$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft File: tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json) Hash identifier: w58kWfcuOnMPhDzEuCFdMbe4CXbEzsjYbkFSyL1c+HY= Subject key identifier: 4F:DA:2C:A4:EB:41:7B:73:BA:4F:B3:93:00:51:87:3A:EC:8E:EC:41 Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Certificate serial: 0958 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft Manifest number: 0952 Signing time: Sat 04 May 2024 21:14:36 +0000 Manifest this update: Sat 04 May 2024 21:14:35 +0000 Manifest next update: Sat 11 May 2024 21:14:35 +0000 Files and hashes: 1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: 6izPG+aqwMHIU59WqdoBK3IOBYDxCI/o1zzGagXfgfs=) 2: 2AFC632E458511EE8566F97AC4F9AE02.roa (hash: zgXXZljhhxSC5ZsL/rE5JAt6ilVqvNtdy6C36VBeUYM=) 3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: PoRxFPduHIohO3tb2s88UbJLuE8j7J7TFfEy/WTAoZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2392 (0x958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39 Validity Not Before: May 4 21:14:35 2024 GMT Not After : May 11 21:14:35 2024 GMT Subject: CN=6636a53b-d13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:f3:05:b6:9f:89:3f:80:bc:85:ce:73:08: 33:8f:9c:89:a6:66:b2:ec:b8:5e:63:33:ae:4f:ae: d9:6c:df:95:84:0b:0c:47:3d:d2:7a:1e:2f:97:d5: 93:65:20:31:c6:4c:f7:0c:07:19:f4:cf:a2:3f:dc: 1c:45:e1:d4:7f:b0:8e:0b:dd:a3:60:1f:5c:06:b0: 47:d7:f2:b4:51:20:b2:19:2f:05:b8:d1:38:08:ba: 8e:f0:8d:7d:76:92:32:5b:00:39:5f:3a:e9:41:ee: 19:56:91:26:8f:92:9a:02:c7:4e:33:a0:7b:0f:f2: 2f:23:17:c3:88:77:ff:d5:09:9b:a7:08:1f:62:7b: 82:ba:ac:11:5e:4c:6b:21:32:8b:0f:cd:34:71:63: 25:91:44:92:13:bc:3c:4c:0f:81:6c:e6:92:09:32: a4:df:ef:d5:bb:30:ba:00:16:79:1f:d0:69:58:fd: da:e7:37:fb:59:c7:fb:fb:cf:40:fc:0b:da:20:a3: fc:f6:f7:f7:8b:6e:27:4f:d3:23:61:b6:35:05:24: cf:7f:5d:a4:92:4b:7f:34:04:c4:ef:2f:39:e0:39: dc:23:65:6a:4f:fc:e1:d1:c4:ca:3a:2b:e3:f5:fb: 33:85:c0:5a:1e:9b:a2:a3:1b:ff:c6:54:f8:c4:ff: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DA:2C:A4:EB:41:7B:73:BA:4F:B3:93:00:51:87:3A:EC:8E:EC:41 X509v3 Authority Key Identifier: keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:53:3f:cb:b9:01:d3:32:b3:69:86:6e:84:f0:ec:c3:c5:60: 0f:30:da:65:59:9a:4c:f6:6d:1a:18:dc:5f:fc:3a:4b:20:a4: b9:ab:06:11:53:a4:6d:8b:0c:5a:5e:64:0d:f9:c5:40:64:cb: c2:e0:6a:c8:90:69:75:83:03:a5:70:ae:14:cf:89:f3:5f:06: c7:4b:c6:8c:f3:1b:eb:9a:77:22:05:05:b8:9f:d6:8b:1d:29: 6a:bf:60:19:b3:f0:0d:2a:8d:1b:03:f2:20:c2:2d:18:6a:a2: db:d2:0a:5d:99:9d:b2:05:9f:e7:89:56:b5:96:46:8a:80:af: 61:33:2f:51:51:f0:6f:e5:c6:43:2e:7d:9a:ca:55:e4:ae:ac: bc:e8:e2:03:f8:49:10:1c:a4:41:5b:42:fb:4f:e6:53:80:00: 48:ae:46:fc:2e:2d:2f:dd:f4:4e:ac:47:85:72:e8:c7:95:51: 18:40:f9:ed:46:a5:eb:8d:5b:60:01:a2:0d:d4:ad:44:82:49: 99:e1:0a:e2:10:0e:75:07:d6:bf:61:25:e6:23:87:a4:4f:83: 9d:a6:b6:23:44:df:a1:eb:b2:c2:73:b2:ca:a8:58:86:61:db: e3:ff:dd:ee:58:6d:22:a1:75:43:83:50:ac:45:3e:52:aa:c2: 46:b7:7e:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCQTYxMTAvBgNVBAUTKEI0Qjg1NThCRUM1NDM2MjBGRTZFQTkyRkVCQzVFOEE5 MjcyMTRDMzkwHhcNMjQwNTA0MjExNDM1WhcNMjQwNTExMjExNDM1WjAYMRYwFAYD VQQDEw02NjM2YTUzYi1kMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/TzBbafiT+AvIXOcwgzj5yJpmay7LheYzOuT67ZbN+VhAsMRz3Seh4vl9WT ZSAxxkz3DAcZ9M+iP9wcReHUf7COC92jYB9cBrBH1/K0USCyGS8FuNE4CLqO8I19 dpIyWwA5XzrpQe4ZVpEmj5KaAsdOM6B7D/IvIxfDiHf/1QmbpwgfYnuCuqwRXkxr ITKLD800cWMlkUSSE7w8TA+BbOaSCTKk3+/VuzC6ABZ5H9BpWP3a5zf7Wcf7+89A /AvaIKP89vf3i24nT9MjYbY1BSTPf12kkkt/NATE7y854DncI2VqT/zh0cTKOivj 9fszhcBaHpuioxv/xlT4xP89UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/aLKTr QXtzuk+zkwBRhzrsjuxBMB8GA1UdIwQYMBaAFLS4VYvsVDYg/m6pL+vF6KknIUw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEJBNi8wRjNERjQyODcx NTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5pRC1icWt2NjhYb3FTY2hU RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMaFZpLXhVTmlELWJxa3Y2OFhvcVNjaFREay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEJBNi8wRjNERjQyODcxNTcxMUVBODY1NTlEMkRDNEY5QUUwMi90TGhWaS14VU5p RC1icWt2NjhYb3FTY2hURGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeUz/LuQHTMrNphm6E8OzDxWAPMNplWZpM9m0aGNxf/DpLIKS5qwYR U6RtiwxaXmQN+cVAZMvC4GrIkGl1gwOlcK4Uz4nzXwbHS8aM8xvrmnciBQW4n9aL HSlqv2AZs/ANKo0bA/Igwi0YaqLb0gpdmZ2yBZ/niVa1lkaKgK9hMy9RUfBv5cZD Ln2aylXkrqy86OID+EkQHKRBW0L7T+ZTgABIrkb8Li0v3fROrEeFcujHlVEYQPnt RqXrjVtgAaIN1K1EgkmZ4QriEA51B9a/YSXmI4ekT4OdprYjRN+h67LCc7LKqFiG Ydvj/93uWG0ioXVDg1CsRT5SqsJGt35Q -----END CERTIFICATE-----Generated at Sat May 4 22:06:51 2024 by rpki-client on console-ams.rpki-client.org