$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: gTBUupQd11gYCbvHkfDFJJlF6G1Hcjp8Fd+t7z0Itdk= Subject key identifier: 6E:3A:7D:A9:6B:C5:F6:E3:0B:40:1B:D6:AF:9C:86:6A:B3:E7:B9:10 Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 0454 Signing time: Sat 01 Jun 2024 02:54:46 +0000 Manifest this update: Sat 01 Jun 2024 02:54:46 +0000 Manifest next update: Sat 08 Jun 2024 02:54:46 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: fin6HiYUE53gTPnfexfPQtADStQ/CF2t9Aeek2DG/Ro=) 2: CF1F629016B211EFADE45D0EC4F9AE02.roa (hash: lNxLea0xnQxbLq9BiFqdfz+KjHcqAhwf+p3wY+OKkio=) 3: 084D9A1E16B311EF90EBB40EC4F9AE02.roa (hash: jOPpFtv5qabsRmm3FEa40Yh+CtsQWNrgO/dI9jqC95U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Jun 1 02:54:46 2024 GMT Not After : Jun 8 02:54:46 2024 GMT Subject: CN=665a8d76-717f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:8a:a1:88:b9:85:73:a0:ac:0d:bd:37:a8: ab:95:35:a4:d2:b1:48:38:96:83:e4:80:d1:45:6a: 62:89:6d:28:b4:a7:d5:81:73:24:e4:3b:88:25:62: 24:77:f5:f2:5e:f9:33:0e:f8:dc:88:d2:86:6b:47: 3d:46:cb:eb:12:c5:2d:13:b0:27:61:b7:52:d1:0d: 91:fc:37:0a:ca:1b:2b:a2:1f:f4:8f:15:8a:d8:e7: 95:f7:7a:0c:75:ee:b8:1d:9d:89:cb:17:15:70:ad: 1f:9d:b4:13:77:e8:c7:41:2f:e1:34:57:19:6f:f1: 27:d1:fd:c9:1c:19:ea:2b:6c:d2:1d:ee:44:55:6e: b5:e1:4a:d9:a3:47:d5:e0:45:07:60:4f:63:05:ce: e3:b6:87:4d:93:6b:15:cb:c6:c4:a9:b9:2e:e9:00: 8e:ca:5a:d0:c6:0c:71:cb:f5:f7:51:69:53:5d:c2: ee:14:0e:29:35:33:a3:e9:f1:9a:9b:d1:d1:cd:13: 59:6d:8c:a2:17:d1:88:1c:97:16:b0:ed:55:2d:e6: 59:52:0a:b9:f9:08:a4:1c:08:ba:c8:e2:1c:f9:92: f7:49:97:6b:1b:87:1f:66:81:3e:b5:d3:53:91:1b: 16:b6:43:07:8a:c5:72:ee:55:23:ab:ff:5a:a3:76: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3A:7D:A9:6B:C5:F6:E3:0B:40:1B:D6:AF:9C:86:6A:B3:E7:B9:10 X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:1a:73:1c:f6:90:ba:c9:35:7a:c8:66:8e:48:f3:52:fc:61: 9b:e3:1b:03:1c:01:67:17:cc:51:fa:24:c9:28:80:73:e2:f1: bc:4d:7a:0e:a6:0f:f6:dd:b8:02:c6:10:37:d8:ca:a5:3a:7f: bd:4b:25:db:e2:4e:bb:a6:02:15:08:27:39:80:00:04:38:0c: 74:76:83:f9:11:1d:91:99:1e:c0:46:72:ec:6d:4e:bc:93:fa: ea:5f:aa:5c:3d:23:9c:20:c0:4a:24:28:ab:d6:f9:3f:d6:47: ac:bd:d0:bb:66:e4:11:3e:ea:df:3f:d3:e4:65:80:83:65:ed: c6:1d:71:34:6e:14:18:f8:bb:8e:b0:ef:5e:64:e2:d9:98:42: df:e6:f3:f8:32:8a:c4:f7:c1:27:cf:9e:70:23:12:c1:77:d0: c0:2b:0b:b2:e8:b9:0e:cf:54:88:b0:6c:29:a1:16:60:39:1a: be:c0:40:bd:dc:e4:93:13:e3:b2:2d:e7:6d:09:56:ef:33:4c: c4:2f:71:53:f2:4a:6d:a5:60:ac:3f:3b:8d:30:63:da:56:19: 9c:68:5d:d5:fc:a9:15:92:12:b2:c1:a8:f0:68:47:18:c8:74: 22:50:23:b2:bd:7d:e2:8d:e4:a6:ac:2c:56:89:f7:30:43:59: cc:97:8f:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjQwNjAxMDI1NDQ2WhcNMjQwNjA4MDI1NDQ2WjAYMRYwFAYD VQQDEw02NjVhOGQ3Ni03MTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUmKoYi5hXOgrA29N6irlTWk0rFIOJaD5IDRRWpiiW0otKfVgXMk5DuIJWIk d/XyXvkzDvjciNKGa0c9RsvrEsUtE7AnYbdS0Q2R/DcKyhsroh/0jxWK2OeV93oM de64HZ2JyxcVcK0fnbQTd+jHQS/hNFcZb/En0f3JHBnqK2zSHe5EVW614UrZo0fV 4EUHYE9jBc7jtodNk2sVy8bEqbku6QCOylrQxgxxy/X3UWlTXcLuFA4pNTOj6fGa m9HRzRNZbYyiF9GIHJcWsO1VLeZZUgq5+QikHAi6yOIc+ZL3SZdrG4cfZoE+tdNT kRsWtkMHisVy7lUjq/9ao3b1pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG46falr xfbjC0Ab1q+chmqz57kQMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4GnMc9pC6yTV6yGaOSPNS/GGb4xsDHAFnF8xR+iTJKIBz4vG8TXoO pg/23bgCxhA32MqlOn+9SyXb4k67pgIVCCc5gAAEOAx0doP5ER2RmR7ARnLsbU68 k/rqX6pcPSOcIMBKJCir1vk/1kesvdC7ZuQRPurfP9PkZYCDZe3GHXE0bhQY+LuO sO9eZOLZmELf5vP4MorE98Enz55wIxLBd9DAKwuy6LkOz1SIsGwpoRZgORq+wEC9 3OSTE+OyLedtCVbvM0zEL3FT8kptpWCsPzuNMGPaVhmcaF3V/KkVkhKywajwaEcY yHQiUCOyvX3ijeSmrCxWifcwQ1nMl49Y -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:27 2024 by rpki-client on console-ams.rpki-client.org