$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: vF+bX4TzBldBGYrxPwrEOCwj6Jqs705psOjpaWCOMVU= Subject key identifier: 93:BE:92:87:80:EB:1A:E6:1D:00:BB:D7:4B:16:BC:8C:6D:85:50:B8 Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 056B Signing time: Wed 01 May 2024 01:03:25 +0000 Manifest this update: Wed 01 May 2024 01:03:24 +0000 Manifest next update: Wed 08 May 2024 01:03:24 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: 6Marx7MHCXI7ziOmRRJPKqvysriqX1FkrbUcI2/Zils=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: Z8d3uGgH8Y5XfcbK0eEMjbX0aQkbdH1yv87/NbDvqa4=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: 1ZDP5PbsIwMy0QsymP6XonGGcmiYwT4HjHf20ZLoAM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: May 1 01:03:24 2024 GMT Not After : May 8 01:03:24 2024 GMT Subject: CN=663194dc-027e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:0c:1c:1c:5d:db:08:6e:b0:47:64:25:75: 8f:ea:65:70:69:aa:f6:58:9c:0f:d5:a8:8f:fb:60: c8:d2:ed:12:51:b5:e6:a0:e5:8c:42:62:17:61:af: 8c:3b:ac:92:8c:84:4a:b1:ab:e2:a3:9b:67:b2:70: a0:e4:53:7a:45:d1:89:0f:e9:39:38:e5:27:f5:ef: ea:cf:82:a3:64:de:c9:b0:0d:58:23:a3:19:da:c2: e2:31:f6:ed:d3:af:d3:65:d5:e6:95:b7:cb:37:c9: 61:a4:51:ab:c5:a2:80:5c:5a:8d:06:d6:86:31:a4: c6:4c:a7:0c:5e:0c:34:84:c8:db:57:e1:33:50:61: 88:e6:26:56:fd:9c:6a:2e:56:d2:15:62:e4:ee:f0: e9:31:00:09:3a:8c:4d:65:0e:17:6b:9f:f2:b0:c3: b6:32:71:0a:e5:56:81:f0:bf:2b:f3:61:74:d6:f3: 13:e5:58:30:c3:81:db:69:28:9d:7a:f9:5c:b9:29: 98:9b:0b:2f:a9:a4:96:77:0b:80:6b:f8:23:02:ad: 43:23:6c:ac:94:57:19:ca:32:48:8b:d1:d5:cd:0b: 44:2a:5e:c1:4d:6a:3b:44:87:55:6e:b3:d5:14:f5: 21:82:33:25:ee:da:bd:7c:b7:79:f1:a0:97:bc:18: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:92:87:80:EB:1A:E6:1D:00:BB:D7:4B:16:BC:8C:6D:85:50:B8 X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:0f:f4:db:27:26:8d:c1:e8:43:e0:6b:e3:13:cd:3d:d3:9c: e9:10:0b:b1:15:c5:70:53:61:da:83:8f:89:65:50:18:c7:35: 9b:e9:c5:22:b6:99:65:1c:ea:6a:60:78:46:d7:6f:b6:42:11: a5:99:84:ab:7b:a5:1c:02:df:fe:1f:2f:44:be:05:c9:04:f6: 0b:a9:38:4b:92:5d:62:39:4a:4d:2c:a1:0b:05:2c:0e:c3:58: 7a:fa:71:c6:8e:1f:c1:9c:43:eb:de:8c:91:45:3d:f2:a4:cb: 3d:7d:90:df:47:43:8e:99:63:7e:c2:c6:b4:6d:f3:82:71:26: e4:a3:57:b6:8a:c2:80:a8:b6:bc:b1:a3:b1:56:49:74:72:22: 1d:2b:62:d0:b7:75:83:d0:1e:c2:34:4f:3c:63:82:69:ec:d5: 09:ca:09:0b:96:e9:26:ab:24:5b:eb:a5:f6:dc:38:93:2d:0b: fe:4a:85:84:52:fc:9a:67:c0:82:27:9e:af:c4:d5:1c:8a:b6: 6d:ca:7f:36:86:15:e5:fa:60:db:bb:cc:e1:3a:96:0f:b0:be: 04:43:e2:60:3d:b5:74:72:57:69:ca:8d:d1:f2:6e:71:44:1f: 07:ce:fb:57:cf:c6:18:bb:35:03:b8:0f:dc:e2:8e:5e:ad:56: 14:65:72:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjQwNTAxMDEwMzI0WhcNMjQwNTA4MDEwMzI0WjAYMRYwFAYD VQQDEw02NjMxOTRkYy0wMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCgMHBxd2whusEdkJXWP6mVwaar2WJwP1aiP+2DI0u0SUbXmoOWMQmIXYa+M O6ySjIRKsavio5tnsnCg5FN6RdGJD+k5OOUn9e/qz4KjZN7JsA1YI6MZ2sLiMfbt 06/TZdXmlbfLN8lhpFGrxaKAXFqNBtaGMaTGTKcMXgw0hMjbV+EzUGGI5iZW/Zxq LlbSFWLk7vDpMQAJOoxNZQ4Xa5/ysMO2MnEK5VaB8L8r82F01vMT5Vgww4HbaSid evlcuSmYmwsvqaSWdwuAa/gjAq1DI2yslFcZyjJIi9HVzQtEKl7BTWo7RIdVbrPV FPUhgjMl7tq9fLd58aCXvBiFFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO+koeA 6xrmHQC710sWvIxthVC4MB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGD/TbJyaNwehD4GvjE80905zpEAuxFcVwU2Hag4+JZVAYxzWb6cUi tpllHOpqYHhG12+2QhGlmYSre6UcAt/+Hy9EvgXJBPYLqThLkl1iOUpNLKELBSwO w1h6+nHGjh/BnEPr3oyRRT3ypMs9fZDfR0OOmWN+wsa0bfOCcSbko1e2isKAqLa8 saOxVkl0ciIdK2LQt3WD0B7CNE88Y4Jp7NUJygkLlukmqyRb66X23DiTLQv+SoWE UvyaZ8CCJ56vxNUcirZtyn82hhXl+mDbu8zhOpYPsL4EQ+JgPbV0cldpyo3R8m5x RB8HzvtXz8YYuzUDuA/c4o5erVYUZXJw -----END CERTIFICATE-----Generated at Wed May 1 01:38:31 2024 by rpki-client on console-ams.rpki-client.org