$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: dWAH/xjQWvdxvADRxUEtuQPzZVCC5m2WgEFESEWxv9g= Subject key identifier: 14:7C:43:88:0B:8D:D4:B2:58:61:E2:B3:AC:D4:3D:1C:43:4E:AE:D3 Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 038D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 038A Signing time: Fri 31 May 2024 03:17:13 +0000 Manifest this update: Fri 31 May 2024 03:17:12 +0000 Manifest next update: Fri 07 Jun 2024 03:17:12 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: VVhx5Ug531soJX4pHauMFpfCUS7v7ve8o0yGWjdi7gM=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: 8LqVNZGnN7EEUzEyIO/ZMBYVHIlqnX+H5rTTwNu0+7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: May 31 03:17:12 2024 GMT Not After : Jun 7 03:17:12 2024 GMT Subject: CN=66594139-85fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:d9:ce:4a:45:e7:fe:f9:81:36:09:38:e5: 4a:3b:c4:5f:03:e9:41:d1:e1:65:ce:32:63:96:bf: 95:fe:ba:27:f1:e4:01:b0:31:5f:3f:38:d8:97:c8: bc:13:db:51:2f:1a:f6:95:c2:a1:53:4f:ec:f7:1e: 21:e7:c3:33:9f:1d:f5:9b:cc:2d:2c:97:01:9e:08: fd:b5:e7:98:9b:37:68:d4:bf:83:f2:84:42:d1:24: 59:b6:c2:c6:dd:55:38:82:48:1d:db:06:e3:35:6a: 42:11:3d:48:7d:e5:f8:c7:0e:0a:fb:55:0b:b1:fa: 24:e6:fc:90:8a:5f:99:06:a4:0c:77:8e:a7:c1:a2: a7:7b:73:70:30:6d:5b:86:4e:1d:61:e2:30:96:0e: c7:09:07:28:e5:c8:6a:64:83:a8:08:f7:12:29:9e: f7:45:86:f3:4c:79:9a:bd:a2:28:29:29:ab:83:61: 87:90:a5:22:ac:c8:76:e5:ab:25:ab:8f:82:87:9b: cc:a7:9c:2c:a8:53:6e:1d:3f:db:d4:1c:2d:59:5b: b0:a5:06:a4:d4:2b:59:17:8c:d7:33:63:dc:42:0f: a9:a1:f4:06:20:be:97:41:18:6e:0f:2e:8d:63:9e: b6:42:27:5a:9a:bb:66:ab:24:e7:b4:68:33:77:8c: c1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7C:43:88:0B:8D:D4:B2:58:61:E2:B3:AC:D4:3D:1C:43:4E:AE:D3 X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5f:0f:c6:bc:c3:61:98:b6:08:b5:da:f9:b1:8d:16:e7:7d: 04:4a:cb:44:9d:ed:33:18:24:61:1e:12:79:a5:73:c5:4c:90: b6:d1:eb:87:ad:09:8b:b1:8a:68:0e:b9:a7:77:1b:44:c1:93: cf:66:dd:76:e3:82:c0:7d:0c:7f:03:33:2a:99:b7:6c:a7:8f: 38:9c:2a:19:81:17:8f:85:db:00:b3:1f:d6:dd:76:68:31:3b: 72:a2:ce:b5:ba:78:63:0e:27:c7:6c:5e:db:cb:e3:eb:d1:bb: 7e:e8:67:6e:d6:5f:fb:90:87:aa:5a:91:63:0c:9c:c3:d1:1d: e3:13:af:67:d3:4d:31:38:65:f9:ef:77:78:32:59:6c:c9:e2: 83:77:1b:ee:85:02:91:9d:bb:91:f1:83:8c:cb:c0:94:4b:59: fd:94:fe:32:87:e2:54:49:47:11:ce:d6:81:8f:63:e2:4e:7c: 5e:f9:2c:b8:ac:30:a6:20:6c:88:02:50:4f:4b:59:ab:6f:f6: a2:6f:5f:fa:92:c4:36:e5:e9:a7:30:a7:50:49:ed:86:2e:ce: 7a:56:fc:81:c1:77:01:4b:d2:53:81:50:95:df:68:2b:52:c8: d3:5c:9e:88:6e:e5:96:65:62:31:7c:2c:6b:64:a2:14:46:d4: 98:45:f5:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjQwNTMxMDMxNzEyWhcNMjQwNjA3MDMxNzEyWjAYMRYwFAYD VQQDEw02NjU5NDEzOS04NWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eDZzkpF5/75gTYJOOVKO8RfA+lB0eFlzjJjlr+V/ron8eQBsDFfPzjYl8i8 E9tRLxr2lcKhU0/s9x4h58Mznx31m8wtLJcBngj9teeYmzdo1L+D8oRC0SRZtsLG 3VU4gkgd2wbjNWpCET1IfeX4xw4K+1ULsfok5vyQil+ZBqQMd46nwaKne3NwMG1b hk4dYeIwlg7HCQco5chqZIOoCPcSKZ73RYbzTHmavaIoKSmrg2GHkKUirMh25asl q4+Ch5vMp5wsqFNuHT/b1BwtWVuwpQak1CtZF4zXM2PcQg+pofQGIL6XQRhuDy6N Y562QidamrtmqyTntGgzd4zBXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR8Q4gL jdSyWGHis6zUPRxDTq7TMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbXw/GvMNhmLYItdr5sY0W530ESstEne0zGCRhHhJ5pXPFTJC20euH rQmLsYpoDrmndxtEwZPPZt1244LAfQx/AzMqmbdsp484nCoZgRePhdsAsx/W3XZo MTtyos61unhjDifHbF7by+Pr0bt+6Gdu1l/7kIeqWpFjDJzD0R3jE69n000xOGX5 73d4MllsyeKDdxvuhQKRnbuR8YOMy8CUS1n9lP4yh+JUSUcRztaBj2PiTnxe+Sy4 rDCmIGyIAlBPS1mrb/aib1/6ksQ25emnMKdQSe2GLs56VvyBwXcBS9JTgVCV32gr UsjTXJ6IbuWWZWIxfCxrZKIURtSYRfXV -----END CERTIFICATE-----Generated at Fri May 31 06:49:21 2024 by rpki-client on console-ams.rpki-client.org