$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json) Hash identifier: GsUgxlIcajhpAzlmPJ6UKv59mwIM6e+bQ6OhtJq1s8I= Subject key identifier: 0B:71:82:04:A4:77:10:3B:68:28:37:B8:C0:8D:02:C1:B6:AA:60:81 Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft Manifest number: 011C Signing time: Fri 03 May 2024 05:17:19 +0000 Manifest this update: Fri 03 May 2024 05:17:18 +0000 Manifest next update: Fri 10 May 2024 05:17:18 +0000 Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: wOfnmh9d1tCrexY3IlOoN0x0gNE7lsaAcFUldkQeY8M=) 2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: 2LI3hsctrVmuInQBZ3jfIWPFtGhhM4eQLTl2IYITdCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Validity Not Before: May 3 05:17:18 2024 GMT Not After : May 10 05:17:18 2024 GMT Subject: CN=6634735f-1f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:80:f6:56:f5:f7:a6:19:05:d6:41:bd:0d: 4f:41:65:79:c3:dd:ce:4e:7e:ff:97:07:f0:0f:a2: f2:aa:51:26:0b:25:3d:0a:ee:32:be:23:f6:55:a3: d0:eb:d1:2d:d9:bc:cd:ee:37:63:d5:4c:6f:e2:bb: 35:bb:35:a1:3a:e1:69:5f:69:b9:55:f1:ed:d6:cd: 37:55:03:1f:91:95:3b:60:8b:01:d8:cf:b4:03:27: 65:6a:37:62:33:8f:4a:24:8e:53:d2:84:1c:de:f4: 14:6b:cf:22:b0:07:da:f4:a4:00:3a:37:2d:11:aa: 87:22:55:fd:2a:a3:9f:f8:20:8c:0b:27:ff:35:fa: 89:85:dd:f6:cb:2e:4b:42:0e:6e:9d:ae:5a:91:0b: 36:0f:6d:46:f6:50:cb:5b:0f:05:66:ac:81:70:17: d4:79:f1:52:fc:70:34:b8:81:2c:3a:96:11:4d:e7: 9d:b5:91:1a:a1:6b:65:af:c8:be:29:79:1f:73:9a: b4:05:30:fe:40:19:b4:6f:5b:b7:3a:7d:95:7b:66: b6:cf:b5:c0:40:d7:4d:ed:90:5e:37:2e:f8:61:04: 5b:74:50:89:fa:95:42:e5:ae:10:57:a1:76:a7:92: fa:9b:4e:a2:dc:95:50:1d:d2:be:2e:83:86:01:39: 6a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:71:82:04:A4:77:10:3B:68:28:37:B8:C0:8D:02:C1:B6:AA:60:81 X509v3 Authority Key Identifier: keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2e:5e:cb:d9:55:66:59:c7:9f:13:fa:8c:e0:ec:95:44:57: 41:ca:f6:ca:89:4e:50:51:b1:5b:4c:1f:c1:33:d7:9d:5d:54: ae:b5:05:87:52:ee:ad:1f:d0:04:f3:4d:9d:6b:00:33:4d:21: 7f:2f:ff:70:fe:2e:3d:3f:3d:25:e3:dd:41:fd:de:48:6b:bf: 83:b2:81:5b:38:72:4d:53:01:6c:00:d2:52:87:eb:7b:b5:ab: b1:a4:d3:d1:36:18:11:39:df:71:f5:44:23:4f:ef:be:86:b5: 85:ee:7a:6e:61:4b:e3:0f:32:1c:63:35:d3:4b:b7:ea:4d:1f: 04:d5:5e:cf:98:9e:ea:b4:fd:1b:c7:58:c7:da:c3:70:a7:da: 64:4f:b8:84:64:82:51:9c:22:f9:38:8e:88:f3:92:06:c3:5b: 28:d8:86:4e:e9:60:d5:a9:f0:2c:f7:fe:89:57:76:30:64:b8: 58:52:9c:0c:0c:da:d0:75:43:f8:62:5f:9c:09:9f:c4:37:54: c7:cb:d2:6b:1c:b2:0d:3b:d6:52:cd:8b:22:85:50:b3:85:3f: 14:41:30:a6:65:24:e9:d3:af:d7:6a:6d:d5:2c:00:8e:87:76: 8e:90:13:79:ad:5d:c5:77:bb:6b:18:70:20:4e:53:37:4e:b5: b7:91:56:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQTcxMTAvBgNVBAUTKEZGNUQxMzJCQzY2QUFBMkJCQ0Y2NUMzRTVGRTg5QTBD MzcxRDhCM0EwHhcNMjQwNTAzMDUxNzE4WhcNMjQwNTEwMDUxNzE4WjAYMRYwFAYD VQQDEw02NjM0NzM1Zi0xZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mKA9lb196YZBdZBvQ1PQWV5w93OTn7/lwfwD6LyqlEmCyU9Cu4yviP2VaPQ 69Et2bzN7jdj1Uxv4rs1uzWhOuFpX2m5VfHt1s03VQMfkZU7YIsB2M+0Aydlajdi M49KJI5T0oQc3vQUa88isAfa9KQAOjctEaqHIlX9KqOf+CCMCyf/NfqJhd32yy5L Qg5una5akQs2D21G9lDLWw8FZqyBcBfUefFS/HA0uIEsOpYRTeedtZEaoWtlr8i+ KXkfc5q0BTD+QBm0b1u3On2Ve2a2z7XAQNdN7ZBeNy74YQRbdFCJ+pVC5a4QV6F2 p5L6m06i3JVQHdK+LoOGATlqlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtxggSk dxA7aCg3uMCNAsG2qmCBMB8GA1UdIwQYMBaAFP9dEyvGaqorvPZcPl/omgw3HYs6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBNy8yRDk5MUNEMDU5 OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFpdTg5bHctWC1pYUREY2Rp em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xMFRLOFpxcWl1ODlsdy1YLWlhRERjZGl6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBNy8yRDk5MUNEMDU5OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFp dTg5bHctWC1pYUREY2Rpem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmLl7L2VVmWcefE/qM4OyVRFdByvbKiU5QUbFbTB/BM9edXVSutQWH Uu6tH9AE802dawAzTSF/L/9w/i49Pz0l491B/d5Ia7+DsoFbOHJNUwFsANJSh+t7 tauxpNPRNhgROd9x9UQjT+++hrWF7npuYUvjDzIcYzXTS7fqTR8E1V7PmJ7qtP0b x1jH2sNwp9pkT7iEZIJRnCL5OI6I85IGw1so2IZO6WDVqfAs9/6JV3YwZLhYUpwM DNrQdUP4Yl+cCZ/EN1THy9JrHLINO9ZSzYsihVCzhT8UQTCmZSTp06/Xam3VLACO h3aOkBN5rV3Fd7trGHAgTlM3TrW3kVbW -----END CERTIFICATE-----Generated at Fri May 3 06:18:54 2024 by rpki-client on console-ams.rpki-client.org