$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: Ldo/RuUCAKP0ezmETin2lb0EcV1y4wUrNR0rrd6CdQs= Subject key identifier: A4:4A:1F:AE:3B:6B:7E:3C:9F:48:AB:D5:1B:DB:26:0B:FB:30:91:55 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: E0 Signing time: Mon 29 Apr 2024 05:49:23 +0000 Manifest this update: Mon 29 Apr 2024 05:49:22 +0000 Manifest next update: Mon 06 May 2024 05:49:22 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: RsMWH1N0K0EX46bhu5VBN4wxKEH938p1iiF+6yFucVo=) 2: FD91D382FDFE11EEA991412FC4F9AE02.roa (hash: UJVqZVv2LvOtLV0E0fDBrYAFdyi9fTFpHu6AEr0aBjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 05:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Apr 29 05:49:22 2024 GMT Not After : May 6 05:49:22 2024 GMT Subject: CN=662f34e3-7df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:a3:63:2b:53:72:28:79:f0:05:7c:bc:e3: 7d:31:c5:b3:46:30:d8:73:c9:83:77:45:6b:fc:9b: 5c:9f:92:fd:dc:8b:66:29:87:d1:25:33:3d:8d:34: 70:57:34:15:a0:b3:60:ea:a7:68:62:5b:93:b0:a5: b2:8e:a1:c5:64:05:c4:d7:1e:3c:57:c1:07:f1:da: 34:be:8e:47:a0:6f:5e:7a:a4:09:52:84:14:32:fd: 30:56:af:03:45:f4:0d:e0:90:e9:5b:36:18:6c:c7: 78:12:7e:37:d6:11:bb:25:79:e8:89:bd:41:ae:9d: 2c:bb:b8:53:e8:da:03:87:51:0a:37:31:fc:7c:ad: aa:42:0d:a8:98:66:41:52:7c:4f:d2:e8:b1:c9:af: 44:93:4e:1d:aa:d5:d3:ce:20:38:30:ec:5a:75:00: 03:df:05:21:b6:08:14:3c:8f:10:ad:75:f9:3c:f4: b0:55:39:2b:b5:e3:97:f0:7b:57:87:30:26:c2:45: ad:9d:64:6a:88:9f:37:a4:6a:be:1a:04:dc:ef:aa: 16:1e:f4:3a:b8:29:aa:06:c9:25:ae:48:4d:20:14: bb:81:2e:4c:7b:a1:c1:37:5b:0b:4c:f6:17:c0:3b: 2a:3c:bc:ec:5b:26:32:fb:67:e5:5b:bb:1c:74:0c: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4A:1F:AE:3B:6B:7E:3C:9F:48:AB:D5:1B:DB:26:0B:FB:30:91:55 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5c:44:68:fe:e3:b3:3a:8c:53:1d:54:6f:86:6b:64:19:af: ad:5d:6c:d2:18:32:f4:c0:69:96:17:74:fc:90:0e:1f:34:6a: fa:aa:cd:54:0f:c9:0b:64:1b:9c:07:ce:1b:35:d0:ff:3f:0a: b1:ae:2c:84:fd:35:92:64:03:b2:e7:ab:b8:95:43:47:d6:db: 61:bc:25:83:f4:6d:69:d1:87:24:54:14:c7:ef:a7:db:20:ec: 45:a4:e2:58:93:d3:e5:91:cc:77:10:a9:87:de:4b:dc:be:ff: 99:80:51:74:63:31:d8:23:64:b5:83:c6:02:df:dd:8a:a4:57: 8e:ce:53:26:0e:42:88:ae:c0:30:6c:f0:a7:61:b4:be:80:b6: f9:12:a4:7e:14:e2:3b:ae:24:df:dc:3b:a5:e0:93:5a:8a:61: 86:18:b7:4d:bf:44:40:ac:3b:5d:80:be:90:3e:89:90:2c:09: 27:74:73:06:32:f5:40:46:8d:7c:b4:94:8a:75:27:c7:a9:2a: c4:89:d4:1b:f3:b2:77:b9:28:db:ab:4b:af:7f:40:4b:51:8f: a7:4c:c1:65:5a:02:d0:e5:81:51:71:37:7b:56:da:de:18:a0: 26:c8:93:c5:57:71:00:ce:8f:be:59:4a:d8:4e:54:d8:d2:db: 4d:88:9b:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjQwNDI5MDU0OTIyWhcNMjQwNTA2MDU0OTIyWjAYMRYwFAYD VQQDEw02NjJmMzRlMy03ZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/CjYytTcih58AV8vON9McWzRjDYc8mDd0Vr/Jtcn5L93ItmKYfRJTM9jTRw VzQVoLNg6qdoYluTsKWyjqHFZAXE1x48V8EH8do0vo5HoG9eeqQJUoQUMv0wVq8D RfQN4JDpWzYYbMd4En431hG7JXnoib1Brp0su7hT6NoDh1EKNzH8fK2qQg2omGZB UnxP0uixya9Ek04dqtXTziA4MOxadQAD3wUhtggUPI8QrXX5PPSwVTkrteOX8HtX hzAmwkWtnWRqiJ83pGq+GgTc76oWHvQ6uCmqBsklrkhNIBS7gS5Me6HBN1sLTPYX wDsqPLzsWyYy+2flW7scdAwVZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRKH647 a348n0ir1RvbJgv7MJFVMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/XERo/uOzOoxTHVRvhmtkGa+tXWzSGDL0wGmWF3T8kA4fNGr6qs1U D8kLZBucB84bNdD/PwqxriyE/TWSZAOy56u4lUNH1tthvCWD9G1p0YckVBTH76fb IOxFpOJYk9Plkcx3EKmH3kvcvv+ZgFF0YzHYI2S1g8YC392KpFeOzlMmDkKIrsAw bPCnYbS+gLb5EqR+FOI7riTf3Dul4JNaimGGGLdNv0RArDtdgL6QPomQLAkndHMG MvVARo18tJSKdSfHqSrEidQb87J3uSjbq0uvf0BLUY+nTMFlWgLQ5YFRcTd7Vtre GKAmyJPFV3EAzo++WUrYTlTY0ttNiJvj -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:37 2024 by rpki-client on console-ams.rpki-client.org