$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: rLS+EZfIKAcD4pYqSNNqRPeiAs8daO3aDVUw2d6nnj0= Subject key identifier: 3E:69:1B:C9:7E:EF:3A:19:35:87:16:66:E8:3E:68:85:A9:2C:80:4C Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0F1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 0F15 Signing time: Sat 18 May 2024 18:14:04 +0000 Manifest this update: Sat 18 May 2024 18:14:04 +0000 Manifest next update: Sat 25 May 2024 18:14:04 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: zKFp1NdXyF3+66N0CF2PUYhudMrxZkgxdKu8cBgOKtM=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: vD+qYIZoui8GSvqnoCeAE8Hm7uycn+cn703sjAepaaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3871 (0xf1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: May 18 18:14:04 2024 GMT Not After : May 25 18:14:04 2024 GMT Subject: CN=6648efec-494a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:c2:39:b3:0e:23:a6:e0:c9:92:76:4a:ff: 19:3e:44:22:7a:97:ac:81:97:d5:ab:f7:4a:eb:7d: a0:87:fd:28:f8:99:3b:07:78:17:9e:8d:15:a6:cd: ca:ef:64:95:cc:70:0a:41:c5:5f:c8:77:af:20:2d: 8a:8a:85:73:67:77:46:de:b2:65:a6:1c:a0:2e:ec: 83:4e:1e:34:7e:22:55:e0:60:7e:2c:f7:15:cd:89: ec:53:fe:f4:e9:a4:8b:23:36:55:c5:36:67:1a:d3: a4:aa:05:2c:5f:88:ee:51:1c:ab:9c:e8:c4:e9:6c: f3:89:33:63:96:2a:25:fe:8a:02:c9:ba:58:02:6f: b1:cd:ee:40:51:ba:4b:02:e7:12:9e:e2:be:1f:1c: 09:fb:2c:54:0d:46:ef:4b:1b:17:86:58:e8:d5:cf: 38:6c:ec:bb:7d:4f:e2:5c:26:96:7e:c5:33:dc:f1: 37:38:17:1d:a2:20:f2:16:a7:98:ec:1f:67:f5:d8: 0b:2b:b1:69:26:44:c5:15:f8:2b:41:ac:c8:9c:35: 5a:ef:d2:c0:15:66:ed:5d:99:eb:88:d0:0f:97:55: 11:b2:7e:d9:26:c3:f4:a7:34:83:8b:ba:c0:a9:ec: 11:76:cc:82:55:c5:d0:e2:71:ae:35:26:85:c2:9f: f3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:69:1B:C9:7E:EF:3A:19:35:87:16:66:E8:3E:68:85:A9:2C:80:4C X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:62:97:91:e8:aa:74:6e:fa:91:bd:18:a4:8c:fb:c8:a9:4f: 76:c4:56:cf:85:80:09:bc:1c:24:a6:91:d7:17:2f:63:b7:60: 1f:c4:fe:c9:15:2a:8c:6b:25:15:74:76:df:06:5f:c1:cf:0d: bd:56:14:ff:b8:00:d5:c4:08:ed:fa:34:6d:97:3e:8b:b1:06: 7c:1f:7f:d3:58:f5:43:ff:ef:9a:74:83:f5:4c:cf:87:41:aa: b9:3a:72:07:c1:e0:1f:b0:72:d4:50:65:1e:40:77:28:ca:91: b8:c3:f5:d7:05:ac:5b:a5:76:67:d4:57:98:a2:39:6a:e8:0a: 83:41:bd:55:4a:12:d7:4a:16:82:cf:37:38:ec:60:86:d2:7f: 92:57:cb:63:29:16:bc:60:7b:c1:0c:33:60:ec:98:15:77:3c: d1:67:a1:0f:d3:04:c7:20:27:b0:8a:86:b6:65:38:d4:7b:01: 75:7f:1a:7b:e2:10:a6:87:11:ba:a1:00:8f:2b:9f:53:bc:99: 4f:4c:be:29:f3:26:09:b0:76:f8:35:6a:49:97:28:e9:8f:19: a7:b5:96:51:70:49:6b:81:ba:66:19:1b:47:39:3c:02:81:3e: 72:29:d4:d9:c7:84:d7:11:f3:39:58:e8:d3:40:34:9d:26:04: 8c:2a:01:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjQwNTE4MTgxNDA0WhcNMjQwNTI1MTgxNDA0WjAYMRYwFAYD VQQDEw02NjQ4ZWZlYy00OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvnCObMOI6bgyZJ2Sv8ZPkQiepesgZfVq/dK632gh/0o+Jk7B3gXno0Vps3K 72SVzHAKQcVfyHevIC2KioVzZ3dG3rJlphygLuyDTh40fiJV4GB+LPcVzYnsU/70 6aSLIzZVxTZnGtOkqgUsX4juURyrnOjE6WzziTNjliol/ooCybpYAm+xze5AUbpL AucSnuK+HxwJ+yxUDUbvSxsXhljo1c84bOy7fU/iXCaWfsUz3PE3OBcdoiDyFqeY 7B9n9dgLK7FpJkTFFfgrQazInDVa79LAFWbtXZnriNAPl1URsn7ZJsP0pzSDi7rA qewRdsyCVcXQ4nGuNSaFwp/zMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5pG8l+ 7zoZNYcWZug+aIWpLIBMMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8YpeR6Kp0bvqRvRikjPvIqU92xFbPhYAJvBwkppHXFy9jt2AfxP7J FSqMayUVdHbfBl/Bzw29VhT/uADVxAjt+jRtlz6LsQZ8H3/TWPVD/++adIP1TM+H Qaq5OnIHweAfsHLUUGUeQHcoypG4w/XXBaxbpXZn1FeYojlq6AqDQb1VShLXShaC zzc47GCG0n+SV8tjKRa8YHvBDDNg7JgVdzzRZ6EP0wTHICewioa2ZTjUewF1fxp7 4hCmhxG6oQCPK59TvJlPTL4p8yYJsHb4NWpJlyjpjxmntZZRcElrgbpmGRtHOTwC gT5yKdTZx4TXEfM5WOjTQDSdJgSMKgHB -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org