$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json) Hash identifier: CEEi0r1XDL3j70WngpGUfeQy3jeaS5hWgARHKANCCyg= Subject key identifier: DB:9A:1C:64:3D:54:58:C2:ED:29:A0:7A:6B:6F:1D:86:35:14:47:CC Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Certificate serial: 183F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft Manifest number: 1833 Signing time: Thu 02 May 2024 17:00:23 +0000 Manifest this update: Thu 02 May 2024 17:00:23 +0000 Manifest next update: Thu 09 May 2024 17:00:23 +0000 Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: JRQbABXSL/muhoYrvlZKATmYp1C7bdVMMivm/utRmEw=) 2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: Qjxn6w7Ee9ThTcgQANjHHala94faSmJcpibAc70oZYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6207 (0x183f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E Validity Not Before: May 2 17:00:23 2024 GMT Not After : May 9 17:00:23 2024 GMT Subject: CN=6633c6a7-53cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:ad:48:05:48:a0:8a:2a:9c:5c:37:c6:9a: b7:f2:cf:ca:ea:ef:b9:98:76:d3:b2:2d:d1:03:84: 29:71:96:d0:58:28:56:3c:bc:f5:15:7a:f7:fb:66: 7a:89:b0:d0:bd:22:d2:09:88:b3:17:fe:49:78:5e: bc:f2:20:73:b5:d7:d5:bd:8e:e0:e2:71:25:c2:2e: 7c:78:8c:ad:6c:3d:4d:7f:30:dd:19:01:54:df:a4: 58:46:50:32:d6:76:c8:ec:5c:0d:25:eb:e7:38:85: 5a:b6:22:ca:f9:e9:5b:65:07:88:48:05:b3:fe:ff: a4:f8:d8:39:5a:42:67:34:f2:02:9e:72:de:db:04: 9d:d5:ed:f6:a0:36:bc:92:0b:58:0a:0d:fd:83:85: ac:f1:ba:44:2b:12:b1:79:eb:2b:f2:cf:30:9b:c8: 1d:de:bd:0a:6c:47:7a:e7:84:bb:5a:5e:81:c3:79: 57:f0:2c:48:c3:41:d9:83:91:40:b8:9c:46:6f:76: 22:67:63:7e:71:24:df:84:a6:c6:a3:3a:4a:92:b1: b2:75:01:14:e1:18:81:86:4e:fa:d1:65:fd:29:23: 27:7e:ba:4d:51:55:84:88:d9:2d:9a:f0:15:84:d4: 83:e7:ce:6d:c1:fd:6e:6b:86:f3:54:26:e3:af:be: 11:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9A:1C:64:3D:54:58:C2:ED:29:A0:7A:6B:6F:1D:86:35:14:47:CC X509v3 Authority Key Identifier: keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:78:09:32:df:2a:d7:13:9f:1a:21:45:b1:bb:c6:e9:21:91: 32:55:6e:8e:29:4a:f5:89:b1:bd:64:72:a2:3b:3a:37:94:98: eb:34:3a:64:a8:a1:25:28:c4:6c:78:34:46:df:ac:9a:e7:aa: cd:d8:78:e2:5a:fc:0e:fc:4b:0e:4b:d7:41:27:fb:cb:39:ba: df:21:d9:22:0c:05:ac:0c:6f:9f:9e:c1:0e:24:82:5e:af:1d: 29:29:86:59:fe:ad:a4:06:1d:6a:4a:6f:71:0c:f7:92:11:5b: 0f:80:07:33:b4:59:8c:36:77:a7:d4:c5:b0:39:8d:b7:b3:67: 3a:0f:f8:ed:7f:fc:b6:c2:bf:44:10:19:b7:81:67:db:8c:ef: 76:8c:f6:bd:0b:ce:8e:f2:1c:f8:fc:7a:10:93:28:8f:81:20: f7:74:32:73:7d:00:52:7b:88:48:af:fc:c9:38:d5:d0:dc:07: 85:38:0c:80:c8:20:4d:47:d9:89:48:c5:d2:bd:23:37:a9:e6: 5b:55:e7:94:6a:85:a9:cd:65:9b:8f:7b:78:21:04:18:07:fa: 72:87:85:c2:09:c8:70:64:0e:8d:f7:93:62:d6:07:4c:cf:74: d7:89:82:97:09:7f:01:b3:59:83:5d:2b:8d:73:11:45:5f:fb: b3:4f:48:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx QjVFQjE1OEUwHhcNMjQwNTAyMTcwMDIzWhcNMjQwNTA5MTcwMDIzWjAYMRYwFAYD VQQDEw02NjMzYzZhNy01M2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3ytSAVIoIoqnFw3xpq38s/K6u+5mHbTsi3RA4QpcZbQWChWPLz1FXr3+2Z6 ibDQvSLSCYizF/5JeF688iBztdfVvY7g4nElwi58eIytbD1NfzDdGQFU36RYRlAy 1nbI7FwNJevnOIVatiLK+elbZQeISAWz/v+k+Ng5WkJnNPICnnLe2wSd1e32oDa8 kgtYCg39g4Ws8bpEKxKxeesr8s8wm8gd3r0KbEd654S7Wl6Bw3lX8CxIw0HZg5FA uJxGb3YiZ2N+cSTfhKbGozpKkrGydQEU4RiBhk760WX9KSMnfrpNUVWEiNktmvAV hNSD585twf1ua4bzVCbjr74ReQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuaHGQ9 VFjC7SmgemtvHYY1FEfMMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2 RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEeAky3yrXE58aIUWxu8bpIZEyVW6OKUr1ibG9ZHKiOzo3lJjrNDpk qKElKMRseDRG36ya56rN2HjiWvwO/EsOS9dBJ/vLObrfIdkiDAWsDG+fnsEOJIJe rx0pKYZZ/q2kBh1qSm9xDPeSEVsPgAcztFmMNnen1MWwOY23s2c6D/jtf/y2wr9E EBm3gWfbjO92jPa9C86O8hz4/HoQkyiPgSD3dDJzfQBSe4hIr/zJONXQ3AeFOAyA yCBNR9mJSMXSvSM3qeZbVeeUaoWpzWWbj3t4IQQYB/pyh4XCCchwZA6N95Ni1gdM z3TXiYKXCX8Bs1mDXSuNcxFFX/uzT0he -----END CERTIFICATE-----Generated at Thu May 2 20:04:39 2024 by rpki-client on console-ams.rpki-client.org