$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: goOT7UKvuik78pqSfL9cvG6Pz8JpxAEO1pmMFaaosrQ= Subject key identifier: 61:D5:95:66:C4:00:93:3C:C8:24:D1:63:F1:34:B6:A5:E2:81:78:E8 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 0732 Signing time: Sat 18 May 2024 22:28:06 +0000 Manifest this update: Sat 18 May 2024 22:28:06 +0000 Manifest next update: Sat 25 May 2024 22:28:06 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: eQ2RYnPiv46461s6P57j/ny5KhrkuPxEpFn1TigyknM=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: SRSaXH4ZkjlVE62eXeZduu7ilcwOkYG20H9SmbGOwfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: May 18 22:28:06 2024 GMT Not After : May 25 22:28:06 2024 GMT Subject: CN=66492b76-49c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:8c:ae:d0:c6:07:fe:0f:98:83:0b:68:00: 9c:5f:64:24:ee:4b:38:e2:78:90:aa:3b:e0:2f:08: 27:6d:5e:e4:53:9c:45:a4:7c:11:f5:06:b4:df:ec: ca:5b:b4:f9:cc:66:45:5b:71:4c:1b:34:4b:32:75: 0f:fb:50:45:ff:4d:e8:5b:f9:d9:ec:f7:93:2e:8f: bb:b7:98:a5:af:4b:c6:42:a2:54:ac:d0:4d:ce:63: 6d:6c:ea:29:a9:63:e8:24:bf:73:4c:0e:72:cf:2d: e5:a0:29:cf:3d:ef:3e:3f:33:5c:2e:e1:b2:db:ac: 09:15:58:81:00:82:2a:a2:d7:69:3b:d5:e8:6f:01: 14:dc:1c:37:0f:2f:46:e5:7b:26:50:34:32:a6:fa: a9:f0:e1:d2:e4:bc:ec:98:19:50:f6:22:50:5a:13: 97:5b:8b:22:09:d0:fb:24:1c:f8:54:4d:e0:ba:e2: f7:69:a2:99:6e:84:5f:5d:25:6a:dc:10:f5:f8:25: 50:3f:54:65:82:58:83:57:55:af:74:1c:65:d9:46: c7:e3:76:64:76:e0:67:cd:b7:c7:52:96:4f:89:63: 42:6a:c3:1f:8b:d2:75:10:5e:48:8b:bd:a0:30:1e: f3:21:53:e3:9f:d4:e7:00:bd:ca:cd:16:23:ac:6b: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D5:95:66:C4:00:93:3C:C8:24:D1:63:F1:34:B6:A5:E2:81:78:E8 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:5a:0b:93:bb:62:67:bc:32:48:c6:07:7a:ed:68:7d:25:73: 25:72:f3:50:da:e9:bd:fc:48:94:97:d7:ad:d8:42:23:22:4b: 81:6b:78:01:e7:8d:e3:8f:a3:aa:2d:b4:7c:f0:ec:02:81:ee: f0:e9:46:cd:50:f7:f9:32:62:39:0b:07:d1:ff:7c:d0:5b:9d: 37:f6:e7:91:ed:10:61:f4:c7:c4:d1:7f:f4:c1:1f:b4:f6:82: c4:79:cb:78:9d:58:fb:7f:37:da:fd:64:f8:50:b7:68:e3:57: d8:e2:93:85:f9:ce:ba:12:c4:87:33:41:ce:48:a7:99:45:3d: 16:d0:d3:03:65:c8:50:d3:c2:5c:63:01:96:24:2a:2c:40:60: d2:f9:d6:d7:71:3f:92:c2:0e:4b:07:54:6d:03:86:f1:54:0f: 93:f0:5c:9c:0f:60:b5:e8:93:94:c5:70:68:20:55:9d:07:1e: 8e:7c:ea:90:6f:44:f2:5a:3c:3f:2e:c4:9c:b6:c7:19:0f:1f: 95:a7:96:b3:d8:53:18:9b:9d:98:c2:77:14:53:68:3c:84:37: 9b:35:60:bc:79:c7:5a:13:52:e7:cf:63:c0:b4:da:b5:a3:65: c1:98:f7:55:f4:1b:7a:91:ff:ae:cb:a9:45:e4:3e:80:d9:d5: b1:1d:98:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjQwNTE4MjIyODA2WhcNMjQwNTI1MjIyODA2WjAYMRYwFAYD VQQDEw02NjQ5MmI3Ni00OWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0weMrtDGB/4PmIMLaACcX2Qk7ks44niQqjvgLwgnbV7kU5xFpHwR9Qa03+zK W7T5zGZFW3FMGzRLMnUP+1BF/03oW/nZ7PeTLo+7t5ilr0vGQqJUrNBNzmNtbOop qWPoJL9zTA5yzy3loCnPPe8+PzNcLuGy26wJFViBAIIqotdpO9XobwEU3Bw3Dy9G 5XsmUDQypvqp8OHS5LzsmBlQ9iJQWhOXW4siCdD7JBz4VE3guuL3aaKZboRfXSVq 3BD1+CVQP1RlgliDV1WvdBxl2UbH43ZkduBnzbfHUpZPiWNCasMfi9J1EF5Ii72g MB7zIVPjn9TnAL3KzRYjrGttOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHVlWbE AJM8yCTRY/E0tqXigXjoMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTWguTu2JnvDJIxgd67Wh9JXMlcvNQ2um9/EiUl9et2EIjIkuBa3gB 543jj6OqLbR88OwCge7w6UbNUPf5MmI5CwfR/3zQW5039ueR7RBh9MfE0X/0wR+0 9oLEect4nVj7fzfa/WT4ULdo41fY4pOF+c66EsSHM0HOSKeZRT0W0NMDZchQ08Jc YwGWJCosQGDS+dbXcT+Swg5LB1RtA4bxVA+T8FycD2C16JOUxXBoIFWdBx6OfOqQ b0TyWjw/LsSctscZDx+Vp5az2FMYm52YwncUU2g8hDebNWC8ecdaE1Lnz2PAtNq1 o2XBmPdV9Bt6kf+uy6lF5D6A2dWxHZgI -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org