$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: uomHdt8S3MYNlCCjYd7HghVJZO3Zrtpem7XEmr0cUK0= Subject key identifier: 9F:A3:E0:F3:CA:10:77:7C:CB:60:F4:64:E1:F4:9F:A8:AD:ED:95:91 Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0B41 Signing time: Sat 04 May 2024 19:54:06 +0000 Manifest this update: Sat 04 May 2024 19:54:05 +0000 Manifest next update: Sat 11 May 2024 19:54:05 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: HgVT24HIgKEbUPO54z9saD2HSn5n1sAzXNOL0c69D3w=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: zl2/KyvOYO11VNEUno+KY1iGQk0Qm8eGwpcW6ERpUeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: May 4 19:54:05 2024 GMT Not After : May 11 19:54:05 2024 GMT Subject: CN=6636925e-d092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:f0:06:7e:b7:98:39:cc:95:09:6a:8f:6b: e9:98:fd:13:81:8e:54:cb:28:43:77:de:30:e9:d4: 5b:f8:ce:eb:9f:9b:9a:43:f0:d6:5c:38:b2:42:1f: b3:33:39:bf:c6:2e:9c:5e:06:a8:a7:92:bc:b6:86: 1a:d6:62:56:ed:dc:9e:41:98:83:73:56:2f:44:5f: 92:63:07:dd:e1:9a:5e:c8:8c:72:ed:a9:6a:b2:18: c8:41:38:e9:34:79:d4:49:9d:5f:bd:40:f0:03:8b: db:41:0e:e1:4c:51:17:6d:b2:75:c4:24:cc:b8:34: c4:a1:84:58:ec:48:a0:9a:7b:d3:2e:cf:ae:b0:3f: 6f:dc:4c:6f:ef:ee:c3:e4:49:66:06:a3:e2:b7:8b: 18:e4:8b:c1:9c:2d:01:da:fb:42:fa:b2:f1:b0:37: 15:42:b5:a2:ee:df:62:d0:60:df:29:e7:99:81:69: 74:4d:cd:87:37:01:53:ed:1a:c0:7c:5a:3e:81:99: 75:eb:66:0d:9d:eb:8a:d4:da:70:e5:bd:75:0a:a8: 2c:9e:cb:6e:eb:84:69:55:d1:ba:38:f0:e1:99:56: 18:d3:35:d5:9d:d3:6b:77:4b:f4:a7:11:0e:99:34: 30:8d:4d:44:89:e3:67:e4:66:96:d9:76:21:02:db: 07:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A3:E0:F3:CA:10:77:7C:CB:60:F4:64:E1:F4:9F:A8:AD:ED:95:91 X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:12:5b:4e:b0:e5:30:19:90:b4:15:7b:7b:2e:68:a8:11:66: 69:f7:59:c8:ae:71:77:3e:b0:de:63:97:06:02:99:dd:8e:78: 95:ee:e4:96:a0:ef:2f:fb:06:69:ab:7f:02:ac:7f:b9:fd:d2: 6c:14:11:e8:d9:25:e6:5f:bd:fc:b8:b7:94:00:32:7c:8c:1d: 82:4f:9e:04:f7:a3:fd:e6:1d:3d:09:d0:20:28:3c:b7:69:0a: 1e:3f:8f:62:72:d6:e2:f4:43:19:8f:b5:05:ea:62:d4:cb:08: 82:c1:49:3b:07:2f:16:02:fb:1b:c9:ef:52:68:68:09:45:89: 37:b2:e5:d3:b2:32:ac:b4:84:0e:b3:5f:82:da:5e:96:86:82: c1:23:78:8b:ff:3e:0b:c0:2d:fe:9a:f5:24:f5:55:47:d3:f6: ec:04:b0:6b:6d:22:1c:b7:18:81:6f:72:1e:67:4a:92:77:b1: 7b:40:e4:2c:7a:1c:d1:1c:57:0c:d6:57:e9:75:57:47:b4:38: ba:ce:b0:86:0e:f1:27:f5:48:02:c8:a1:c9:fd:5a:43:73:ca: 64:9d:98:48:10:1f:72:4c:ef:f0:14:e5:8b:22:fe:93:ab:e5: b3:65:3d:9f:60:af:cf:07:24:09:bb:be:a7:23:2c:1d:34:19: 89:e9:24:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjQwNTA0MTk1NDA1WhcNMjQwNTExMTk1NDA1WjAYMRYwFAYD VQQDEw02NjM2OTI1ZS1kMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWTwBn63mDnMlQlqj2vpmP0TgY5UyyhDd94w6dRb+M7rn5uaQ/DWXDiyQh+z Mzm/xi6cXgaop5K8toYa1mJW7dyeQZiDc1YvRF+SYwfd4ZpeyIxy7alqshjIQTjp NHnUSZ1fvUDwA4vbQQ7hTFEXbbJ1xCTMuDTEoYRY7EigmnvTLs+usD9v3Exv7+7D 5ElmBqPit4sY5IvBnC0B2vtC+rLxsDcVQrWi7t9i0GDfKeeZgWl0Tc2HNwFT7RrA fFo+gZl162YNneuK1Npw5b11Cqgsnstu64RpVdG6OPDhmVYY0zXVndNrd0v0pxEO mTQwjU1EieNn5GaW2XYhAtsHzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+j4PPK EHd8y2D0ZOH0n6it7ZWRMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALEltOsOUwGZC0FXt7LmioEWZp91nIrnF3PrDeY5cGApndjniV7uSW oO8v+wZpq38CrH+5/dJsFBHo2SXmX738uLeUADJ8jB2CT54E96P95h09CdAgKDy3 aQoeP49ictbi9EMZj7UF6mLUywiCwUk7By8WAvsbye9SaGgJRYk3suXTsjKstIQO s1+C2l6WhoLBI3iL/z4LwC3+mvUk9VVH0/bsBLBrbSIctxiBb3IeZ0qSd7F7QOQs ehzRHFcM1lfpdVdHtDi6zrCGDvEn9UgCyKHJ/VpDc8pknZhIEB9yTO/wFOWLIv6T q+WzZT2fYK/PByQJu76nIywdNBmJ6SQ7 -----END CERTIFICATE-----Generated at Sat May 4 21:19:31 2024 by rpki-client on console-ams.rpki-client.org