$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: U6Zoccj4ersCyNwucgvIb81aR78NooNN6FrLC9ilYGw= Subject key identifier: 0F:7E:2E:91:F1:C7:3D:40:B7:20:AD:FF:AD:3B:26:0D:6A:B4:66:E0 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 17FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 17D6 Signing time: Fri 31 May 2024 17:12:55 +0000 Manifest this update: Fri 31 May 2024 17:12:54 +0000 Manifest next update: Fri 07 Jun 2024 17:12:54 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: GHdc74xlfgka6G8z2iEvbrxZ196yM+DXN34pxfN9BlU=) 2: EC6D3E86C82D11EEA128EF45C4F9AE02.roa (hash: tIodGgzTtrSwHBWaZYb/3vkiJKF6q/kRwV0x2lo08tA=) 3: EE826AB0C83311EEA202644EC4F9AE02.roa (hash: CypTIf1EBegC6vfig2SSrdyROe9emX+5AHEvCIwSkVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6139 (0x17fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: May 31 17:12:54 2024 GMT Not After : Jun 7 17:12:54 2024 GMT Subject: CN=665a0517-10be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:eb:70:82:07:67:bf:22:c3:cb:54:23:a9: 04:f1:4b:7e:a5:b0:63:a0:9a:1c:4e:3a:c7:e0:72: 04:c0:ec:c6:e1:0b:6f:d6:6f:7b:b7:02:f7:11:74: 48:55:79:35:e5:3c:ed:b8:f9:1a:73:7e:1f:58:7e: 16:5f:08:9b:e3:fc:4e:d6:07:de:9f:4f:7f:d2:78: 6b:d5:dd:a1:86:4e:61:4c:a2:94:f3:5e:20:72:33: 6b:7a:00:19:47:9d:9c:dd:37:fe:b3:4c:19:e0:91: 9a:5d:8d:c9:65:74:8e:95:51:25:77:05:d8:99:49: b3:59:05:48:23:81:a3:2b:f7:8f:c8:98:b5:07:0b: ad:f8:34:0a:72:c4:42:42:11:9b:12:b7:9d:b1:4e: 0f:01:f9:a9:f7:9b:52:4b:1c:76:0a:8b:89:5d:a1: 7d:99:ed:9f:b5:08:c1:6f:14:29:42:39:20:8a:9f: 07:40:bc:78:01:59:d7:d7:ce:e9:87:24:62:17:aa: a3:e9:61:2c:81:0f:e5:22:a4:2f:95:3d:58:4a:2d: 8c:84:32:18:f3:00:5c:02:6f:87:16:2e:65:8e:91: 40:50:74:fa:4f:63:bb:62:67:35:1a:56:cf:d8:a8: 22:e0:84:82:62:b1:f9:3e:92:2a:5c:47:3a:48:e7: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7E:2E:91:F1:C7:3D:40:B7:20:AD:FF:AD:3B:26:0D:6A:B4:66:E0 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:42:d2:f9:9e:a7:13:f8:f1:1f:ac:49:20:44:af:ad:d8:24: a6:6f:e5:56:3f:8c:01:66:7e:53:29:19:00:7f:7d:9d:fe:53: ce:81:8e:b6:10:2f:10:9d:d7:c6:f2:b6:22:fe:8d:cf:f2:4d: e5:c4:e3:a2:b7:40:fc:6a:08:ba:71:db:a7:53:90:72:34:21: a4:66:14:49:05:bf:48:37:6f:54:7c:d7:01:b8:dc:03:a8:bc: 70:3c:fd:bc:54:13:91:b2:ec:6d:6c:94:71:09:43:21:e6:4e: d3:eb:64:39:1d:9b:c3:85:6c:28:ef:94:46:b0:26:ce:f4:38: 90:a8:20:32:28:0f:7d:9f:ff:35:d8:73:f7:38:a3:5c:2c:32: 07:0f:58:21:ad:b0:8f:b1:40:02:fb:1a:cf:7c:d1:38:f2:6b: 6d:52:ac:e0:60:62:c9:d8:ff:99:d9:1a:e9:24:ea:59:0b:8a: 10:49:90:d2:98:82:6a:9c:8a:40:8c:32:2d:c4:9a:fd:b8:93: 3f:52:68:79:ec:9e:40:89:f3:56:05:32:ae:25:88:7c:c2:de: 2e:12:7e:69:9d:b0:c4:76:4b:5b:23:59:37:8b:92:2c:fc:66: e0:bc:24:aa:43:19:69:f3:6f:b9:13:8f:7c:62:e8:f5:28:7b: 02:28:55:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjQwNTMxMTcxMjU0WhcNMjQwNjA3MTcxMjU0WjAYMRYwFAYD VQQDEw02NjVhMDUxNy0xMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0DrcIIHZ78iw8tUI6kE8Ut+pbBjoJocTjrH4HIEwOzG4Qtv1m97twL3EXRI VXk15TztuPkac34fWH4WXwib4/xO1gfen09/0nhr1d2hhk5hTKKU814gcjNregAZ R52c3Tf+s0wZ4JGaXY3JZXSOlVEldwXYmUmzWQVII4GjK/ePyJi1Bwut+DQKcsRC QhGbEredsU4PAfmp95tSSxx2CouJXaF9me2ftQjBbxQpQjkgip8HQLx4AVnX187p hyRiF6qj6WEsgQ/lIqQvlT1YSi2MhDIY8wBcAm+HFi5ljpFAUHT6T2O7Ymc1GlbP 2Kgi4ISCYrH5PpIqXEc6SOfRGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9+LpHx xz1AtyCt/607Jg1qtGbgMB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsQtL5nqcT+PEfrEkgRK+t2CSmb+VWP4wBZn5TKRkAf32d/lPOgY62 EC8QndfG8rYi/o3P8k3lxOOit0D8agi6cdunU5ByNCGkZhRJBb9IN29UfNcBuNwD qLxwPP28VBORsuxtbJRxCUMh5k7T62Q5HZvDhWwo75RGsCbO9DiQqCAyKA99n/81 2HP3OKNcLDIHD1ghrbCPsUAC+xrPfNE48mttUqzgYGLJ2P+Z2RrpJOpZC4oQSZDS mIJqnIpAjDItxJr9uJM/Umh57J5AifNWBTKuJYh8wt4uEn5pnbDEdktbI1k3i5Is /GbgvCSqQxlp82+5E498Yuj1KHsCKFUJ -----END CERTIFICATE-----Generated at Fri May 31 20:34:08 2024 by rpki-client on console-ams.rpki-client.org