$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft File: _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json) Hash identifier: 1ldzRo6mFujsT7TlhA32xZw9Xgb9CtvyKx0kDdH9fAk= Subject key identifier: 00:7A:BA:CB:11:54:D2:A6:8F:72:8B:C0:06:36:D0:DD:A4:E6:EF:A8 Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft Manifest number: 23 Signing time: Sun 19 May 2024 08:32:20 +0000 Manifest this update: Sun 19 May 2024 08:32:19 +0000 Manifest next update: Sun 26 May 2024 08:32:19 +0000 Files and hashes: 1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: XjIZzTK5ViJw9lRpjXPw6blTXaQHULAMn/Iz1ERzRaM=) 2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: 4m6kTWNBLLt0DnQcKadWEAp+oA7dK3KvjMhOBiVTN1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD Validity Not Before: May 19 08:32:19 2024 GMT Not After : May 26 08:32:19 2024 GMT Subject: CN=6649b914-4a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:63:26:4f:3f:52:c1:7a:e9:af:a3:bb:e8:e1: 85:02:2f:24:06:ce:66:14:2e:3c:bd:c5:ab:ee:f4: b3:70:f9:48:33:e3:61:d8:01:48:8c:5f:8d:1f:02: 6e:b7:6d:b0:0a:2d:dd:ab:f6:6d:3e:f4:ae:78:cb: fd:f2:86:67:a7:8e:c7:46:4a:4d:ba:31:71:78:b8: 58:69:a6:8b:eb:97:1e:32:53:75:1d:fb:72:54:04: 2f:da:f1:68:c9:83:9b:3e:7f:d5:19:e9:69:7b:56: 4c:b2:5f:33:8f:64:7b:01:e4:df:d4:ec:92:ce:f0: a6:c3:1b:88:0a:84:33:38:97:22:38:2c:78:fe:a3: 4e:13:54:07:7e:a5:7d:9d:b8:72:fd:75:37:74:c6: cd:87:91:3a:41:29:3c:1c:0d:37:89:58:2c:91:b2: c5:02:80:08:81:49:b0:e1:ef:45:14:22:79:25:ec: c4:9b:82:64:35:b5:54:fd:c4:52:98:33:71:de:c8: 91:c2:60:cb:7c:a7:74:80:44:fe:22:b0:f9:4c:65: 04:83:49:63:6b:ba:f5:66:25:43:6e:cd:da:3f:a8: 15:db:a7:74:6f:f4:e4:54:53:fc:37:b5:9f:24:5f: eb:14:cb:5a:14:8e:a6:5a:59:c0:a3:c3:eb:d5:6e: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7A:BA:CB:11:54:D2:A6:8F:72:8B:C0:06:36:D0:DD:A4:E6:EF:A8 X509v3 Authority Key Identifier: keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f2:c7:7e:52:2c:09:60:30:01:46:4f:46:3a:fa:b6:36:78: dd:6e:d5:87:01:b2:f3:90:2e:8a:ef:46:ce:66:c3:46:38:4c: 53:d1:78:2b:c5:12:fb:98:09:0f:e0:63:53:4f:23:6e:c6:0d: 8e:61:69:65:9c:f6:6b:5b:69:f8:8c:fc:d8:1d:6f:9d:6c:06: 21:6b:d9:50:19:38:07:3a:58:14:0a:5b:d5:90:27:b7:07:2c: cf:b0:fd:e6:17:06:40:ff:04:32:aa:2d:e6:8d:b7:a7:f7:5b: 03:b6:7e:cf:6e:79:72:33:2d:c1:e7:9e:21:ff:75:93:4b:3e: b0:3c:32:4f:2f:24:df:e2:1b:ce:70:a1:c4:12:1c:f1:3b:bd: e4:5d:5c:39:33:7d:05:07:8b:fe:47:2a:35:e9:48:45:7c:3b: 7e:48:85:6b:40:c5:ef:13:46:cc:aa:82:9a:6f:ed:18:06:d5: a9:d3:4a:68:f2:6d:ec:8f:d7:a2:a8:e1:77:93:b6:e2:e9:b1: 5f:8d:83:26:a4:8b:81:dc:dc:a0:61:77:0d:e5:6c:be:29:ba: 28:9b:15:01:6c:2c:e3:7b:15:50:1d:63:5a:cb:b0:c5:ba:92: b0:6c:cf:52:33:76:b2:9f:89:59:91:c9:bf:09:4d:f1:23:ae: 0d:43:2d:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEQ5NTExMC8GA1UEBRMoRkVEODE3MkY4QTk1QTM1MjAyRDUxQzZGNzVGQTk0N0RF ODQ0RjRDRDAeFw0yNDA1MTkwODMyMTlaFw0yNDA1MjYwODMyMTlaMBgxFjAUBgNV BAMTDTY2NDliOTE0LTRhMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWYyZPP1LBeumvo7vo4YUCLyQGzmYULjy9xavu9LNw+Ugz42HYAUiMX40fAm63 bbAKLd2r9m0+9K54y/3yhmenjsdGSk26MXF4uFhppovrlx4yU3Ud+3JUBC/a8WjJ g5s+f9UZ6Wl7VkyyXzOPZHsB5N/U7JLO8KbDG4gKhDM4lyI4LHj+o04TVAd+pX2d uHL9dTd0xs2HkTpBKTwcDTeJWCyRssUCgAiBSbDh70UUInkl7MSbgmQ1tVT9xFKY M3HeyJHCYMt8p3SARP4isPlMZQSDSWNruvVmJUNuzdo/qBXbp3Rv9ORUU/w3tZ8k X+sUy1oUjqZaWcCjw+vVbgARAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAHq6yxFU 0qaPcovABjbQ3aTm76gwHwYDVR0jBBgwFoAU/tgXL4qVo1IC1RxvdfqUfehE9M0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4RDk1LzQ4RUQyOTZBRTA2 NTExRUVCMzVGNDIxRUM0RjlBRTAyL190Z1hMNHFWbzFJQzFSeHZkZnFVZmVoRTlN MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3RnWEw0cVZvMUlDMVJ4dmRmcVVmZWhFOU0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 RDk1LzQ4RUQyOTZBRTA2NTExRUVCMzVGNDIxRUM0RjlBRTAyL190Z1hMNHFWbzFJ QzFSeHZkZnFVZmVoRTlNMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALDyx35SLAlgMAFGT0Y6+rY2eN1u1YcBsvOQLorvRs5mw0Y4TFPReCvF EvuYCQ/gY1NPI27GDY5haWWc9mtbafiM/Ngdb51sBiFr2VAZOAc6WBQKW9WQJ7cH LM+w/eYXBkD/BDKqLeaNt6f3WwO2fs9ueXIzLcHnniH/dZNLPrA8Mk8vJN/iG85w ocQSHPE7veRdXDkzfQUHi/5HKjXpSEV8O35IhWtAxe8TRsyqgppv7RgG1anTSmjy beyP16Ko4XeTtuLpsV+Ngyaki4Hc3KBhdw3lbL4puiibFQFsLON7FVAdY1rLsMW6 krBsz1IzdrKfiVmRyb8JTfEjrg1DLQ8= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org