$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft File: tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json) Hash identifier: X7bK+m2W76gQyK4WNRcolhX1rv5IwZ+tTqpR2Lbuins= Subject key identifier: 09:0C:1D:2D:5D:4D:93:5B:96:D1:4B:DF:B8:4B:7E:9E:F5:E1:3B:A0 Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30 Certificate issuer: /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft Manifest number: DA Signing time: Sun 05 May 2024 06:08:52 +0000 Manifest this update: Sun 05 May 2024 06:08:51 +0000 Manifest next update: Sun 12 May 2024 06:08:51 +0000 Files and hashes: 1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: VisbQeKpG6teTW/QFcIBz0oRyB0Jxgzvxvp5iGOdWGs=) 2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: yVDFnQt9cf/d3+ksneSwJXDPRru2sbLDqWqSJrBgk6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530 Validity Not Before: May 5 06:08:51 2024 GMT Not After : May 12 06:08:51 2024 GMT Subject: CN=66372274-28ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:6d:87:26:21:46:e7:eb:54:6c:75:a3:ac: 9e:00:72:70:db:b5:1f:84:9e:23:1e:14:dc:21:c3: 16:64:98:a6:a4:d3:df:c1:6c:ba:34:17:43:75:c9: c2:67:a9:2d:41:33:96:82:17:c5:6d:a2:48:49:23: 17:89:7a:dc:db:46:70:dd:7d:4e:2c:9e:08:3f:a2: 76:9a:ee:16:1f:39:f4:db:05:2b:77:7d:3b:a2:e8: 56:5d:18:90:7e:f6:73:89:0e:4c:e0:c1:37:23:75: 1b:49:15:fc:74:46:cd:f5:c1:9c:21:0e:6a:2f:ce: cf:db:b4:f4:3f:2a:a7:21:86:5f:23:bb:d0:08:6c: 0c:e2:9a:30:82:86:b7:74:22:44:3a:47:e0:e7:14: 53:ad:0b:a4:a3:a6:7f:0f:7e:b8:52:47:ba:b4:40: b8:e5:d8:69:71:4d:e7:81:21:e2:b5:3c:ca:67:4b: d7:fe:59:4e:1b:43:bd:cf:57:fd:fb:42:dc:6d:fb: c7:5e:8e:e1:ce:c3:35:cc:cf:e4:f4:f0:cf:29:35: 76:20:de:5f:ad:34:9a:ef:2f:1a:99:31:9c:3d:58: 91:bb:92:3d:e0:9e:f8:f8:35:20:5a:ea:2e:5c:b3: 19:fe:a8:b0:4f:7f:9a:56:34:34:39:c6:3f:9a:3b: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0C:1D:2D:5D:4D:93:5B:96:D1:4B:DF:B8:4B:7E:9E:F5:E1:3B:A0 X509v3 Authority Key Identifier: keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:75:03:96:cc:96:ff:56:ec:05:48:1a:02:71:9f:6e:5c:14: 44:57:f1:d2:d1:0b:c2:ba:c5:48:c4:ed:89:da:7c:87:9d:04: 7e:09:42:8d:4e:6e:24:87:6d:a6:1a:04:c5:5e:48:80:8d:7d: 58:ba:f3:d8:08:a8:c1:46:a9:9d:ca:af:3c:fe:95:58:ae:48: 9c:5c:ef:37:01:80:80:72:78:7a:2a:fe:7b:80:b4:cb:8a:b9: 37:93:99:b5:2b:3c:54:cf:d9:2c:14:4a:48:89:89:ef:f9:bf: b5:14:77:45:2f:77:4f:98:1a:04:e5:69:93:2a:f4:e8:6d:77: 65:f3:10:92:a2:c2:71:6f:d8:63:2a:14:9d:0d:f4:db:67:3c: 61:ca:8a:a6:0f:da:a0:00:8e:ba:56:b5:cf:3d:68:2b:fa:fa: 85:5a:11:ef:5b:a8:2e:b8:8b:5c:98:66:b9:51:5a:a7:b9:f1: fc:19:c4:b5:3d:be:f9:f5:83:81:3a:4a:3f:f2:91:3a:f5:34: c8:90:a9:8c:e2:3c:48:39:c4:99:23:c7:5c:07:33:bb:d0:4e: 4a:ce:c9:5d:95:3e:9e:62:c3:c4:4e:03:e2:bc:d5:c7:d6:5a: b2:f6:3e:8a:16:13:d1:7c:2f:ac:f0:2d:b1:29:1d:ac:c2:c5: eb:1e:2b:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2OEIxMTAvBgNVBAUTKEI1RTlEREM2QkYwOUY4OTQ1ODU1NjA4NzQ0MkQ5NDhD NDQwMzQ1MzAwHhcNMjQwNTA1MDYwODUxWhcNMjQwNTEyMDYwODUxWjAYMRYwFAYD VQQDEw02NjM3MjI3NC0yOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jNthyYhRufrVGx1o6yeAHJw27UfhJ4jHhTcIcMWZJimpNPfwWy6NBdDdcnC Z6ktQTOWghfFbaJISSMXiXrc20Zw3X1OLJ4IP6J2mu4WHzn02wUrd307ouhWXRiQ fvZziQ5M4ME3I3UbSRX8dEbN9cGcIQ5qL87P27T0PyqnIYZfI7vQCGwM4powgoa3 dCJEOkfg5xRTrQuko6Z/D364Uke6tEC45dhpcU3ngSHitTzKZ0vX/llOG0O9z1f9 +0LcbfvHXo7hzsM1zM/k9PDPKTV2IN5frTSa7y8amTGcPViRu5I94J74+DUgWuou XLMZ/qiwT3+aVjQ0OcY/mjvNUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkMHS1d TZNbltFL37hLfp714TugMB8GA1UdIwQYMBaAFLXp3ca/CfiUWFVgh0QtlIxEA0Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4Qi8xRjdCMUQwOEMz OEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1KUllWV0NIUkMyVWpFUURS VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RlbmR4cjhKLUpSWVZXQ0hSQzJVakVRRFJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY4Qi8xRjdCMUQwOEMzOEQxMUVEQTdFMUNBNjRDNEY5QUUwMi90ZW5keHI4Si1K UllWV0NIUkMyVWpFUURSVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmdQOWzJb/VuwFSBoCcZ9uXBREV/HS0QvCusVIxO2J2nyHnQR+CUKN Tm4kh22mGgTFXkiAjX1YuvPYCKjBRqmdyq88/pVYrkicXO83AYCAcnh6Kv57gLTL irk3k5m1KzxUz9ksFEpIiYnv+b+1FHdFL3dPmBoE5WmTKvTobXdl8xCSosJxb9hj KhSdDfTbZzxhyoqmD9qgAI66VrXPPWgr+vqFWhHvW6guuItcmGa5UVqnufH8GcS1 Pb759YOBOko/8pE69TTIkKmM4jxIOcSZI8dcBzO70E5KzsldlT6eYsPETgPivNXH 1lqy9j6KFhPRfC+s8C2xKR2swsXrHivq -----END CERTIFICATE-----Generated at Sun May 5 08:21:06 2024 by rpki-client on console-ams.rpki-client.org