$ rpki-client -vvf rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft File: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft (raw, json) Hash identifier: 7OanGDqQTdf7LmkdJ05Kf5MhaKgymWgmHfsNptkkl9s= Subject key identifier: 7F:AA:E6:97:7E:47:80:12:F8:9D:D8:FF:4F:63:D7:BA:84:49:27:73 Authority key identifier: B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 Certificate issuer: /CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft Manifest number: 0B13 Signing time: Sat 18 May 2024 19:55:58 +0000 Manifest this update: Sat 18 May 2024 19:55:58 +0000 Manifest next update: Sat 25 May 2024 19:55:58 +0000 Files and hashes: 1: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl (hash: SVcm4BZu/KtEcR0HCiLBCg3GaNC2Mh/0AbiPo1AKkio=) 2: F648238E766911EC9EADC512C4F9AE02.roa (hash: 5HR8HV4Pjb49WKQhkhqMDo2vrU9gsv4/J0a+FK8ah0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Validity Not Before: May 18 19:55:58 2024 GMT Not After : May 25 19:55:58 2024 GMT Subject: CN=664907ce-7166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:ef:cd:0c:6a:05:e3:7c:7c:6d:ba:67:bf: f3:04:8f:69:f4:22:1e:d3:ab:09:e0:42:48:86:3d: 05:8b:01:89:65:86:90:81:03:e4:27:72:f3:7c:35: 77:4f:03:7e:c3:b6:64:65:e5:1e:a9:f7:55:2f:61: 93:13:2f:4b:7d:0a:16:e4:2a:ab:81:28:1d:9e:f5: c1:c1:ff:1d:6e:bf:51:52:ec:59:69:d9:6e:ce:da: e5:b2:b0:19:81:6f:a3:df:3c:77:8e:64:ab:e8:fd: de:8b:9b:d4:7b:2a:11:e0:b0:b3:15:a6:27:eb:cc: 1e:91:d4:a8:e4:29:45:f7:9c:91:84:60:dc:11:17: a6:dd:50:a2:bb:72:a2:ba:82:18:1b:7c:05:a2:0d: 8b:22:d8:3c:24:40:10:dd:3e:69:67:6b:41:d2:fa: 84:9e:f8:65:b4:7b:59:50:ab:56:8c:82:80:d0:bf: 56:56:1a:16:74:ff:70:16:e9:66:26:47:ad:3c:8d: 43:f6:ab:5c:f9:98:d4:aa:50:01:ac:e1:c6:62:48: 2f:c1:13:08:ef:d7:e2:1e:76:f1:c3:2d:9c:d3:6a: 2f:6f:2e:03:59:b6:66:a9:16:10:5a:36:4b:f5:1a: 40:99:24:fb:70:d9:53:02:b4:33:6b:d3:47:d0:11: 80:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AA:E6:97:7E:47:80:12:F8:9D:D8:FF:4F:63:D7:BA:84:49:27:73 X509v3 Authority Key Identifier: keyid:B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:fd:bb:19:dd:c6:ed:8e:12:23:6c:3a:12:90:07:24:1d:73: a8:32:8f:5c:8a:ed:54:bc:3f:85:85:19:7c:4b:39:f2:59:bf: 72:ba:e3:fb:2b:4b:34:68:95:89:44:77:ca:fc:a1:7d:8b:f2: fd:ea:a8:83:b5:27:ce:73:79:77:d3:e1:c6:b7:23:93:2e:f8: 2f:55:20:5a:b9:f3:4a:9f:f8:de:0f:33:89:88:88:00:49:72: d0:3c:ef:72:2e:27:35:0f:ab:e4:ea:5d:fc:c2:cb:81:97:f3: 6e:aa:66:c8:aa:de:42:e9:8f:b3:02:b0:f8:38:4e:5a:5b:e2: bb:0c:59:94:32:f2:0c:6b:7f:c0:66:b1:0c:63:ab:7e:29:91: 1c:41:5a:61:11:2f:52:0b:5d:cd:17:3d:a4:f5:c6:00:0c:01: a2:9d:84:44:dc:77:f9:d1:3a:f1:c8:de:5b:8f:5d:b9:16:d2: 1d:6f:5c:df:06:ee:6e:3d:84:60:1a:e3:8c:05:af:3d:c9:af: cc:86:12:55:35:18:c0:96:b4:95:1b:da:df:58:13:ea:cf:6d: 94:9b:47:77:1d:aa:ec:3a:46:5e:65:f7:ce:bc:19:24:ec:64: 92:00:76:d0:c0:25:7c:42:f1:f4:d0:c9:f5:c1:93:d1:7d:42: e6:9d:9d:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0N0YxMTAvBgNVBAUTKEI2Rjc5N0Q4NEYyRTQ5QjhCQjMyMjIwNkI3OTQ2RDI3 OTE4Q0ExNjQwHhcNMjQwNTE4MTk1NTU4WhcNMjQwNTI1MTk1NTU4WjAYMRYwFAYD VQQDEw02NjQ5MDdjZS03MTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPbvzQxqBeN8fG26Z7/zBI9p9CIe06sJ4EJIhj0FiwGJZYaQgQPkJ3LzfDV3 TwN+w7ZkZeUeqfdVL2GTEy9LfQoW5CqrgSgdnvXBwf8dbr9RUuxZadluztrlsrAZ gW+j3zx3jmSr6P3ei5vUeyoR4LCzFaYn68wekdSo5ClF95yRhGDcERem3VCiu3Ki uoIYG3wFog2LItg8JEAQ3T5pZ2tB0vqEnvhltHtZUKtWjIKA0L9WVhoWdP9wFulm JketPI1D9qtc+ZjUqlABrOHGYkgvwRMI79fiHnbxwy2c02ovby4DWbZmqRYQWjZL 9RpAmST7cNlTArQza9NH0BGA9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+q5pd+ R4AS+J3Y/09j17qESSdzMB8GA1UdIwQYMBaAFLb3l9hPLkm4uzIiBreUbSeRjKFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQ3Ri8xNjFBQUJFQzFD RjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNiaTdNaUlHdDVSdEo1R01v V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R2ZVgyRTh1U2JpN01pSUd0NVJ0SjVHTW9XUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQ3Ri8xNjFBQUJFQzFDRjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNi aTdNaUlHdDVSdEo1R01vV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg/bsZ3cbtjhIjbDoSkAckHXOoMo9ciu1UvD+FhRl8SznyWb9yuuP7 K0s0aJWJRHfK/KF9i/L96qiDtSfOc3l30+HGtyOTLvgvVSBaufNKn/jeDzOJiIgA SXLQPO9yLic1D6vk6l38wsuBl/NuqmbIqt5C6Y+zArD4OE5aW+K7DFmUMvIMa3/A ZrEMY6t+KZEcQVphES9SC13NFz2k9cYADAGinYRE3Hf50TrxyN5bj125FtIdb1zf Bu5uPYRgGuOMBa89ya/MhhJVNRjAlrSVG9rfWBPqz22Um0d3HarsOkZeZffOvBkk 7GSSAHbQwCV8QvH00Mn1wZPRfULmnZ3d -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org