$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.mft File: TGamZng2gcoW2OtUCYIDmTPh1lM.mft (raw, json) Hash identifier: RMqPUcjOhsA/6b7yMhkFXyeyM9Bvq/+vU901lDuSVYo= Subject key identifier: 6B:84:F5:D9:F3:5E:C2:61:2F:75:72:B7:98:B6:29:8B:C2:8A:9C:3E Authority key identifier: 4C:66:A6:66:78:36:81:CA:16:D8:EB:54:09:82:03:99:33:E1:D6:53 Certificate issuer: /CN=A9147CEA/serialNumber=4C66A666783681CA16D8EB540982039933E1D653 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGamZng2gcoW2OtUCYIDmTPh1lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.mft Manifest number: F7 Signing time: Sun 19 May 2024 05:43:57 +0000 Manifest this update: Sun 19 May 2024 05:43:56 +0000 Manifest next update: Sun 26 May 2024 05:43:56 +0000 Files and hashes: 1: TGamZng2gcoW2OtUCYIDmTPh1lM.crl (hash: m+dHci2QXsG4SBeLrUHREWIKZX1yGX0LK+pIjyZnyt0=) 2: D920BF0E9CC511ED9AA6B670C4F9AE02.roa (hash: 5IPsTSMuG2sWUaETc3jX0CtOu+qbGR9kx8SYM5WqM1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.crl rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGamZng2gcoW2OtUCYIDmTPh1lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CEA/serialNumber=4C66A666783681CA16D8EB540982039933E1D653 Validity Not Before: May 19 05:43:56 2024 GMT Not After : May 26 05:43:56 2024 GMT Subject: CN=6649919c-6167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:50:8f:06:9b:76:99:7e:6b:47:91:f6:f1: 97:9a:82:d4:a8:7e:74:4d:6c:4a:0e:7d:15:8b:cf: 41:7a:a3:08:ab:48:3e:48:99:cc:0c:76:d7:3e:01: cc:cd:bd:b7:0b:fe:57:82:2d:42:73:42:31:56:31: 08:dc:94:19:aa:02:90:3a:e6:d3:57:e4:d2:11:12: 4b:40:98:87:a8:bf:d2:c7:25:39:bf:c6:c2:ea:c6: 53:fa:aa:ef:de:be:16:a8:26:a9:dd:b9:e8:47:94: 4b:66:cf:21:10:b7:d1:60:74:a4:1b:7c:59:c1:08: 6d:6d:97:a5:dc:d7:68:05:f1:60:5d:ad:21:78:c7: 9a:07:ca:dc:08:fa:f0:d7:cf:2e:90:1d:8a:fc:aa: 52:f3:7a:ef:de:03:5e:33:19:98:cc:53:3f:c2:14: 89:4a:c5:16:80:a5:31:0d:0e:3d:78:5a:d8:5a:fc: b7:51:a9:cb:6d:78:c3:be:03:5b:65:17:99:58:5b: a0:b8:3d:07:c0:a1:11:58:46:0a:db:06:9a:8b:41: 6e:f6:6e:fb:2b:4e:e9:34:f5:16:bf:0f:d0:bf:ff: 74:74:78:01:f0:0d:a6:a4:03:5a:f9:f8:c2:0e:bc: ae:3f:cd:fa:fa:c4:3e:8e:fe:c3:e3:c5:c6:b0:17: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:84:F5:D9:F3:5E:C2:61:2F:75:72:B7:98:B6:29:8B:C2:8A:9C:3E X509v3 Authority Key Identifier: keyid:4C:66:A6:66:78:36:81:CA:16:D8:EB:54:09:82:03:99:33:E1:D6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGamZng2gcoW2OtUCYIDmTPh1lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CEA/75B59FA49CC311EDBE6D1F70C4F9AE02/TGamZng2gcoW2OtUCYIDmTPh1lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:9c:c4:31:eb:c3:f0:92:ae:94:f0:e9:03:f1:58:de:3b:2f: b5:a8:64:45:10:64:8a:d2:1d:42:47:25:a6:31:33:30:41:1f: 86:f4:fb:96:4a:02:e4:54:bb:a4:27:63:41:9c:78:b8:cd:b6: 05:a7:5f:05:07:bc:0c:d4:1d:6a:bd:b0:5a:35:0d:9d:89:d6: ab:64:b1:5d:05:cb:e7:d7:76:1e:ee:96:ef:5c:c4:bd:a8:11: a7:c2:a2:45:b4:d6:26:20:30:e4:35:20:c2:d0:b6:23:09:f4: d1:14:2c:b1:d4:ee:12:13:0e:4c:7b:37:5d:5c:51:81:5e:a8: ab:21:dc:8e:69:ce:bb:3f:c8:a9:de:84:cd:28:0c:63:b2:e6: ab:4b:b2:ff:56:47:1b:01:16:ba:c7:05:a0:f4:61:c9:59:20: f8:d2:e9:39:31:e9:d4:05:56:73:ba:82:0f:2a:bd:e8:2f:c6: dc:eb:3d:3f:c8:c9:1d:7f:be:53:71:a1:bb:8a:b7:93:0a:84: 00:0d:a8:b8:5d:93:27:71:fb:80:9d:16:b4:4d:c6:53:52:82: 53:1d:1e:87:11:bd:bc:15:f8:a5:24:ea:a6:a0:61:5d:8f:5d: 7b:39:ff:8f:79:ba:11:c8:71:d9:09:24:fa:51:7a:09:72:0c: 7e:3e:11:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDRUExMTAvBgNVBAUTKDRDNjZBNjY2NzgzNjgxQ0ExNkQ4RUI1NDA5ODIwMzk5 MzNFMUQ2NTMwHhcNMjQwNTE5MDU0MzU2WhcNMjQwNTI2MDU0MzU2WjAYMRYwFAYD VQQDEw02NjQ5OTE5Yy02MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRZQjwabdpl+a0eR9vGXmoLUqH50TWxKDn0Vi89BeqMIq0g+SJnMDHbXPgHM zb23C/5Xgi1Cc0IxVjEI3JQZqgKQOubTV+TSERJLQJiHqL/SxyU5v8bC6sZT+qrv 3r4WqCap3bnoR5RLZs8hELfRYHSkG3xZwQhtbZel3NdoBfFgXa0heMeaB8rcCPrw 188ukB2K/KpS83rv3gNeMxmYzFM/whSJSsUWgKUxDQ49eFrYWvy3UanLbXjDvgNb ZReZWFuguD0HwKERWEYK2waai0Fu9m77K07pNPUWvw/Qv/90dHgB8A2mpANa+fjC DryuP836+sQ+jv7D48XGsBdFyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuE9dnz XsJhL3Vyt5i2KYvCipw+MB8GA1UdIwQYMBaAFExmpmZ4NoHKFtjrVAmCA5kz4dZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NFQS83NUI1OUZBNDlD QzMxMUVEQkU2RDFGNzBDNEY5QUUwMi9UR2FtWm5nMmdjb1cyT3RVQ1lJRG1UUGgx bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHYW1abmcyZ2NvVzJPdFVDWUlEbVRQaDFsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NFQS83NUI1OUZBNDlDQzMxMUVEQkU2RDFGNzBDNEY5QUUwMi9UR2FtWm5nMmdj b1cyT3RVQ1lJRG1UUGgxbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChnMQx68Pwkq6U8OkD8VjeOy+1qGRFEGSK0h1CRyWmMTMwQR+G9PuW SgLkVLukJ2NBnHi4zbYFp18FB7wM1B1qvbBaNQ2didarZLFdBcvn13Ye7pbvXMS9 qBGnwqJFtNYmIDDkNSDC0LYjCfTRFCyx1O4SEw5MezddXFGBXqirIdyOac67P8ip 3oTNKAxjsuarS7L/VkcbARa6xwWg9GHJWSD40uk5MenUBVZzuoIPKr3oL8bc6z0/ yMkdf75TcaG7ireTCoQADai4XZMncfuAnRa0TcZTUoJTHR6HEb28FfilJOqmoGFd j117Of+PeboRyHHZCST6UXoJcgx+PhHc -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org