$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json) Hash identifier: Gg0U3P4oefFOHufw5YfyABH7BpC042nxgHyjmZI8JO0= Subject key identifier: CF:8D:80:FB:BB:0F:5B:B3:92:4E:73:FB:06:51:CC:B3:9B:50:8B:AF Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Certificate serial: 173A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft Manifest number: 1732 Signing time: Mon 06 May 2024 17:08:33 +0000 Manifest this update: Mon 06 May 2024 17:08:32 +0000 Manifest next update: Mon 13 May 2024 17:08:32 +0000 Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: 4juN7xF0D0Bkyw3nyF4N5i0REZyq3WAuQHzKLFGS8WM=) 2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: FsaFu6MkjeuiES2KGNl0DOyMgemSFW94x8yOeCJ7jiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 17:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5946 (0x173a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42 Validity Not Before: May 6 17:08:32 2024 GMT Not After : May 13 17:08:32 2024 GMT Subject: CN=66390e91-0385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:02:b3:0f:e1:dc:d6:80:61:af:49:46:b9: 2c:40:4f:fb:01:e1:f2:19:82:7c:c1:26:5f:98:98: c0:3f:e7:43:b9:52:a4:d9:5f:29:aa:b2:10:2e:f7: 66:ea:02:73:5b:2f:a7:cc:d3:55:b1:a5:4b:05:3e: 1c:8b:62:d4:d0:45:42:a6:60:cf:1c:2f:42:2b:32: ce:f3:ad:79:3f:ab:ed:c6:47:f4:13:b7:fe:1e:ef: 4a:fa:bc:93:cf:87:74:a9:3e:bf:e3:9f:a1:57:b1: 28:23:ec:f4:78:9a:82:0a:44:91:c1:f8:a1:17:70: 64:ba:61:97:42:8a:be:89:41:22:8f:31:7a:c6:a5: 3f:11:6d:7a:4d:b1:43:62:2d:f8:63:f9:65:ca:95: fd:35:40:f7:83:01:ee:80:9e:6a:29:c4:3d:00:f5: 2a:43:3e:0a:a1:03:17:5d:1a:72:93:39:1c:e2:a4: 03:79:04:2c:fb:6f:33:63:f7:a6:d4:3d:c4:a7:c4: fa:ee:a9:4c:c8:70:f2:1d:64:49:72:d2:5e:2b:65: 38:e1:06:ea:bd:48:09:05:44:a8:b6:52:38:57:26: 36:6d:26:b7:48:54:58:bc:3f:97:ff:7d:93:d1:34: b1:38:12:0d:1d:ff:b5:25:6a:4f:48:1e:4d:af:de: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8D:80:FB:BB:0F:5B:B3:92:4E:73:FB:06:51:CC:B3:9B:50:8B:AF X509v3 Authority Key Identifier: keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e8:6e:14:7d:a3:61:98:52:e0:ab:bf:32:a1:75:d1:5d:38: dc:a5:7e:6d:e0:f0:a9:52:40:e7:aa:da:1a:2d:17:88:d3:f6: 6a:be:b4:d3:ee:1c:ed:c9:4a:59:7d:d2:2f:e6:65:8a:26:d2: 36:46:9c:52:f2:01:bd:49:a3:c8:e6:2e:0c:9c:74:d1:a5:90: 3f:f4:3b:bd:83:75:85:fe:c4:e5:88:45:5b:13:d5:27:43:78: 8c:6c:c0:f5:c3:61:da:43:a7:ce:85:5f:a5:dc:0f:b1:d9:b5: 2e:a3:a4:0b:62:24:21:da:9a:9f:6d:12:e1:b2:c4:61:32:95: dd:cf:e8:4f:ef:65:94:f8:9b:f7:a9:98:39:4f:9d:02:d5:de: 86:c7:15:1a:97:03:cf:75:20:5e:77:b4:ac:2d:36:0b:25:db: fe:19:2f:18:17:f7:f6:08:40:0f:fc:90:d1:0e:71:ef:13:cc: a7:b7:ff:20:99:5d:36:39:cc:1f:e3:65:9d:29:51:cc:1b:7d: e9:97:50:3c:c7:dc:34:a8:92:a9:09:57:d6:e8:4d:0f:7c:38: 00:cb:c3:cc:7a:3e:49:0d:c8:b7:de:18:b2:07:1b:6a:5a:58: f7:08:25:9b:45:60:4e:1a:08:02:c0:91:ac:fb:d6:bb:d5:17: 66:8d:16:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEwRTQxMTAvBgNVBAUTKDRDMkU2MjcxNjMyMEFGRDRBMDE3MDA2NzZCRThCRjky NjRGNDVFNDIwHhcNMjQwNTA2MTcwODMyWhcNMjQwNTEzMTcwODMyWjAYMRYwFAYD VQQDEw02NjM5MGU5MS0wMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfUCsw/h3NaAYa9JRrksQE/7AeHyGYJ8wSZfmJjAP+dDuVKk2V8pqrIQLvdm 6gJzWy+nzNNVsaVLBT4ci2LU0EVCpmDPHC9CKzLO8615P6vtxkf0E7f+Hu9K+ryT z4d0qT6/45+hV7EoI+z0eJqCCkSRwfihF3BkumGXQoq+iUEijzF6xqU/EW16TbFD Yi34Y/llypX9NUD3gwHugJ5qKcQ9APUqQz4KoQMXXRpykzkc4qQDeQQs+28zY/em 1D3Ep8T67qlMyHDyHWRJctJeK2U44QbqvUgJBUSotlI4VyY2bSa3SFRYvD+X/32T 0TSxOBINHf+1JWpPSB5Nr97oWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+NgPu7 D1uzkk5z+wZRzLObUIuvMB8GA1UdIwQYMBaAFEwuYnFjIK/UoBcAZ2vov5Jk9F5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTBFNC80NDk4NjhGQ0I4 ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5U2dGd0JuYS1pX2ttVDBY a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDNWljV01ncjlTZ0Z3Qm5hLWlfa21UMFhrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTBFNC80NDk4NjhGQ0I4ODUxMUU3QTQ4Mjg5MUFDNEY5QUUwMi9UQzVpY1dNZ3I5 U2dGd0JuYS1pX2ttVDBYa0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk6G4UfaNhmFLgq78yoXXRXTjcpX5t4PCpUkDnqtoaLReI0/ZqvrTT 7hztyUpZfdIv5mWKJtI2RpxS8gG9SaPI5i4MnHTRpZA/9Du9g3WF/sTliEVbE9Un Q3iMbMD1w2HaQ6fOhV+l3A+x2bUuo6QLYiQh2pqfbRLhssRhMpXdz+hP72WU+Jv3 qZg5T50C1d6GxxUalwPPdSBed7SsLTYLJdv+GS8YF/f2CEAP/JDRDnHvE8ynt/8g mV02Ocwf42WdKVHMG33pl1A8x9w0qJKpCVfW6E0PfDgAy8PMej5JDci33hiyBxtq Wlj3CCWbRWBOGggCwJGs+9a71RdmjRag -----END CERTIFICATE-----Generated at Mon May 6 20:19:17 2024 by rpki-client on console-fra.rpki-client.org