$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: 7cLvbkA2YcC8dg9nofMF3zmb9EaWL9gbg25Zcc/0KA4= Subject key identifier: 97:5B:2F:7D:94:A0:EE:81:A0:E7:6A:42:C8:48:A7:AB:5C:45:C8:05 Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0957 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0952 Signing time: Fri 31 May 2024 21:42:40 +0000 Manifest this update: Fri 31 May 2024 21:42:40 +0000 Manifest next update: Fri 07 Jun 2024 21:42:40 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: pAzZpnP4mHZgsPQNJrO4F+OXQy6NKsZLNG1Sz/1GuaI=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: wW3DXmJOk1/Wrifp5DRyIA2SnoFx2RQGLKlxI1dOAac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2391 (0x957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: May 31 21:42:40 2024 GMT Not After : Jun 7 21:42:40 2024 GMT Subject: CN=665a4450-5c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:54:e0:d4:da:7d:6e:72:db:6f:d6:65:96: ff:d7:76:5d:24:f0:cd:fd:1e:75:fc:a5:01:d5:ab: 7e:7a:14:10:32:08:48:b2:d9:f4:97:a7:85:99:1e: a0:fd:f9:63:e2:52:23:3d:fd:c3:72:6f:3f:0c:a9: 42:77:8a:8c:37:0d:bb:13:1e:0c:23:b6:03:dc:ae: 8b:74:90:0d:c8:f4:e3:4d:3b:2d:9b:8d:07:db:4e: c7:ca:de:19:3d:dc:fc:63:95:36:ef:d0:9b:55:5d: 96:2e:45:03:50:b6:b0:59:a9:eb:91:db:d1:95:29: e7:39:ca:ad:3d:6a:df:89:1e:14:4e:e9:88:e5:93: 59:d0:56:8f:dd:12:55:01:f2:b9:07:5f:70:bf:f7: 80:48:8a:12:b5:9e:91:da:93:a3:da:ec:02:20:1c: f1:bd:f4:fc:a4:e0:c7:5c:25:b7:e0:c7:53:3e:fe: 9c:47:dc:b1:c1:43:cc:59:92:f2:f0:12:f9:4e:c8: e1:33:a1:5b:19:67:0b:d4:d3:f3:3d:bf:a5:0b:25: 61:b2:2d:35:3f:81:44:aa:f6:0c:65:36:2e:29:93: 41:a9:7f:38:ed:c6:95:73:40:28:bc:cc:26:59:28: 74:e5:c6:f1:f3:86:c1:bd:fe:c5:53:fa:63:5c:ba: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5B:2F:7D:94:A0:EE:81:A0:E7:6A:42:C8:48:A7:AB:5C:45:C8:05 X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c5:fa:9d:41:2e:b7:de:c2:a4:ee:40:ae:df:cb:a1:80:2e: 7c:76:88:2d:54:0a:59:7e:15:25:ad:86:80:a6:fd:f3:53:4b: a0:0a:08:91:ad:66:5d:23:ed:21:e0:89:0e:a2:a6:21:98:e3: 9a:f1:6c:11:f9:5a:71:1f:74:02:02:a4:d0:8d:88:5c:c8:87: 2e:53:91:81:b8:f5:ae:2b:75:08:09:6e:e5:2d:4b:e9:ff:34: b3:ab:20:94:53:45:ab:c2:d4:af:0d:45:66:43:2a:fa:87:84: 90:4b:dc:53:43:a8:07:ac:8b:0b:2d:03:4c:20:d7:73:fd:1e: 4f:3b:93:6c:e1:32:84:ba:9d:ab:fb:e6:7d:2b:6a:9c:32:24: d6:54:62:22:3e:af:18:98:c9:b4:ce:d1:f7:96:5b:6c:e5:91: bf:fa:61:e1:db:e1:fe:32:10:90:22:e6:41:72:8b:2f:de:08: b7:46:9c:67:22:d9:65:96:ff:99:1a:cf:6e:e9:36:82:45:58: dd:8f:86:36:d1:d5:56:dc:40:85:60:81:b9:c4:15:7f:4f:46: 4f:8f:a4:d3:ec:12:37:41:8f:d1:b2:1a:dc:28:8e:f7:76:76: 2f:a8:d3:c0:e3:48:af:2a:a8:9b:33:ef:c9:80:46:ab:c2:59: 1f:e1:24:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjQwNTMxMjE0MjQwWhcNMjQwNjA3MjE0MjQwWjAYMRYwFAYD VQQDEw02NjVhNDQ1MC01Yzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLlU4NTafW5y22/WZZb/13ZdJPDN/R51/KUB1at+ehQQMghIstn0l6eFmR6g /flj4lIjPf3Dcm8/DKlCd4qMNw27Ex4MI7YD3K6LdJANyPTjTTstm40H207Hyt4Z Pdz8Y5U279CbVV2WLkUDULawWanrkdvRlSnnOcqtPWrfiR4UTumI5ZNZ0FaP3RJV AfK5B19wv/eASIoStZ6R2pOj2uwCIBzxvfT8pODHXCW34MdTPv6cR9yxwUPMWZLy 8BL5TsjhM6FbGWcL1NPzPb+lCyVhsi01P4FEqvYMZTYuKZNBqX847caVc0AovMwm WSh05cbx84bBvf7FU/pjXLoTFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdbL32U oO6BoOdqQshIp6tcRcgFMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjxfqdQS633sKk7kCu38uhgC58dogtVApZfhUlrYaApv3zU0ugCgiR rWZdI+0h4IkOoqYhmOOa8WwR+VpxH3QCAqTQjYhcyIcuU5GBuPWuK3UICW7lLUvp /zSzqyCUU0WrwtSvDUVmQyr6h4SQS9xTQ6gHrIsLLQNMINdz/R5PO5Ns4TKEup2r ++Z9K2qcMiTWVGIiPq8YmMm0ztH3llts5ZG/+mHh2+H+MhCQIuZBcosv3gi3Rpxn Itlllv+ZGs9u6TaCRVjdj4Y20dVW3ECFYIG5xBV/T0ZPj6TT7BI3QY/RshrcKI73 dnYvqNPA40ivKqibM+/JgEarwlkf4SQ+ -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:23 2024 by rpki-client on console-ams.rpki-client.org