$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: d+oQMazYiuYGJfGDOltr8KXDn41us/t4iIZQgagBVoM= Subject key identifier: E9:91:A6:81:1C:20:DB:09:BC:69:CE:2F:28:99:9B:25:5C:41:B4:37 Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: E5 Signing time: Fri 03 May 2024 05:55:59 +0000 Manifest this update: Fri 03 May 2024 05:55:58 +0000 Manifest next update: Fri 10 May 2024 05:55:58 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: 4+8AHD/3bw9Q2ZbhwzeCvIAmSRfOoPAvG1PWZ1YcmSo=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: IXslxgSJhTlpoVbFwWVy3ZozH3aOAaC1X+unWEQB7Eo=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: oqPAnhsDEfKnS2zRK2RMnNFxqtDUr2e/ue/ry3YcM+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: May 3 05:55:58 2024 GMT Not After : May 10 05:55:58 2024 GMT Subject: CN=66347c6f-2a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:74:28:e8:f7:0d:b5:93:ec:2e:00:27:dc: 80:f2:3d:60:00:73:1b:3f:90:15:79:1a:38:cb:12: bd:bc:7c:37:62:0a:0b:e1:11:f5:92:5c:8a:a2:f4: 7d:93:53:74:a6:00:44:74:14:5c:96:aa:29:94:3f: ff:0a:49:31:e1:98:b5:ab:c1:f7:1a:62:37:4d:69: 87:cb:43:29:0e:cf:26:e4:fc:09:69:26:d5:65:a2: c8:12:8b:18:8e:47:61:e2:c6:b9:c0:2a:52:bd:8f: 95:c8:7b:ef:33:fa:69:3f:79:f4:fc:2c:64:f0:be: c2:63:6f:ad:55:37:30:e4:39:4a:77:53:bd:9e:c7: 13:74:9a:0b:a8:ff:d1:04:0d:9e:df:66:20:e8:e0: 27:d1:a8:81:10:92:72:3c:48:2b:5f:49:a4:c7:9c: 9f:9b:05:9b:24:57:29:63:cb:6e:b7:7b:38:8c:56: b0:26:b6:3c:a2:b3:36:ae:52:d8:69:b2:17:77:23: 64:fd:e0:e1:a4:17:f6:62:08:5a:de:c3:70:09:88: 79:e3:a2:ea:04:75:0a:15:ec:01:18:12:3b:3d:bc: 94:5a:5d:ba:3b:18:85:53:a4:a9:1a:15:f3:b7:67: a4:39:64:d9:cc:7e:92:02:83:51:c2:90:81:73:53: d9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:A6:81:1C:20:DB:09:BC:69:CE:2F:28:99:9B:25:5C:41:B4:37 X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:de:21:86:92:3c:22:eb:14:d0:0a:21:9b:98:ea:bc:eb:25: 8b:27:99:6b:6f:20:f6:01:7e:21:88:25:16:dc:58:c5:b1:36: cb:8c:d7:70:3d:70:ad:41:51:81:8c:3a:79:88:9c:ee:da:19: e9:5a:9c:f4:df:55:50:b8:b4:53:48:63:56:63:ea:d3:68:c1: 2e:27:5e:60:b9:5c:ca:84:fc:68:66:d5:2e:b7:e6:8d:80:44: fc:f2:9b:fe:00:16:b8:10:c4:d3:9f:1b:0c:01:f5:76:a0:bf: 30:f4:2f:a0:e0:67:48:58:f6:0f:49:94:09:11:bd:97:ba:43: 58:75:3d:a2:3d:bd:5f:78:cc:b1:12:4c:2d:5c:80:b1:b3:1b: e6:96:1a:e7:d3:24:79:7d:57:6b:89:6b:de:64:fe:fa:d6:51: dd:f4:b6:5e:bc:d0:be:b6:0e:d9:07:d8:ed:02:af:e2:8e:c3: 55:a3:e7:6f:1d:7d:76:9f:39:56:ba:6d:1c:20:93:8b:a0:4c: eb:e7:0f:ce:20:48:fd:32:fc:16:da:5c:ad:8e:3b:fc:82:34: 6e:c7:9f:d2:25:14:fa:cf:35:41:52:ac:7b:2d:f8:b0:b9:82: ab:ee:e7:30:7f:53:d3:4d:03:1a:d6:8e:67:da:c3:1b:fb:58: 95:6a:2a:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjQwNTAzMDU1NTU4WhcNMjQwNTEwMDU1NTU4WjAYMRYwFAYD VQQDEw02NjM0N2M2Zi0yYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LN0KOj3DbWT7C4AJ9yA8j1gAHMbP5AVeRo4yxK9vHw3YgoL4RH1klyKovR9 k1N0pgBEdBRclqoplD//Ckkx4Zi1q8H3GmI3TWmHy0MpDs8m5PwJaSbVZaLIEosY jkdh4sa5wCpSvY+VyHvvM/ppP3n0/Cxk8L7CY2+tVTcw5DlKd1O9nscTdJoLqP/R BA2e32Yg6OAn0aiBEJJyPEgrX0mkx5yfmwWbJFcpY8tut3s4jFawJrY8orM2rlLY abIXdyNk/eDhpBf2Ygha3sNwCYh546LqBHUKFewBGBI7PbyUWl26OxiFU6SpGhXz t2ekOWTZzH6SAoNRwpCBc1PZnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmRpoEc INsJvGnOLyiZmyVcQbQ3MB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq3iGGkjwi6xTQCiGbmOq86yWLJ5lrbyD2AX4hiCUW3FjFsTbLjNdw PXCtQVGBjDp5iJzu2hnpWpz031VQuLRTSGNWY+rTaMEuJ15guVzKhPxoZtUut+aN gET88pv+ABa4EMTTnxsMAfV2oL8w9C+g4GdIWPYPSZQJEb2XukNYdT2iPb1feMyx EkwtXICxsxvmlhrn0yR5fVdriWveZP761lHd9LZevNC+tg7ZB9jtAq/ijsNVo+dv HX12nzlWum0cIJOLoEzr5w/OIEj9MvwW2lytjjv8gjRux5/SJRT6zzVBUqx7Lfiw uYKr7ucwf1PTTQMa1o5n2sMb+1iVaipS -----END CERTIFICATE-----Generated at Fri May 3 06:29:20 2024 by rpki-client on console-fra.rpki-client.org