$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: MEoAwl2glre9biGtr4Y4BlAzl3JQo5WXX3m4AqTDptg= Subject key identifier: 2B:D1:5C:F7:F7:44:DA:3D:D2:D4:62:8B:69:08:18:8B:2F:D6:2F:B3 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1793 Signing time: Mon 06 May 2024 18:28:11 +0000 Manifest this update: Mon 06 May 2024 18:28:11 +0000 Manifest next update: Mon 13 May 2024 18:28:11 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: fL4/NS8A77bkOaiYJSxtQaxZu+Hrh40YjLx/la1q/Zk=) 2: C40A344CD95011EEBD100C30C4F9AE02.roa (hash: 3frzZsCe2cSKeF4zvhR7l2dt+O/9DB/apzghXZSwN0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: May 6 18:28:11 2024 GMT Not After : May 13 18:28:11 2024 GMT Subject: CN=6639213b-16f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:53:28:c7:87:6c:59:dd:59:a9:a7:6a:d7: d4:29:d5:d6:2e:20:b6:d7:88:54:f4:e6:7d:5d:3c: cd:e2:1a:3d:de:98:a3:67:1c:80:63:0e:21:81:07: 3d:60:35:eb:c2:84:14:d3:6a:2f:20:f5:c5:31:51: bc:3f:67:ef:ec:8c:43:4c:93:4b:62:14:4b:13:f3: 03:ce:6a:c6:91:f0:46:80:d2:53:d3:42:5a:4e:68: 6a:98:c9:e0:65:fd:18:1c:4b:d7:d0:af:f0:a1:8a: d0:dc:98:45:71:13:3c:b3:bb:6e:97:c6:7b:22:dd: 84:62:82:34:13:8b:19:69:04:a7:a2:28:74:3c:1f: 39:c4:83:a3:43:a8:d9:c7:bc:2f:1f:7f:1f:e3:3d: 4d:7c:7d:c6:62:80:d4:b7:3c:50:87:02:f5:ea:e7: 67:2e:54:ca:bb:28:64:4e:eb:43:fc:c2:3f:f6:97: 37:97:d4:d7:c0:96:1c:c6:cd:e2:9b:13:6c:00:f6: 66:7e:73:b7:1d:44:d2:82:a5:b0:fd:b3:ec:f8:3a: 3c:d6:36:00:a5:ab:fe:cc:f4:77:eb:7e:e1:56:62: 9a:eb:a7:27:ce:ab:a4:22:48:59:ad:19:e5:d7:84: 12:27:a7:42:da:f5:57:55:e5:06:c1:a8:98:cc:d3: d8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D1:5C:F7:F7:44:DA:3D:D2:D4:62:8B:69:08:18:8B:2F:D6:2F:B3 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4b:6b:25:94:e1:80:17:34:ac:23:7b:7c:6a:a3:e7:45:39: cf:c3:46:7d:ac:5f:ac:0e:53:c6:28:9f:bf:8c:0d:d4:74:1a: cc:25:ed:12:79:37:98:91:b6:70:31:54:aa:c1:82:6d:a4:75: bf:97:b7:af:83:6d:9a:ad:03:e4:bf:c5:ec:fd:63:b8:9f:d3: 79:b5:e6:e1:3a:4a:72:f9:37:b5:3b:a5:79:c1:8b:c5:06:ef: 26:ba:24:e4:bd:f6:83:16:49:da:8d:18:ab:08:cf:95:03:74: 6f:dd:a2:5e:c3:09:44:f5:fb:d8:f3:13:86:d1:70:fb:e3:aa: 6a:9e:59:52:77:0e:b1:ba:13:53:6b:b7:b4:16:9e:6e:0b:ca: 80:d8:fc:a3:4a:ef:4d:83:54:59:24:66:63:de:61:c7:96:8a: 65:2b:37:23:2a:53:dc:b2:1b:87:77:ff:f1:61:f3:8e:df:91: 7d:eb:b2:1f:45:62:87:23:59:21:ac:eb:27:e6:3f:ae:3a:6b: ce:ac:3a:aa:91:83:ed:53:c5:7d:18:01:18:35:b9:9b:93:40: ae:20:a9:f8:92:d2:a2:39:48:83:8d:4e:54:43:8c:5f:72:66: 76:e3:e9:44:bf:c0:8f:7a:17:22:9f:8e:94:92:e6:59:53:48: 44:b3:3f:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjQwNTA2MTgyODExWhcNMjQwNTEzMTgyODExWjAYMRYwFAYD VQQDEw02NjM5MjEzYi0xNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nVTKMeHbFndWamnatfUKdXWLiC214hU9OZ9XTzN4ho93pijZxyAYw4hgQc9 YDXrwoQU02ovIPXFMVG8P2fv7IxDTJNLYhRLE/MDzmrGkfBGgNJT00JaTmhqmMng Zf0YHEvX0K/woYrQ3JhFcRM8s7tul8Z7It2EYoI0E4sZaQSnoih0PB85xIOjQ6jZ x7wvH38f4z1NfH3GYoDUtzxQhwL16udnLlTKuyhkTutD/MI/9pc3l9TXwJYcxs3i mxNsAPZmfnO3HUTSgqWw/bPs+Do81jYApav+zPR3637hVmKa66cnzqukIkhZrRnl 14QSJ6dC2vVXVeUGwaiYzNPY1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvRXPf3 RNo90tRii2kIGIsv1i+zMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsS2sllOGAFzSsI3t8aqPnRTnPw0Z9rF+sDlPGKJ+/jA3UdBrMJe0S eTeYkbZwMVSqwYJtpHW/l7evg22arQPkv8Xs/WO4n9N5tebhOkpy+Te1O6V5wYvF Bu8muiTkvfaDFknajRirCM+VA3Rv3aJewwlE9fvY8xOG0XD746pqnllSdw6xuhNT a7e0Fp5uC8qA2PyjSu9Ng1RZJGZj3mHHloplKzcjKlPcshuHd//xYfOO35F967If RWKHI1khrOsn5j+uOmvOrDqqkYPtU8V9GAEYNbmbk0CuIKn4ktKiOUiDjU5UQ4xf cmZ24+lEv8CPehcin46UkuZZU0hEsz/G -----END CERTIFICATE-----Generated at Mon May 6 20:19:32 2024 by rpki-client on console-ams.rpki-client.org