$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft File: TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json) Hash identifier: y9QHYy/Cc4AhJIB4NUeyA9F9qDUtVdEOZsEkxzhV+mQ= Subject key identifier: C5:01:A3:BE:F4:B5:8B:46:59:2D:FD:34:7F:37:D5:8C:84:E0:CE:54 Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft Manifest number: 11 Signing time: Sun 19 May 2024 08:48:05 +0000 Manifest this update: Sun 19 May 2024 08:48:05 +0000 Manifest next update: Sun 26 May 2024 08:48:05 +0000 Files and hashes: 1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: 4tKeOFhPVgLcJCvXe1/1oPm5NhZFc7HJyngy/ADV1s0=) 2: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: kSQiFClRlp/M9UhB3RhkdO9IofURlSuArIibh3+xR08=) 3: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: lJ2CvdeHBHaGatqLLV03O7TgJFQ0AVO9rn0YTfAtd+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Validity Not Before: May 19 08:48:05 2024 GMT Not After : May 26 08:48:05 2024 GMT Subject: CN=6649bcc5-bcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:37:50:04:c1:68:64:ea:3e:bd:10:d8:6d: 7c:27:12:ad:12:52:4f:be:a4:94:b6:33:90:d8:54: b9:4f:43:e5:17:2b:de:19:94:4a:9b:74:da:e7:64: c2:65:8b:be:a2:65:8d:6e:f7:54:d6:39:23:f9:e2: 1b:12:57:39:d5:58:30:bb:66:ae:a4:5f:40:4d:e6: 22:a0:3c:c4:8f:df:57:93:30:4a:5d:ba:42:7a:fc: 1c:ee:51:e5:c5:77:df:53:b5:ec:3b:7b:4b:0d:e5: 29:a4:a5:a7:61:b8:34:7d:c4:40:ad:44:58:ca:78: b3:be:fc:de:f1:56:b4:c6:5a:be:24:ac:26:2e:96: 46:50:b1:0c:11:7e:4b:d5:82:40:ad:5a:e7:11:4f: 80:1b:6b:42:0c:64:6c:26:ca:8a:f3:6f:4c:5f:49: f0:cf:b1:19:02:94:da:32:ef:53:1e:b0:43:da:ca: 52:c4:71:77:36:38:ec:2b:32:f9:3b:c1:14:98:77: e4:08:db:1e:0c:59:6b:66:f6:ae:cb:db:f0:ae:b2: 83:2d:86:92:16:b4:e6:c7:db:45:56:e7:2f:57:6c: db:d9:fe:3e:09:8a:96:4e:40:f1:66:a9:51:86:81: 42:f1:dc:62:a3:75:64:8f:35:29:58:41:00:6f:20: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:01:A3:BE:F4:B5:8B:46:59:2D:FD:34:7F:37:D5:8C:84:E0:CE:54 X509v3 Authority Key Identifier: keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3e:56:22:fa:a6:d4:98:0f:91:be:cc:3d:6f:be:24:53:b1: 4f:07:86:84:2b:f2:8d:3d:fb:f7:f9:64:93:8d:43:3d:6b:3c: 76:80:a3:19:6d:72:9a:15:33:8f:fc:ef:a0:8b:a3:13:1a:1b: bd:e9:b1:a7:e3:7c:a9:3c:8b:b0:49:66:1f:cb:78:eb:56:59: c2:06:a8:3d:60:6b:6b:a8:e6:ef:cf:4e:cb:5b:c8:b0:56:5b: 3e:a6:72:76:56:de:1b:b8:c6:ba:db:8f:17:73:89:55:e6:26: c1:05:61:d8:52:73:c1:29:15:d4:af:ba:cc:d1:ef:3c:2a:44: 77:0e:fa:e7:35:ee:8a:28:af:41:0b:73:81:7e:93:3c:74:c0: 60:21:42:b6:89:35:73:13:7a:d9:82:16:25:29:52:98:09:b1: 27:57:c3:76:63:d7:6b:8a:a4:c1:47:60:72:d6:7b:5f:d5:c0: 5f:6f:a0:71:ff:de:18:a1:f3:b2:d0:86:96:27:6c:e3:5b:69: 62:ed:2e:ec:67:57:0c:24:16:88:6d:df:3a:b7:df:d7:31:55: 8e:b3:c3:d2:5d:7d:d5:f9:8f:e3:9c:8d:8a:9b:1f:ee:a0:ae: 5b:fb:99:50:f4:b7:55:6d:33:6a:82:eb:04:67:db:3c:8c:d5: fa:61:1c:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkU1MzExMC8GA1UEBRMoNEYzMTk5MEFDRkQ1OURCRTM2QTcwQzA1MjA0QjQzQjky OTZGNTM2QzAeFw0yNDA1MTkwODQ4MDVaFw0yNDA1MjYwODQ4MDVaMBgxFjAUBgNV BAMTDTY2NDliY2M1LWJjYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/hTdQBMFoZOo+vRDYbXwnEq0SUk++pJS2M5DYVLlPQ+UXK94ZlEqbdNrnZMJl i76iZY1u91TWOSP54hsSVznVWDC7Zq6kX0BN5iKgPMSP31eTMEpdukJ6/BzuUeXF d99Ttew7e0sN5SmkpadhuDR9xECtRFjKeLO+/N7xVrTGWr4krCYulkZQsQwRfkvV gkCtWucRT4Aba0IMZGwmyorzb0xfSfDPsRkClNoy71MesEPaylLEcXc2OOwrMvk7 wRSYd+QI2x4MWWtm9q7L2/CusoMthpIWtObH20VW5y9XbNvZ/j4JipZOQPFmqVGG gULx3GKjdWSPNSlYQQBvIGm5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxQGjvvS1 i0ZZLf00fzfVjITgzlQwHwYDVR0jBBgwFoAUTzGZCs/Vnb42pwwFIEtDuSlvU2ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGRTUzLzgwQjIyOEY4RkJE RDExRUU4OTg0RUQzMEM0RjlBRTAyL1R6R1pDc19WbmI0MnB3d0ZJRXREdVNsdlUy dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHpHWkNzX1ZuYjQycHd3RklFdER1U2x2VTJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG RTUzLzgwQjIyOEY4RkJERDExRUU4OTg0RUQzMEM0RjlBRTAyL1R6R1pDc19WbmI0 MnB3d0ZJRXREdVNsdlUydy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAE+ViL6ptSYD5G+zD1vviRTsU8HhoQr8o09+/f5ZJONQz1rPHaAoxlt cpoVM4/876CLoxMaG73psafjfKk8i7BJZh/LeOtWWcIGqD1ga2uo5u/PTstbyLBW Wz6mcnZW3hu4xrrbjxdziVXmJsEFYdhSc8EpFdSvuszR7zwqRHcO+uc17ooor0EL c4F+kzx0wGAhQraJNXMTetmCFiUpUpgJsSdXw3Zj12uKpMFHYHLWe1/VwF9voHH/ 3hih87LQhpYnbONbaWLtLuxnVwwkFoht3zq339cxVY6zw9JdfdX5j+OcjYqbH+6g rlv7mVD0t1VtM2qC6wRn2zyM1fphHLQ= -----END CERTIFICATE-----Generated at Sun May 19 09:38:26 2024 by rpki-client on console-fra.rpki-client.org