$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: EaBDx2YtqmwDY/6K6bIE9zeBkrv79oMxAQWw0n/kYBs= Subject key identifier: 80:3E:C5:5C:B6:75:9D:36:C1:EC:8B:FF:7B:05:D7:84:AD:27:03:4C Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 0387 Signing time: Sun 19 May 2024 02:41:04 +0000 Manifest this update: Sun 19 May 2024 02:41:03 +0000 Manifest next update: Sun 26 May 2024 02:41:03 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: j+oWUtYxpns04cAEYNRmroM/6QcPXgTwa6pMLtLdugQ=) 2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: 5j53EjC96bocRXO92f8Mwf66+IEBDVw/YasWJCHuncI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: May 19 02:41:03 2024 GMT Not After : May 26 02:41:03 2024 GMT Subject: CN=664966bf-64e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0f:4a:7e:6a:0e:59:4d:e3:bb:cf:94:a8:07: 5c:54:90:7a:8b:38:b5:cd:7b:2f:dd:f3:1f:04:a8: 62:1a:a7:62:36:7b:47:3a:98:99:00:3a:9e:82:54: 90:1d:09:07:09:db:9f:e1:0b:74:db:0e:4b:a5:09: ab:f6:c1:9b:d1:99:ae:32:a0:47:f2:81:8c:be:2f: af:24:35:99:0c:2b:95:07:33:09:3e:5d:60:ac:a5: 80:b1:fd:74:39:dd:a0:2c:b5:13:b9:61:d1:60:d8: 0b:62:87:9f:45:7f:71:26:70:17:46:af:06:84:bd: bc:b9:d7:66:cc:aa:4c:d9:7c:c3:42:19:aa:60:b7: 3a:eb:52:21:82:e0:91:ea:a2:bf:f6:7c:bb:d4:46: 7c:c0:ee:e2:b2:01:d5:91:30:5a:95:68:ed:ef:e6: eb:0e:0a:f2:07:05:eb:83:34:af:0c:78:da:36:f8: 56:63:b0:ba:67:63:9d:4f:fe:a2:50:6e:b6:48:bd: a2:f3:34:91:11:63:8b:52:93:2a:7c:d2:20:96:b9: 12:7c:88:e6:9d:ba:1b:8a:60:6f:b0:83:1a:7c:08: 7e:ae:2b:5c:03:ad:7c:05:fe:c0:9c:65:49:92:36: 05:1d:f5:fd:6b:0a:31:d0:04:c9:79:62:61:f8:0d: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3E:C5:5C:B6:75:9D:36:C1:EC:8B:FF:7B:05:D7:84:AD:27:03:4C X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:6d:20:fa:e6:4c:72:23:7b:8f:72:23:a6:c8:82:4f:4e:a5: 0b:51:6a:b3:b9:8c:9a:13:23:d4:46:e3:28:d8:d7:1e:3d:b8: 58:6b:64:c8:4f:bf:7b:23:5a:f8:e8:fc:59:c9:2b:80:60:41: 29:4f:02:7d:34:6d:d6:2f:4b:eb:35:34:b3:95:1b:fe:c6:81: 30:ea:3c:c7:2c:78:9e:b9:24:66:b8:21:21:0b:c1:83:ae:0d: cf:0c:34:2f:0e:68:fd:43:0d:3d:f3:4f:fa:07:bb:ed:7d:26: 5f:a0:d5:4d:31:6c:23:84:6b:c7:79:cf:92:24:56:87:39:e1: db:d4:f2:5f:19:2f:b7:2b:f0:5c:47:24:15:84:58:55:be:e9: 93:4f:76:78:1a:09:71:40:13:63:1b:74:ef:66:ea:15:bf:ae: c0:67:4e:e8:74:98:c9:33:2d:fe:39:7f:1d:94:75:57:f3:2d: d0:bf:83:76:3d:a2:ef:70:3c:83:24:cd:54:8a:71:38:7a:fe: 54:e9:9a:53:49:9e:08:94:71:18:54:cc:1f:ff:e6:7c:fb:3f: 43:e2:9f:01:df:39:72:06:2e:08:a2:43:47:6e:32:10:e4:5f: 06:07:c6:aa:a0:69:3e:08:2a:fa:0a:74:fa:ae:7b:08:f4:90: f9:ab:31:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjQwNTE5MDI0MTAzWhcNMjQwNTI2MDI0MTAzWjAYMRYwFAYD VQQDEw02NjQ5NjZiZi02NGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9w9KfmoOWU3ju8+UqAdcVJB6izi1zXsv3fMfBKhiGqdiNntHOpiZADqeglSQ HQkHCduf4Qt02w5LpQmr9sGb0ZmuMqBH8oGMvi+vJDWZDCuVBzMJPl1grKWAsf10 Od2gLLUTuWHRYNgLYoefRX9xJnAXRq8GhL28uddmzKpM2XzDQhmqYLc661IhguCR 6qK/9ny71EZ8wO7isgHVkTBalWjt7+brDgryBwXrgzSvDHjaNvhWY7C6Z2OdT/6i UG62SL2i8zSREWOLUpMqfNIglrkSfIjmnbobimBvsIMafAh+ritcA618Bf7AnGVJ kjYFHfX9awox0ATJeWJh+A34jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIA+xVy2 dZ02weyL/3sF14StJwNMMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxbSD65kxyI3uPciOmyIJPTqULUWqzuYyaEyPURuMo2NcePbhYa2TI T797I1r46PxZySuAYEEpTwJ9NG3WL0vrNTSzlRv+xoEw6jzHLHieuSRmuCEhC8GD rg3PDDQvDmj9Qw0980/6B7vtfSZfoNVNMWwjhGvHec+SJFaHOeHb1PJfGS+3K/Bc RyQVhFhVvumTT3Z4GglxQBNjG3TvZuoVv67AZ07odJjJMy3+OX8dlHVX8y3Qv4N2 PaLvcDyDJM1UinE4ev5U6ZpTSZ4IlHEYVMwf/+Z8+z9D4p8B3zlyBi4IokNHbjIQ 5F8GB8aqoGk+CCr6CnT6rnsI9JD5qzGK -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org