$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json) Hash identifier: BWzGwu6mNvAC1f6IiU3ROQy5iMLms7Cagt0e1xSgViY= Subject key identifier: BD:E9:C3:0C:3F:A8:10:DF:91:A4:84:B8:B0:88:BB:F2:18:38:4C:5F Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 184D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft Manifest number: 1841 Signing time: Thu 30 May 2024 17:15:12 +0000 Manifest this update: Thu 30 May 2024 17:15:12 +0000 Manifest next update: Thu 06 Jun 2024 17:15:12 +0000 Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: frlp/6HLU3PuC3Koq1S8pGt5oY6s6wH/abb+BDbmCK8=) 2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: Qjxn6w7Ee9ThTcgQANjHHala94faSmJcpibAc70oZYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 17:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6221 (0x184d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: May 30 17:15:12 2024 GMT Not After : Jun 6 17:15:12 2024 GMT Subject: CN=6658b420-7c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c2:15:6b:7e:e8:ee:68:48:96:58:2c:41:5b: 67:83:ab:30:7b:6c:71:02:97:45:da:03:dd:0d:2e: f2:2a:18:2c:8b:fb:44:3f:21:7f:9b:51:25:e2:ed: be:2d:c3:4e:43:5b:ae:f9:f5:9a:26:63:5b:e1:81: 59:2c:98:6b:e4:99:8a:47:f4:47:61:82:c1:aa:4b: dc:e9:86:f0:e2:d3:e7:0b:2f:a3:97:1f:22:b4:b9: c6:f4:6a:d7:cc:1b:59:00:91:80:f2:28:ed:ec:f3: 27:f6:2e:39:44:3a:cd:cd:d3:85:42:0b:3a:ea:e6: 4b:a0:8c:c1:cd:0d:05:76:15:d0:79:6a:cb:99:64: f3:1b:0c:87:9d:df:34:8e:9a:b7:34:33:cc:0c:10: 11:1a:b9:0e:42:32:5d:75:ad:28:52:71:f4:79:de: f6:80:5c:6c:63:94:d9:97:c6:e6:28:30:50:5f:97: 28:b0:d4:88:09:45:ee:56:1a:4f:22:0e:c5:f5:a8: 35:a0:db:3d:46:ed:4f:ec:76:75:cd:30:a8:d0:b9: 93:83:1c:ef:39:79:17:a9:ef:e7:65:68:da:73:90: a1:20:3f:5e:03:fc:2c:c7:e8:6e:30:7e:fc:9f:45: 57:fb:9d:7e:a9:f1:42:e0:29:0c:2a:b9:ca:76:36: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E9:C3:0C:3F:A8:10:DF:91:A4:84:B8:B0:88:BB:F2:18:38:4C:5F X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:1e:7f:7c:ec:b9:f9:72:2c:69:29:e9:d1:56:2e:1f:a2:67: 41:f7:c9:2c:46:91:16:64:5a:69:ad:09:5f:34:f5:3f:ff:56: 22:51:27:bb:ad:c2:01:28:b1:53:54:94:4a:c1:c6:c4:aa:01: 84:2d:7f:03:bb:77:61:2d:88:2f:78:f2:0f:e7:44:1a:59:bb: 96:ef:9a:f2:b5:bc:3d:6b:1b:5a:6d:f2:15:53:e6:f0:f0:dd: 7f:d4:a5:1a:30:49:11:9c:ef:f4:91:51:05:dd:96:50:34:5e: e5:3e:c1:f2:65:87:19:d2:fa:33:aa:70:8e:37:76:6a:6b:3c: 59:f6:e0:26:5d:45:86:ef:04:15:c9:1b:8e:05:c1:df:37:4c: b8:f2:96:5a:7d:0e:40:17:ea:44:f7:49:95:11:54:b6:8c:fa: cd:02:b9:1a:73:7c:66:46:93:b0:c9:7f:02:70:60:a7:e4:85: f2:e3:75:e8:c6:36:93:3f:b3:b9:e1:60:9d:d6:86:8d:96:6b: 08:f1:84:b8:ab:b1:85:5d:07:96:60:bd:13:00:85:b9:43:f9: 28:e4:18:6c:12:bb:a5:f3:39:74:c5:62:4f:dd:ea:c5:f2:8b: 90:b4:de:63:77:59:11:28:d8:42:6e:66:82:8d:e4:b5:17:d3: 95:b3:f7:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjQwNTMwMTcxNTEyWhcNMjQwNjA2MTcxNTEyWjAYMRYwFAYD VQQDEw02NjU4YjQyMC03YzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sIVa37o7mhIllgsQVtng6swe2xxApdF2gPdDS7yKhgsi/tEPyF/m1El4u2+ LcNOQ1uu+fWaJmNb4YFZLJhr5JmKR/RHYYLBqkvc6Ybw4tPnCy+jlx8itLnG9GrX zBtZAJGA8ijt7PMn9i45RDrNzdOFQgs66uZLoIzBzQ0FdhXQeWrLmWTzGwyHnd80 jpq3NDPMDBARGrkOQjJdda0oUnH0ed72gFxsY5TZl8bmKDBQX5cosNSICUXuVhpP Ig7F9ag1oNs9Ru1P7HZ1zTCo0LmTgxzvOXkXqe/nZWjac5ChID9eA/wsx+huMH78 n0VX+51+qfFC4CkMKrnKdjbfTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3pwww/ qBDfkaSEuLCIu/IYOExfMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNHn987Ln5cixpKenRVi4fomdB98ksRpEWZFpprQlfNPU//1YiUSe7 rcIBKLFTVJRKwcbEqgGELX8Du3dhLYgvePIP50QaWbuW75rytbw9axtabfIVU+bw 8N1/1KUaMEkRnO/0kVEF3ZZQNF7lPsHyZYcZ0vozqnCON3ZqazxZ9uAmXUWG7wQV yRuOBcHfN0y48pZafQ5AF+pE90mVEVS2jPrNArkac3xmRpOwyX8CcGCn5IXy43Xo xjaTP7O54WCd1oaNlmsI8YS4q7GFXQeWYL0TAIW5Q/ko5BhsErul8zl0xWJP3erF 8ouQtN5jd1kRKNhCbmaCjeS1F9OVs/eR -----END CERTIFICATE-----Generated at Thu May 30 18:46:01 2024 by rpki-client on console-ams.rpki-client.org