$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json) Hash identifier: CYonxvSt1eparb/gGkHf8cUzdOupMhTHscTLUzxB8ec= Subject key identifier: CF:33:4D:14:DC:5C:57:05:4B:9A:4A:2A:F0:D0:34:2B:00:88:74:EA Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft Manifest number: 065D Signing time: Thu 02 May 2024 23:42:05 +0000 Manifest this update: Thu 02 May 2024 23:42:05 +0000 Manifest next update: Thu 09 May 2024 23:42:05 +0000 Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: y5NOJlRYie+8LD0Ss2Mp4JN6mK5h3ldpFk1fUK4jCYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Validity Not Before: May 2 23:42:05 2024 GMT Not After : May 9 23:42:05 2024 GMT Subject: CN=663424cd-eae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:57:89:19:95:d9:0b:8a:22:14:2c:af:54: 4f:58:c9:ba:f6:5b:f4:32:35:fb:22:88:64:e5:54: 14:69:de:4d:56:3a:61:f4:fe:73:39:ed:8b:91:3b: 39:68:8c:e5:be:52:2f:9a:11:39:47:af:19:69:6f: d4:f1:e0:1a:8d:0d:a7:ce:2b:63:f6:86:14:da:c4: 07:1c:f2:1a:db:9a:a6:90:69:09:d1:69:ee:a5:2a: 63:73:a6:e7:44:9c:e2:fc:97:13:84:ba:ef:0d:c4: 65:c1:e2:0e:d6:d9:9a:ff:c1:d3:a2:88:d2:a8:e4: 55:1f:06:59:40:a6:57:ed:59:fd:10:a8:ff:af:07: fc:64:8b:c1:51:de:f0:3a:0c:86:1c:42:e0:3a:fa: c0:e0:2f:97:c8:07:8d:3c:54:62:13:86:1c:43:94: 35:9a:73:c6:bf:eb:b7:fb:72:ec:e3:d5:a9:33:6f: 26:84:ba:d6:89:a6:ae:7f:3b:12:b8:ff:5e:32:46: dc:cf:0a:67:e1:55:47:73:36:1b:b2:bf:cc:b9:0c: a4:4c:d2:b4:a4:2d:16:d4:d1:47:3a:01:d6:6e:0f: bc:eb:24:06:58:cc:c9:da:d5:b1:74:57:40:0d:66: 47:fe:ff:71:ee:07:1f:9a:cb:2b:be:8a:f1:52:6f: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:33:4D:14:DC:5C:57:05:4B:9A:4A:2A:F0:D0:34:2B:00:88:74:EA X509v3 Authority Key Identifier: keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:01:88:83:7d:fe:01:b1:25:53:f6:85:3c:73:e1:60:22:ef: 8a:87:42:6f:c5:2f:83:ae:0d:d2:94:0b:db:b6:9f:a8:14:34: ec:e0:65:eb:a2:74:33:46:ea:fe:a9:c7:c5:b5:02:09:6e:23: 83:c7:28:12:b8:43:a2:be:a1:f5:71:be:e7:d1:69:71:93:10: 70:c8:55:c2:90:37:43:32:53:fe:2f:d3:9d:d6:1c:dd:0e:36: 2d:7b:e1:3b:1a:f9:f5:d6:92:ec:4b:e8:a2:3f:6f:c3:eb:6a: 96:79:ee:3e:a7:64:b9:66:8e:78:69:1b:e8:ad:e5:68:db:8e: 9e:55:7d:13:c3:98:6a:bd:79:c5:ae:bc:b7:3f:52:2e:b9:87: 72:1e:44:39:f1:86:bb:34:16:a5:8c:63:b9:e3:66:46:46:4f: d4:84:05:0d:9a:f2:1d:00:3a:eb:73:b6:27:fc:db:9c:3a:ee: ae:b8:91:a4:ba:dd:d7:dc:68:8f:e0:3c:4b:d4:54:bb:fe:c7: f4:b1:86:9a:22:0c:b2:ec:83:1d:e2:38:08:43:d3:15:6e:d7: c1:a1:01:4c:8f:35:69:1d:72:a7:e0:69:45:ff:7f:78:a9:87: 00:09:8a:4a:d1:c6:b4:2d:be:6c:1b:f0:8a:f6:de:64:56:f0: fa:c9:18:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0 MDY3QTM5QUMwHhcNMjQwNTAyMjM0MjA1WhcNMjQwNTA5MjM0MjA1WjAYMRYwFAYD VQQDEw02NjM0MjRjZC1lYWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XNXiRmV2QuKIhQsr1RPWMm69lv0MjX7Iohk5VQUad5NVjph9P5zOe2LkTs5 aIzlvlIvmhE5R68ZaW/U8eAajQ2nzitj9oYU2sQHHPIa25qmkGkJ0WnupSpjc6bn RJzi/JcThLrvDcRlweIO1tma/8HToojSqORVHwZZQKZX7Vn9EKj/rwf8ZIvBUd7w OgyGHELgOvrA4C+XyAeNPFRiE4YcQ5Q1mnPGv+u3+3Ls49WpM28mhLrWiaaufzsS uP9eMkbczwpn4VVHczYbsr/MuQykTNK0pC0W1NFHOgHWbg+86yQGWMzJ2tWxdFdA DWZH/v9x7gcfmssrvorxUm/m7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8zTRTc XFcFS5pKKvDQNCsAiHTqMB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPAYiDff4BsSVT9oU8c+FgIu+Kh0JvxS+Drg3SlAvbtp+oFDTs4GXr onQzRur+qcfFtQIJbiODxygSuEOivqH1cb7n0WlxkxBwyFXCkDdDMlP+L9Od1hzd DjYte+E7Gvn11pLsS+iiP2/D62qWee4+p2S5Zo54aRvoreVo246eVX0Tw5hqvXnF rry3P1IuuYdyHkQ58Ya7NBaljGO542ZGRk/UhAUNmvIdADrrc7Yn/NucOu6uuJGk ut3X3GiP4DxL1FS7/sf0sYaaIgyy7IMd4jgIQ9MVbtfBoQFMjzVpHXKn4GlF/394 qYcACYpK0ca0Lb5sG/CK9t5kVvD6yRiW -----END CERTIFICATE-----Generated at Fri May 3 00:28:39 2024 by rpki-client on console-fra.rpki-client.org