$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: AgoPZgEyLbPBx0+SzSaEeDDSslw11kQvckvOMkUt+0E= Subject key identifier: 1B:A0:41:51:3D:93:EF:E0:E6:19:34:1C:C1:E8:2B:2D:B7:FD:18:C4 Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 02C9 Signing time: Fri 03 May 2024 03:31:44 +0000 Manifest this update: Fri 03 May 2024 03:31:43 +0000 Manifest next update: Fri 10 May 2024 03:31:43 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: Lkj4zhadzgfAC/QGvBG+IbLQ3foxpjiTEuGJz0GXGn4=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: 8HFiuoEkuOCg+QdpD10PuBQC+1LXfTtw3kiyaOdbRTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: May 3 03:31:43 2024 GMT Not After : May 10 03:31:43 2024 GMT Subject: CN=66345aa0-592d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:e3:bc:02:68:ae:b0:39:62:9a:df:b6:26: 1a:20:d5:89:44:98:ec:8d:18:83:e5:a2:e8:5b:dd: 75:b8:33:f0:e7:58:bc:6d:a2:ea:bd:46:5c:0e:a2: 5e:d5:1e:07:15:12:32:b7:7e:36:40:07:43:f2:c4: 25:2d:b5:dc:c2:d9:1c:0e:68:1a:08:31:3d:a3:06: bc:74:a4:d1:3e:6c:f0:cf:a2:a4:3f:b9:61:f8:ea: c4:ff:b2:ed:48:4f:c5:92:a5:a6:0f:f2:fe:d1:f6: b3:59:de:63:bd:6e:fc:89:7e:2f:e9:b2:5d:af:9c: 24:99:b3:25:fc:5b:a7:bb:47:a1:dd:fb:74:37:16: 22:b3:5b:02:09:f4:7f:32:13:c0:8a:b3:ee:f3:83: 25:41:59:13:b9:98:a7:c2:1f:43:44:0f:b1:92:83: 2d:20:96:d2:62:69:d7:df:06:25:5d:84:c9:6e:9b: ba:89:87:59:13:76:f9:69:ad:f0:64:23:2f:ac:4d: 24:3f:e5:2b:42:eb:bf:57:82:e9:4b:4f:f4:ae:12: ba:76:dd:69:41:f1:39:b4:d0:5b:11:34:cf:82:08: 91:a3:57:cf:46:5a:27:2a:9b:ca:61:da:c2:9f:86: 45:19:e1:fa:ef:1e:ff:d0:58:76:bc:fd:38:1d:be: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A0:41:51:3D:93:EF:E0:E6:19:34:1C:C1:E8:2B:2D:B7:FD:18:C4 X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ce:61:37:32:ea:af:50:95:00:32:5d:21:d9:9b:40:c8:95: bd:0b:33:5d:87:5b:74:b4:75:06:66:cc:0a:23:71:14:78:ac: f6:1b:35:06:5f:78:24:d7:4c:ab:ac:fa:83:96:e7:03:a8:10: 67:e8:f5:bc:05:bc:57:93:d7:5f:ee:56:4c:03:e0:24:15:8a: 59:0a:e9:b4:f6:65:eb:54:82:d0:a0:8f:23:e4:ea:b1:01:62: 6e:8e:d7:d4:eb:ee:6f:d6:3e:0b:b1:86:ef:46:22:2e:63:9b: d2:8e:66:4e:b4:56:24:b3:b0:08:e9:e7:5d:94:19:7f:25:96: 86:d7:d7:26:eb:7d:e5:d8:e1:de:16:0e:06:b6:6c:7a:b3:9e: 62:45:9e:4e:30:7c:88:53:b1:1e:59:d8:86:2c:01:d4:b6:c8: 2a:3b:5e:19:61:0c:c7:95:af:63:b9:f1:ab:da:fe:c5:94:7d: 25:0b:89:c8:ef:9e:51:9b:b5:dd:9d:b8:1f:c4:e0:28:cd:ac: e8:28:35:8f:46:dc:2f:ac:3c:09:e2:9a:dd:4e:04:bd:88:60: 30:65:64:fe:aa:20:31:2a:26:e9:96:38:3b:47:6b:e3:82:2b: f5:56:28:9f:e7:ca:77:8f:c8:49:83:b8:8a:b5:87:0c:fc:67: a4:55:4f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjQwNTAzMDMzMTQzWhcNMjQwNTEwMDMzMTQzWjAYMRYwFAYD VQQDEw02NjM0NWFhMC01OTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhLjvAJorrA5YprftiYaINWJRJjsjRiD5aLoW911uDPw51i8baLqvUZcDqJe 1R4HFRIyt342QAdD8sQlLbXcwtkcDmgaCDE9owa8dKTRPmzwz6KkP7lh+OrE/7Lt SE/FkqWmD/L+0fazWd5jvW78iX4v6bJdr5wkmbMl/Funu0eh3ft0NxYis1sCCfR/ MhPAirPu84MlQVkTuZinwh9DRA+xkoMtIJbSYmnX3wYlXYTJbpu6iYdZE3b5aa3w ZCMvrE0kP+UrQuu/V4LpS0/0rhK6dt1pQfE5tNBbETTPggiRo1fPRlonKpvKYdrC n4ZFGeH67x7/0Fh2vP04Hb5XkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBugQVE9 k+/g5hk0HMHoKy23/RjEMB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVzmE3MuqvUJUAMl0h2ZtAyJW9CzNdh1t0tHUGZswKI3EUeKz2GzUG X3gk10yrrPqDlucDqBBn6PW8BbxXk9df7lZMA+AkFYpZCum09mXrVILQoI8j5Oqx AWJujtfU6+5v1j4LsYbvRiIuY5vSjmZOtFYks7AI6eddlBl/JZaG19cm633l2OHe Fg4Gtmx6s55iRZ5OMHyIU7EeWdiGLAHUtsgqO14ZYQzHla9jufGr2v7FlH0lC4nI 755Rm7XdnbgfxOAozazoKDWPRtwvrDwJ4prdTgS9iGAwZWT+qiAxKibpljg7R2vj giv1Viif58p3j8hJg7iKtYcM/GekVU/r -----END CERTIFICATE-----Generated at Fri May 3 04:36:55 2024 by rpki-client on console-ams.rpki-client.org