$ rpki-client -vvf rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft File: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft (raw, json) Hash identifier: oBJQcz8+xGSNmtwv5klfR0prjeGVhsb02MA5ASk37Q0= Subject key identifier: AE:A6:DE:91:2E:7F:95:2E:06:BA:40:D2:12:5E:FE:79:E5:78:E1:D6 Authority key identifier: B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 Certificate issuer: /CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Certificate serial: 0B1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft Manifest number: 0B0C Signing time: Thu 02 May 2024 20:03:00 +0000 Manifest this update: Thu 02 May 2024 20:02:59 +0000 Manifest next update: Thu 09 May 2024 20:02:59 +0000 Files and hashes: 1: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl (hash: 63dg5maonZQxedV0uazGvxSF/9ACmRxUu9fHXV7IYVg=) 2: F648238E766911EC9EADC512C4F9AE02.roa (hash: 5HR8HV4Pjb49WKQhkhqMDo2vrU9gsv4/J0a+FK8ah0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Validity Not Before: May 2 20:02:59 2024 GMT Not After : May 9 20:02:59 2024 GMT Subject: CN=6633f173-7ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3d:da:29:f5:ad:b8:17:23:7d:8f:2e:98:86: 2a:fd:ae:eb:bd:23:2b:4a:90:df:13:7e:c2:dd:23: fc:7a:64:ac:3f:79:90:d3:80:93:5e:98:85:2f:fc: 13:59:39:68:35:b5:cc:e3:1f:14:0d:fb:84:ae:8d: ad:66:c6:ae:12:b6:4c:a6:dc:95:11:0b:6f:d3:e8: a4:b5:6d:1f:90:37:34:b1:f2:2d:59:cd:e8:20:87: af:1a:47:f8:e6:90:77:49:3b:01:80:b0:21:1d:1c: 72:31:f1:ae:65:17:ab:8c:b4:74:a6:db:f7:9c:29: 52:62:5d:09:24:65:69:23:f5:59:57:6f:64:7d:7e: 86:ce:39:cc:bc:05:dd:36:e7:37:88:07:91:df:ea: 8d:df:7b:c8:d9:7a:8f:95:df:30:d3:83:19:18:ee: 16:eb:e7:3a:b2:25:b4:a0:8f:35:78:30:54:ef:bd: 03:a9:5e:f6:00:7f:bd:46:72:89:ab:95:c4:4d:59: 69:d5:4b:64:83:60:0b:61:8d:22:ac:13:4a:cd:66: a3:13:4b:d9:27:7b:f8:ff:e9:53:23:06:48:dc:5a: 15:00:ba:7b:40:fa:6d:32:5d:9e:ee:dc:d7:2e:36: d2:9b:f5:77:90:06:d5:48:e7:c0:15:f1:ed:d1:92: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A6:DE:91:2E:7F:95:2E:06:BA:40:D2:12:5E:FE:79:E5:78:E1:D6 X509v3 Authority Key Identifier: keyid:B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:07:50:b0:f8:8b:4e:a9:76:28:27:07:bd:33:0e:9d:fe:cf: 68:d7:e0:ed:7d:03:63:82:ee:18:b0:7d:cd:d6:cd:65:1b:74: 0b:66:55:59:9f:97:f4:65:d5:88:1b:ad:cd:ea:0a:e2:0a:aa: b1:f7:b2:17:af:0c:26:cc:50:20:64:60:bd:cb:fa:ed:7c:16: 13:89:11:ac:fe:87:0b:23:6b:55:d1:35:55:17:03:db:41:a7: 07:1c:8f:2c:e6:49:37:86:46:d5:4d:f2:d0:2b:11:f6:99:6e: 7e:2f:1f:eb:bf:02:06:45:77:77:42:ed:2e:65:ac:7f:2a:f7: 46:d8:cc:6e:55:d4:34:28:e9:73:3a:77:52:de:fc:b4:19:71: 76:09:3d:fe:a3:4a:67:14:08:e6:a8:5a:58:5f:b3:e3:3c:68: 23:c4:3e:30:fe:6c:f2:ac:f9:70:3c:c1:3d:38:a7:55:a6:0e: 87:92:00:a1:61:75:d2:fb:d1:e5:bd:74:a4:f5:ca:e2:3e:48: b9:8f:ed:ed:e7:59:1f:01:99:72:68:3c:79:29:61:b7:2f:0a: c3:d3:8b:68:99:ba:4f:db:ad:84:d1:bb:9a:e0:01:f5:bb:c6: cb:32:02:99:99:dd:01:bc:3c:fc:8e:97:3a:7d:0c:61:86:af: 7c:11:1d:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0N0YxMTAvBgNVBAUTKEI2Rjc5N0Q4NEYyRTQ5QjhCQjMyMjIwNkI3OTQ2RDI3 OTE4Q0ExNjQwHhcNMjQwNTAyMjAwMjU5WhcNMjQwNTA5MjAwMjU5WjAYMRYwFAYD VQQDEw02NjMzZjE3My03YWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlT3aKfWtuBcjfY8umIYq/a7rvSMrSpDfE37C3SP8emSsP3mQ04CTXpiFL/wT WTloNbXM4x8UDfuEro2tZsauErZMptyVEQtv0+iktW0fkDc0sfItWc3oIIevGkf4 5pB3STsBgLAhHRxyMfGuZRerjLR0ptv3nClSYl0JJGVpI/VZV29kfX6GzjnMvAXd Nuc3iAeR3+qN33vI2XqPld8w04MZGO4W6+c6siW0oI81eDBU770DqV72AH+9RnKJ q5XETVlp1Utkg2ALYY0irBNKzWajE0vZJ3v4/+lTIwZI3FoVALp7QPptMl2e7tzX LjbSm/V3kAbVSOfAFfHt0ZKX9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6m3pEu f5UuBrpA0hJe/nnleOHWMB8GA1UdIwQYMBaAFLb3l9hPLkm4uzIiBreUbSeRjKFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQ3Ri8xNjFBQUJFQzFD RjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNiaTdNaUlHdDVSdEo1R01v V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R2ZVgyRTh1U2JpN01pSUd0NVJ0SjVHTW9XUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQ3Ri8xNjFBQUJFQzFDRjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNi aTdNaUlHdDVSdEo1R01vV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvB1Cw+ItOqXYoJwe9Mw6d/s9o1+DtfQNjgu4YsH3N1s1lG3QLZlVZ n5f0ZdWIG63N6griCqqx97IXrwwmzFAgZGC9y/rtfBYTiRGs/ocLI2tV0TVVFwPb QacHHI8s5kk3hkbVTfLQKxH2mW5+Lx/rvwIGRXd3Qu0uZax/KvdG2MxuVdQ0KOlz OndS3vy0GXF2CT3+o0pnFAjmqFpYX7PjPGgjxD4w/mzyrPlwPME9OKdVpg6HkgCh YXXS+9HlvXSk9criPki5j+3t51kfAZlyaDx5KWG3LwrD04tombpP262E0bua4AH1 u8bLMgKZmd0BvDz8jpc6fQxhhq98ER08 -----END CERTIFICATE-----Generated at Thu May 2 22:28:48 2024 by rpki-client on console-ams.rpki-client.org