$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json) Hash identifier: G+HYJ4dPWE4bz9qUyUu14YHNfq/BJ4ZvawBEi0XKRiU= Subject key identifier: BA:E7:A7:D3:03:62:EC:0C:62:01:9B:95:DC:D9:66:D7:DA:B8:2F:65 Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft Manifest number: 0711 Signing time: Tue 07 May 2024 00:58:55 +0000 Manifest this update: Tue 07 May 2024 00:58:54 +0000 Manifest next update: Tue 14 May 2024 00:58:54 +0000 Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: OIzFutGmJyjuI7N2YqWv/zViFfGa0nirU5g0FUhYxOg=) 2: 4FD0A352D19611EEB6CFEB21C4F9AE02.roa (hash: MYVrSFbwA7F3oxqh+FlcT6Kw6WANQZ61JOR0iSc5MTo=) 3: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: /jC7hno95e43VHdFKHNqVrE1loBoUiNi+zLBJK2lIxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Validity Not Before: May 7 00:58:54 2024 GMT Not After : May 14 00:58:54 2024 GMT Subject: CN=66397cce-177c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:7b:8f:89:de:e3:b4:05:95:83:87:5c:2e: f1:af:f2:a4:73:9a:12:df:9f:fc:85:73:b6:03:3a: 59:7f:c5:2e:d6:c8:12:26:c6:e1:3c:21:a9:bc:09: 11:2e:58:01:4c:c6:0b:c2:1c:17:56:0d:0d:67:e7: 6a:ed:37:25:0b:fe:3e:93:3c:fc:4f:f1:a4:25:b9: 01:d0:69:3d:bf:b7:b7:25:87:57:bf:a6:ca:a0:95: 1f:46:ef:04:1f:f7:6b:4a:70:34:47:7c:b9:34:b6: c9:e0:76:1f:6a:89:4d:8c:3a:be:93:d8:d3:76:22: ea:9f:31:a9:3a:77:ab:2f:18:ce:fa:5c:e2:b1:4b: 06:26:f3:7b:ce:02:e9:e2:23:02:ce:7b:a7:a2:42: 20:72:7c:d0:4e:82:a9:1a:4a:2e:79:2e:f9:3b:99: cf:a7:93:ac:ca:a3:b5:b8:84:bd:24:55:13:f8:4b: 9d:22:c0:97:a3:86:0b:93:d3:2d:90:f2:bc:a7:01: df:a0:d7:27:5a:a4:08:18:88:a3:7a:ee:e4:6a:74: af:cf:ba:12:4a:57:a7:01:fd:40:46:74:14:e2:d4: be:ee:81:f4:3a:15:f6:b8:d2:a6:93:b7:60:e7:40: dc:0f:8a:88:30:0c:fc:8a:be:10:b4:65:8c:3e:78: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E7:A7:D3:03:62:EC:0C:62:01:9B:95:DC:D9:66:D7:DA:B8:2F:65 X509v3 Authority Key Identifier: keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:11:0a:b6:a9:40:cb:23:c8:52:35:51:2c:db:a6:40:63:37: ff:08:66:24:0f:57:79:ce:f4:1a:42:75:74:3f:e0:a0:fa:93: c5:11:cc:22:67:e0:aa:34:f8:aa:e5:b4:75:5a:02:53:a0:de: fd:b7:d5:f9:a8:f3:ab:39:34:0b:9e:7a:7e:68:ed:ec:1e:06: a5:f9:f3:36:96:dd:a6:76:4d:7f:dd:84:31:c7:f6:ed:49:d9: 1b:bb:1c:4c:49:c7:a8:78:55:4b:ff:0e:44:21:22:75:fc:b5: ea:c2:30:af:72:f0:bd:30:1f:89:f3:e8:50:27:50:4a:85:43: be:e2:5c:80:6f:f8:7d:f4:13:c4:76:e1:d9:3e:e1:34:1b:9c: 84:e1:68:16:97:d9:c7:7d:38:b7:91:b2:4b:28:a7:e1:9c:f8: 2e:32:6e:f2:9d:88:97:84:ef:96:20:52:fb:4e:9d:64:02:19: 47:70:2c:9d:26:20:8d:62:56:d4:03:a8:13:0d:79:bf:44:75: b3:59:4e:ef:12:a8:f0:72:5f:13:0b:95:3a:d8:eb:32:9f:49: 4e:3b:e2:77:84:26:a5:3d:7f:a2:0b:6d:0f:c7:a0:76:44:af: b7:53:1b:6d:41:48:2d:5c:fc:c8:78:f4:7d:ef:44:26:cb:42: 22:48:8d:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDREMTRFMUFGMjJGNTNCMjJGNTZERUYwMkVCNzJFQTVE RDZCRTc3RTIwHhcNMjQwNTA3MDA1ODU0WhcNMjQwNTE0MDA1ODU0WjAYMRYwFAYD VQQDEw02NjM5N2NjZS0xNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4Z7j4ne47QFlYOHXC7xr/Kkc5oS35/8hXO2AzpZf8Uu1sgSJsbhPCGpvAkR LlgBTMYLwhwXVg0NZ+dq7TclC/4+kzz8T/GkJbkB0Gk9v7e3JYdXv6bKoJUfRu8E H/drSnA0R3y5NLbJ4HYfaolNjDq+k9jTdiLqnzGpOnerLxjO+lzisUsGJvN7zgLp 4iMCznunokIgcnzQToKpGkoueS75O5nPp5OsyqO1uIS9JFUT+EudIsCXo4YLk9Mt kPK8pwHfoNcnWqQIGIijeu7kanSvz7oSSlenAf1ARnQU4tS+7oH0OhX2uNKmk7dg 50DcD4qIMAz8ir4QtGWMPnjOmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrnp9MD YuwMYgGbldzZZtfauC9lMB8GA1UdIwQYMBaAFE0U4a8i9Tsi9W3vAuty6l3Wvnfi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95TDFiZThDNjNMcVhkYS1k LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSVGhyeUwxT3lMMWJlOEM2M0xxWGRhLWQtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95 TDFiZThDNjNMcVhkYS1kLUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSEQq2qUDLI8hSNVEs26ZAYzf/CGYkD1d5zvQaQnV0P+Cg+pPFEcwi Z+CqNPiq5bR1WgJToN79t9X5qPOrOTQLnnp+aO3sHgal+fM2lt2mdk1/3YQxx/bt SdkbuxxMSceoeFVL/w5EISJ1/LXqwjCvcvC9MB+J8+hQJ1BKhUO+4lyAb/h99BPE duHZPuE0G5yE4WgWl9nHfTi3kbJLKKfhnPguMm7ynYiXhO+WIFL7Tp1kAhlHcCyd JiCNYlbUA6gTDXm/RHWzWU7vEqjwcl8TC5U62Osyn0lOO+J3hCalPX+iC20Px6B2 RK+3UxttQUgtXPzIePR970Qmy0IiSI1D -----END CERTIFICATE-----Generated at Tue May 7 02:01:06 2024 by rpki-client on console-ams.rpki-client.org