$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json) Hash identifier: /yavYR4X8WQV1JtrDMTNmtV1laTQmcJPBNFzj1w1vKk= Subject key identifier: 48:86:92:7C:72:3B:9B:AA:4C:5C:78:DE:ED:22:97:4E:22:8B:9A:4F Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft Manifest number: 07AA Signing time: Thu 02 May 2024 22:15:43 +0000 Manifest this update: Thu 02 May 2024 22:15:43 +0000 Manifest next update: Thu 09 May 2024 22:15:43 +0000 Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: cUPCIlzmxWSNof/fbvZ9LNy6VGULqnlMlNuWdYCjJGU=) 2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: Z6w/oPaxagp7eRDDT5xLlgr2cfNwseIx7hDDJJ9ovPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427 Validity Not Before: May 2 22:15:43 2024 GMT Not After : May 9 22:15:43 2024 GMT Subject: CN=6634108f-fd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:44:90:2c:0c:ec:b4:f7:39:cd:d5:b2:15: a8:85:9c:8b:37:09:93:46:5e:96:01:ed:d5:a4:4a: db:ad:54:49:e9:41:11:3d:0c:e2:c9:29:29:17:10: 1c:ed:d9:24:5f:77:99:de:78:da:6f:c6:de:e0:33: 47:76:4c:03:e9:3d:c7:07:f3:f2:2a:d4:a6:72:1a: aa:f7:26:95:ce:39:b8:24:20:91:0f:f7:91:fb:86: 74:d4:70:58:6d:c7:1e:72:93:b4:45:94:32:32:90: 8c:28:ca:94:25:ba:c0:68:b2:15:82:54:29:23:f0: e2:e5:09:c8:53:26:e0:60:01:d1:12:d4:5f:c6:51: 05:77:cb:5f:d9:5b:9c:b7:2c:94:66:ae:5b:8e:b8: 10:26:63:6b:58:45:e2:5e:db:86:3b:2d:7b:1b:5d: ce:ab:6f:4b:fb:48:dc:ae:c7:ac:f1:34:eb:ec:e0: 84:b1:b8:5b:db:59:67:f7:2c:4c:0c:c0:d1:e4:35: 54:d4:57:92:e4:c6:03:dd:aa:1a:84:3b:69:1d:3f: fb:33:41:75:ad:57:58:e2:50:7b:b3:62:98:c3:c1: 4f:de:ca:e1:bd:37:23:4b:3c:9f:4a:7b:86:04:6a: d6:c7:f4:9a:c0:67:6b:00:4b:01:b8:28:db:8e:08: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:86:92:7C:72:3B:9B:AA:4C:5C:78:DE:ED:22:97:4E:22:8B:9A:4F X509v3 Authority Key Identifier: keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3a:b1:92:19:68:a8:62:ad:de:eb:21:71:ac:e3:ad:41:64: b1:69:84:a0:53:90:c1:2e:5a:c3:3a:80:c5:bb:c3:02:8f:ff: 24:c9:9b:14:ce:2e:02:a0:93:c6:df:24:00:75:4d:1b:4a:c9: 74:4d:1b:1a:be:a4:69:f1:2b:68:52:3f:7a:cc:2a:a8:f7:7c: 26:7e:04:4f:73:1f:4c:19:1f:db:13:46:8c:81:b1:35:c3:9d: b2:1d:9b:2a:0f:e7:fa:80:5b:2d:34:e2:8d:5c:7e:4c:c2:6d: eb:e4:69:f7:19:b2:13:56:63:12:e6:45:87:07:0d:e1:ef:f9: 2c:35:5b:94:ec:e2:cb:98:e8:a9:e3:7d:fa:82:c4:48:81:07: 22:85:cd:03:82:66:bc:e6:2b:13:4f:14:7d:78:5b:a3:27:f6: 48:18:96:c2:4c:94:fd:16:bd:5c:91:b8:94:da:ae:92:8b:93: c7:9c:1d:39:72:b9:b3:d6:5b:42:0a:2a:c7:4d:e7:8b:89:b8: 33:08:a6:3d:3e:46:e4:c2:a7:cb:0a:01:8f:ec:d6:ae:7f:0c: a7:6c:4b:43:ba:d6:e4:25:c2:f8:63:f6:64:cb:b5:86:1d:13: 61:bf:45:b6:38:86:eb:b3:db:cf:ff:bc:4f:1b:3b:37:60:89: 90:37:1a:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OTExMTAvBgNVBAUTKDRDMjY5OUQyMTNERDVENTk5QjBFQzBFNDYzQjk0ODRG REIyMkY0MjcwHhcNMjQwNTAyMjIxNTQzWhcNMjQwNTA5MjIxNTQzWjAYMRYwFAYD VQQDEw02NjM0MTA4Zi1mZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BtEkCwM7LT3Oc3VshWohZyLNwmTRl6WAe3VpErbrVRJ6UERPQziySkpFxAc 7dkkX3eZ3njab8be4DNHdkwD6T3HB/PyKtSmchqq9yaVzjm4JCCRD/eR+4Z01HBY bccecpO0RZQyMpCMKMqUJbrAaLIVglQpI/Di5QnIUybgYAHREtRfxlEFd8tf2Vuc tyyUZq5bjrgQJmNrWEXiXtuGOy17G13Oq29L+0jcrses8TTr7OCEsbhb21ln9yxM DMDR5DVU1FeS5MYD3aoahDtpHT/7M0F1rVdY4lB7s2KYw8FP3srhvTcjSzyfSnuG BGrWx/SawGdrAEsBuCjbjgiu6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiGknxy O5uqTFx43u0il04ii5pPMB8GA1UdIwQYMBaAFEwmmdIT3V1Zmw7A5GO5SE/bIvQn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5MS83QzdCMUY2NkMz NUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhWbWJEc0RrWTdsSVQ5c2k5 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RDYVowaFBkWFZtYkRzRGtZN2xJVDlzaTlDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5MS83QzdCMUY2NkMzNUExMUVBQThFQ0I2N0ZDNEY5QUUwMi9UQ2FaMGhQZFhW bWJEc0RrWTdsSVQ5c2k5Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvOrGSGWioYq3e6yFxrOOtQWSxaYSgU5DBLlrDOoDFu8MCj/8kyZsU zi4CoJPG3yQAdU0bSsl0TRsavqRp8StoUj96zCqo93wmfgRPcx9MGR/bE0aMgbE1 w52yHZsqD+f6gFstNOKNXH5Mwm3r5Gn3GbITVmMS5kWHBw3h7/ksNVuU7OLLmOip 4336gsRIgQcihc0Dgma85isTTxR9eFujJ/ZIGJbCTJT9Fr1ckbiU2q6Si5PHnB05 crmz1ltCCirHTeeLibgzCKY9PkbkwqfLCgGP7NaufwynbEtDutbkJcL4Y/Zky7WG HRNhv0W2OIbrs9vP/7xPGzs3YImQNxoa -----END CERTIFICATE-----Generated at Thu May 2 23:03:13 2024 by rpki-client on console-fra.rpki-client.org