$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json) Hash identifier: 0U4sbm+v2VQFS2VsZymldHlpYZlsBuRJighxE0JZPvI= Subject key identifier: 4B:FF:E2:2B:4C:CB:5A:EF:60:B7:55:FE:6C:7B:6F:70:89:67:0C:F4 Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft Manifest number: 017E Signing time: Wed 01 May 2024 05:04:51 +0000 Manifest this update: Wed 01 May 2024 05:04:51 +0000 Manifest next update: Wed 08 May 2024 05:04:51 +0000 Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: Q+9yUQtfnztiYCw5ouqPgo1hRh4DhIDOFrO/BJyadqU=) 2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: nQ99fDaMcLKmER+eUIwMPGK91XO4OfQ7KVVTWmAakBo=) 3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: IjrBxKJqfs/DLqWGCUK9jjzadsLrd5M6FaMqsgSa1b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Validity Not Before: May 1 05:04:51 2024 GMT Not After : May 8 05:04:51 2024 GMT Subject: CN=6631cd73-eaeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cd:e7:5a:21:e2:6a:33:68:c2:9c:b1:07:41: ee:bc:31:a8:82:f2:34:dd:bc:5e:2e:73:35:93:c4: 5a:10:29:1b:80:4e:e3:47:f2:86:c7:3c:14:92:45: 98:4e:90:4a:38:9b:2f:33:5d:17:bc:84:08:67:2f: f2:52:6f:91:f1:47:c4:b1:ee:67:8d:a0:34:ff:a5: f1:7a:43:8f:ee:14:7c:72:8e:26:4e:73:ef:ab:51: 80:d8:6e:0f:66:e6:5f:40:d7:fb:00:31:c1:12:22: 5e:f5:24:c8:be:35:2f:a6:89:67:f2:12:72:64:cd: 3f:41:3f:63:4f:ce:fa:12:f9:bb:6e:89:f7:b5:d4: 9b:cb:d3:cd:07:0d:8d:bc:d4:80:72:1e:18:b1:68: c8:6f:8a:fb:56:2d:61:28:5f:e8:91:62:bf:12:46: 3c:1a:da:29:a1:bf:9d:fe:99:b6:94:1c:9e:a0:7a: 83:6e:de:f4:d2:f8:8d:aa:f6:db:4c:9c:4b:ad:61: 5f:27:a0:53:1b:c7:9f:19:9d:dd:9b:25:64:7d:08: e0:a7:71:37:00:8d:82:45:e2:8e:67:60:2b:46:1f: 03:d0:44:bb:22:d0:28:db:7e:9b:5a:1f:07:6f:a3: a9:f5:04:94:68:1f:92:8f:a9:f2:9f:9b:bc:7c:7f: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FF:E2:2B:4C:CB:5A:EF:60:B7:55:FE:6C:7B:6F:70:89:67:0C:F4 X509v3 Authority Key Identifier: keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f8:5f:1c:30:f4:f9:e0:31:dc:0a:f4:54:4b:32:3f:ae:d4: e3:71:ec:23:44:8a:df:2d:ab:9a:3d:86:b0:d0:4c:0d:98:69: 57:2f:59:e2:04:15:3e:24:48:21:00:99:03:90:0a:05:2e:d0: 54:8d:32:05:aa:72:77:ca:db:a0:5c:9a:cb:23:fb:c2:e9:8a: c9:ed:c6:5e:0c:3a:a8:68:37:7f:c9:3e:c7:5c:e3:89:db:bb: 4f:6d:e0:c9:ce:9b:5c:05:2d:9b:f3:09:2e:c9:1d:30:57:d5: 5e:2c:c5:1d:58:1a:ea:a5:41:12:ea:ee:17:7c:43:e4:7e:2e: 0f:20:40:d5:bb:2a:a3:33:e9:fc:62:92:ef:90:07:b8:08:56: fc:40:0d:b4:64:f2:bc:6e:a0:cc:c6:bf:0f:ff:2d:3b:76:38: cc:24:60:f0:e6:a8:b0:8e:ca:af:b9:2c:03:bf:22:05:df:56: 56:c4:f6:74:88:df:e1:7e:6e:29:2b:1e:02:f5:22:bc:4c:3f: ec:67:43:5c:26:97:d2:3b:54:b6:a0:51:c1:e4:69:42:f2:db: 30:28:d1:ba:c9:03:33:41:5a:55:2c:e9:4b:50:05:83:42:20: b1:ac:a9:f5:82:cf:17:04:8b:41:48:3b:f1:a7:f7:f1:01:3e: 59:38:a8:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD OTI4OTQ3NDgwHhcNMjQwNTAxMDUwNDUxWhcNMjQwNTA4MDUwNDUxWjAYMRYwFAYD VQQDEw02NjMxY2Q3My1lYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA383nWiHiajNowpyxB0HuvDGogvI03bxeLnM1k8RaECkbgE7jR/KGxzwUkkWY TpBKOJsvM10XvIQIZy/yUm+R8UfEse5njaA0/6XxekOP7hR8co4mTnPvq1GA2G4P ZuZfQNf7ADHBEiJe9STIvjUvpoln8hJyZM0/QT9jT876Evm7bon3tdSby9PNBw2N vNSAch4YsWjIb4r7Vi1hKF/okWK/EkY8Gtopob+d/pm2lByeoHqDbt700viNqvbb TJxLrWFfJ6BTG8efGZ3dmyVkfQjgp3E3AI2CReKOZ2ArRh8D0ES7ItAo236bWh8H b6Op9QSUaB+Sj6nyn5u8fH/sywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEv/4itM y1rvYLdV/mx7b3CJZwz0MB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm UWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG+F8cMPT54DHcCvRUSzI/rtTjcewjRIrfLauaPYaw0EwNmGlXL1ni BBU+JEghAJkDkAoFLtBUjTIFqnJ3ytugXJrLI/vC6YrJ7cZeDDqoaDd/yT7HXOOJ 27tPbeDJzptcBS2b8wkuyR0wV9VeLMUdWBrqpUES6u4XfEPkfi4PIEDVuyqjM+n8 YpLvkAe4CFb8QA20ZPK8bqDMxr8P/y07djjMJGDw5qiwjsqvuSwDvyIF31ZWxPZ0 iN/hfm4pKx4C9SK8TD/sZ0NcJpfSO1S2oFHB5GlC8tswKNG6yQMzQVpVLOlLUAWD QiCxrKn1gs8XBItBSDvxp/fxAT5ZOKi7 -----END CERTIFICATE-----Generated at Wed May 1 05:59:05 2024 by rpki-client on console-fra.rpki-client.org