$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: wYXPKDqfV/+282p7yoDnNyPmVmGonjzfkCXTkU0mH4w= Subject key identifier: 61:91:D5:6B:9D:B7:1E:58:06:54:41:C0:E8:28:CB:B5:64:05:CD:E6 Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 08EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 08E8 Signing time: Thu 02 May 2024 21:30:15 +0000 Manifest this update: Thu 02 May 2024 21:30:14 +0000 Manifest next update: Thu 09 May 2024 21:30:14 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: qS9sJeTWiqS8hdUfTB7FW6QjEb+5leh8NxJ13Qu6hoc=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: wKAZcGRGEy+RObbcO5ZWl7h8CxYYkH191pRlBIsrfoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2284 (0x8ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: May 2 21:30:14 2024 GMT Not After : May 9 21:30:14 2024 GMT Subject: CN=663405e7-c2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:4b:fc:9b:52:cf:be:e4:6b:34:08:95:cd: f5:46:fc:0c:f5:ec:d3:88:b9:d2:6a:88:ed:43:d1: 42:a7:22:35:7b:f1:6e:e6:c7:1b:bb:23:b5:ee:42: d1:2f:2f:eb:24:b5:cb:c4:10:40:88:2e:4c:bb:8d: 21:8d:3f:8d:48:e4:9f:a1:0e:91:b1:47:b7:ca:d4: 99:ba:55:00:be:b7:58:2f:f1:79:e3:74:03:ae:c6: ce:21:22:fb:ac:05:a8:7c:e9:5d:cb:28:77:1c:9a: 60:4e:80:85:2f:cf:a2:88:a7:39:06:2c:20:07:aa: d8:47:67:41:57:17:4a:03:36:1b:b7:cd:07:5e:a7: 85:83:4e:ed:31:a8:70:c1:11:d1:91:a5:b5:ff:a8: d9:aa:7d:c3:e0:bf:8c:6a:4f:54:73:44:11:f7:b0: 7d:08:40:7f:58:e3:2b:f8:8e:e9:a7:19:f4:a0:85: b7:9c:9d:17:15:ae:99:94:09:f6:89:bb:1c:f4:2f: 7a:e4:74:41:8e:fc:00:61:b8:7b:86:03:3f:47:58: c7:d0:8e:8a:07:11:6c:75:f1:07:c9:e6:55:84:9a: 96:e1:95:ff:d1:94:7d:37:cc:77:cb:fd:15:de:59: 02:ad:7a:4f:f8:52:22:5d:ad:2d:b8:5b:21:e2:97: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:91:D5:6B:9D:B7:1E:58:06:54:41:C0:E8:28:CB:B5:64:05:CD:E6 X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:04:54:4a:45:c7:c8:55:6c:8f:f6:97:75:34:79:1e:7a:f6: 77:86:de:c4:8f:03:5a:b0:d2:33:da:38:f6:ef:96:87:27:02: e9:f7:87:a7:94:25:9d:d8:02:71:48:3d:f5:53:49:31:71:83: be:a6:f7:63:20:9a:1f:45:94:69:1b:a5:ab:7e:ae:74:d5:e5: 1e:f0:58:9f:c1:b1:51:bb:9c:14:a4:bd:a9:c7:6a:43:37:66: 2e:4e:44:6f:be:14:d7:83:d0:5b:01:08:5e:15:65:e1:9b:51: 64:ee:34:ff:98:1d:95:6a:9f:32:6f:bf:34:a8:db:6e:35:32: 41:51:12:47:e8:1a:ff:25:10:dc:ea:5e:01:0a:5b:f4:35:2b: 56:6a:5e:82:ce:ff:bd:5c:46:b4:4a:55:d5:97:0b:9c:d8:d5: 3e:09:c0:99:21:7d:36:26:1b:55:d5:8b:c2:71:7c:ba:b3:66: da:a0:4e:80:07:57:23:36:f1:45:04:c5:0c:a3:64:8a:d9:24: fa:59:65:d6:cb:96:e8:cd:ce:14:94:c4:d6:7b:90:d6:e1:20: b0:1d:f7:99:93:64:fc:03:09:e7:ed:1e:81:40:91:a8:79:09: d7:fa:1a:07:b0:a4:9b:a4:22:1f:c3:0e:f8:31:61:7d:4b:33: f7:92:59:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjQwNTAyMjEzMDE0WhcNMjQwNTA5MjEzMDE0WjAYMRYwFAYD VQQDEw02NjM0MDVlNy1jMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmxL/JtSz77kazQIlc31RvwM9ezTiLnSaojtQ9FCpyI1e/Fu5scbuyO17kLR Ly/rJLXLxBBAiC5Mu40hjT+NSOSfoQ6RsUe3ytSZulUAvrdYL/F543QDrsbOISL7 rAWofOldyyh3HJpgToCFL8+iiKc5BiwgB6rYR2dBVxdKAzYbt80HXqeFg07tMahw wRHRkaW1/6jZqn3D4L+Mak9Uc0QR97B9CEB/WOMr+I7ppxn0oIW3nJ0XFa6ZlAn2 ibsc9C965HRBjvwAYbh7hgM/R1jH0I6KBxFsdfEHyeZVhJqW4ZX/0ZR9N8x3y/0V 3lkCrXpP+FIiXa0tuFsh4pcIqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGR1Wud tx5YBlRBwOgoy7VkBc3mMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJBFRKRcfIVWyP9pd1NHkeevZ3ht7EjwNasNIz2jj275aHJwLp94en lCWd2AJxSD31U0kxcYO+pvdjIJofRZRpG6Wrfq501eUe8FifwbFRu5wUpL2px2pD N2YuTkRvvhTXg9BbAQheFWXhm1Fk7jT/mB2Vap8yb780qNtuNTJBURJH6Br/JRDc 6l4BClv0NStWal6Czv+9XEa0SlXVlwuc2NU+CcCZIX02JhtV1YvCcXy6s2baoE6A B1cjNvFFBMUMo2SK2ST6WWXWy5bozc4UlMTWe5DW4SCwHfeZk2T8Awnn7R6BQJGo eQnX+hoHsKSbpCIfww74MWF9SzP3klnO -----END CERTIFICATE-----Generated at Thu May 2 22:13:22 2024 by rpki-client on console-fra.rpki-client.org