$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json) Hash identifier: +IUc//YZCFqJfE4nQHbjZCgNSy8LsdNskJM0XxXZcY4= Subject key identifier: 8E:EE:5D:9C:90:D9:39:13:C9:97:2A:1D:A8:A1:DE:AB:EE:38:B7:B2 Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 034A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft Manifest number: 0344 Signing time: Fri 31 May 2024 03:32:46 +0000 Manifest this update: Fri 31 May 2024 03:32:45 +0000 Manifest next update: Fri 07 Jun 2024 03:32:45 +0000 Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: Ac0lkH+M0q8AEcL6q/PuayFoZX8yyWFFCDNsqQkrmyM=) 2: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: Ih+prquD1wMvtOAmVI923gEriAhtGpQ5jdLBeU4XBxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: May 31 03:32:45 2024 GMT Not After : Jun 7 03:32:45 2024 GMT Subject: CN=665944dd-118c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:fe:07:ea:c4:c9:64:80:35:22:44:19:ac: ce:14:51:02:37:ea:bd:1a:e7:49:96:c5:18:60:5d: 3a:51:eb:db:35:2e:67:15:6e:e4:a6:7e:fa:8c:fa: 9f:5c:35:bb:bd:d1:ae:6d:7d:35:5f:80:9b:b1:20: 95:97:d3:fb:ce:6c:b5:07:cc:8e:4b:0e:44:b4:4b: 40:33:ad:62:0c:ef:b7:37:75:25:6c:19:76:3c:90: 0b:09:81:63:be:df:3a:44:05:fa:08:41:55:60:50: 05:d2:c5:5e:2c:1b:da:22:eb:bf:ab:22:5b:c0:57: ee:8d:2f:40:32:cf:ef:a4:3c:fa:fd:87:5b:cf:0b: fa:7c:cc:0f:d3:d0:21:75:4d:06:81:98:04:88:08: 0e:bd:48:88:f9:09:c5:e4:53:23:71:04:26:15:12: cf:c8:55:30:f0:bf:1a:b3:c7:fe:82:8c:c7:e7:f2: 9a:85:d2:0a:df:bd:10:45:e1:eb:7b:1e:a3:1f:8a: 04:95:31:b5:ae:8a:4d:58:0b:d9:54:9c:28:a1:7f: 34:27:d3:38:be:95:8c:1e:bd:8e:4f:bc:50:f5:d4: d0:6e:74:4b:f1:ac:ef:d4:8c:90:45:20:68:34:b0: b3:8a:88:7e:17:5c:3f:bd:93:22:c7:6d:2d:9e:e1: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EE:5D:9C:90:D9:39:13:C9:97:2A:1D:A8:A1:DE:AB:EE:38:B7:B2 X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:fe:fc:48:a3:d6:92:35:10:e3:d1:e3:e0:9f:00:25:94:94: ff:8b:05:fc:86:03:50:43:fe:61:fa:c8:1a:0d:7e:3f:5d:1a: 08:c4:26:ee:75:ff:c5:68:4a:7b:db:e3:53:d6:b1:72:94:3f: 59:fe:3c:4e:34:73:54:1b:76:b9:52:aa:bb:e9:34:0e:60:93: 25:28:49:10:2c:af:16:e5:29:d7:11:a1:98:ce:9d:36:ea:fd: c7:71:3a:6a:64:4c:60:86:e6:95:4e:ec:6d:eb:ca:0c:76:0e: 68:b2:ba:52:b8:76:15:60:29:af:a1:86:8d:a9:30:ad:3d:c0: dc:1e:0c:99:28:a6:5b:98:34:9e:a5:51:60:62:c5:de:a3:63: bd:66:14:8a:3e:8a:8d:d5:41:9f:4f:56:09:ff:5f:43:5f:2c: 3f:6e:ce:f9:30:4a:77:cc:f5:f4:5c:84:5d:14:1f:0b:60:fa: fd:72:a5:30:fd:ac:8f:6c:85:50:65:89:b3:ef:4a:35:c0:20: 07:c7:06:27:be:01:e5:0f:24:9c:01:25:e2:77:38:10:67:fc: e3:5b:75:2e:3e:aa:53:33:f8:fb:f3:d8:18:37:71:0b:35:af: ef:19:01:3f:78:06:40:1e:4a:7c:84:22:7a:c9:36:9d:fd:c0: 66:d4:2c:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjQwNTMxMDMzMjQ1WhcNMjQwNjA3MDMzMjQ1WjAYMRYwFAYD VQQDEw02NjU5NDRkZC0xMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvD+B+rEyWSANSJEGazOFFECN+q9GudJlsUYYF06UevbNS5nFW7kpn76jPqf XDW7vdGubX01X4CbsSCVl9P7zmy1B8yOSw5EtEtAM61iDO+3N3UlbBl2PJALCYFj vt86RAX6CEFVYFAF0sVeLBvaIuu/qyJbwFfujS9AMs/vpDz6/Ydbzwv6fMwP09Ah dU0GgZgEiAgOvUiI+QnF5FMjcQQmFRLPyFUw8L8as8f+gozH5/KahdIK370QReHr ex6jH4oElTG1ropNWAvZVJwooX80J9M4vpWMHr2OT7xQ9dTQbnRL8azv1IyQRSBo NLCzioh+F1w/vZMix20tnuEOEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7uXZyQ 2TkTyZcqHaih3qvuOLeyMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTZERS84RjM0MEREMDc1MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201 T2tTazlsNzdJS2dBMXQxLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR/vxIo9aSNRDj0ePgnwAllJT/iwX8hgNQQ/5h+sgaDX4/XRoIxCbu df/FaEp72+NT1rFylD9Z/jxONHNUG3a5Uqq76TQOYJMlKEkQLK8W5SnXEaGYzp02 6v3HcTpqZExghuaVTuxt68oMdg5osrpSuHYVYCmvoYaNqTCtPcDcHgyZKKZbmDSe pVFgYsXeo2O9ZhSKPoqN1UGfT1YJ/19DXyw/bs75MEp3zPX0XIRdFB8LYPr9cqUw /ayPbIVQZYmz70o1wCAHxwYnvgHlDyScASXidzgQZ/zjW3UuPqpTM/j789gYN3EL Na/vGQE/eAZAHkp8hCJ6yTad/cBm1Cyi -----END CERTIFICATE-----Generated at Fri May 31 06:49:15 2024 by rpki-client on console-ams.rpki-client.org