$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft File: TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json) Hash identifier: 1Blz2hd/loIzGTbXzLUjCGHdSw5Fb1uIlCaoBQlIvT4= Subject key identifier: 54:7C:CE:B8:5B:4F:E2:E5:7D:47:1D:1C:6A:FE:31:46:BD:3A:08:AC Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft Manifest number: 0655 Signing time: Sat 04 May 2024 23:46:21 +0000 Manifest this update: Sat 04 May 2024 23:46:20 +0000 Manifest next update: Sat 11 May 2024 23:46:20 +0000 Files and hashes: 1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: izh8LWC1rLiPZlaXkjB5d6prz93uvu8JFgeY4DK8/Ls=) 2: E9573898390E11EBAC72036BC4F9AE02.roa (hash: obihlxRhU0PPosQc2ueIbFqyf53tOUTNgrbX1TDxlFA=) 3: E9E53D64390E11EBAC72036BC4F9AE02.roa (hash: c0U5pKKCCV/RAy6tBF7y0xcEN5d947WhkMFfGLpOrGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Validity Not Before: May 4 23:46:20 2024 GMT Not After : May 11 23:46:20 2024 GMT Subject: CN=6636c8cd-583c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6b:34:3c:4c:5e:16:f3:6b:7d:00:7b:4b:e5: 93:69:fc:69:19:62:85:27:11:7b:84:ab:46:a9:6e: 8f:f6:bb:06:32:d0:63:ae:3e:4b:53:5a:56:cb:69: 30:e9:f6:8b:c8:48:e3:28:5e:ef:b6:5c:b4:28:89: 71:ce:9f:7e:ce:fb:ad:85:0a:cb:42:40:67:82:57: ae:b7:3f:4b:ba:e9:16:cb:0f:51:0c:50:6b:f6:ce: d6:bf:00:6f:0a:eb:8a:20:0c:4d:a7:ba:2e:ba:c3: e1:3a:84:f6:d9:b8:5f:bf:16:fd:e3:06:57:a3:16: 27:e7:9d:76:f4:b4:cd:0e:d8:39:0d:c0:40:21:05: b2:26:1b:2f:12:eb:65:7c:fd:96:55:c8:f9:09:06: 37:8d:ce:a2:34:83:af:c7:30:35:52:5c:6d:20:c7: e5:2a:21:f8:70:b6:a2:f0:50:82:b2:23:90:ff:9e: 9c:76:41:e2:1d:74:a3:4c:a4:ba:df:b2:a9:70:18: e9:4a:61:fb:0b:6e:44:d5:68:ce:c7:9b:83:60:58: 32:2d:53:dd:20:ed:fa:53:14:f9:7f:89:c6:17:94: 1a:21:d2:b5:5c:f1:f3:90:ba:90:33:11:5f:6d:43: 8f:44:94:93:31:d8:0c:af:62:3b:c3:0e:c3:8b:38: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7C:CE:B8:5B:4F:E2:E5:7D:47:1D:1C:6A:FE:31:46:BD:3A:08:AC X509v3 Authority Key Identifier: keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:99:a1:57:38:eb:a8:7f:87:a1:95:61:fe:bb:c6:a5:02:f2: 36:0b:c7:ab:3f:b3:9e:14:1d:30:d1:40:7c:12:ca:08:c8:72: 10:68:32:d5:9e:15:d0:74:00:c8:15:aa:5b:6e:48:b3:0a:42: 76:4a:5d:da:bd:3b:e4:0f:f9:6e:52:a2:22:ca:92:89:9a:60: 17:df:e1:c4:3f:60:bb:2f:d3:9c:5c:c3:4a:7c:b5:35:76:ac: c4:b1:eb:8a:14:3e:d8:90:fd:db:2e:37:12:40:88:91:32:94: 31:a5:92:1b:6d:f1:5f:3e:f4:49:a3:4e:e1:8d:7a:19:2d:81: 14:8d:81:e1:b4:9c:f9:34:b2:3a:80:bd:f9:c6:67:18:38:32: 39:54:eb:ec:fb:e5:15:4e:5c:5d:02:bf:08:ff:81:18:52:7f: 53:8b:3f:79:ee:f0:97:10:0d:21:c5:0d:cb:5d:7e:3b:5d:c4: 13:d9:d6:9a:6f:eb:7f:58:bf:38:ea:60:5e:b3:08:6b:57:b4: 77:d7:51:e3:6f:ee:eb:a0:42:72:67:01:0c:ce:ea:a3:de:23: e9:ac:04:ae:7c:19:15:f6:f6:3e:4e:79:e8:3e:15:61:a9:64: e9:ec:a7:38:94:fc:65:5a:45:65:89:98:d4:c0:b1:d4:e8:13: b4:a5:10:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC MEZEMjFENUMwHhcNMjQwNTA0MjM0NjIwWhcNMjQwNTExMjM0NjIwWjAYMRYwFAYD VQQDEw02NjM2YzhjZC01ODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA82s0PExeFvNrfQB7S+WTafxpGWKFJxF7hKtGqW6P9rsGMtBjrj5LU1pWy2kw 6faLyEjjKF7vtly0KIlxzp9+zvuthQrLQkBngleutz9LuukWyw9RDFBr9s7WvwBv CuuKIAxNp7ouusPhOoT22bhfvxb94wZXoxYn55129LTNDtg5DcBAIQWyJhsvEutl fP2WVcj5CQY3jc6iNIOvxzA1UlxtIMflKiH4cLai8FCCsiOQ/56cdkHiHXSjTKS6 37KpcBjpSmH7C25E1WjOx5uDYFgyLVPdIO36UxT5f4nGF5QaIdK1XPHzkLqQMxFf bUOPRJSTMdgMr2I7ww7Dizg47wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFR8zrhb T+LlfUcdHGr+MUa9OgisMB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5 MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU5MC8yRjdCMTdDNDM5MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3Jk QkV2Q2p2WGZJWmF3X1NIVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+maFXOOuof4ehlWH+u8alAvI2C8erP7OeFB0w0UB8EsoIyHIQaDLV nhXQdADIFapbbkizCkJ2Sl3avTvkD/luUqIiypKJmmAX3+HEP2C7L9OcXMNKfLU1 dqzEseuKFD7YkP3bLjcSQIiRMpQxpZIbbfFfPvRJo07hjXoZLYEUjYHhtJz5NLI6 gL35xmcYODI5VOvs++UVTlxdAr8I/4EYUn9Tiz957vCXEA0hxQ3LXX47XcQT2daa b+t/WL846mBeswhrV7R311Hjb+7roEJyZwEMzuqj3iPprASufBkV9vY+TnnoPhVh qWTp7Kc4lPxlWkVliZjUwLHU6BO0pRBG -----END CERTIFICATE-----Generated at Sun May 5 01:13:21 2024 by rpki-client on console-ams.rpki-client.org