$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft File: TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json) Hash identifier: NyrEZb0VGdMsZYtT+8PTQtPUr/80UBc7fKvsvh6dTZY= Subject key identifier: 9E:28:F2:C4:38:B8:B6:E2:A4:F9:06:A6:BF:22:AA:68:8A:13:3D:56 Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 Certificate issuer: /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Certificate serial: 0943 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft Manifest number: 093E Signing time: Thu 02 May 2024 21:13:45 +0000 Manifest this update: Thu 02 May 2024 21:13:45 +0000 Manifest next update: Thu 09 May 2024 21:13:45 +0000 Files and hashes: 1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: LRRXbjEWEw5QIQwmvB7GTgQpTrTWn14moWLZfzPVFPI=) 2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: RDZQoO0g1KufQOKM23R2MOYU6m8TY+CmgC88bimi1q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23 Validity Not Before: May 2 21:13:45 2024 GMT Not After : May 9 21:13:45 2024 GMT Subject: CN=66340209-bcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0e:db:2c:18:fd:31:3b:e1:0f:d3:ee:bf:e9: a9:ac:ed:7c:01:fd:88:bd:42:38:b1:0e:1d:75:b8: 22:9f:45:ac:40:c6:b2:8e:f6:c7:07:5c:e7:7d:23: d6:91:ba:b3:57:68:a1:2d:8e:7c:91:b4:ee:6f:6b: 73:d5:36:a0:65:32:ee:bb:4e:54:e9:0b:1e:53:cc: 9f:7b:cb:81:ac:85:c0:dd:cf:20:bc:96:62:ed:02: 08:12:f0:b1:d8:5a:b4:00:16:eb:ee:c2:61:ff:db: 3d:a4:a2:4e:ad:da:fe:8b:dd:86:4c:49:ee:07:49: ea:1e:b4:63:c5:f4:93:5e:7c:09:08:88:14:98:70: 17:71:3a:3f:fa:45:47:57:cc:b8:b9:9d:2f:23:50: ed:1e:8b:c1:b4:7f:03:b1:c1:e2:a2:41:73:1b:ec: 42:c7:f9:4f:2a:5d:68:ce:93:7a:b0:89:b1:b1:f4: a0:8c:a2:98:de:8f:b9:05:e3:44:de:d1:d0:69:92: 0a:5e:b1:54:fe:1c:0a:26:34:a5:a5:e0:ff:73:cf: 32:38:f4:cc:3a:54:d0:bf:db:28:1d:44:b6:6b:05: 3d:74:c9:dc:7e:5e:05:6c:8b:e5:50:ff:ad:90:eb: c0:8c:af:97:ba:38:05:d1:24:6c:6e:87:8d:b3:db: 77:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:28:F2:C4:38:B8:B6:E2:A4:F9:06:A6:BF:22:AA:68:8A:13:3D:56 X509v3 Authority Key Identifier: keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:59:67:6b:9d:e2:cf:92:ce:40:1d:7a:67:ab:3d:91:43:d5: c8:82:6f:37:11:c2:b2:e7:ad:0f:43:d3:22:46:06:e3:1c:e4: 27:0f:91:bb:6f:03:4f:2b:45:f8:e5:76:2a:e7:28:a8:5d:da: 84:a9:29:e6:84:ac:c2:59:3a:2b:df:b1:88:43:b5:87:46:8f: d8:f7:f8:f9:53:cc:6e:6c:5a:1b:fd:48:8d:a0:41:c0:dd:8f: 55:45:d7:6c:10:8f:5b:23:ce:61:10:12:af:5f:ed:f4:16:80: 39:1d:35:70:b1:21:ff:4c:1b:db:4f:c8:4b:22:2c:dd:45:0e: 2c:21:29:34:e5:0b:e0:57:09:8f:61:8d:be:b3:c3:cc:4b:cb: ed:9e:30:bc:34:95:19:fb:e2:71:a2:ed:28:3f:54:da:dc:22: 3a:97:55:85:97:5e:9a:e3:18:3b:4a:e6:ff:db:26:b8:5c:66: 31:93:f8:43:49:b6:36:6a:79:ac:36:3a:90:96:fb:b1:11:eb: 39:bd:96:b1:24:57:c2:b9:d8:95:1d:e1:84:1a:0e:76:e6:c3: 9d:98:eb:ed:69:81:42:72:30:60:93:3a:94:dd:94:10:03:62: 62:b1:83:80:c1:86:30:82:07:cd:33:97:5b:3e:54:fd:d3:10: 06:5a:bb:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIwM0MxMTAvBgNVBAUTKDRFNDQ2MENGNjNCMjRCN0MzNUI5RURBRUM5N0U2M0E3 MkM0QkRFMjMwHhcNMjQwNTAyMjExMzQ1WhcNMjQwNTA5MjExMzQ1WjAYMRYwFAYD VQQDEw02NjM0MDIwOS1iY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q7bLBj9MTvhD9Puv+mprO18Af2IvUI4sQ4ddbgin0WsQMayjvbHB1znfSPW kbqzV2ihLY58kbTub2tz1TagZTLuu05U6QseU8yfe8uBrIXA3c8gvJZi7QIIEvCx 2Fq0ABbr7sJh/9s9pKJOrdr+i92GTEnuB0nqHrRjxfSTXnwJCIgUmHAXcTo/+kVH V8y4uZ0vI1DtHovBtH8DscHiokFzG+xCx/lPKl1ozpN6sImxsfSgjKKY3o+5BeNE 3tHQaZIKXrFU/hwKJjSlpeD/c88yOPTMOlTQv9soHUS2awU9dMncfl4FbIvlUP+t kOvAjK+XujgF0SRsboeNs9t3KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4o8sQ4 uLbipPkGpr8iqmiKEz1WMB8GA1UdIwQYMBaAFE5EYM9jskt8Nbntrsl+Y6csS94j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAzQy80NkM4OEM4Mjc0 NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMzdzF1ZTJ1eVg1anB5eEwz aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUmd6Mk95UzN3MXVlMnV5WDVqcHl4TDNpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjAzQy80NkM4OEM4Mjc0NzcxMUVBODM2NTRGNERDNEY5QUUwMi9Ua1JnejJPeVMz dzF1ZTJ1eVg1anB5eEwzaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwWWdrneLPks5AHXpnqz2RQ9XIgm83EcKy560PQ9MiRgbjHOQnD5G7 bwNPK0X45XYq5yioXdqEqSnmhKzCWTor37GIQ7WHRo/Y9/j5U8xubFob/UiNoEHA 3Y9VRddsEI9bI85hEBKvX+30FoA5HTVwsSH/TBvbT8hLIizdRQ4sISk05QvgVwmP YY2+s8PMS8vtnjC8NJUZ++Jxou0oP1Ta3CI6l1WFl16a4xg7Sub/2ya4XGYxk/hD SbY2anmsNjqQlvuxEes5vZaxJFfCudiVHeGEGg525sOdmOvtaYFCcjBgkzqU3ZQQ A2JisYOAwYYwggfNM5dbPlT90xAGWrtF -----END CERTIFICATE-----Generated at Thu May 2 22:13:17 2024 by rpki-client on console-fra.rpki-client.org