$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft File: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json) Hash identifier: uXY/8XPCVrRLpX3WdGa7xfV2d+NLPTsxmOtqDaIclnE= Subject key identifier: 77:15:BB:B8:AA:DE:F6:BB:A7:80:14:C0:13:93:79:31:28:BA:45:CD Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft Manifest number: 0187 Signing time: Sun 19 May 2024 04:44:51 +0000 Manifest this update: Sun 19 May 2024 04:44:50 +0000 Manifest next update: Sun 26 May 2024 04:44:50 +0000 Files and hashes: 1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: ynLbOKAvnrIXp2dOKWRDoz+SoKxv2+OUI8jTOZvcsKU=) 2: C6C06E5CC18D11EEB2096833C4F9AE02.roa (hash: oaAB5qpX/99+WdwH6mtr0Q1RDHPmcMa4eeDmW9Aw7VM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Validity Not Before: May 19 04:44:50 2024 GMT Not After : May 26 04:44:50 2024 GMT Subject: CN=664983c3-e147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5c:a5:0b:38:53:34:ea:b6:16:3e:4f:31:78: 32:cf:c5:00:0e:15:6f:78:6e:54:ce:43:d1:ad:0a: 30:51:30:7f:5a:e5:75:9f:c1:1d:67:b4:bb:c3:cc: 4b:2a:f4:69:0a:7d:c9:d5:82:b2:5d:6b:a1:22:e6: c9:af:03:ab:f8:66:90:ae:08:98:4a:90:2f:81:d9: f2:a3:d3:5f:3a:63:20:bb:79:e8:f4:c7:45:4d:91: fc:56:11:a1:f9:f3:b4:f7:c5:56:b1:bb:65:4e:81: 9f:d6:34:ab:80:1c:8f:05:7f:e8:82:ac:0b:e2:78: f6:29:c7:98:d5:4a:da:b1:cf:0e:54:32:42:31:fc: 47:7a:57:40:55:e4:9f:a9:3c:3e:6f:9c:e8:f1:48: 3d:a8:35:77:4d:d7:2d:fa:34:63:3f:4c:d6:8f:6e: e4:d2:6c:3f:f2:94:c7:bf:39:22:08:fd:27:3d:25: 28:55:08:d3:91:75:47:d0:7b:ae:71:46:37:31:ae: 89:ba:f8:80:32:19:36:7e:9c:ef:69:99:76:09:e1: c1:65:5a:75:51:53:eb:2f:4d:c2:93:3e:ae:5d:7b: cf:81:ed:6d:1c:99:8e:40:43:08:cb:79:28:67:0b: 53:48:f2:78:fb:91:e5:bd:0b:be:c1:dd:7e:29:51: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:15:BB:B8:AA:DE:F6:BB:A7:80:14:C0:13:93:79:31:28:BA:45:CD X509v3 Authority Key Identifier: keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a1:60:4f:54:06:e6:0b:ce:05:dc:1e:a0:ff:6e:d7:42:51: 13:65:ac:59:5b:b7:60:9e:2f:a0:e1:a9:9b:08:00:22:56:de: 34:d5:2d:d5:cc:4a:cd:c2:90:31:b8:86:a5:83:58:29:22:bd: 1a:eb:6d:7b:80:cc:aa:90:5c:16:bf:95:ea:80:0c:f1:fe:9e: 51:3e:51:ef:9f:4e:6b:d0:bb:0d:ec:50:41:af:8c:93:f7:d8: 14:ad:eb:6b:58:44:0b:8b:ac:76:a4:14:97:10:74:7d:31:c9: e2:4b:91:90:9f:93:70:dc:6c:8c:56:03:6d:e1:6c:83:0a:a4: 1f:76:49:d3:6f:c2:88:e3:af:d9:75:86:41:ed:8c:d9:fb:97: 00:dc:c9:36:87:29:86:e3:b3:e5:80:51:42:24:10:7d:22:1b: a6:c7:ab:76:f6:e1:5d:21:f7:ba:bf:c8:14:8d:ca:11:2b:f4: 46:bb:bd:eb:77:fb:6c:e4:e7:2b:ca:81:5b:95:47:4b:9a:3e: 8a:af:0c:a3:a2:fd:80:18:96:b5:a7:c1:a0:b0:99:13:08:b9: 9b:b0:d5:0d:35:bd:77:1a:63:5f:23:74:37:5b:fe:71:8a:a4: 96:73:3e:30:83:79:a9:0f:99:f4:5e:a6:c7:23:71:8e:c5:e5: f7:6f:2e:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4 QjA4QzI4RTEwHhcNMjQwNTE5MDQ0NDUwWhcNMjQwNTI2MDQ0NDUwWjAYMRYwFAYD VQQDEw02NjQ5ODNjMy1lMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81ylCzhTNOq2Fj5PMXgyz8UADhVveG5UzkPRrQowUTB/WuV1n8EdZ7S7w8xL KvRpCn3J1YKyXWuhIubJrwOr+GaQrgiYSpAvgdnyo9NfOmMgu3no9MdFTZH8VhGh +fO098VWsbtlToGf1jSrgByPBX/ogqwL4nj2KceY1Urasc8OVDJCMfxHeldAVeSf qTw+b5zo8Ug9qDV3Tdct+jRjP0zWj27k0mw/8pTHvzkiCP0nPSUoVQjTkXVH0Huu cUY3Ma6JuviAMhk2fpzvaZl2CeHBZVp1UVPrL03Ckz6uXXvPge1tHJmOQEMIy3ko ZwtTSPJ4+5HlvQu+wd1+KVHMwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcVu7iq 3va7p4AUwBOTeTEoukXNMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0 MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk VTlaUTVTVFI2UG1MQ01LT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVoWBPVAbmC84F3B6g/27XQlETZaxZW7dgni+g4ambCAAiVt401S3V zErNwpAxuIalg1gpIr0a6217gMyqkFwWv5XqgAzx/p5RPlHvn05r0LsN7FBBr4yT 99gUretrWEQLi6x2pBSXEHR9McniS5GQn5Nw3GyMVgNt4WyDCqQfdknTb8KI46/Z dYZB7YzZ+5cA3Mk2hymG47PlgFFCJBB9Ihumx6t29uFdIfe6v8gUjcoRK/RGu73r d/ts5OcryoFblUdLmj6Krwyjov2AGJa1p8GgsJkTCLmbsNUNNb13GmNfI3Q3W/5x iqSWcz4wg3mpD5n0XqbHI3GOxeX3by6M -----END CERTIFICATE-----Generated at Sun May 19 06:14:34 2024 by rpki-client on console-ams.rpki-client.org