$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: /kTQ7b0JBfCJHq8zq9LjhN4kWCDJTjupXuDK7RRE5OQ= Subject key identifier: 80:CC:8A:18:C2:A8:EF:A1:96:12:9D:A7:BD:F6:02:56:23:92:19:53 Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 07C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 07BB Signing time: Mon 06 May 2024 22:10:31 +0000 Manifest this update: Mon 06 May 2024 22:10:30 +0000 Manifest next update: Mon 13 May 2024 22:10:30 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: SrF5DJAgXmmt1qtlbJ+ZVj/QCPBIgSq+GqbianrvL/w=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: Bck35714D7BeuuiLhhjv/nzTFmw6s1rP/8hyVJG6hSU=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: 2yZq4Ry9Qk5N2yzyUQEFBFhKtfvnU7pkO7PQ3+hZWSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: May 6 22:10:30 2024 GMT Not After : May 13 22:10:30 2024 GMT Subject: CN=66395556-2079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:43:53:06:a2:f3:b3:2f:f5:4d:27:ab:d6:7c: dc:fe:e7:41:2e:61:f1:03:4f:be:b1:61:8a:07:1e: d3:fa:a8:d6:ec:87:78:50:da:d4:03:95:6a:4a:f7: 07:33:f5:ff:57:79:15:e5:5a:5f:e0:c6:c4:cb:f0: 82:33:e1:76:65:7a:17:32:39:1a:72:bd:2d:cf:b6: a8:ba:51:85:70:57:92:9e:11:42:91:49:b6:ce:5e: f2:27:bd:c1:0e:e9:8c:6a:a2:ef:e4:9f:3d:4a:06: 68:a9:9f:19:ff:e8:45:42:30:f5:39:aa:10:1d:0e: 75:00:75:2f:ea:b5:de:f7:cc:5e:d0:79:44:6f:ba: 7c:8c:56:73:02:6a:4b:e8:a6:c4:6f:2a:46:5b:14: 10:6d:ed:bd:8c:b4:04:13:a7:13:83:8b:d1:eb:8f: 3f:ab:8b:8d:be:b2:ee:0f:c5:77:6d:9b:3b:16:83: 78:97:6a:1d:6a:71:45:5b:c5:75:32:57:af:26:92: 17:ed:d6:1d:d6:16:69:7e:17:e9:1a:96:40:14:86: ec:b3:26:22:52:31:ef:ea:62:dc:e2:7e:cf:e5:66: 89:25:b4:8a:3c:ae:17:66:06:af:d5:38:b6:0e:32: 4a:c4:99:57:b5:0e:e5:ab:33:1b:31:99:51:69:39: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CC:8A:18:C2:A8:EF:A1:96:12:9D:A7:BD:F6:02:56:23:92:19:53 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:5d:9b:4f:74:ef:fc:a8:cb:2c:93:d6:60:1e:1d:76:2c:4a: d6:16:44:75:fd:d4:7b:51:7c:e4:27:3e:9b:4b:09:28:c6:8b: 67:bd:8e:3a:6d:7a:79:c3:74:2a:3e:14:88:4e:ec:d7:d9:f6: 81:e0:84:87:f9:86:45:1a:82:a1:d7:98:8d:63:4e:88:a8:ba: 0e:5f:4a:b9:ad:56:b3:3b:42:37:d4:f4:1c:c4:c0:d8:bf:b2: fa:b4:29:c1:0c:75:b5:c0:2b:9b:ff:46:ab:b6:e9:29:aa:f7: 92:1b:28:43:ca:b4:b5:1b:10:1d:01:45:b3:85:50:ab:42:e8: 62:a4:72:18:76:bb:8d:d5:63:d4:cf:5b:48:25:12:2f:37:86: 35:cf:79:a9:bc:0f:f5:91:2e:35:58:ef:bc:b9:b9:8f:4e:9b: 3e:02:17:d1:98:ba:3f:ab:db:7d:82:3f:c7:1b:67:c8:93:ff: f2:87:35:8a:7f:fa:a1:53:55:ef:80:ee:9a:a7:36:c4:76:45: 15:45:a5:50:d3:04:0a:d8:e1:b4:ef:12:06:c3:78:bb:92:d4: 18:37:75:64:10:d5:bf:0a:58:91:06:8d:05:6c:7b:08:82:5a: 58:dc:62:24:94:1f:71:4b:f4:a5:8f:0a:f2:db:38:61:85:a9: b0:11:1c:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjQwNTA2MjIxMDMwWhcNMjQwNTEzMjIxMDMwWjAYMRYwFAYD VQQDEw02NjM5NTU1Ni0yMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9UNTBqLzsy/1TSer1nzc/udBLmHxA0++sWGKBx7T+qjW7Id4UNrUA5VqSvcH M/X/V3kV5Vpf4MbEy/CCM+F2ZXoXMjkacr0tz7aoulGFcFeSnhFCkUm2zl7yJ73B DumMaqLv5J89SgZoqZ8Z/+hFQjD1OaoQHQ51AHUv6rXe98xe0HlEb7p8jFZzAmpL 6KbEbypGWxQQbe29jLQEE6cTg4vR648/q4uNvrLuD8V3bZs7FoN4l2odanFFW8V1 MlevJpIX7dYd1hZpfhfpGpZAFIbssyYiUjHv6mLc4n7P5WaJJbSKPK4XZgav1Ti2 DjJKxJlXtQ7lqzMbMZlRaTni/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDMihjC qO+hlhKdp732AlYjkhlTMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3XZtPdO/8qMssk9ZgHh12LErWFkR1/dR7UXzkJz6bSwkoxotnvY46 bXp5w3QqPhSITuzX2faB4ISH+YZFGoKh15iNY06IqLoOX0q5rVazO0I31PQcxMDY v7L6tCnBDHW1wCub/0artukpqveSGyhDyrS1GxAdAUWzhVCrQuhipHIYdruN1WPU z1tIJRIvN4Y1z3mpvA/1kS41WO+8ubmPTps+AhfRmLo/q9t9gj/HG2fIk//yhzWK f/qhU1XvgO6apzbEdkUVRaVQ0wQK2OG07xIGw3i7ktQYN3VkENW/CliRBo0FbHsI glpY3GIklB9xS/Sljwry2zhhhamwERwd -----END CERTIFICATE-----Generated at Tue May 7 00:53:24 2024 by rpki-client on console-ams.rpki-client.org