$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft File: mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json) Hash identifier: dkF1Rb0rTeDq8gXWXb+SmS2vuvTjwPWLxi+5zVnbKEU= Subject key identifier: 21:0A:79:A6:AD:97:FF:BF:0C:FD:4E:9D:7B:25:04:DC:B4:6B:98:D9 Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 Certificate issuer: /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Certificate serial: 20D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft Manifest number: 20BF Signing time: Sat 04 May 2024 16:19:45 +0000 Manifest this update: Sat 04 May 2024 16:19:44 +0000 Manifest next update: Sat 11 May 2024 16:19:44 +0000 Files and hashes: 1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: 2CwlU7i14GKgD4X2STbpWizTfdKsjIUvElc8uRtkNI8=) 2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: O+MHFL5HucSSSkSZxHxmzfF8b/+aFHUTT5vt1LsMrv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8407 (0x20d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Validity Not Before: May 4 16:19:44 2024 GMT Not After : May 11 16:19:44 2024 GMT Subject: CN=66366020-9ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:d6:0c:04:7c:83:03:7a:98:4e:b4:23:1e: 57:72:ba:1f:4f:d4:c6:1a:12:4c:21:6d:73:05:65: 7a:c3:c9:b1:3f:6a:2a:50:2c:a4:10:0b:cd:8c:26: b1:33:c2:c9:e4:9d:cf:d2:87:be:9c:7e:21:82:9b: 6a:14:20:7d:f6:6d:eb:47:25:94:cc:55:39:ff:81: 1c:96:8e:0b:61:10:77:ef:c4:44:f8:56:85:d6:8c: dc:f6:2a:af:14:85:f6:ce:a1:14:ad:1e:75:8f:3e: 5e:a8:a3:cd:d7:76:95:96:cf:40:c6:2f:5f:2f:47: 5d:22:ad:77:a4:8d:bf:2a:05:6c:4a:a1:44:99:2d: 88:af:59:59:c2:56:ed:02:be:ed:7f:62:24:de:31: cf:c6:9e:1e:be:7f:a1:8c:01:48:ef:5a:f4:fd:60: ac:91:a8:c5:79:bd:02:d8:9a:33:86:52:76:10:db: 1b:f3:5e:df:d5:d8:ed:f0:48:4c:f7:f9:c0:bf:fd: c5:6d:3d:c0:1d:e8:7e:4e:34:c3:25:69:a3:f0:04: ca:2e:ea:8b:72:73:25:78:cb:18:2c:ef:88:e3:29: 68:b1:a9:3f:5c:a8:e3:13:b1:ff:5a:d2:a2:34:09: 72:9f:d3:2a:f6:b2:69:2d:fd:0d:1e:c8:88:b1:ff: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0A:79:A6:AD:97:FF:BF:0C:FD:4E:9D:7B:25:04:DC:B4:6B:98:D9 X509v3 Authority Key Identifier: keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:cc:9f:21:d6:d4:ad:6d:22:80:86:68:3b:7d:fa:74:1c:6b: ca:be:8d:28:e5:62:05:a5:8a:7a:fb:87:5f:9a:68:cc:1f:ce: 35:78:10:f7:71:f6:53:4a:57:48:b8:4a:24:54:04:b9:61:3b: ec:bb:b8:1d:7f:23:e3:28:0a:f9:a4:9f:7e:19:9f:46:f3:53: 7c:0a:69:c8:a5:43:53:90:20:e7:cb:8c:69:04:4b:4f:85:9d: 1e:c1:a1:20:a9:36:1f:d9:97:f0:fd:71:6e:a8:3c:b7:31:ef: b6:58:db:36:ac:cf:d3:a8:bf:cc:47:3f:ea:5b:7f:93:5a:3d: 9f:8f:18:07:32:20:22:d3:00:1f:fc:b3:1e:fd:42:92:d7:ff: 6f:9b:28:98:a8:b0:ce:e3:8f:15:05:63:34:78:99:12:a9:a5: 50:b0:38:22:76:0b:cf:50:65:6e:5f:2d:3e:37:4f:bc:30:37: f2:2d:22:5a:20:62:0f:7f:df:2d:78:98:63:2b:3e:9f:fc:d3: 9e:1b:3b:2e:d0:58:67:b1:a8:bc:cc:f4:57:23:b7:8e:5e:79: d7:32:1a:ef:10:3a:35:87:78:f2:ab:28:ad:93:69:e5:ac:73: 93:3b:8d:92:43:de:92:20:4e:63:e0:4d:12:09:6c:d5:b5:96: d0:e9:34:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICINcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVEOTMxMTAvBgNVBAUTKDk5MzVDNjM5QjNDMzUxREJFRDVCMjkzOTk0RjcyRjgx NENDRjlCQTkwHhcNMjQwNTA0MTYxOTQ0WhcNMjQwNTExMTYxOTQ0WjAYMRYwFAYD VQQDEw02NjM2NjAyMC05ZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv3WDAR8gwN6mE60Ix5XcrofT9TGGhJMIW1zBWV6w8mxP2oqUCykEAvNjCax M8LJ5J3P0oe+nH4hgptqFCB99m3rRyWUzFU5/4Eclo4LYRB378RE+FaF1ozc9iqv FIX2zqEUrR51jz5eqKPN13aVls9Axi9fL0ddIq13pI2/KgVsSqFEmS2Ir1lZwlbt Ar7tf2Ik3jHPxp4evn+hjAFI71r0/WCskajFeb0C2JozhlJ2ENsb817f1djt8EhM 9/nAv/3FbT3AHeh+TjTDJWmj8ATKLuqLcnMleMsYLO+I4ylosak/XKjjE7H/WtKi NAlyn9Mq9rJpLf0NHsiIsf9uvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEKeaat l/+/DP1OnXslBNy0a5jZMB8GA1UdIwQYMBaAFJk1xjmzw1Hb7VspOZT3L4FMz5up MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUQ5My81QzEwQTgxMERD NUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVkdnRXeWs1bFBjdmdVelBt NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21UWEdPYlBEVWR2dFd5azVsUGN2Z1V6UG02ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUQ5My81QzEwQTgxMERDNUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVk dnRXeWs1bFBjdmdVelBtNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCzJ8h1tStbSKAhmg7ffp0HGvKvo0o5WIFpYp6+4dfmmjMH841eBD3 cfZTSldIuEokVAS5YTvsu7gdfyPjKAr5pJ9+GZ9G81N8CmnIpUNTkCDny4xpBEtP hZ0ewaEgqTYf2Zfw/XFuqDy3Me+2WNs2rM/TqL/MRz/qW3+TWj2fjxgHMiAi0wAf /LMe/UKS1/9vmyiYqLDO448VBWM0eJkSqaVQsDgidgvPUGVuXy0+N0+8MDfyLSJa IGIPf98teJhjKz6f/NOeGzsu0Fhnsai8zPRXI7eOXnnXMhrvEDo1h3jyqyitk2nl rHOTO42SQ96SIE5j4E0SCWzVtZbQ6TTe -----END CERTIFICATE-----Generated at Sat May 4 17:19:49 2024 by rpki-client on console-fra.rpki-client.org