNV BAMTDTY2NGM1OTllLTUwOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7MY//RmSVUOy5b9G2VzvJkY/v+JzD52WdSYH1C4eVlH5VZjQFfWQXkKs9xCLz HEynV39cB4+fTFZvtRIpv8fMNQtpDxwUHtIpo2k9/Qc6MWAfSgz4SzPr2ipiVlyP 6yopclRCsHWJdtiwIu0CqdL4fjT0XNsxN9b3dDKhGiR6Gwr9lPIxx1OeLvpz4F0F xMtb49ij1gE4GcPMM8szuOZGNVxFo7mE0OvBc7u116nOY/H3OsxUbVHXajf2BaTv wZhAWSfMePf3/O9wDB1otmMTo+yN4hmNy8oi/EPsRsPhBayosGdbv2qr+mORDyp1 gQIt+v7lV2CY8/qXrdNpqSlzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcKpflj2q CsIvOFCeM6MXo7MnOOgwHwYDVR0jBBgwFoAUTfrxJZm8ip9x2mCrOSDgofQBWOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MjQ5Lzk4NzI2RDZFRDE3 MDExRUVBNjE1MUM0REM0RjlBRTAyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldP VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVGZyeEpabThpcDl4Mm1Dck9TRGdvZlFCV09VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MjQ5Lzk4NzI2RDZFRDE3MDExRUVBNjE1MUM0REM0RjlBRTAyL1RmcnhKWm04aXA5 eDJtQ3JPU0Rnb2ZRQldPVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGI/GyoFjZPacdQ/GbomdgYZZklDJxFC0Pq2q5pY+KLatkg98yiuJncD KJZyBpuXy/GAEbSqvmEMFc0rB+97ZWGonFAoB+9Wvi91+d1UtKMRXq5A4+qf74l2 kBKzxXhBpmTg8fu7G3AOn8pcCSMi9NkAJ+pR188HzJuZG7TMWAaYcP8nXv4FjXkF OMdkz0Ca3BG12XJKi5E0UtTW1muh6CYEWSXG3GD0/yazvqRtQs80ggQGTqlLCo+X CNyD8rmOD3Sfs9owu28oVJPC91Rg6GEm7/7A0qPJJkRhdqlCDG0M88EmGAWhLWnr byrwwQuT6Hz7orcehFgNVIAIx+sI/ys= -----END CERTIFICATE-----Generated at Tue May 21 10:12:10 2024 by rpki-client on console-ams.rpki-client.org