$ rpki-client -vvf rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.mft File: TichBtT-H2-FQk_eJwqx2im6Ha4.mft (raw, json) Hash identifier: im+TjldWNoVNEc905wKjQiCGNqCGwPOX/tedpLeJZck= Subject key identifier: BF:34:C8:18:EB:61:E9:DB:5F:27:0C:5B:06:E3:61:44:18:3F:C9:7D Authority key identifier: 4E:27:21:06:D4:FE:1F:6F:85:42:4F:DE:27:0A:B1:DA:29:BA:1D:AE Certificate issuer: /CN=A9166261/serialNumber=4E272106D4FE1F6F85424FDE270AB1DA29BA1DAE Certificate serial: 305D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TichBtT-H2-FQk_eJwqx2im6Ha4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.mft Manifest number: 304D Signing time: Wed 24 Apr 2024 15:43:46 +0000 Manifest this update: Wed 24 Apr 2024 15:43:46 +0000 Manifest next update: Wed 01 May 2024 15:43:46 +0000 Files and hashes: 1: TichBtT-H2-FQk_eJwqx2im6Ha4.crl (hash: sq54HDAvIAXRC1yCPulu0CwpaKdQElgREd8LeZXKW3I=) 2: F7BF6A5AB13B11E5B2D80087C4F9AE02.roa (hash: PJ3woOICYo9SOfsBYq2mVEPdf08CFCuXqfW+sxB9Lnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.crl rsync://rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TichBtT-H2-FQk_eJwqx2im6Ha4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 15:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12381 (0x305d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166261/serialNumber=4E272106D4FE1F6F85424FDE270AB1DA29BA1DAE Validity Not Before: Apr 24 15:43:46 2024 GMT Not After : May 1 15:43:46 2024 GMT Subject: CN=662928b2-6fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:98:a5:ed:84:36:1d:44:b1:e4:1b:92:c3:bf: a1:2e:58:83:ca:33:05:fb:60:5a:94:d3:16:2e:ea: 18:32:28:2d:86:ff:60:45:df:32:a1:78:2c:bd:46: 97:2b:db:f4:50:58:75:e9:15:36:98:21:9a:bc:6d: 42:ce:ad:5c:0b:96:d4:e3:0c:35:66:9a:81:09:bf: d8:33:a4:76:ea:db:52:88:32:ae:6d:1c:34:27:ce: 52:ff:47:b0:6e:94:f1:1f:d0:76:ac:ce:35:7a:40: 8e:93:34:bb:80:7b:e9:5a:cc:1d:ec:ac:f6:44:b1: 37:e9:cb:f8:c0:88:98:21:82:6e:0c:9c:ff:d8:6f: 4b:f5:9b:33:65:03:ea:0f:d3:00:48:46:2e:53:e6: 05:1d:3d:18:d2:01:94:fa:4a:cd:0e:a6:6f:3d:ea: b9:1c:91:17:3e:1a:f4:3f:74:a5:c0:74:f5:42:4d: 2a:74:2a:d5:09:dd:30:4d:b8:0e:63:91:10:5f:c7: c3:15:e8:c0:c7:ff:b9:4b:46:29:c8:31:c8:77:4e: 27:03:bd:2a:1f:85:ee:a2:30:1b:83:f8:50:83:f3: 1e:3b:a7:c7:0c:72:15:e5:a1:3c:cb:7d:ee:53:f6: 3d:76:81:cc:08:79:da:e9:1e:b7:be:ef:5b:ec:02: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:34:C8:18:EB:61:E9:DB:5F:27:0C:5B:06:E3:61:44:18:3F:C9:7D X509v3 Authority Key Identifier: keyid:4E:27:21:06:D4:FE:1F:6F:85:42:4F:DE:27:0A:B1:DA:29:BA:1D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TichBtT-H2-FQk_eJwqx2im6Ha4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1d:e4:af:45:8f:4d:70:a6:01:1f:ae:ac:e8:1a:0b:82:a6: f4:6a:0a:38:38:da:2d:33:21:c0:7b:2d:36:1f:77:46:ef:da: 81:74:63:aa:ab:f2:fd:5b:3a:e9:9a:bf:98:4e:46:b4:d7:31: 77:83:2b:bb:6f:cc:db:6d:e5:92:b0:d4:62:24:69:1d:b8:d7: f0:dc:ee:3d:b1:3c:ac:36:8b:d9:f8:40:a4:e2:3f:ab:af:4a: 7c:7e:17:c8:5e:6d:60:f4:98:8c:8d:09:8d:ee:1b:10:2f:4a: 48:05:63:d5:73:1e:ba:07:d9:1b:d4:7f:8a:c0:13:05:b8:d3: 2d:e3:52:42:6c:3a:cb:34:63:7c:7b:67:b3:32:95:ce:c5:14: 06:04:b2:4a:9c:e8:69:52:6c:c0:76:79:21:2a:b3:bc:5b:05: f2:80:1e:81:82:ea:6b:6a:ff:36:c8:45:0d:11:fe:f7:19:64: f0:6a:24:e7:6d:3e:d2:77:59:1b:0d:01:ed:c3:01:e1:35:00: a4:c5:f2:a1:73:a0:36:81:39:3a:47:bf:ca:5f:f8:e8:96:6b: cf:55:1a:8a:2c:9b:2e:1c:05:e8:af:f2:ce:b9:5c:c2:5e:04: 39:2a:36:31:c2:a4:19:19:eb:b5:d7:01:8e:30:80:26:94:1e: a6:4d:eb:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYyNjExMTAvBgNVBAUTKDRFMjcyMTA2RDRGRTFGNkY4NTQyNEZERTI3MEFCMURB MjlCQTFEQUUwHhcNMjQwNDI0MTU0MzQ2WhcNMjQwNTAxMTU0MzQ2WjAYMRYwFAYD VQQDEw02NjI5MjhiMi02ZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5il7YQ2HUSx5BuSw7+hLliDyjMF+2BalNMWLuoYMigthv9gRd8yoXgsvUaX K9v0UFh16RU2mCGavG1Czq1cC5bU4ww1ZpqBCb/YM6R26ttSiDKubRw0J85S/0ew bpTxH9B2rM41ekCOkzS7gHvpWswd7Kz2RLE36cv4wIiYIYJuDJz/2G9L9ZszZQPq D9MASEYuU+YFHT0Y0gGU+krNDqZvPeq5HJEXPhr0P3SlwHT1Qk0qdCrVCd0wTbgO Y5EQX8fDFejAx/+5S0YpyDHId04nA70qH4XuojAbg/hQg/MeO6fHDHIV5aE8y33u U/Y9doHMCHna6R63vu9b7AIa/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL80yBjr YenbXycMWwbjYUQYP8l9MB8GA1UdIwQYMBaAFE4nIQbU/h9vhUJP3icKsdopuh2u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI2MS82QURFMTkzMENE MjUxMUUyQjU1MEJFQ0Q3RTY3NjIxMS9UaWNoQnRULUgyLUZRa19lSndxeDJpbTZI YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpY2hCdFQtSDItRlFrX2VKd3F4MmltNkhhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjI2MS82QURFMTkzMENEMjUxMUUyQjU1MEJFQ0Q3RTY3NjIxMS9UaWNoQnRULUgy LUZRa19lSndxeDJpbTZIYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsHeSvRY9NcKYBH66s6BoLgqb0ago4ONotMyHAey02H3dG79qBdGOq q/L9Wzrpmr+YTka01zF3gyu7b8zbbeWSsNRiJGkduNfw3O49sTysNovZ+ECk4j+r r0p8fhfIXm1g9JiMjQmN7hsQL0pIBWPVcx66B9kb1H+KwBMFuNMt41JCbDrLNGN8 e2ezMpXOxRQGBLJKnOhpUmzAdnkhKrO8WwXygB6Bguprav82yEUNEf73GWTwaiTn bT7Sd1kbDQHtwwHhNQCkxfKhc6A2gTk6R7/KX/jolmvPVRqKLJsuHAXor/LOuVzC XgQ5KjYxwqQZGeu11wGOMIAmlB6mTetL -----END CERTIFICATE-----Generated at Wed Apr 24 16:35:46 2024 by rpki-client on console-fra.rpki-client.org