$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json) Hash identifier: xp7E/siIuR4Cxbld6rzwwlaz1GDI6fKW4TxP/kk4KKA= Subject key identifier: 88:F0:85:B2:B1:DA:1B:C0:30:DF:70:1B:E6:52:B2:57:B5:C5:91:79 Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft Manifest number: 018D Signing time: Sat 01 Jun 2024 05:56:23 +0000 Manifest this update: Sat 01 Jun 2024 05:56:23 +0000 Manifest next update: Sat 08 Jun 2024 05:56:23 +0000 Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: x3Wb9Oieh+wxrLbtT5qDH2lPpHZqLE5TKGjAN9nIAUQ=) 2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nQ99fDaMcLKmER+eUIwMPGK91XO4OfQ7KVVTWmAakBo=) 3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: IjrBxKJqfs/DLqWGCUK9jjzadsLrd5M6FaMqsgSa1b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Validity Not Before: Jun 1 05:56:23 2024 GMT Not After : Jun 8 05:56:23 2024 GMT Subject: CN=665ab807-aef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:31:00:46:17:80:93:1a:27:12:c3:95:01:01: 00:15:e4:e3:58:65:0a:db:0f:03:00:7d:be:da:84: 4b:d0:4c:9b:22:44:54:33:e4:7d:69:c9:12:fd:7e: 70:6a:2c:4b:bd:43:ef:b1:16:f5:e0:99:77:5e:4a: e5:0d:1e:d4:2e:e9:3a:fa:ad:e9:23:d1:1c:6e:60: 0e:9b:e3:0f:54:9a:e3:58:cb:1e:1f:29:c5:45:34: 3c:32:2a:9d:05:29:63:05:d2:3a:48:11:77:9e:1c: a7:bd:9c:6f:26:46:97:fe:bb:c3:bd:52:7e:99:c1: cb:22:2a:30:e9:04:ae:fd:22:a9:34:74:12:8d:f0: bb:b0:0b:68:f1:8f:41:e0:60:60:00:90:ef:0b:5c: 3b:ea:2b:84:c9:0f:13:d2:5f:6d:a5:0c:ed:52:e7: b6:4e:c6:4d:a7:55:c3:a6:c6:50:6b:2b:9f:06:35: e5:31:b6:07:85:a2:50:11:e0:36:07:d8:e1:54:76: 68:c5:2f:ac:80:4f:6a:95:7b:85:cf:d7:79:7b:61: 42:c4:fa:b0:df:1b:97:95:62:01:7e:aa:37:48:4e: 6d:f0:45:43:7e:6a:1e:a7:96:02:a0:9a:87:72:f5: 5b:42:c2:2f:e5:3c:4a:f5:bb:82:84:c7:a9:92:6b: 71:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F0:85:B2:B1:DA:1B:C0:30:DF:70:1B:E6:52:B2:57:B5:C5:91:79 X509v3 Authority Key Identifier: keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a9:1a:cb:8e:2e:97:51:8f:3a:ff:06:df:d9:b0:32:33:a0: 2c:b9:a5:21:05:a3:1c:25:0f:58:61:bf:0b:86:39:2b:ed:6b: 72:35:6b:f6:e4:27:b9:3d:56:43:09:36:a9:e4:27:57:d8:d6: c3:39:ba:59:7a:bb:6b:ed:e3:b7:47:46:93:01:73:3b:bd:cc: d5:64:e1:9b:ff:28:a4:49:d3:c5:29:ef:2a:26:91:59:ef:e0: a0:ce:b8:ff:6d:83:ad:93:8e:88:b1:4f:e8:46:15:02:c4:d5: 11:42:86:97:4d:28:e7:da:55:b0:0e:ac:11:2e:db:9e:59:8c: 89:e6:72:18:ac:3c:72:83:8f:3e:8a:02:bc:c6:11:99:78:64: 72:f7:02:f7:86:b9:17:9c:41:2d:1d:42:85:ce:40:16:f4:d2: f3:e2:6c:48:4c:a2:ee:2b:3e:ce:77:78:88:b1:9f:14:86:dc: b5:67:c7:e3:1b:2c:6c:e4:4d:f8:09:89:d3:11:64:a4:9b:1b: 86:7c:21:f1:f9:c8:68:58:14:f6:ce:c6:0a:95:4a:65:39:2f: 77:5d:35:b0:ae:b6:96:39:98:24:4c:fb:7d:6d:01:a2:02:33: f7:2b:13:ad:cf:1a:65:5e:3b:61:76:16:5a:9d:bf:89:78:4a: e8:30:20:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD OTI4OTQ3NDgwHhcNMjQwNjAxMDU1NjIzWhcNMjQwNjA4MDU1NjIzWjAYMRYwFAYD VQQDEw02NjVhYjgwNy1hZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzEARheAkxonEsOVAQEAFeTjWGUK2w8DAH2+2oRL0EybIkRUM+R9ackS/X5w aixLvUPvsRb14Jl3XkrlDR7ULuk6+q3pI9EcbmAOm+MPVJrjWMseHynFRTQ8Miqd BSljBdI6SBF3nhynvZxvJkaX/rvDvVJ+mcHLIiow6QSu/SKpNHQSjfC7sAto8Y9B 4GBgAJDvC1w76iuEyQ8T0l9tpQztUue2TsZNp1XDpsZQayufBjXlMbYHhaJQEeA2 B9jhVHZoxS+sgE9qlXuFz9d5e2FCxPqw3xuXlWIBfqo3SE5t8EVDfmoep5YCoJqH cvVbQsIv5TxK9buChMepkmtxYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjwhbKx 2hvAMN9wG+ZSsle1xZF5MB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm UWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfqRrLji6XUY86/wbf2bAyM6AsuaUhBaMcJQ9YYb8Lhjkr7WtyNWv2 5Ce5PVZDCTap5CdX2NbDObpZertr7eO3R0aTAXM7vczVZOGb/yikSdPFKe8qJpFZ 7+Cgzrj/bYOtk46IsU/oRhUCxNURQoaXTSjn2lWwDqwRLtueWYyJ5nIYrDxyg48+ igK8xhGZeGRy9wL3hrkXnEEtHUKFzkAW9NLz4mxITKLuKz7Od3iIsZ8Uhty1Z8fj Gyxs5E34CYnTEWSkmxuGfCHx+choWBT2zsYKlUplOS93XTWwrraWOZgkTPt9bQGi AjP3KxOtzxplXjthdhZanb+JeEroMCBg -----END CERTIFICATE-----Generated at Sat Jun 1 06:27:36 2024 by rpki-client on console-fra.rpki-client.org