$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: 4ofsvF9kW9x9gnt3EgIJlwskTstl47O7J8UpxPpBrBU= Subject key identifier: C3:2C:8B:FE:8A:30:F2:0C:CA:03:E0:0E:83:D2:53:98:0D:2F:8F:44 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 2725 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 2710 Signing time: Sat 04 May 2024 15:56:51 +0000 Manifest this update: Sat 04 May 2024 15:56:50 +0000 Manifest next update: Sat 11 May 2024 15:56:50 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: lLYaNOuCcsmWOVLHjBey79e8IzHcT93UHrNkEcxKmCY=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: c1eWaKTgL9+AH+cc5xMKE7jFxnzkuE21gtTwanMOgV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10021 (0x2725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: May 4 15:56:50 2024 GMT Not After : May 11 15:56:50 2024 GMT Subject: CN=66365ac3-788a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:e3:27:40:80:75:0a:0d:1b:40:23:4e:26: de:5b:7a:60:c7:95:01:21:1c:9c:70:87:56:c4:90: b7:f9:98:aa:51:90:61:47:f2:17:bc:d0:15:c3:3e: 07:52:0c:10:88:49:24:f2:fc:6f:03:62:14:c8:55: 3d:d1:f9:ae:c5:19:02:b9:9a:63:3d:97:5b:4b:8e: 35:2c:7d:7f:8e:ce:e5:ef:1d:47:42:8b:1c:08:74: cd:ea:fb:f0:ef:42:fc:5b:8d:70:e6:f3:34:b4:cc: d3:ed:87:07:21:88:df:8d:65:b2:8c:29:86:f3:f4: 7e:64:4d:d3:31:d0:74:b5:11:56:6f:66:57:44:e0: e5:49:2f:51:80:12:8b:5d:38:9d:67:0b:e7:ec:08: 5b:79:26:68:c5:92:3b:7e:9b:1d:ed:10:b4:21:15: af:87:9e:eb:76:4e:da:c8:33:21:57:b5:e2:77:d4: 7c:61:4a:b5:f0:1b:b4:d4:1f:85:62:6a:d9:10:d5: fc:18:87:09:cc:35:d9:d0:e0:80:01:96:a7:7c:28: f3:d4:fe:e9:4b:8d:cb:fc:52:59:02:4f:8d:66:1d: 7c:ce:b5:f5:63:da:6c:68:9b:da:ba:84:df:a1:63: 20:e9:cc:5b:40:75:3b:a0:e1:0e:98:ca:3e:7d:57: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2C:8B:FE:8A:30:F2:0C:CA:03:E0:0E:83:D2:53:98:0D:2F:8F:44 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:26:93:59:87:de:5e:6b:10:3f:50:f9:f1:a5:40:3e:67:4b: 06:24:b4:70:e7:83:16:15:5d:d8:4c:ce:26:83:67:9b:54:7d: 76:64:24:92:cf:55:6f:d6:53:ca:d0:09:85:a5:63:c5:74:e7: a5:fc:4d:76:c2:0d:6f:22:d2:70:b0:2f:c9:25:a1:03:63:29: a2:fd:1c:26:67:46:f0:6e:c9:ab:e1:7e:dc:52:2c:1c:d3:d9: 78:c7:94:6d:5b:cd:a3:c2:58:50:4d:ac:29:f6:21:c4:9e:c2: bc:77:bc:d6:e5:34:5d:84:98:ea:3f:81:b0:80:4d:7f:f9:18: 11:ad:1f:a2:ce:66:80:ae:4f:b5:14:3e:32:1b:df:fa:f8:0c: 9d:74:a4:db:10:64:95:da:f9:f3:9c:b9:4a:fc:86:55:a4:c5: ee:ff:4b:94:fb:89:9f:e8:1a:b8:9c:8c:44:aa:6f:3f:0f:c7: d0:0b:5a:ff:b5:9d:11:3c:8a:8c:53:55:7e:37:da:97:88:6b: 1b:17:c6:56:be:6f:7f:48:df:9a:e9:60:f7:15:a8:5b:1f:07: f4:ec:e2:ac:5e:57:f3:02:97:55:4d:54:fe:b9:ea:36:eb:2c: af:2c:d2:83:54:53:f5:c0:f5:6c:9a:1f:5e:44:12:19:6e:bf: 89:96:6f:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjQwNTA0MTU1NjUwWhcNMjQwNTExMTU1NjUwWjAYMRYwFAYD VQQDEw02NjM2NWFjMy03ODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2/jJ0CAdQoNG0AjTibeW3pgx5UBIRyccIdWxJC3+ZiqUZBhR/IXvNAVwz4H UgwQiEkk8vxvA2IUyFU90fmuxRkCuZpjPZdbS441LH1/js7l7x1HQoscCHTN6vvw 70L8W41w5vM0tMzT7YcHIYjfjWWyjCmG8/R+ZE3TMdB0tRFWb2ZXRODlSS9RgBKL XTidZwvn7AhbeSZoxZI7fpsd7RC0IRWvh57rdk7ayDMhV7Xid9R8YUq18Bu01B+F YmrZENX8GIcJzDXZ0OCAAZanfCjz1P7pS43L/FJZAk+NZh18zrX1Y9psaJvauoTf oWMg6cxbQHU7oOEOmMo+fVekSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMsi/6K MPIMygPgDoPSU5gNL49EMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGJpNZh95eaxA/UPnxpUA+Z0sGJLRw54MWFV3YTM4mg2ebVH12ZCSS z1Vv1lPK0AmFpWPFdOel/E12wg1vItJwsC/JJaEDYymi/RwmZ0bwbsmr4X7cUiwc 09l4x5RtW82jwlhQTawp9iHEnsK8d7zW5TRdhJjqP4GwgE1/+RgRrR+izmaArk+1 FD4yG9/6+AyddKTbEGSV2vnznLlK/IZVpMXu/0uU+4mf6Bq4nIxEqm8/D8fQC1r/ tZ0RPIqMU1V+N9qXiGsbF8ZWvm9/SN+a6WD3FahbHwf07OKsXlfzApdVTVT+ueo2 6yyvLNKDVFP1wPVsmh9eRBIZbr+Jlm9x -----END CERTIFICATE-----Generated at Sat May 4 16:34:32 2024 by rpki-client on console-fra.rpki-client.org