$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: qHhaThJg4QVGOEJwXSmWo/RCDgulZHsRMXzqGsxLwak= Subject key identifier: 94:BA:BB:8B:6F:3D:86:AB:04:AB:FB:5D:CA:9B:8D:ED:EC:72:5A:64 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 33F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 33D6 Signing time: Fri 26 Apr 2024 14:32:09 +0000 Manifest this update: Fri 26 Apr 2024 14:32:08 +0000 Manifest next update: Fri 03 May 2024 14:32:08 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: xKyNDwlyrgS4qDqoTLWBnh2qEocPu87BOcSKm6qMigM=) 2: 38D2A96C75D911E8A722EC33C4F9AE02.roa (hash: elDFtFSy7NJUJ+IUx0YL2euoTfOLBLZKBmxm8iFbuQM=) 3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: 2Vj+s7DHmkgLhy4IA8FdPfNPgY+cJMYTXFbPkB97l04=) 4: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: KqOdzkW00sNoLJ/OBf5XyYcMrbE8nowEuQW1fHDQD1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13304 (0x33f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Apr 26 14:32:08 2024 GMT Not After : May 3 14:32:08 2024 GMT Subject: CN=662bbae8-a8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:26:c7:9e:1d:ec:a7:c2:2a:38:c8:f1:29: e2:a9:cb:9a:cc:31:0e:cb:82:b1:2f:98:12:e8:23: 61:b7:aa:f5:a9:b3:3c:ff:33:3f:7c:44:44:e1:13: 1e:17:c2:49:fb:36:18:3a:23:ab:a7:bc:f8:07:f3: 74:39:1d:37:b1:3d:b8:83:ef:29:cb:a5:4b:ed:b6: c3:4b:37:0a:94:1b:f9:07:5c:87:ae:88:c2:15:81: a0:d9:ef:03:35:be:8b:37:55:e8:f1:94:76:ae:73: dd:ce:bf:ad:30:dd:94:6b:1f:13:bb:99:94:ef:4e: e7:7e:e2:ce:b2:61:d8:e3:3e:08:df:cf:47:da:29: 14:bf:a6:79:30:32:c5:c4:5f:0e:96:cd:9a:a9:5f: 8e:a8:39:41:67:f9:ca:bc:ad:90:cb:21:c7:3f:d1: fb:b2:0e:50:15:54:c4:5b:77:68:a7:57:a8:69:e8: e2:40:13:11:79:bd:77:09:6f:9b:01:30:ac:68:35: 1f:e4:3a:8c:c8:84:46:e3:cb:71:75:a8:1c:b0:d8: 6e:ac:94:40:d6:53:4a:ab:f2:ca:e1:e6:84:3a:4f: e3:f3:23:69:61:17:84:e3:03:c5:0b:68:30:03:14: 14:fb:7c:83:51:0f:3b:6e:6f:91:5b:d7:c9:6d:da: ed:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BA:BB:8B:6F:3D:86:AB:04:AB:FB:5D:CA:9B:8D:ED:EC:72:5A:64 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:16:89:60:81:82:f5:4c:60:68:81:75:bb:e5:59:99:52:7b: 87:b1:32:8e:69:03:cc:01:fd:a9:86:f9:26:73:51:9b:53:8d: 72:cd:d1:44:79:40:09:cf:bb:82:af:c5:5d:52:56:61:ca:04: 68:0c:6d:cf:3c:f3:0e:a1:67:68:70:00:a7:c9:5f:9f:b8:34: 8a:f3:16:1f:39:97:35:ea:4b:0c:cd:2c:2b:9d:a0:bc:04:c9: 77:b4:e1:24:40:6b:9b:b4:9c:91:68:05:77:b5:43:82:ce:1a: be:ab:d6:20:2c:da:21:3e:ad:49:ae:2d:bc:f9:f2:83:fe:f4: c5:2d:45:45:d4:80:38:be:dc:27:e7:34:6c:9b:77:52:d0:fc: 60:1d:5b:48:9a:f4:ce:dd:a5:df:92:11:0c:33:2f:be:6d:7a: b6:f6:00:b5:d0:7f:58:5f:96:26:26:21:a8:ae:56:00:e2:87: dd:02:f2:c6:48:ff:cd:88:12:20:e7:3f:e6:5b:1c:a6:8e:c0: 74:3c:8f:9e:f7:f6:27:01:51:40:66:0e:3b:22:83:50:6d:84: 59:b4:c2:f1:ae:5e:a1:e1:ee:57:7a:26:c6:d0:e9:e6:4a:e1: b0:e6:ea:59:de:03:3c:ff:a2:e7:92:8e:0b:7c:f0:68:ce:43: 9c:25:9e:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjQwNDI2MTQzMjA4WhcNMjQwNTAzMTQzMjA4WjAYMRYwFAYD VQQDEw02NjJiYmFlOC1hOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+kmx54d7KfCKjjI8SniqcuazDEOy4KxL5gS6CNht6r1qbM8/zM/fERE4RMe F8JJ+zYYOiOrp7z4B/N0OR03sT24g+8py6VL7bbDSzcKlBv5B1yHrojCFYGg2e8D Nb6LN1Xo8ZR2rnPdzr+tMN2Uax8Tu5mU707nfuLOsmHY4z4I389H2ikUv6Z5MDLF xF8Ols2aqV+OqDlBZ/nKvK2QyyHHP9H7sg5QFVTEW3dop1eoaejiQBMReb13CW+b ATCsaDUf5DqMyIRG48txdagcsNhurJRA1lNKq/LK4eaEOk/j8yNpYReE4wPFC2gw AxQU+3yDUQ87bm+RW9fJbdrtZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS6u4tv PYarBKv7Xcqbje3sclpkMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9FolggYL1TGBogXW75VmZUnuHsTKOaQPMAf2phvkmc1GbU41yzdFE eUAJz7uCr8VdUlZhygRoDG3PPPMOoWdocACnyV+fuDSK8xYfOZc16ksMzSwrnaC8 BMl3tOEkQGubtJyRaAV3tUOCzhq+q9YgLNohPq1Jri28+fKD/vTFLUVF1IA4vtwn 5zRsm3dS0PxgHVtImvTO3aXfkhEMMy++bXq29gC10H9YX5YmJiGorlYA4ofdAvLG SP/NiBIg5z/mWxymjsB0PI+e9/YnAVFAZg47IoNQbYRZtMLxrl6h4e5XeibG0Onm SuGw5upZ3gM8/6Lnko4LfPBozkOcJZ4n -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:35 2024 by rpki-client on console-ams.rpki-client.org