$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json) Hash identifier: 0sPUlV5qSQGoAazIGCHALiaajEMJDEiinAsgUDZL6e4= Subject key identifier: 5D:B8:62:BA:9D:F2:2E:5C:97:2B:DF:17:22:45:3B:9A:CA:69:B0:92 Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft Manifest number: 0474 Signing time: Fri 03 May 2024 01:47:53 +0000 Manifest this update: Fri 03 May 2024 01:47:53 +0000 Manifest next update: Fri 10 May 2024 01:47:53 +0000 Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: 2m8UBNyLSh3SjvhbXVKusmAT3bnH9jZ8c1V74vx9BnE=) 2: 58BB655AF47C11EBB34AB831C4F9AE02.roa (hash: M0dR+kCB+aDDM2QLL3cx5COkjMMnYhATSnljhluy1Jg=) 3: 595C959CF47C11EBB34AB831C4F9AE02.roa (hash: X4VQ4mlJbNLUFsmcGUEk5U/Mx0BO0H6NPRdlN7i2dG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Validity Not Before: May 3 01:47:53 2024 GMT Not After : May 10 01:47:53 2024 GMT Subject: CN=66344249-e27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:c6:13:8a:a7:2e:e5:12:04:68:2b:5b:c0: 7a:aa:18:e3:cc:aa:2c:6a:b5:62:77:45:66:c5:6c: 53:be:de:37:8f:03:fb:a1:e8:e8:7a:50:40:59:bb: 53:44:74:ca:4b:d6:6c:70:6a:2b:08:2c:6b:b5:25: b2:96:43:3e:27:eb:65:7d:b4:e8:d6:2e:da:82:90: af:b4:7e:89:01:25:54:4f:19:db:6e:f2:24:c3:3d: 53:40:0d:9a:08:44:be:6e:26:de:d9:5e:3d:91:9b: 8c:dc:ee:dc:57:3b:62:73:dc:9f:5b:20:54:e7:ef: 37:bb:e7:a9:17:11:16:54:e7:4d:66:f0:37:2a:97: f3:e3:85:f7:78:04:eb:2e:54:f0:b8:41:30:d8:f8: d6:03:ce:23:43:be:66:b2:4f:08:d9:6d:d9:c7:42: b4:8e:9a:0c:e2:32:6d:cd:86:19:96:5f:61:0e:c8: 38:d2:ba:19:7b:b8:5d:af:6a:46:6f:ec:ed:f3:a5: 1a:f3:52:fa:c1:ab:57:ff:da:2c:94:f6:34:33:cd: 77:6f:a9:66:4a:e3:83:78:bd:5a:d2:a3:1f:5c:28: cd:4c:4e:cd:12:d4:0a:63:97:d5:1c:5d:25:7f:1d: 29:89:dc:07:47:fc:23:7e:6f:e9:82:99:5f:11:a5: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B8:62:BA:9D:F2:2E:5C:97:2B:DF:17:22:45:3B:9A:CA:69:B0:92 X509v3 Authority Key Identifier: keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c6:8b:5c:af:6b:ac:82:76:3b:43:61:d9:61:b4:72:6b:57: 0a:50:95:36:8d:9c:8c:ec:d1:4d:65:ea:5e:3b:50:05:bc:91: f1:5b:4e:82:e3:2b:96:95:9c:56:a7:a9:f7:cc:28:fd:46:74: 4b:10:cf:34:e6:92:dc:20:8e:b0:1b:b3:66:f6:fe:0e:3e:f5: cc:8d:2a:16:04:48:23:b9:23:74:5a:b4:05:9a:79:5c:64:33: a5:21:5f:8c:67:65:d2:64:42:e3:b0:09:38:7a:b2:cd:55:8d: 62:11:3c:9c:34:12:6e:ef:ea:60:d5:a5:b5:51:36:fe:dc:bf: 48:89:6b:44:60:39:b4:12:2f:1a:8b:d7:0e:5c:63:70:f2:34: 81:8c:e0:ea:19:4a:13:74:f6:3a:03:47:7a:8f:e1:b0:7c:30: a7:97:d8:87:9a:ea:45:d7:78:e3:de:cc:40:87:f4:7b:bc:bf: 2f:b8:b7:d4:0a:7f:9d:6d:a4:18:3a:69:1b:52:82:d8:16:1c: 10:b0:c0:3a:40:56:5a:94:2d:e8:43:d7:80:e2:0f:2c:8b:7e: cc:cd:eb:53:50:41:c5:dd:dc:0e:06:c5:b9:eb:d8:86:82:59: da:8d:05:06:2f:d7:d6:37:9d:06:33:82:3f:d5:1a:78:a1:d0: 48:5d:2e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw QjVBM0NERDAwHhcNMjQwNTAzMDE0NzUzWhcNMjQwNTEwMDE0NzUzWjAYMRYwFAYD VQQDEw02NjM0NDI0OS1lMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkzGE4qnLuUSBGgrW8B6qhjjzKosarVid0VmxWxTvt43jwP7oejoelBAWbtT RHTKS9ZscGorCCxrtSWylkM+J+tlfbTo1i7agpCvtH6JASVUTxnbbvIkwz1TQA2a CES+bibe2V49kZuM3O7cVztic9yfWyBU5+83u+epFxEWVOdNZvA3Kpfz44X3eATr LlTwuEEw2PjWA84jQ75msk8I2W3Zx0K0jpoM4jJtzYYZll9hDsg40roZe7hdr2pG b+zt86Ua81L6watX/9oslPY0M813b6lmSuODeL1a0qMfXCjNTE7NEtQKY5fVHF0l fx0pidwHR/wjfm/pgplfEaWQuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF24Yrqd 8i5clyvfFyJFO5rKabCSMB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0 N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6 ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02 OTljaWtEZDY3YzBMV2p6ZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJxotcr2usgnY7Q2HZYbRya1cKUJU2jZyM7NFNZepeO1AFvJHxW06C 4yuWlZxWp6n3zCj9RnRLEM805pLcII6wG7Nm9v4OPvXMjSoWBEgjuSN0WrQFmnlc ZDOlIV+MZ2XSZELjsAk4erLNVY1iETycNBJu7+pg1aW1UTb+3L9IiWtEYDm0Ei8a i9cOXGNw8jSBjODqGUoTdPY6A0d6j+GwfDCnl9iHmupF13jj3sxAh/R7vL8vuLfU Cn+dbaQYOmkbUoLYFhwQsMA6QFZalC3oQ9eA4g8si37MzetTUEHF3dwOBsW569iG glnajQUGL9fWN50GM4I/1Rp4odBIXS5+ -----END CERTIFICATE-----Generated at Fri May 3 03:10:46 2024 by rpki-client on console-ams.rpki-client.org