$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: xftAVL8eh+xS20Mmeye+v6zn8G59/KeM8qDB/7TGK0E= Subject key identifier: 35:2B:AC:21:6B:91:83:EB:C3:88:82:60:3E:1F:A6:E9:B2:73:60:8F Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0BCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0BC5 Signing time: Wed 24 Apr 2024 19:10:27 +0000 Manifest this update: Wed 24 Apr 2024 19:10:27 +0000 Manifest next update: Wed 01 May 2024 19:10:27 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: oI/Enr4paO7tTdeCOZ7POFsc4NkrO2Iyj/2Kh/nn+X4=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: gtQBI4S78oRGzDerxcGVhnFswIklyjzdp1Q/C1it5xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: Apr 24 19:10:27 2024 GMT Not After : May 1 19:10:27 2024 GMT Subject: CN=66295923-f7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:91:c2:0d:d3:05:15:f1:f1:1f:61:43:e5:b4: 51:70:a0:7f:5e:dc:4d:ef:c4:bd:55:a7:17:58:4d: ec:8f:66:16:c0:6c:19:63:14:32:45:d7:01:c1:bc: fa:d4:47:df:02:24:56:e1:63:d5:c5:6d:7b:1e:30: de:f2:c2:8f:0f:a6:e1:fa:d3:7d:fc:e9:b4:f0:c1: 5b:94:8c:2c:e0:a2:72:72:fb:f4:20:a1:1a:3c:64: 81:c1:8f:1e:5f:d2:76:fc:dd:1b:d2:ea:f9:e7:3f: b7:8b:02:ef:d5:19:07:c3:89:3c:3a:06:78:db:6a: 30:06:bf:46:ee:38:8c:a8:2a:db:ee:e6:18:ca:78: 9c:96:e0:e7:8f:d2:a5:60:f5:a7:0a:6b:4f:65:3a: c2:0e:a4:a6:ea:9e:ea:5c:16:88:27:b6:ba:25:4d: 3f:ff:9b:93:91:32:fb:c1:6c:76:70:8a:8a:4a:07: 74:4e:8a:cf:7f:a0:e8:68:61:26:64:f9:e8:ac:76: 18:7c:83:d3:8a:0e:5e:84:14:23:0b:df:dd:54:7f: 6c:ca:d6:df:9f:5f:fd:ca:bf:3d:13:50:b6:f0:fc: b8:27:0a:92:fa:86:60:62:82:93:93:86:cf:f4:11: 94:19:9e:c2:5e:4b:fa:0d:0d:6a:ae:6f:3d:aa:0e: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:AC:21:6B:91:83:EB:C3:88:82:60:3E:1F:A6:E9:B2:73:60:8F X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4d:15:56:f1:bc:06:6a:5a:dc:fc:49:51:11:a0:09:d5:8b: 16:25:78:3b:ae:76:64:34:b8:d2:fb:16:9e:1f:0f:c6:23:e0: be:46:ef:20:7d:3a:9b:5d:71:f5:4c:f8:9a:91:f6:37:6c:38: c2:cf:88:62:51:6e:29:60:8f:62:3e:d7:2b:30:e9:73:3b:4f: 8b:f1:d1:52:8b:fc:be:3a:e2:37:1a:db:e0:5d:97:89:7e:09: 07:57:9e:b6:37:57:b7:34:86:e2:f1:f9:5d:8d:c2:7e:12:a5: 92:9b:67:b5:7d:0c:af:3d:d4:10:7a:a9:63:a4:6a:8a:43:d7: 22:ab:17:b7:6e:6c:c4:53:b9:21:b3:7d:29:75:62:21:24:f8: db:f3:79:6d:e2:07:9e:75:a0:be:1d:5c:e2:1b:c1:fd:72:f3: f9:ac:b2:50:e4:f7:7a:d7:5a:01:16:60:ea:a8:c5:cd:1a:f3: f4:24:f9:c7:a8:f4:8c:22:ab:c6:14:ec:61:e2:ac:58:cc:e2: 26:b9:e5:c7:ca:df:00:ea:d9:9a:e1:b3:ff:86:06:12:dc:c8: b3:55:5b:8f:a9:d4:8b:8c:51:38:94:b6:4d:86:ec:86:24:32: 73:34:41:e6:a0:f3:de:19:49:8a:da:bb:96:4f:43:0a:ee:ad: 4a:26:48:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjQwNDI0MTkxMDI3WhcNMjQwNTAxMTkxMDI3WjAYMRYwFAYD VQQDEw02NjI5NTkyMy1mN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZHCDdMFFfHxH2FD5bRRcKB/XtxN78S9VacXWE3sj2YWwGwZYxQyRdcBwbz6 1EffAiRW4WPVxW17HjDe8sKPD6bh+tN9/Om08MFblIws4KJycvv0IKEaPGSBwY8e X9J2/N0b0ur55z+3iwLv1RkHw4k8OgZ422owBr9G7jiMqCrb7uYYynicluDnj9Kl YPWnCmtPZTrCDqSm6p7qXBaIJ7a6JU0//5uTkTL7wWx2cIqKSgd0TorPf6DoaGEm ZPnorHYYfIPTig5ehBQjC9/dVH9sytbfn1/9yr89E1C28Py4JwqS+oZgYoKTk4bP 9BGUGZ7CXkv6DQ1qrm89qg5IeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUrrCFr kYPrw4iCYD4fpumyc2CPMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6TRVW8bwGalrc/ElREaAJ1YsWJXg7rnZkNLjS+xaeHw/GI+C+Ru8g fTqbXXH1TPiakfY3bDjCz4hiUW4pYI9iPtcrMOlzO0+L8dFSi/y+OuI3GtvgXZeJ fgkHV562N1e3NIbi8fldjcJ+EqWSm2e1fQyvPdQQeqljpGqKQ9ciqxe3bmzEU7kh s30pdWIhJPjb83lt4geedaC+HVziG8H9cvP5rLJQ5Pd611oBFmDqqMXNGvP0JPnH qPSMIqvGFOxh4qxYzOImueXHyt8A6tma4bP/hgYS3MizVVuPqdSLjFE4lLZNhuyG JDJzNEHmoPPeGUmK2ruWT0MK7q1KJkjN -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:53 2024 by rpki-client on console-fra.rpki-client.org