$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: B/tNekdRx/CaRTGVRQSGmnunkrYMoW+ptLQmqnxq/Sg= Subject key identifier: 9D:1A:2B:87:97:32:6D:0A:70:3D:D6:3B:C9:F4:0B:A1:06:92:26:CF Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 020F Signing time: Sat 01 Jun 2024 05:19:41 +0000 Manifest this update: Sat 01 Jun 2024 05:19:40 +0000 Manifest next update: Sat 08 Jun 2024 05:19:40 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: 92/456s3sK4Upa+0LoAKJvZKy9c2FqYGVk3w2ODHU/Y=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: 6mN+CueDLKGwJwHXxXmeOuOwDDFlYjtRWeOSZJCwL84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Jun 1 05:19:40 2024 GMT Not After : Jun 8 05:19:40 2024 GMT Subject: CN=665aaf6c-dc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:5d:cb:b6:8d:3c:be:76:17:3b:15:01:05: 99:b1:2d:1b:b8:b8:89:00:b5:7d:6b:20:85:d8:71: 44:9f:e7:88:7b:2f:20:d3:6c:1f:83:61:28:f6:26: 18:63:21:4f:80:71:6d:21:15:dd:6a:9f:01:be:71: 64:be:ec:ff:74:d4:6c:6a:0f:5a:73:24:4c:46:8f: 1c:bc:de:71:81:57:59:c3:ae:96:34:82:3c:b5:ed: 84:90:8c:13:b0:56:6a:6d:57:02:44:2a:69:42:ed: 0e:34:b5:0b:77:8d:23:ca:8f:64:5f:84:73:a5:ed: d7:aa:60:df:d9:5a:b4:c7:b1:8a:10:f2:22:65:ae: 29:96:aa:e6:7c:54:1b:9b:a1:a6:cd:1d:91:2c:64: e3:ca:d6:1d:cf:d6:59:25:ed:bf:e5:97:43:43:02: d9:8a:fd:af:3f:51:86:94:76:21:da:65:49:cf:16: d1:1a:23:be:b4:6c:38:54:21:43:5b:89:1a:7d:27: 84:e0:fb:51:f8:30:eb:38:4a:f4:b9:e8:04:c2:74: 14:70:af:39:2b:85:d5:ee:c3:a4:d3:fe:d7:22:e2: d7:e7:b9:4b:68:34:4d:a8:0c:25:79:d4:0d:f6:cb: ed:92:af:d6:2c:4d:dd:61:ba:e5:bd:bc:f5:c1:dd: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1A:2B:87:97:32:6D:0A:70:3D:D6:3B:C9:F4:0B:A1:06:92:26:CF X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c5:f0:15:1c:73:e2:e9:05:c2:02:71:f1:94:fb:2c:1d:2f: 20:f0:61:90:08:c2:1b:d7:8a:b2:4c:40:01:54:17:cd:00:38: a5:5d:6e:4f:c7:1d:28:ca:e9:b5:a0:fe:e0:51:29:f1:61:89: d6:9a:b5:7b:34:55:01:34:87:89:14:05:ba:7a:b1:5f:0f:98: 94:03:f5:a6:51:60:61:ae:10:39:3d:3c:1d:7f:8e:dd:13:77: 8b:b4:82:fc:85:81:72:c4:74:7a:c3:d2:ba:0e:af:fe:c8:7e: db:ac:c8:a2:84:3e:40:1f:09:97:7e:61:b1:92:1a:2a:f2:77: 3c:4a:f7:0d:04:61:40:aa:56:31:55:5c:b5:b3:73:50:56:7f: 60:88:c4:a0:d8:93:1b:3f:27:a3:f8:e8:ad:ef:e9:0f:f0:33: 90:b0:57:3d:62:53:0f:1f:97:c1:a7:6f:54:9a:3f:92:06:28: 5e:22:55:f6:47:e3:a5:9d:4c:b1:7e:90:67:44:d0:4f:0b:15: fe:ee:7b:4f:4e:fd:d6:e8:d0:02:ae:08:85:ff:33:7f:ec:25: 64:81:04:eb:d7:c7:2e:2e:99:be:cf:38:17:20:76:4c:c6:06: 12:30:b1:a6:2a:cf:b5:33:cb:64:78:80:fd:5b:a5:20:16:ac: 5e:1b:14:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjQwNjAxMDUxOTQwWhcNMjQwNjA4MDUxOTQwWjAYMRYwFAYD VQQDEw02NjVhYWY2Yy1kYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2tdy7aNPL52FzsVAQWZsS0buLiJALV9ayCF2HFEn+eIey8g02wfg2Eo9iYY YyFPgHFtIRXdap8BvnFkvuz/dNRsag9acyRMRo8cvN5xgVdZw66WNII8te2EkIwT sFZqbVcCRCppQu0ONLULd40jyo9kX4Rzpe3XqmDf2Vq0x7GKEPIiZa4plqrmfFQb m6GmzR2RLGTjytYdz9ZZJe2/5ZdDQwLZiv2vP1GGlHYh2mVJzxbRGiO+tGw4VCFD W4kafSeE4PtR+DDrOEr0uegEwnQUcK85K4XV7sOk0/7XIuLX57lLaDRNqAwledQN 9svtkq/WLE3dYbrlvbz1wd0uawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0aK4eX Mm0KcD3WO8n0C6EGkibPMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPxfAVHHPi6QXCAnHxlPssHS8g8GGQCMIb14qyTEABVBfNADilXW5P xx0oyum1oP7gUSnxYYnWmrV7NFUBNIeJFAW6erFfD5iUA/WmUWBhrhA5PTwdf47d E3eLtIL8hYFyxHR6w9K6Dq/+yH7brMiihD5AHwmXfmGxkhoq8nc8SvcNBGFAqlYx VVy1s3NQVn9giMSg2JMbPyej+Oit7+kP8DOQsFc9YlMPH5fBp29Umj+SBiheIlX2 R+OlnUyxfpBnRNBPCxX+7ntPTv3W6NACrgiF/zN/7CVkgQTr18cuLpm+zzgXIHZM xgYSMLGmKs+1M8tkeID9W6UgFqxeGxQ0 -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org