$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json) Hash identifier: 8U/8WvqXqZql/7pJsqsMX6NBQ4p3fnMHUUg0Prs2/y8= Subject key identifier: 47:31:33:1B:E8:4A:C6:7C:5D:E0:4A:26:A0:E8:72:38:BC:1A:94:0E Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft Manifest number: 0117 Signing time: Sun 05 May 2024 05:26:22 +0000 Manifest this update: Sun 05 May 2024 05:26:22 +0000 Manifest next update: Sun 12 May 2024 05:26:22 +0000 Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: 3+zMKnXRsmBr1pJgdjttb3cGTHyKWjfOgcmBMYiqeGY=) 2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: SkncgeBbiv/lu2mdnjdJvGjNCM0sgqD2W+tqKeNRWjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Validity Not Before: May 5 05:26:22 2024 GMT Not After : May 12 05:26:22 2024 GMT Subject: CN=6637187e-5b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:f7:5b:8a:ee:e3:61:cf:ce:68:41:9a:ba: fb:7a:c5:57:f6:26:f5:12:19:ff:b8:0c:a5:2d:35: 39:84:b7:52:3c:74:56:1f:a5:96:a1:48:ef:ba:5a: b3:a9:25:f2:35:da:41:95:76:b8:68:1c:e6:41:6e: 08:8c:a1:31:5f:2a:c1:5f:35:5b:59:8b:3a:c9:63: 8d:03:e2:d2:a5:2f:5b:b7:f1:48:f2:c1:39:d0:72: 1a:61:91:ca:15:46:d5:b1:70:67:d6:62:bf:ba:95: 6f:9e:5e:84:64:96:13:0c:11:d5:1e:a7:8f:c2:94: a8:10:87:fa:60:c5:bf:80:76:81:52:46:3b:88:58: 3f:31:0f:3c:63:cb:5d:76:d2:50:5e:c2:bd:3e:ea: 9d:80:be:da:cb:42:27:1d:4b:46:0a:04:ee:5a:ba: 6d:ee:1b:d4:55:1d:e7:a2:07:5b:f7:11:68:43:10: 2e:2c:27:14:47:bb:3c:e5:50:99:2f:32:79:e7:75: 17:67:03:13:bf:93:f2:0f:88:d6:7b:b8:01:4f:a4: 98:39:f5:ae:41:ac:26:54:07:c7:d5:65:48:ea:17: 47:92:83:be:3b:82:22:f7:80:e1:a6:ae:bf:b0:d9: 1f:e8:9a:39:49:2e:60:c8:2a:d5:e1:23:ea:23:18: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:31:33:1B:E8:4A:C6:7C:5D:E0:4A:26:A0:E8:72:38:BC:1A:94:0E X509v3 Authority Key Identifier: keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:fe:96:f7:e4:69:3a:0a:46:26:44:70:12:45:79:26:53:75: 29:d6:a0:99:db:4b:a6:cf:89:1a:f9:6b:2c:3b:79:97:38:15: 9a:4a:ab:e5:d4:92:3c:39:24:de:03:90:44:ae:1d:e7:fa:c7: a4:79:87:17:4c:ca:43:ac:f8:ee:d1:3c:2c:d5:b8:7d:3c:60: 32:ad:1a:b0:c0:8d:60:b1:d1:70:5e:6c:ec:07:6a:ed:03:e9: 4a:cf:c4:e5:b2:0a:d9:e7:2f:d8:c6:81:5c:62:15:1e:b1:19: 68:8e:80:1a:52:ab:00:47:2d:77:be:87:2b:a5:fc:c0:c7:1a: cc:1a:bd:9c:45:69:46:e6:c6:64:3b:7f:2c:c7:69:46:91:f7: bc:98:0a:1f:c1:de:eb:67:d6:c2:89:b7:24:75:22:31:cf:f9: 35:7d:97:9e:6e:b6:9b:44:d0:b3:f0:c7:8f:a5:25:7f:10:d1: 00:11:9b:e1:50:ba:04:49:d9:32:cb:33:88:49:f3:d1:ac:4e: ed:53:96:3b:20:64:36:b1:0f:04:e4:8f:24:3c:fc:db:a9:7e: f7:89:0f:2b:58:fa:9d:a7:9f:75:0a:9b:a9:9f:2b:2d:e7:d2: ad:47:3a:5b:92:3a:c5:45:6e:f7:a7:28:78:d6:17:13:bd:3f: b0:0e:3c:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBODMxMTAvBgNVBAUTKEI1MzQ1MDM4MkU0NUY4QTNEN0Q2MjkxMEYzNzlDNzg5 RDE0N0ZGQjAwHhcNMjQwNTA1MDUyNjIyWhcNMjQwNTEyMDUyNjIyWjAYMRYwFAYD VQQDEw02NjM3MTg3ZS01YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyv3W4ru42HPzmhBmrr7esVX9ib1Ehn/uAylLTU5hLdSPHRWH6WWoUjvulqz qSXyNdpBlXa4aBzmQW4IjKExXyrBXzVbWYs6yWONA+LSpS9bt/FI8sE50HIaYZHK FUbVsXBn1mK/upVvnl6EZJYTDBHVHqePwpSoEIf6YMW/gHaBUkY7iFg/MQ88Y8td dtJQXsK9PuqdgL7ay0InHUtGCgTuWrpt7hvUVR3nogdb9xFoQxAuLCcUR7s85VCZ LzJ553UXZwMTv5PyD4jWe7gBT6SYOfWuQawmVAfH1WVI6hdHkoO+O4Ii94Dhpq6/ sNkf6Jo5SS5gyCrV4SPqIxgmTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcxMxvo SsZ8XeBKJqDocji8GpQOMB8GA1UdIwQYMBaAFLU0UDguRfij19YpEPN5x4nRR/+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkE4My82NEFGODAwMjZC MzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1LUFgxaWtRODNuSGlkRkhf N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUUlFPQzVGLUtQWDFpa1E4M25IaWRGSF83QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkE4My82NEFGODAwMjZCMzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1L UFgxaWtRODNuSGlkRkhfN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi/pb35Gk6CkYmRHASRXkmU3Up1qCZ20umz4ka+WssO3mXOBWaSqvl 1JI8OSTeA5BErh3n+sekeYcXTMpDrPju0Tws1bh9PGAyrRqwwI1gsdFwXmzsB2rt A+lKz8TlsgrZ5y/YxoFcYhUesRlojoAaUqsARy13vocrpfzAxxrMGr2cRWlG5sZk O38sx2lGkfe8mAofwd7rZ9bCibckdSIxz/k1fZeebrabRNCz8MePpSV/ENEAEZvh ULoESdkyyzOISfPRrE7tU5Y7IGQ2sQ8E5I8kPPzbqX73iQ8rWPqdp591Cpupnyst 59KtRzpbkjrFRW73pyh41hcTvT+wDjy5 -----END CERTIFICATE-----Generated at Sun May 5 06:01:20 2024 by rpki-client on console-fra.rpki-client.org