$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft File: TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json) Hash identifier: urF9HN5MqHjLOniy2ruLYpEEVDP1VrTDRrGzEyIU0b4= Subject key identifier: 65:62:1D:FE:92:1F:43:C8:F9:27:69:AF:7A:45:44:C7:D5:70:D5:CD Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft Manifest number: 6C Signing time: Wed 15 May 2024 07:34:45 +0000 Manifest this update: Wed 15 May 2024 07:34:44 +0000 Manifest next update: Wed 22 May 2024 07:34:44 +0000 Files and hashes: 1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: 3B95m/81FHWTCotQuPZeaR0Ibemgk+WnLyLUr8ZjCrg=) 2: 25FE32B86D9D11EEB269D31CC4F9AE02.roa (hash: mDG6KWQqIBky5hpF/nD1JeOvhohU5HXcZMUm9gFQtRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Validity Not Before: May 15 07:34:44 2024 GMT Not After : May 22 07:34:44 2024 GMT Subject: CN=66446594-12e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:65:63:42:e0:69:10:82:71:8e:39:33:18: e3:22:de:09:c8:f2:80:68:40:65:05:ed:c1:c4:c9: 70:f0:e5:4e:9b:be:3b:e5:ac:6f:84:02:51:cd:ac: 63:00:f2:92:1e:f4:87:8f:ec:1c:4f:49:3e:a1:b7: bb:fa:b2:b8:1a:13:16:4b:c9:5f:25:b4:99:8c:76: 89:51:fe:0f:2c:f6:5c:0e:7b:73:3e:ff:5b:eb:86: 07:09:85:5d:40:d1:4f:f5:01:9a:82:1c:a9:e6:aa: f2:27:b6:f0:b0:68:79:a7:e7:78:5a:10:64:82:6d: 28:75:0d:55:fd:38:be:54:8f:e6:ef:4c:64:f1:10: f5:52:a0:b7:ef:ed:1f:84:9c:9a:d5:2e:b5:06:b2: 73:ba:0a:5f:d9:45:4c:c5:4f:8f:51:ba:95:d9:a8: e4:00:1e:59:6e:b6:dd:8c:64:f8:a1:11:58:01:e7: 50:31:d7:45:af:da:b3:d0:ff:00:0d:49:2e:08:0e: 05:cd:d0:14:90:44:60:00:9f:a6:83:3c:62:da:d6: e7:f2:3c:81:6d:47:7b:06:f6:26:08:8d:a3:3c:14: 98:33:4c:1a:b9:83:c4:97:25:9a:14:bf:38:3b:e0: 3b:bf:cc:7c:55:f9:fb:3f:0d:c9:8b:7a:bf:c5:ba: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:62:1D:FE:92:1F:43:C8:F9:27:69:AF:7A:45:44:C7:D5:70:D5:CD X509v3 Authority Key Identifier: keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:4e:ba:d0:95:84:b1:f3:97:e7:9e:1d:c8:f7:e7:78:17:34: 2a:1f:15:dd:05:1c:e8:78:a0:ce:cd:e1:75:3d:80:86:99:7a: f4:78:43:0d:4e:6d:e9:2c:84:0c:1e:66:5f:4f:3d:24:6e:d2: 80:89:95:b8:20:03:26:9c:39:74:69:99:73:bc:f8:ee:d1:4d: 6d:b8:9d:ed:30:39:48:fc:33:b9:df:63:22:bf:69:cd:32:e7: 55:51:49:aa:8f:b0:e0:47:ea:c3:3e:d6:be:8a:7b:ec:1b:b5: da:36:7e:c4:29:d0:78:57:f5:09:45:94:4f:07:36:3e:37:28: 66:5c:d4:2c:fb:5c:0e:65:24:96:eb:6f:fe:a8:bb:b5:7e:ad: cc:2a:8f:90:82:b2:09:48:55:fb:50:81:ec:82:bc:bb:0b:c3: db:df:82:08:be:39:72:f9:a4:bf:dd:df:ac:da:d3:99:ec:7c: d6:74:b2:94:25:ae:66:87:67:ef:40:3d:7f:87:b8:66:c1:6c: a3:0b:87:40:87:19:4a:ea:a3:b5:3b:27:77:da:2c:02:e6:1c: 41:1e:95:75:ca:f4:e8:df:94:50:26:3a:df:48:0d:61:cc:64: 9f:a0:b6:89:c8:5c:33:74:a8:a2:31:3f:ec:ec:d4:30:99:bc: aa:67:98:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MEQ3OTExMC8GA1UEBRMoNEUyMUY1QUE4QzkyOEMwQjY3NTdDMDNFNTVCMEE1OTIz QzRFNDhBQjAeFw0yNDA1MTUwNzM0NDRaFw0yNDA1MjIwNzM0NDRaMBgxFjAUBgNV BAMTDTY2NDQ2NTk0LTEyZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg22VjQuBpEIJxjjkzGOMi3gnI8oBoQGUF7cHEyXDw5U6bvjvlrG+EAlHNrGMA 8pIe9IeP7BxPST6ht7v6srgaExZLyV8ltJmMdolR/g8s9lwOe3M+/1vrhgcJhV1A 0U/1AZqCHKnmqvIntvCwaHmn53haEGSCbSh1DVX9OL5Uj+bvTGTxEPVSoLfv7R+E nJrVLrUGsnO6Cl/ZRUzFT49RupXZqOQAHllutt2MZPihEVgB51Ax10Wv2rPQ/wAN SS4IDgXN0BSQRGAAn6aDPGLa1ufyPIFtR3sG9iYIjaM8FJgzTBq5g8SXJZoUvzg7 4Du/zHxV+fs/DcmLer/FutrhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZWId/pIf Q8j5J2mvekVEx9Vw1c0wHwYDVR0jBBgwFoAUTiH1qoySjAtnV8A+VbClkjxOSKsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwRDc5L0UxODIwOEJDNkQ5 QzExRUVBMDJCQkIwRUM0RjlBRTAyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVGlIMXFveVNqQXRuVjhBLVZiQ2xranhPU0tzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw RDc5L0UxODIwOEJDNkQ5QzExRUVBMDJCQkIwRUM0RjlBRTAyL1RpSDFxb3lTakF0 blY4QS1WYkNsa2p4T1NLcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAABOutCVhLHzl+eeHcj353gXNCofFd0FHOh4oM7N4XU9gIaZevR4Qw1O bekshAweZl9PPSRu0oCJlbggAyacOXRpmXO8+O7RTW24ne0wOUj8M7nfYyK/ac0y 51VRSaqPsOBH6sM+1r6Ke+wbtdo2fsQp0HhX9QlFlE8HNj43KGZc1Cz7XA5lJJbr b/6ou7V+rcwqj5CCsglIVftQgeyCvLsLw9vfggi+OXL5pL/d36za05nsfNZ0spQl rmaHZ+9APX+HuGbBbKMLh0CHGUrqo7U7J3faLALmHEEelXXK9OjflFAmOt9IDWHM ZJ+gtonIXDN0qKIxP+zs1DCZvKpnmFk= -----END CERTIFICATE-----Generated at Wed May 15 09:27:35 2024 by rpki-client on console-fra.rpki-client.org