$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: DFh5fQ8Mcez9GcTauiYiuZKyQsGR6Muuvhh6UlhXgio= Subject key identifier: 76:0D:6E:E3:16:B8:98:EE:88:EC:B6:D3:62:2A:1C:85:8A:AA:B7:13 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0939 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 179E Signing time: Sat 18 May 2024 18:23:31 +0000 Manifest this update: Sat 18 May 2024 18:23:31 +0000 Manifest next update: Sat 25 May 2024 18:23:31 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: mz56FHaeNdtlvmfxzd9rHN4xdJs2Ltkq5eUQPjduLOE=) 2: C40A344CD95011EEBD100C30C4F9AE02.roa (hash: 3frzZsCe2cSKeF4zvhR7l2dt+O/9DB/apzghXZSwN0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2361 (0x939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: May 18 18:23:31 2024 GMT Not After : May 25 18:23:31 2024 GMT Subject: CN=6648f223-1e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:13:09:21:39:19:1d:2a:4f:fe:25:c4:1b: 23:12:25:98:38:7b:2b:59:8c:9e:1e:8f:26:60:6f: 1a:64:20:fb:9c:9c:e4:48:ec:14:ee:91:de:a7:8e: 85:e8:dd:43:83:fc:b9:f3:c1:36:03:b3:b3:1f:94: b1:59:d4:c4:bf:28:ad:3b:7a:b6:d7:f1:79:df:3e: 0f:b4:17:b7:61:0e:0b:a6:18:0e:10:f3:a6:8e:34: 72:17:77:f4:1c:2a:aa:bf:12:60:db:ca:f2:51:8c: 39:cd:42:02:73:a8:a0:49:aa:0f:73:6d:8a:5c:0f: b4:83:c1:1f:eb:4e:62:40:f7:c6:cc:36:11:12:05: 53:1e:a0:71:e2:e3:31:54:6c:92:2d:74:35:5b:32: aa:30:95:d0:6b:0a:39:34:cf:dd:7b:e0:12:48:d2: 4a:c5:80:80:6d:3f:f3:0c:d0:53:a6:d0:92:9f:57: 89:7b:31:af:d0:27:91:8d:25:2c:e3:50:a6:08:77: 7f:8c:05:05:35:d9:1b:02:f8:85:e4:fb:c5:c4:54: fc:6a:8f:c1:f2:40:0f:2d:ed:d3:ac:a2:9a:59:6c: 8b:00:aa:24:af:e4:de:88:63:72:0a:74:97:9f:e9: 81:50:d2:4d:1f:fc:0b:2f:3b:16:7f:e2:c3:fd:1a: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0D:6E:E3:16:B8:98:EE:88:EC:B6:D3:62:2A:1C:85:8A:AA:B7:13 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fb:15:a7:6c:d7:aa:70:84:33:05:1a:a5:7d:01:0e:70:fb: 7f:47:4b:62:ee:83:4d:79:14:a6:51:79:35:cc:d1:71:e8:18: 0c:e0:73:cc:15:78:6c:3e:18:37:46:4a:2a:97:2b:9e:05:14: 06:cf:b6:a1:86:77:a3:7a:f5:e8:42:0e:30:3a:16:08:0d:07: 07:d7:87:3a:44:10:95:28:39:47:c6:68:17:64:69:70:e4:4a: 1a:20:60:80:a6:eb:f7:e9:22:a0:d7:83:49:bf:f7:90:fa:8e: fa:ea:12:d0:7c:73:d7:e6:bd:91:6a:98:4c:61:6e:c4:a1:dd: 86:94:01:4a:57:5b:b4:87:de:60:37:19:f1:45:5c:8a:fa:6d: db:2b:6b:e9:4e:fc:c6:1e:aa:f0:29:27:49:fb:ff:a6:fc:fa: 76:2d:e1:ec:cb:a1:7a:94:fe:bb:f7:67:b2:3b:80:76:c0:18: e5:d8:aa:46:41:a4:23:e4:cf:8a:68:a1:da:f0:d9:a2:97:53: d7:c7:dd:e1:8d:92:77:4d:d6:f9:10:e5:7b:0b:c1:f2:00:cc: 35:8c:c5:29:65:17:2c:33:b0:0e:d6:eb:4a:d0:65:ea:ce:ae: 23:da:a5:e7:2f:f0:4a:38:e5:73:45:b3:31:07:b1:ce:3b:03: 87:0e:63:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjQwNTE4MTgyMzMxWhcNMjQwNTI1MTgyMzMxWjAYMRYwFAYD VQQDEw02NjQ4ZjIyMy0xZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwowTCSE5GR0qT/4lxBsjEiWYOHsrWYyeHo8mYG8aZCD7nJzkSOwU7pHep46F 6N1Dg/y588E2A7OzH5SxWdTEvyitO3q21/F53z4PtBe3YQ4LphgOEPOmjjRyF3f0 HCqqvxJg28ryUYw5zUICc6igSaoPc22KXA+0g8Ef605iQPfGzDYREgVTHqBx4uMx VGySLXQ1WzKqMJXQawo5NM/de+ASSNJKxYCAbT/zDNBTptCSn1eJezGv0CeRjSUs 41CmCHd/jAUFNdkbAviF5PvFxFT8ao/B8kAPLe3TrKKaWWyLAKokr+TeiGNyCnSX n+mBUNJNH/wLLzsWf+LD/Ro4QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYNbuMW uJjuiOy202IqHIWKqrcTMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs+xWnbNeqcIQzBRqlfQEOcPt/R0ti7oNNeRSmUXk1zNFx6BgM4HPM FXhsPhg3RkoqlyueBRQGz7ahhnejevXoQg4wOhYIDQcH14c6RBCVKDlHxmgXZGlw 5EoaIGCApuv36SKg14NJv/eQ+o766hLQfHPX5r2RaphMYW7Eod2GlAFKV1u0h95g NxnxRVyK+m3bK2vpTvzGHqrwKSdJ+/+m/Pp2LeHsy6F6lP6792eyO4B2wBjl2KpG QaQj5M+KaKHa8Nmil1PXx93hjZJ3Tdb5EOV7C8HyAMw1jMUpZRcsM7AO1utK0GXq zq4j2qXnL/BKOOVzRbMxB7HOOwOHDmNR -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org