$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: eSghZpZDXh3G6PboK222k5veYLkhyYkhW+f3dLjBwL8= Subject key identifier: 9B:24:88:56:A9:C9:E4:BC:DE:B5:83:30:AB:E1:8B:CA:93:73:90:FD Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: B0 Signing time: Wed 15 May 2024 06:38:18 +0000 Manifest this update: Wed 15 May 2024 06:38:17 +0000 Manifest next update: Wed 22 May 2024 06:38:17 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: K2EDSf4DM97YBXKGWo9uuhfDrst7m4TAkAumQ6+1hHY=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: 4lTwXJNy8UAsVUNrxw2jbFpsl+WyFB6Z2ysqzLuaypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: May 15 06:38:17 2024 GMT Not After : May 22 06:38:17 2024 GMT Subject: CN=66445859-c52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:25:00:b3:66:4c:6a:bf:64:fd:6f:bf:a8: c3:05:6f:a6:96:8c:94:dc:79:54:84:07:11:b0:47: b2:4d:99:7b:21:db:88:d2:a7:5a:eb:68:d2:3b:ac: d6:22:59:48:33:7e:d4:11:d8:07:86:60:0f:7f:6b: 18:0e:57:99:b4:4a:21:60:5e:fa:00:28:93:57:5d: a4:0a:e9:82:ab:af:37:38:59:53:dc:79:10:90:4f: 62:95:fa:e1:83:76:f3:98:c0:62:e1:41:2b:44:92: 6a:20:b4:c5:3b:d0:50:bf:65:0a:33:5b:d3:2f:21: eb:fd:3c:aa:ff:83:00:71:31:e9:d7:01:41:9b:54: af:98:aa:8a:6e:a4:e4:8a:b9:74:02:7d:9b:34:64: 97:7f:b5:ad:b0:c5:8c:b6:a0:cf:7b:10:97:ee:d5: 21:1c:d1:09:33:45:6f:54:fb:27:a1:94:e5:43:3a: 11:c1:88:5c:5a:05:47:60:3f:3f:01:48:33:af:85: 01:32:7e:b1:32:fb:fa:8f:cb:f5:92:d2:61:59:e5: 8c:99:04:1e:18:0f:45:1f:7d:16:d7:0d:f5:ea:bb: 19:31:02:d5:9b:a0:94:29:4c:73:6f:85:83:16:d5: f4:15:11:ac:40:6f:64:b5:48:1c:9c:e4:06:f4:23: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:24:88:56:A9:C9:E4:BC:DE:B5:83:30:AB:E1:8B:CA:93:73:90:FD X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a5:57:83:54:21:56:3b:24:63:2f:5e:2f:aa:f2:d6:f8:c0: 88:ac:8f:0e:ec:c6:6f:04:82:4c:1b:88:d2:44:c8:25:8e:ff: 7c:d8:04:7f:c3:6f:7e:02:e7:16:6c:19:9a:46:cd:c1:0f:64: 41:25:75:66:c7:a1:64:65:96:27:ac:60:64:39:15:62:50:00: 2b:b6:3f:d6:22:c1:a9:7a:27:25:ea:6e:c6:9f:fd:a7:07:52: b5:75:a7:53:be:70:2d:1a:03:c7:e3:57:64:20:59:b9:a6:1f: 2e:8b:66:16:7b:2e:e3:b6:6b:82:6a:d1:7f:3b:9c:9d:3a:90: cf:78:27:49:4d:7d:6e:2e:2d:e3:62:e2:ec:7b:2d:75:21:86: bc:03:26:32:42:3f:cc:56:64:77:03:8a:ce:5d:c2:30:44:1b: 00:2f:6a:9f:8c:ca:9a:ac:f0:25:03:05:6b:a4:f1:84:f2:6e: 89:cf:99:36:f0:5d:10:69:09:5b:d5:db:af:fc:a4:69:69:ae: 2a:c6:49:6c:02:21:cd:59:07:72:f6:58:ab:cf:9d:bd:e5:e2: e5:84:81:b1:25:88:f9:16:ea:63:3f:c2:18:7d:2e:77:67:67: 41:e2:bd:98:c4:90:2d:99:67:2b:26:f9:5e:ba:d9:86:37:22: 52:27:e2:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjQwNTE1MDYzODE3WhcNMjQwNTIyMDYzODE3WjAYMRYwFAYD VQQDEw02NjQ0NTg1OS1jNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpslALNmTGq/ZP1vv6jDBW+mloyU3HlUhAcRsEeyTZl7IduI0qda62jSO6zW IllIM37UEdgHhmAPf2sYDleZtEohYF76ACiTV12kCumCq683OFlT3HkQkE9ilfrh g3bzmMBi4UErRJJqILTFO9BQv2UKM1vTLyHr/Tyq/4MAcTHp1wFBm1SvmKqKbqTk irl0An2bNGSXf7WtsMWMtqDPexCX7tUhHNEJM0VvVPsnoZTlQzoRwYhcWgVHYD8/ AUgzr4UBMn6xMvv6j8v1ktJhWeWMmQQeGA9FH30W1w316rsZMQLVm6CUKUxzb4WD FtX0FRGsQG9ktUgcnOQG9CPLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJskiFap yeS83rWDMKvhi8qTc5D9MB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBApVeDVCFWOyRjL14vqvLW+MCIrI8O7MZvBIJMG4jSRMgljv982AR/ w29+AucWbBmaRs3BD2RBJXVmx6FkZZYnrGBkORViUAArtj/WIsGpeicl6m7Gn/2n B1K1dadTvnAtGgPH41dkIFm5ph8ui2YWey7jtmuCatF/O5ydOpDPeCdJTX1uLi3j YuLsey11IYa8AyYyQj/MVmR3A4rOXcIwRBsAL2qfjMqarPAlAwVrpPGE8m6Jz5k2 8F0QaQlb1duv/KRpaa4qxklsAiHNWQdy9lirz5295eLlhIGxJYj5FupjP8IYfS53 Z2dB4r2YxJAtmWcrJvleutmGNyJSJ+JA -----END CERTIFICATE-----Generated at Wed May 15 09:04:44 2024 by rpki-client on console-ams.rpki-client.org