$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft File: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json) Hash identifier: wGLgEIXWQ28v5ttrgHtl/Tv57oo/ICGkX2mrZ2M9gpE= Subject key identifier: 4A:8D:7D:C1:74:E8:CF:AA:96:D5:E2:B8:86:4A:28:06:87:F0:0F:67 Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 Certificate issuer: /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Certificate serial: 073D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft Manifest number: 0737 Signing time: Tue 28 May 2024 22:40:37 +0000 Manifest this update: Tue 28 May 2024 22:40:36 +0000 Manifest next update: Tue 04 Jun 2024 22:40:36 +0000 Files and hashes: 1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: YpmhHq4avuXfooea+VGJjpkjtF9qjTk5zUxK8Ygjzu8=) 2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: SRSaXH4ZkjlVE62eXeZduu7ilcwOkYG20H9SmbGOwfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 22:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1853 (0x73d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9 Validity Not Before: May 28 22:40:36 2024 GMT Not After : Jun 4 22:40:36 2024 GMT Subject: CN=66565d65-2d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:64:9f:28:b0:7b:d8:a0:48:50:de:46:8a: ca:07:97:4d:4b:88:11:55:00:9e:a3:49:2c:18:b1: 97:f2:33:23:5c:4f:90:30:05:5f:64:b5:3c:98:0c: 7a:f6:78:d0:fc:6b:24:49:3b:9a:e0:39:4f:58:98: 5f:c0:0b:6c:30:89:e0:e8:00:16:e7:32:fe:0c:3b: e5:9e:1d:0f:4e:ec:32:ff:41:4e:80:ac:bb:d9:09: 99:07:21:a5:5e:1c:6a:37:57:52:be:17:c9:63:25: 41:6f:aa:ca:19:2f:1a:bc:1b:5d:0f:6a:e0:0e:9d: 67:6b:1d:7e:fc:d2:74:8a:63:03:97:c5:34:6c:c0: 4c:50:e4:a0:a5:c4:01:f0:ea:7f:1c:55:74:dc:4c: 40:16:99:fc:9d:fa:38:70:cf:46:06:b5:1b:43:55: 7c:4c:30:75:b8:f3:a8:e0:48:69:9e:87:e8:95:54: 76:3a:de:96:f0:13:2d:b5:3a:16:da:c1:5d:a2:f9: 1c:49:2b:d8:47:b2:e1:76:e0:c4:d8:0d:32:65:2f: a8:d2:6d:20:a7:e1:91:0f:f2:6d:73:f2:59:76:d8: 54:cb:a0:1d:26:67:8f:47:45:1c:d7:91:2b:36:97: d7:6c:06:15:65:8f:2c:89:06:d9:4f:49:e6:04:b0: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8D:7D:C1:74:E8:CF:AA:96:D5:E2:B8:86:4A:28:06:87:F0:0F:67 X509v3 Authority Key Identifier: keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b2:1e:1c:d8:79:01:a2:c0:4a:dd:45:41:8d:1c:46:e4:71: 1e:2d:9e:c7:88:0a:77:a9:09:0a:c6:d1:98:10:7e:dd:b2:ce: ac:1e:aa:6c:65:78:24:a9:ce:11:62:e1:92:cb:7f:a0:d1:8b: b8:41:2d:4d:75:e6:b3:25:b3:87:c4:5b:45:46:b5:f0:63:73: de:dc:6b:d4:73:b9:f5:db:18:d4:7a:85:2e:e6:5a:8c:6b:b3: e4:3e:16:3c:33:9e:2d:f6:39:28:50:41:75:a3:ce:1e:f6:92: 35:55:95:49:67:7b:6e:65:d0:3c:9b:78:9a:4c:c4:ff:4a:46: 5b:a5:e3:57:bf:6a:67:a6:3b:8c:36:92:d6:42:bf:a2:b3:e5: 07:ff:d3:06:69:56:a3:73:f9:b5:8c:e7:60:c4:40:90:2d:47: 83:ec:dc:a1:69:e5:c1:ea:4e:40:f9:bf:30:85:80:d6:7d:83: 54:7c:89:fa:f6:fe:8e:a0:5b:6c:87:d9:a3:28:52:bb:b7:40: b2:f7:72:b8:00:23:ec:44:47:47:d2:81:96:8b:6a:6e:ad:5c: 58:55:5a:8e:45:0a:54:82:e5:dc:0a:56:0f:5a:bb:8a:5f:9f: f9:c2:45:67:d2:5b:9e:2b:cc:bc:e5:5f:31:13:4a:cd:bb:27: d7:ce:8e:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE QjYxODRDQzkwHhcNMjQwNTI4MjI0MDM2WhcNMjQwNjA0MjI0MDM2WjAYMRYwFAYD VQQDEw02NjU2NWQ2NS0yZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Jtknyiwe9igSFDeRorKB5dNS4gRVQCeo0ksGLGX8jMjXE+QMAVfZLU8mAx6 9njQ/GskSTua4DlPWJhfwAtsMIng6AAW5zL+DDvlnh0PTuwy/0FOgKy72QmZByGl XhxqN1dSvhfJYyVBb6rKGS8avBtdD2rgDp1nax1+/NJ0imMDl8U0bMBMUOSgpcQB 8Op/HFV03ExAFpn8nfo4cM9GBrUbQ1V8TDB1uPOo4EhpnofolVR2Ot6W8BMttToW 2sFdovkcSSvYR7LhduDE2A0yZS+o0m0gp+GRD/Jtc/JZdthUy6AdJmePR0Uc15Er NpfXbAYVZY8siQbZT0nmBLCxlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqNfcF0 6M+qltXiuIZKKAaH8A9nMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2 MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh N1Z1bjNNdldfVmpiWVlUTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2sh4c2HkBosBK3UVBjRxG5HEeLZ7HiAp3qQkKxtGYEH7dss6sHqps ZXgkqc4RYuGSy3+g0Yu4QS1NdeazJbOHxFtFRrXwY3Pe3GvUc7n12xjUeoUu5lqM a7PkPhY8M54t9jkoUEF1o84e9pI1VZVJZ3tuZdA8m3iaTMT/SkZbpeNXv2pnpjuM NpLWQr+is+UH/9MGaVajc/m1jOdgxECQLUeD7NyhaeXB6k5A+b8whYDWfYNUfIn6 9v6OoFtsh9mjKFK7t0Cy93K4ACPsREdH0oGWi2purVxYVVqORQpUguXcClYPWruK X5/5wkVn0lueK8y85V8xE0rNuyfXzo47 -----END CERTIFICATE-----Generated at Wed May 29 02:29:23 2024 by rpki-client on console-ams.rpki-client.org