$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft File: TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json) Hash identifier: QhOLDHSLw3kOyn6b9mOYLQ/+XDgD/VdIZEWlpwLi3wM= Subject key identifier: C0:2B:69:08:AA:B6:76:21:B3:9D:09:31:75:11:70:AE:DE:9C:E4:89 Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF Certificate issuer: /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft Manifest number: 0646 Signing time: Sat 18 May 2024 23:40:23 +0000 Manifest this update: Sat 18 May 2024 23:40:22 +0000 Manifest next update: Sat 25 May 2024 23:40:22 +0000 Files and hashes: 1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: FjJQ9K/MGM2XzNMltaD5XhKvU9QhBmUNOa5RiZH/H0E=) 2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: EZUwV+bWVNA+A7Z3jb8OrB3HJgBVvfVck4cBBBonCsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Validity Not Before: May 18 23:40:22 2024 GMT Not After : May 25 23:40:22 2024 GMT Subject: CN=66493c67-91b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ea:3e:3f:d3:50:91:50:14:43:88:d0:c0:28: a7:46:2b:15:3b:1a:84:1f:14:49:67:d7:05:05:16: 89:f9:8f:9c:f6:a1:50:f2:06:33:96:58:7a:1e:bb: c0:be:8a:00:a5:be:32:3e:d3:ad:6b:7b:29:de:41: 8a:9c:2e:69:f4:e7:36:a8:02:30:3f:3f:1c:39:db: ed:5e:50:39:8e:51:15:0c:d7:d7:06:d2:e4:80:cb: 6d:4b:d7:31:d7:99:22:c9:39:73:37:0e:09:78:ac: 12:64:d0:41:13:98:a3:cf:24:e2:e7:42:9b:cb:b0: bf:dc:ce:22:f5:15:80:f6:25:05:bf:b0:26:05:5c: f3:29:2a:e1:29:50:15:4f:66:f3:b5:64:f5:c6:93: 86:f9:f9:6d:b1:f0:5e:a1:82:b7:33:c0:3e:bb:1c: 0b:6a:26:0f:a4:75:d0:c4:76:f6:1b:bf:37:79:d5: d3:05:e8:93:ac:31:75:ba:53:f2:cc:6d:66:16:e6: 55:41:e8:f7:b7:10:2c:69:66:37:e0:1d:eb:80:6b: 9c:55:1b:2a:78:d7:1a:67:ed:ad:92:d3:4e:ec:55: 96:bd:23:12:cb:49:ed:2a:89:cc:83:ed:44:5b:93: 03:34:d0:fc:db:09:07:5d:7e:fa:d2:79:18:95:ba: 6e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2B:69:08:AA:B6:76:21:B3:9D:09:31:75:11:70:AE:DE:9C:E4:89 X509v3 Authority Key Identifier: keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ac:37:eb:33:12:44:3d:38:ff:ca:af:a6:e9:f3:ab:fd:a2: f1:95:9f:7e:66:a6:c3:39:ea:a6:ca:e5:ce:34:e4:81:d4:d7: 19:aa:2f:6a:81:68:70:30:2e:ff:24:66:1d:2e:fe:46:c0:32: f5:65:ef:82:3b:ad:38:ed:19:e7:00:21:00:5d:91:d8:e4:b4: 73:d9:f0:1d:19:e4:5a:af:5d:89:be:30:b1:50:27:e4:ee:eb: 34:0e:bb:58:1c:51:d4:fe:a7:e1:97:ad:49:21:2b:bc:59:f8: 8e:69:45:46:21:0d:44:87:24:3b:06:13:4b:b5:78:74:98:04: 07:66:42:cf:09:f5:3c:41:98:77:00:c9:dc:cf:9c:b4:a4:3a: 13:46:00:c3:f8:6f:26:c4:07:a6:de:39:6a:50:bc:c8:63:87: 62:a1:fc:c4:c1:e3:25:0d:7a:ad:ce:ca:d5:6c:e5:59:79:93: 87:e9:75:54:21:a5:bd:9b:72:79:13:20:42:a2:6a:f5:63:09: d9:1e:f4:af:ec:b1:92:fe:60:b1:7a:b8:17:15:7a:5d:32:cb: 83:22:e3:1f:61:28:5f:49:38:b4:56:64:5b:1c:10:31:9b:df: fa:ec:57:6f:c6:0b:a5:4a:e0:6b:04:78:f6:ee:c5:e4:c3:c1: 9e:f2:a0:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD NDJEM0I4QUYwHhcNMjQwNTE4MjM0MDIyWhcNMjQwNTI1MjM0MDIyWjAYMRYwFAYD VQQDEw02NjQ5M2M2Ny05MWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5eo+P9NQkVAUQ4jQwCinRisVOxqEHxRJZ9cFBRaJ+Y+c9qFQ8gYzllh6HrvA vooApb4yPtOta3sp3kGKnC5p9Oc2qAIwPz8cOdvtXlA5jlEVDNfXBtLkgMttS9cx 15kiyTlzNw4JeKwSZNBBE5ijzyTi50Kby7C/3M4i9RWA9iUFv7AmBVzzKSrhKVAV T2bztWT1xpOG+fltsfBeoYK3M8A+uxwLaiYPpHXQxHb2G783edXTBeiTrDF1ulPy zG1mFuZVQej3txAsaWY34B3rgGucVRsqeNcaZ+2tktNO7FWWvSMSy0ntKonMg+1E W5MDNND82wkHXX760nkYlbpufwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAraQiq tnYhs50JMXURcK7enOSJMB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1 SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY1MC9BMUUxRjc5QzQxMUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZD QjAzMkxGSDY4M2pFTFR1SzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClrDfrMxJEPTj/yq+m6fOr/aLxlZ9+ZqbDOeqmyuXONOSB1NcZqi9q gWhwMC7/JGYdLv5GwDL1Ze+CO6047RnnACEAXZHY5LRz2fAdGeRar12JvjCxUCfk 7us0DrtYHFHU/qfhl61JISu8WfiOaUVGIQ1EhyQ7BhNLtXh0mAQHZkLPCfU8QZh3 AMncz5y0pDoTRgDD+G8mxAem3jlqULzIY4diofzEweMlDXqtzsrVbOVZeZOH6XVU IaW9m3J5EyBComr1YwnZHvSv7LGS/mCxergXFXpdMsuDIuMfYShfSTi0VmRbHBAx m9/67FdvxgulSuBrBHj27sXkw8Ge8qAl -----END CERTIFICATE-----Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org