$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: EXq42T/HbLwxgjQ+w8sqXIFfjlm9rZiYeXzVBSCUSWI= Subject key identifier: B4:2D:E7:F3:B7:5A:B1:C5:8E:E3:A5:19:86:2C:B0:05:26:13:30:54 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 095F Signing time: Fri 31 May 2024 21:41:58 +0000 Manifest this update: Fri 31 May 2024 21:41:57 +0000 Manifest next update: Fri 07 Jun 2024 21:41:57 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: hYeA0UBzHIkInD50CdccB8HoAK/0ZnXKuxe25FdiYoM=) 2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: zgXXZljhhxSC5ZsL/rE5JAt6ilVqvNtdy6C36VBeUYM=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: PoRxFPduHIohO3tb2s88UbJLuE8j7J7TFfEy/WTAoZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: May 31 21:41:57 2024 GMT Not After : Jun 7 21:41:57 2024 GMT Subject: CN=665a4425-a208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b3:35:fd:7f:6f:9c:ec:91:55:4e:29:96:06: 8f:5c:6e:be:6c:59:58:3c:94:5b:64:68:73:ce:59: b3:1b:4f:06:54:db:4c:49:46:97:45:87:0f:6e:38: 61:68:0d:12:45:7c:56:26:b9:88:9a:e4:d0:90:a4: c1:3a:34:d7:18:9c:4d:95:47:3f:d0:9c:49:6e:44: a1:3e:2b:c8:35:78:a6:09:1f:0b:c9:b0:c4:af:87: 44:bd:26:fb:72:10:1e:fe:73:1b:b9:a4:77:2d:b9: 83:38:13:1e:ab:a0:76:39:90:58:19:3b:72:45:d2: db:fc:35:bd:0e:7c:03:9c:cf:c7:60:02:b5:dd:dd: 95:f6:12:ea:fd:b1:aa:d3:ca:b2:7e:92:4f:84:f8: 54:36:25:72:27:e1:55:db:49:89:53:3a:1c:d1:6b: 7a:4e:56:be:59:a7:b8:c9:9f:aa:bf:db:8b:5a:4d: fa:7b:2e:f9:27:af:77:5e:01:20:77:cc:62:a3:ea: f2:7e:16:2d:59:a3:fd:27:ea:b7:c7:09:be:7e:78: a6:b3:8c:72:7e:f6:c6:84:9e:56:0e:a6:1c:79:f1: 8a:a4:a3:87:05:dd:ea:bf:56:63:e8:6a:88:cf:15: 73:d7:8d:7f:e1:16:b3:68:43:dd:af:d6:0a:c3:8d: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2D:E7:F3:B7:5A:B1:C5:8E:E3:A5:19:86:2C:B0:05:26:13:30:54 X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b1:cb:cc:05:78:f8:5f:8d:64:35:ea:26:c3:fd:a6:78:89: c4:c6:1b:2b:cb:b7:82:74:15:0e:e3:6e:57:e2:4b:d7:25:9b: 0d:c3:ef:d1:1c:3b:ef:e6:cb:65:97:5f:d1:19:aa:35:3a:76: cb:62:04:b4:19:8e:d7:46:f9:89:4e:2f:b4:9e:0e:bb:94:1c: 1f:6f:ef:6f:4d:f9:a2:55:6e:7a:3e:23:a1:7c:93:1a:f7:e8: e6:c8:64:08:30:b6:76:33:6c:03:6c:38:ef:4e:0c:ca:9a:39: 15:fc:78:c1:10:94:d2:ee:ac:3a:8f:49:18:61:49:28:50:ae: 33:9f:9a:d9:f0:20:9e:0b:d8:8e:ff:3c:ca:35:29:18:ab:4b: 9c:1c:1c:d8:11:c5:14:f0:e1:c8:f3:84:36:a5:f8:f7:49:fb: ae:56:6a:85:32:78:8f:4b:33:f3:5e:5f:3f:3e:b2:75:5a:c7: fc:a4:aa:29:e3:80:0e:18:dd:4e:83:37:5d:16:88:36:be:1c: 0b:54:42:dc:90:e0:92:3b:17:5c:56:11:2d:f6:3d:ac:c2:98: 5a:92:52:47:fa:5c:8e:fe:ea:7a:66:f0:81:b4:15:8b:48:f9: 6b:3d:52:e0:d8:2b:35:ec:ae:6a:22:38:65:61:7e:3b:8d:36: 2e:53:80:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjQwNTMxMjE0MTU3WhcNMjQwNjA3MjE0MTU3WjAYMRYwFAYD VQQDEw02NjVhNDQyNS1hMjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bM1/X9vnOyRVU4plgaPXG6+bFlYPJRbZGhzzlmzG08GVNtMSUaXRYcPbjhh aA0SRXxWJrmImuTQkKTBOjTXGJxNlUc/0JxJbkShPivINXimCR8LybDEr4dEvSb7 chAe/nMbuaR3LbmDOBMeq6B2OZBYGTtyRdLb/DW9DnwDnM/HYAK13d2V9hLq/bGq 08qyfpJPhPhUNiVyJ+FV20mJUzoc0Wt6Tla+Wae4yZ+qv9uLWk36ey75J693XgEg d8xio+ryfhYtWaP9J+q3xwm+fnims4xyfvbGhJ5WDqYcefGKpKOHBd3qv1Zj6GqI zxVz141/4RazaEPdr9YKw41FswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQt5/O3 WrHFjuOlGYYssAUmEzBUMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACscvMBXj4X41kNeomw/2meInExhsry7eCdBUO425X4kvXJZsNw+/R HDvv5stll1/RGao1OnbLYgS0GY7XRvmJTi+0ng67lBwfb+9vTfmiVW56PiOhfJMa 9+jmyGQIMLZ2M2wDbDjvTgzKmjkV/HjBEJTS7qw6j0kYYUkoUK4zn5rZ8CCeC9iO /zzKNSkYq0ucHBzYEcUU8OHI84Q2pfj3SfuuVmqFMniPSzPzXl8/PrJ1Wsf8pKop 44AOGN1OgzddFog2vhwLVELckOCSOxdcVhEt9j2swphaklJH+lyO/up6ZvCBtBWL SPlrPVLg2Cs17K5qIjhlYX47jTYuU4A3 -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:08 2024 by rpki-client on console-ams.rpki-client.org