$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft File: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json) Hash identifier: uFHzuX6cHGj7pU152zAUpwiL2piGoUmGsU5TbBpyjxc= Subject key identifier: CF:2A:E8:A8:13:AF:61:EC:1D:8E:49:45:17:9E:05:61:FE:CB:FC:5D Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Certificate serial: 0FE7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft Manifest number: 0FDF Signing time: Sat 18 May 2024 18:01:13 +0000 Manifest this update: Sat 18 May 2024 18:01:12 +0000 Manifest next update: Sat 25 May 2024 18:01:12 +0000 Files and hashes: 1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: f6xsQRS66mg0C9jEYfClhdSJerINvEPm63socAuXXGA=) 2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: GQ/0DZoDl9xWpjaBH7TYItVUTT3yJCpT0ToW8WsLkYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4071 (0xfe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Validity Not Before: May 18 18:01:12 2024 GMT Not After : May 25 18:01:12 2024 GMT Subject: CN=6648ece8-333b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:19:52:32:29:7b:bf:30:db:57:ff:76:7a: e5:0a:ca:7d:d0:4c:15:cc:c3:89:f3:cd:d7:80:ca: aa:9b:f4:4b:e8:31:a0:57:17:77:cb:40:91:a5:6d: e8:1d:b9:80:dd:a0:c0:71:9a:98:09:4e:c6:ad:f4: d1:74:4a:9a:a7:c1:ad:70:0b:fa:e4:29:3d:04:15: 4d:0d:10:55:b8:03:1c:47:75:0f:bb:a7:15:4d:f9: c7:d3:25:94:34:0e:63:1a:46:7e:10:04:f7:cf:f6: 2e:52:c3:df:51:8c:ea:bb:13:20:71:df:60:62:a8: 42:6f:b4:24:6b:ad:4b:7a:e6:8c:99:6a:ff:5a:55: 19:22:a8:d3:d2:d8:e6:23:13:ee:03:b2:d9:7c:c9: ae:e3:7c:b5:06:9e:09:5a:9f:8d:34:d6:1c:3a:38: 07:b7:11:57:01:c8:bc:3e:25:85:d6:da:6d:95:1d: c1:f2:6c:5c:07:2f:99:17:1a:d9:92:4f:f7:e6:74: 2d:2d:7d:63:3a:53:9d:4a:b8:55:1f:9d:42:15:43: 41:7d:a1:23:7f:78:38:74:67:4e:ce:a2:d0:a1:95: f1:85:90:7f:ce:e7:d4:6e:f3:d4:b4:54:16:d2:52: c0:ac:12:be:fe:c3:9a:dc:8d:49:46:70:eb:0a:d2: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2A:E8:A8:13:AF:61:EC:1D:8E:49:45:17:9E:05:61:FE:CB:FC:5D X509v3 Authority Key Identifier: keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:78:a6:07:9f:17:1a:3d:fc:4b:40:4a:c9:89:d0:a3:9f:aa: ed:28:68:9b:b5:7e:a5:9e:f4:2e:b8:3b:a4:ba:d9:49:13:d2: 67:a3:09:86:db:6f:2b:3e:c2:f9:8b:c2:f4:27:ab:00:35:52: ad:2b:11:66:aa:20:80:6a:fd:da:9f:ca:8e:88:be:66:d8:c9: 35:2f:5a:6e:34:56:7f:b9:ab:2a:15:4a:ac:ed:88:5d:90:cc: 0c:80:4a:51:05:da:4e:eb:52:d2:60:e7:28:96:a6:1d:6c:94: 74:cd:67:19:39:83:15:0b:1f:18:1d:1a:2b:49:22:07:23:ce: 7d:ab:be:5d:71:0d:e1:57:81:cb:3e:06:5a:c6:f9:64:0f:87: 27:a2:cb:fe:a9:13:d4:81:76:56:15:a9:f9:b3:78:23:29:33: 9a:df:27:23:6e:7e:56:3a:93:b1:31:d9:4b:ae:7f:34:59:0b: 3e:49:5b:6d:c0:0c:78:93:3d:46:4e:29:5c:f1:9d:52:f6:77: 43:f8:a5:27:37:5e:c8:41:f0:01:01:08:49:8f:01:ba:ee:f5: dd:99:dd:32:ae:8e:a4:0c:37:ff:14:92:6f:3a:e7:3b:86:e6: 8c:86:23:53:1d:5a:49:b9:6d:c6:dc:a7:da:cf:8e:59:6e:0b: c4:58:f8:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz NzkwNjA2MDMwHhcNMjQwNTE4MTgwMTEyWhcNMjQwNTI1MTgwMTEyWjAYMRYwFAYD VQQDEw02NjQ4ZWNlOC0zMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDwZUjIpe78w21f/dnrlCsp90EwVzMOJ883XgMqqm/RL6DGgVxd3y0CRpW3o HbmA3aDAcZqYCU7GrfTRdEqap8GtcAv65Ck9BBVNDRBVuAMcR3UPu6cVTfnH0yWU NA5jGkZ+EAT3z/YuUsPfUYzquxMgcd9gYqhCb7Qka61LeuaMmWr/WlUZIqjT0tjm IxPuA7LZfMmu43y1Bp4JWp+NNNYcOjgHtxFXAci8PiWF1tptlR3B8mxcBy+ZFxrZ kk/35nQtLX1jOlOdSrhVH51CFUNBfaEjf3g4dGdOzqLQoZXxhZB/zufUbvPUtFQW 0lLArBK+/sOa3I1JRnDrCtJvOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8q6KgT r2HsHY5JRReeBWH+y/xdMB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5 MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri8wMDAzNzVBNDI5MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdU aUpYNlRsMFljcGMza0dCZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHeKYHnxcaPfxLQErJidCjn6rtKGibtX6lnvQuuDukutlJE9JnowmG 228rPsL5i8L0J6sANVKtKxFmqiCAav3an8qOiL5m2Mk1L1puNFZ/uasqFUqs7Yhd kMwMgEpRBdpO61LSYOcolqYdbJR0zWcZOYMVCx8YHRorSSIHI859q75dcQ3hV4HL PgZaxvlkD4cnosv+qRPUgXZWFan5s3gjKTOa3ycjbn5WOpOxMdlLrn80WQs+SVtt wAx4kz1GTilc8Z1S9ndD+KUnN17IQfABAQhJjwG67vXdmd0yro6kDDf/FJJvOuc7 huaMhiNTHVpJuW3G3Kfaz45ZbgvEWPg3 -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org