$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json) Hash identifier: LzNcxX/gLYJ6aJBu5eB8wcIZ/2vuvbxrxLHFKA8IroE= Subject key identifier: 98:40:71:32:B3:99:38:11:35:88:D6:64:C7:8A:08:E4:14:89:99:AC Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft Manifest number: 0D45 Signing time: Sat 18 May 2024 18:38:44 +0000 Manifest this update: Sat 18 May 2024 18:38:43 +0000 Manifest next update: Sat 25 May 2024 18:38:43 +0000 Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: nfzzS+1F6cRDUwQQlJnMw52z7C63fd5x6L4NfIyy5l0=) 2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: hIX5A49EWtJSA5M1pXdXvwzS1FvjsEhtrb+D+enUUX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Validity Not Before: May 18 18:38:43 2024 GMT Not After : May 25 18:38:43 2024 GMT Subject: CN=6648f5b3-005e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:f7:50:b1:9b:3a:48:d7:4e:f9:3d:7d:90: 07:75:df:bd:71:c4:6c:90:b6:51:b3:7f:37:06:68: bd:ea:ea:83:44:a9:c2:12:2f:45:f7:ce:ce:c7:1b: 13:78:a4:52:93:07:cd:b4:2e:80:ee:58:8e:03:69: 74:2d:89:c7:92:7a:44:50:7a:c4:dc:b4:c9:c7:ea: a7:98:20:91:2f:63:72:ec:f1:7e:94:6c:0e:ac:5a: 3f:e3:e3:bc:23:f6:c5:6d:67:23:1f:a4:2b:64:b0: 45:5f:d7:3d:5c:0f:f6:8a:7e:b9:f8:c9:fa:d3:b5: b3:05:22:bf:3d:f4:1e:eb:bb:d9:b6:02:55:ec:8f: ae:fd:3d:eb:ad:2e:0a:db:ca:21:95:e2:41:bd:fe: b1:6e:52:ad:83:9f:12:5b:45:ea:4a:6d:3d:2b:b6: 01:ac:7e:2e:93:91:05:d0:2c:c9:79:e0:10:dd:c4: bf:95:48:9b:21:2d:27:20:bc:6d:88:e2:3e:ed:fe: 83:e0:fc:9d:78:57:e9:2d:46:b9:6c:85:35:22:28: 64:1a:95:a0:c6:89:83:25:d3:c4:7f:b2:5e:cb:7b: 50:42:f8:47:ab:17:d6:69:dd:65:9f:94:f7:af:93: 50:74:b8:3d:fc:e4:2f:05:07:68:4a:9d:d7:1a:71: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:40:71:32:B3:99:38:11:35:88:D6:64:C7:8A:08:E4:14:89:99:AC X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:86:42:9f:ca:d5:bf:e5:26:25:20:52:a0:6a:92:49:de:fb: 7e:d2:d6:7e:8e:47:52:4b:ad:52:3c:29:ed:34:7c:3d:6c:e8: 51:c7:19:dc:79:d8:4e:7b:5d:74:2d:0c:52:d5:c3:90:4f:a3: 06:07:63:52:46:16:33:f5:8f:2e:f8:dd:91:ea:5e:cc:d2:16: 06:0a:1b:ac:0e:19:44:fa:df:a3:4a:62:ca:fc:f1:5d:dc:3d: d6:4f:0f:23:6a:bc:8d:69:28:24:c3:34:65:69:a9:93:eb:d8: 0d:be:a2:66:c4:e6:4e:9e:5b:c2:14:73:03:c0:96:a8:d1:be: 1a:50:2c:b7:f0:64:c2:b4:8d:41:83:37:22:64:63:c7:09:24: 18:44:35:2a:ce:f8:4a:bf:93:ea:1c:3b:f3:50:a1:b1:2c:2c: 56:84:d3:74:0a:f0:a6:62:f3:53:9e:45:08:ca:23:47:26:e5: 89:03:6c:4d:ec:72:77:97:83:ac:3e:19:61:3d:5f:0e:d3:d0: 5d:9c:f6:6d:e6:b1:77:18:24:60:cc:7f:ef:95:70:9b:90:42: e5:52:7e:21:fd:68:66:12:8a:d9:c2:20:37:ab:ac:05:00:68: 2b:38:55:7c:0e:18:50:89:5d:40:2d:e6:93:e9:7b:8f:3c:ac: 7d:dd:d8:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjQwNTE4MTgzODQzWhcNMjQwNTI1MTgzODQzWjAYMRYwFAYD VQQDEw02NjQ4ZjViMy0wMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AX3ULGbOkjXTvk9fZAHdd+9ccRskLZRs383Bmi96uqDRKnCEi9F987OxxsT eKRSkwfNtC6A7liOA2l0LYnHknpEUHrE3LTJx+qnmCCRL2Ny7PF+lGwOrFo/4+O8 I/bFbWcjH6QrZLBFX9c9XA/2in65+Mn607WzBSK/PfQe67vZtgJV7I+u/T3rrS4K 28ohleJBvf6xblKtg58SW0XqSm09K7YBrH4uk5EF0CzJeeAQ3cS/lUibIS0nILxt iOI+7f6D4PydeFfpLUa5bIU1IihkGpWgxomDJdPEf7Jey3tQQvhHqxfWad1ln5T3 r5NQdLg9/OQvBQdoSp3XGnF4sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhAcTKz mTgRNYjWZMeKCOQUiZmsMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdDOS9DMzU5RTc1RUFDMTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0 cDZOeW5ubmhOWmtNQWVjSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCahkKfytW/5SYlIFKgapJJ3vt+0tZ+jkdSS61SPCntNHw9bOhRxxnc edhOe110LQxS1cOQT6MGB2NSRhYz9Y8u+N2R6l7M0hYGChusDhlE+t+jSmLK/PFd 3D3WTw8jaryNaSgkwzRlaamT69gNvqJmxOZOnlvCFHMDwJao0b4aUCy38GTCtI1B gzciZGPHCSQYRDUqzvhKv5PqHDvzUKGxLCxWhNN0CvCmYvNTnkUIyiNHJuWJA2xN 7HJ3l4OsPhlhPV8O09BdnPZt5rF3GCRgzH/vlXCbkELlUn4h/WhmEorZwiA3q6wF AGgrOFV8DhhQiV1ALeaT6XuPPKx93di7 -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org