$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: t20f6Cto9TrMjn0AwnMzcjUhPNHv5XJKWukKmx79sMo= Subject key identifier: 2C:C4:B8:9B:E4:96:BA:45:C5:FF:AB:8A:C3:4F:57:DF:09:82:C3:AD Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 33D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 33C9 Signing time: Tue 30 Apr 2024 15:03:14 +0000 Manifest this update: Tue 30 Apr 2024 15:03:14 +0000 Manifest next update: Tue 07 May 2024 15:03:14 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: hKSgBIxiT8pSfZ+TfXN53eRXjs7YBUr1dC+mSBkg4wY=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: LqgFZ6aFQBxDfZoGmnMBCaXwoiVQWgH8NS8kz6eOvUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 15:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13272 (0x33d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Apr 30 15:03:14 2024 GMT Not After : May 7 15:03:14 2024 GMT Subject: CN=66310832-3db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:60:b6:5a:a1:42:aa:f6:d1:55:55:0d:ee: e8:f2:95:48:37:5f:31:ec:da:e3:86:ea:9d:48:27: 14:7a:0f:79:13:9e:18:2a:f7:f1:80:0f:e2:f7:89: c1:8a:a4:e5:8d:64:fe:9f:d6:92:1b:fa:0b:0b:7f: 7e:87:1d:d2:14:69:ad:5e:66:98:44:7d:4c:d4:6f: 3b:01:0a:2a:ab:2c:db:6f:63:66:c8:e1:ef:89:41: 8c:a3:49:1f:b0:f9:39:a9:0f:c6:fb:94:37:df:b5: 94:7b:19:25:50:dc:a2:6e:4d:36:cd:77:68:06:29: a6:47:e8:df:0a:29:c3:c7:80:4a:2f:c7:90:87:6e: 2d:d3:66:8b:69:5c:80:5d:ae:b0:e3:e2:a3:cf:d8: 5c:34:de:f9:5b:c4:df:fc:e9:23:eb:83:15:0e:0c: 0a:c3:6c:19:4f:93:f9:17:88:d9:67:29:61:71:64: 0a:1a:1f:ed:28:1b:5e:cd:12:69:e1:27:fb:40:eb: 53:32:1d:e5:d3:0f:b6:55:4a:2c:12:d8:55:74:00: 9c:5c:c9:ec:13:1d:d1:76:ad:bd:88:3a:50:ae:57: 58:e4:8b:a6:c3:ff:71:5a:34:59:da:de:ed:29:c3: 7a:5d:4b:ce:47:04:9b:b8:3c:b4:85:e4:a8:31:fa: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C4:B8:9B:E4:96:BA:45:C5:FF:AB:8A:C3:4F:57:DF:09:82:C3:AD X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a0:70:b7:eb:0e:73:22:11:0f:e5:95:f8:b2:da:4f:d0:95: 01:38:26:5d:51:c1:87:30:39:89:84:3c:ca:69:82:b5:32:00: 6d:31:25:9c:38:81:f3:e0:ab:84:09:4a:20:2a:15:5c:47:66: c9:40:ec:d1:6e:7a:93:71:8a:23:ae:bf:15:63:aa:64:78:e9: 6b:13:35:03:c8:41:98:a3:21:6f:af:f5:c5:8b:db:25:88:35: c5:8f:85:2f:1c:30:62:9d:32:01:76:9d:3d:58:5a:12:e1:c9: 3b:d8:76:a6:1e:69:be:78:98:ba:c5:11:dc:70:f1:17:07:6f: 93:85:77:dd:10:99:95:bd:4a:a5:ac:76:55:23:d6:2a:43:23: 2f:91:35:05:cb:c6:54:90:7d:5c:ff:a8:b3:15:67:32:eb:ff: 18:9d:67:80:f7:ba:8e:5b:79:25:71:20:e3:43:60:3e:52:c4: 8a:70:38:c9:03:22:93:f0:59:6a:c2:5e:23:89:ff:c5:df:d3: 2d:ac:5e:63:53:cf:96:54:6b:36:33:0c:70:29:04:03:87:17: 5e:e2:06:ef:7a:b0:a9:0f:be:b2:46:10:ab:6a:2b:b7:b6:c1: 9a:ef:6c:37:b8:58:fb:9b:4d:f8:78:db:6d:98:7e:91:74:93: 05:1a:52:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjQwNDMwMTUwMzE0WhcNMjQwNTA3MTUwMzE0WjAYMRYwFAYD VQQDEw02NjMxMDgzMi0zZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiJgtlqhQqr20VVVDe7o8pVIN18x7NrjhuqdSCcUeg95E54YKvfxgA/i94nB iqTljWT+n9aSG/oLC39+hx3SFGmtXmaYRH1M1G87AQoqqyzbb2NmyOHviUGMo0kf sPk5qQ/G+5Q337WUexklUNyibk02zXdoBimmR+jfCinDx4BKL8eQh24t02aLaVyA Xa6w4+Kjz9hcNN75W8Tf/Okj64MVDgwKw2wZT5P5F4jZZylhcWQKGh/tKBtezRJp 4Sf7QOtTMh3l0w+2VUosEthVdACcXMnsEx3Rdq29iDpQrldY5Iumw/9xWjRZ2t7t KcN6XUvORwSbuDy0heSoMfqJPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzEuJvk lrpFxf+risNPV98JgsOtMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhoHC36w5zIhEP5ZX4stpP0JUBOCZdUcGHMDmJhDzKaYK1MgBtMSWc OIHz4KuECUogKhVcR2bJQOzRbnqTcYojrr8VY6pkeOlrEzUDyEGYoyFvr/XFi9sl iDXFj4UvHDBinTIBdp09WFoS4ck72HamHmm+eJi6xRHccPEXB2+ThXfdEJmVvUql rHZVI9YqQyMvkTUFy8ZUkH1c/6izFWcy6/8YnWeA97qOW3klcSDjQ2A+UsSKcDjJ AyKT8Flqwl4jif/F39MtrF5jU8+WVGs2MwxwKQQDhxde4gbverCpD76yRhCraiu3 tsGa72w3uFj7m034eNttmH6RdJMFGlIH -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:39 2024 by rpki-client on console-ams.rpki-client.org