$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft File: tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json) Hash identifier: bEzf0p/W6wXAmvCJQwFeExeuzrM3g0R0K1+KPcTIXxw= Subject key identifier: 40:C3:DE:6C:8C:F2:9A:A1:FA:01:45:D0:97:9F:3F:95:FC:AC:63:F3 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft Manifest number: 05B1 Signing time: Wed 19 Jun 2024 00:58:44 +0000 Manifest this update: Wed 19 Jun 2024 00:58:44 +0000 Manifest next update: Wed 26 Jun 2024 00:58:44 +0000 Files and hashes: 1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: EVykhg2oUDMdBmZWP1TaC/63FAAq9pzpUBPmnImBcss=) 2: C7764CC6FCA311EEACCA2B5CC4F9AE02.roa (hash: BskhYAjkibtuBOu8KlbXIdkPDZaQNVMPjMPekgxh8u0=) 3: 618F268E332011ECB63E811FC4F9AE02.roa (hash: 7C2GzfDatdOaIyc/rWwQmAR2M4It8oO7aGgwTBTHezc=) 4: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: ReJQ8HIC2R5yBSJTVm0slRiqIXMJhZgkUgweOwx/T4w=) 5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: ky7WnUUR1ZOPfVWp03m4T/OseuA/cIghKwG6Bzj+q/I=) 6: CB7265EA9A2611EBA0D24E4AC4F9AE02.roa (hash: v+8jxQo82K3QCMxK0rtPynb0FPvOLNAofuOPi3g4KHA=) 7: A716CA94954611EC9B320352C4F9AE02.roa (hash: ALpAT1dNfq1GhHxxLT6ha08jQja+VhYhpPHptLWyADo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 00:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Jun 19 00:58:44 2024 GMT Not After : Jun 26 00:58:44 2024 GMT Subject: CN=66722d44-c0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:1d:64:47:7b:c8:8e:09:c8:b9:1d:d2:b6: 54:ea:42:bb:0e:d6:c7:3d:0e:7e:6f:24:b4:6d:d1: ca:cf:42:42:ad:fd:37:03:30:36:0d:c5:9e:2d:38: b5:0d:85:2c:43:ac:cd:75:be:e4:7b:03:44:b7:59: 8d:79:65:44:0f:ab:23:9e:af:b7:a6:f5:42:d9:92: 19:e7:46:e3:50:40:9d:59:d1:7c:bd:7f:d1:88:d1: e1:14:21:57:40:92:59:71:f9:87:ee:1a:cb:9b:26: d4:10:2c:0a:a6:41:e5:ed:11:dc:75:e1:bd:14:10: da:98:f0:8a:1b:d4:e5:ea:e0:f0:10:55:67:5d:d0: b6:2a:f7:88:01:16:49:cd:d3:60:18:c3:15:84:5a: 58:bc:e6:a8:95:54:63:a2:dd:f1:de:45:a7:3e:d8: a8:29:30:26:b7:78:81:c0:8e:01:ad:7b:ae:e4:89: 13:c5:15:20:76:4e:cf:93:08:af:83:07:6d:a2:3c: f0:b9:b0:d5:d2:0f:a5:15:9a:3d:4c:ae:49:71:23: 3c:6b:0f:81:04:a1:58:71:b4:10:fe:29:ad:31:79: 09:88:56:e7:f3:b1:dc:43:df:7e:f5:30:82:b2:7d: f3:a2:a1:0d:bf:47:a1:a6:0f:ac:86:71:51:d2:cb: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C3:DE:6C:8C:F2:9A:A1:FA:01:45:D0:97:9F:3F:95:FC:AC:63:F3 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:00:92:a2:70:8c:dc:9a:34:34:ad:61:ae:fe:fe:88:dd:65: cb:7f:6e:ac:28:49:5d:4d:1c:5c:09:17:30:c2:30:4a:9c:f6: f2:59:0f:e7:0e:c0:0b:4b:2f:25:b1:c5:c7:3f:d6:32:77:c2: 7f:bb:99:3b:c0:78:29:d2:2b:2a:04:69:48:cf:1e:84:fb:a4: a1:ee:36:b8:95:ea:89:8b:4c:9e:4e:2d:d4:fe:41:ac:70:75: 80:5a:1b:08:2f:3e:73:97:62:23:c7:7b:a5:3f:e8:f1:e7:84: da:39:a8:51:14:e5:0d:4c:63:f1:38:01:26:dd:59:be:05:59: e4:e0:fd:69:b7:70:86:69:93:3f:41:dd:2d:3e:2f:21:9c:a1: e7:fc:3b:e2:5a:d5:aa:2a:3c:35:5b:1d:ea:90:79:6a:b3:19: ac:08:32:c0:f0:6b:1c:46:e3:e3:c9:ff:4d:9d:40:c4:f1:25: 92:b5:2f:e5:da:2d:91:bb:39:69:1a:75:fb:be:82:16:38:c3: df:51:df:44:94:dc:da:44:16:50:69:a2:f2:ec:8c:8b:9f:93: aa:02:6a:19:4d:75:78:b1:62:fd:a0:13:c7:d2:3e:43:54:d2: b0:34:96:6c:16:32:eb:19:e8:f4:38:e1:64:4a:b0:2e:4d:5b: d0:6a:f5:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjQwNjE5MDA1ODQ0WhcNMjQwNjI2MDA1ODQ0WjAYMRYwFAYD VQQDEw02NjcyMmQ0NC1jMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7cdZEd7yI4JyLkd0rZU6kK7DtbHPQ5+byS0bdHKz0JCrf03AzA2DcWeLTi1 DYUsQ6zNdb7kewNEt1mNeWVED6sjnq+3pvVC2ZIZ50bjUECdWdF8vX/RiNHhFCFX QJJZcfmH7hrLmybUECwKpkHl7RHcdeG9FBDamPCKG9Tl6uDwEFVnXdC2KveIARZJ zdNgGMMVhFpYvOaolVRjot3x3kWnPtioKTAmt3iBwI4BrXuu5IkTxRUgdk7Pkwiv gwdtojzwubDV0g+lFZo9TK5JcSM8aw+BBKFYcbQQ/imtMXkJiFbn87HcQ99+9TCC sn3zoqENv0ehpg+shnFR0sv/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDD3myM 8pqh+gFF0JefP5X8rGPzMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8AJKicIzcmjQ0rWGu/v6I3WXLf26sKEldTRxcCRcwwjBKnPbyWQ/n DsALSy8lscXHP9Yyd8J/u5k7wHgp0isqBGlIzx6E+6Sh7ja4leqJi0yeTi3U/kGs cHWAWhsILz5zl2Ijx3ulP+jx54TaOahRFOUNTGPxOAEm3Vm+BVnk4P1pt3CGaZM/ Qd0tPi8hnKHn/DviWtWqKjw1Wx3qkHlqsxmsCDLA8GscRuPjyf9NnUDE8SWStS/l 2i2RuzlpGnX7voIWOMPfUd9ElNzaRBZQaaLy7IyLn5OqAmoZTXV4sWL9oBPH0j5D VNKwNJZsFjLrGej0OOFkSrAuTVvQavXN -----END CERTIFICATE-----Generated at Wed Jun 19 02:44:14 2024 by rpki-client on console-ams.rpki-client.org