$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: sMocmImZMnbTAjcEgVH0Oi0YqbtBweeYTZpR5lCLt28= Subject key identifier: 11:FC:EA:FE:35:31:8B:87:2A:FD:E8:3C:EE:11:1E:03:54:76:6F:D8 Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 026A Signing time: Sun 05 May 2024 03:54:08 +0000 Manifest this update: Sun 05 May 2024 03:54:07 +0000 Manifest next update: Sun 12 May 2024 03:54:07 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: KAi0dCmkkojYb5NcUMNkbza6z4Svea2O5Vf6c31BxUU=) 2: D6A35008C53811ECB4EAFD1AC4F9AE02.roa (hash: 2X0d3XaRVlyEv6o6Oz6Zuu3w3Y7KES84+qdWvzxEZqU=) 3: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: YkXY2G5nfceribQOD7X+MmmAaaINrn8ptZy+JVJffag=) 4: D4D3CCDAC53811ECB4EAFD1AC4F9AE02.roa (hash: y5qT01H1BREmYiDlGr8J+8ElXF3KvSh7J+XIUQSF/hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: May 5 03:54:07 2024 GMT Not After : May 12 03:54:07 2024 GMT Subject: CN=663702df-62ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a2:9e:a1:df:11:51:b7:4a:1e:25:5b:d5:80: bf:40:9a:65:b7:9c:21:07:ba:1c:e0:38:f4:99:63: e0:47:c7:c0:c3:e7:06:c1:6a:0d:24:b6:67:a7:1d: 13:39:23:18:dd:76:7a:68:69:b8:22:d4:a0:42:2f: e6:55:cc:33:4b:54:2e:a6:73:dc:2e:d6:aa:6b:82: f1:f5:bd:cd:4f:35:0e:19:e4:d4:2b:3a:4a:75:f2: 76:c7:70:a5:72:35:f3:f0:66:cc:7e:be:e2:60:53: 77:7f:97:44:29:5d:f9:c6:d0:0f:03:9b:76:a0:f0: e5:c6:39:c4:96:77:64:58:23:1e:83:b1:0d:2c:22: 09:b1:02:04:a9:24:be:63:1a:78:b4:20:ae:d1:75: 5c:37:c5:ac:dc:c8:71:b5:17:91:0c:fd:2c:70:d1: 1e:42:d9:e1:79:5d:5b:eb:8f:36:6d:1b:16:af:e0: 1b:51:98:9c:bd:b7:8f:a7:ca:84:ca:2f:2f:85:bb: a9:86:57:e8:17:c9:cd:90:20:37:38:b6:1e:08:24: 29:ff:dd:47:2a:17:52:36:d0:2c:a9:7d:77:7e:4a: da:6f:e5:94:37:d2:ad:98:c1:ca:58:3b:f6:24:b9: b6:cf:8b:ac:cc:73:c3:c2:ac:8b:0d:d7:ff:a2:d1: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FC:EA:FE:35:31:8B:87:2A:FD:E8:3C:EE:11:1E:03:54:76:6F:D8 X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7b:a0:a6:7e:4b:43:45:9e:69:5b:ed:16:70:4b:57:4d:cb: a4:d2:38:c3:49:bd:41:71:ae:17:7c:02:2f:75:11:3f:74:c7: 5f:c5:97:e7:1c:13:8a:95:8a:23:f0:1b:28:fd:35:4f:aa:18: 3a:15:2d:72:d0:84:d7:c1:f6:6a:86:48:7e:27:7b:d0:11:d0: fa:c3:09:b0:cb:20:c0:13:f8:81:00:b5:ff:fb:7b:00:6a:75: 1c:7b:32:5a:48:70:92:0f:a4:23:28:80:77:0e:ed:ae:18:2c: c3:bc:7a:30:f3:4a:d6:4e:c0:2c:e9:65:ae:10:6d:c5:68:69: 81:2a:2d:c5:3d:8e:99:49:2d:b3:1c:d1:83:b5:50:24:c3:23: 56:e7:b9:98:29:3a:72:8b:3d:87:b8:4d:e6:8d:b3:17:be:cd: e1:55:e5:07:f3:0d:cd:eb:d5:4e:a6:05:60:a9:c7:c4:59:bc: bc:00:1f:67:43:5c:dc:52:d7:eb:89:50:f5:95:44:30:50:f3: ce:0c:02:0f:d4:cd:c5:a6:15:92:28:8b:fe:78:37:b9:46:55: 30:f7:31:1d:a1:80:79:41:1a:1d:cd:e8:c2:03:53:06:96:dc: 68:79:82:0a:77:87:20:75:c8:3a:95:40:d9:46:21:e8:85:5e: 2b:66:ec:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjQwNTA1MDM1NDA3WhcNMjQwNTEyMDM1NDA3WjAYMRYwFAYD VQQDEw02NjM3MDJkZi02MmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qKeod8RUbdKHiVb1YC/QJplt5whB7oc4Dj0mWPgR8fAw+cGwWoNJLZnpx0T OSMY3XZ6aGm4ItSgQi/mVcwzS1QupnPcLtaqa4Lx9b3NTzUOGeTUKzpKdfJ2x3Cl cjXz8GbMfr7iYFN3f5dEKV35xtAPA5t2oPDlxjnElndkWCMeg7ENLCIJsQIEqSS+ Yxp4tCCu0XVcN8Ws3MhxtReRDP0scNEeQtnheV1b6482bRsWr+AbUZicvbePp8qE yi8vhbuphlfoF8nNkCA3OLYeCCQp/91HKhdSNtAsqX13fkrab+WUN9KtmMHKWDv2 JLm2z4uszHPDwqyLDdf/otF6UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH86v41 MYuHKv3oPO4RHgNUdm/YMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVe6CmfktDRZ5pW+0WcEtXTcuk0jjDSb1Bca4XfAIvdRE/dMdfxZfn HBOKlYoj8Bso/TVPqhg6FS1y0ITXwfZqhkh+J3vQEdD6wwmwyyDAE/iBALX/+3sA anUcezJaSHCSD6QjKIB3Du2uGCzDvHow80rWTsAs6WWuEG3FaGmBKi3FPY6ZSS2z HNGDtVAkwyNW57mYKTpyiz2HuE3mjbMXvs3hVeUH8w3N69VOpgVgqcfEWby8AB9n Q1zcUtfriVD1lUQwUPPODAIP1M3FphWSKIv+eDe5RlUw9zEdoYB5QRodzejCA1MG ltxoeYIKd4cgdcg6lUDZRiHohV4rZuyX -----END CERTIFICATE-----Generated at Sun May 5 04:34:57 2024 by rpki-client on console-fra.rpki-client.org