$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: iANqu0T65BG1uKn65n5cI4IGOCkTXVC7qo+LkNw13IQ= Subject key identifier: 6D:B8:3D:79:C4:D8:4F:22:22:9E:69:28:61:63:1F:8F:D3:C5:95:7E Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 051A Signing time: Tue 07 May 2024 01:05:38 +0000 Manifest this update: Tue 07 May 2024 01:05:38 +0000 Manifest next update: Tue 14 May 2024 01:05:38 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: qxwlQk2MeKhuBNiVA4jMgHk/xovlja/KVbNmrIc6pmk=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: d5mFWxrUjwrdWO1oCfV1VPt1rcCFZp20BDjZF+BI4cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: May 7 01:05:38 2024 GMT Not After : May 14 01:05:38 2024 GMT Subject: CN=66397e62-9056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:bc:df:ae:24:8f:68:e3:26:13:6c:61:92: c0:47:98:ee:07:65:a5:7c:02:b6:9e:24:32:c0:f2: 5f:f6:54:31:1e:61:30:09:50:b7:a0:fd:8d:19:66: 08:5f:24:95:27:cf:68:c2:a1:39:3a:c0:69:43:b3: a3:d1:30:8c:42:15:60:f0:8a:6e:b7:16:52:16:dc: 97:65:6a:a5:49:f1:73:c2:36:b2:b3:6d:00:be:f6: f0:94:c6:3b:c8:f2:04:a7:d6:0c:4f:3a:51:f4:e1: 4c:6b:1c:6c:e3:51:b1:88:16:98:d4:10:6e:55:9b: 28:06:09:02:1b:51:0d:a8:7b:96:0d:65:f6:aa:c0: 83:a6:2e:47:78:be:44:de:ef:85:c2:c0:18:4d:b9: 20:54:e7:fd:23:8b:39:97:dd:44:95:98:04:90:f6: 87:50:43:dc:1c:dd:17:32:c3:a0:7c:eb:04:ac:94: b5:36:ee:cd:53:aa:72:7b:42:86:03:2a:a1:63:f0: a8:91:d9:dd:1e:26:8c:fd:8c:79:7e:7a:6c:1a:22: fe:1a:e2:22:f0:e9:fd:02:90:4f:27:1e:07:9c:90: df:1a:28:16:b3:49:92:88:b6:dd:cb:d8:63:bd:3b: 3d:7f:45:ea:13:fc:27:a3:24:2b:20:56:ee:a0:10: 32:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B8:3D:79:C4:D8:4F:22:22:9E:69:28:61:63:1F:8F:D3:C5:95:7E X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:db:3e:4c:30:d0:ec:d1:2d:b0:4c:a7:c0:54:82:3f:89:77: 1a:db:c2:90:30:85:ae:95:92:58:b4:1c:a4:ff:35:8f:d0:f3: 3f:2d:ac:17:dd:af:77:04:96:54:bd:7d:5d:77:4d:13:7a:25: f3:bc:53:0d:08:76:14:49:59:17:4f:81:3b:39:4f:43:0e:57: 4c:8b:f9:00:a8:3b:8b:4e:2e:09:cc:5e:13:e3:e0:1c:9b:6a: 59:6e:e9:7b:a1:1f:99:96:13:d5:39:1f:f9:69:56:00:09:d2: 65:20:6f:e0:f1:f2:05:fb:9d:dd:5c:58:0d:31:dc:fa:e0:88: ad:c4:ee:8c:d1:68:2d:67:e0:6b:05:41:67:4c:53:ea:dc:c4: fa:42:cb:5e:bc:71:e4:e1:be:39:1d:ce:43:6e:d2:ff:75:f8: e7:87:ac:cc:23:f1:c6:d9:55:9c:68:e9:ac:ce:5e:38:a2:e8: 58:67:ee:31:a3:74:c7:8c:35:6c:f5:17:c6:29:88:fd:17:07: 35:d2:99:f9:a1:8f:a1:1e:c3:4b:48:a5:ae:ac:75:f3:31:29: a8:d3:5a:4a:85:a2:1c:33:7b:f3:63:82:cc:1e:c2:7f:52:17: 1a:33:fb:f0:95:a9:ac:30:05:68:95:6a:ec:27:92:1b:59:69: 25:74:65:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjQwNTA3MDEwNTM4WhcNMjQwNTE0MDEwNTM4WjAYMRYwFAYD VQQDEw02NjM5N2U2Mi05MDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMO8364kj2jjJhNsYZLAR5juB2WlfAK2niQywPJf9lQxHmEwCVC3oP2NGWYI XySVJ89owqE5OsBpQ7Oj0TCMQhVg8IputxZSFtyXZWqlSfFzwjays20AvvbwlMY7 yPIEp9YMTzpR9OFMaxxs41GxiBaY1BBuVZsoBgkCG1ENqHuWDWX2qsCDpi5HeL5E 3u+FwsAYTbkgVOf9I4s5l91ElZgEkPaHUEPcHN0XMsOgfOsErJS1Nu7NU6pye0KG AyqhY/CokdndHiaM/Yx5fnpsGiL+GuIi8On9ApBPJx4HnJDfGigWs0mSiLbdy9hj vTs9f0XqE/wnoyQrIFbuoBAyowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG24PXnE 2E8iIp5pKGFjH4/TxZV+MB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK2z5MMNDs0S2wTKfAVII/iXca28KQMIWulZJYtByk/zWP0PM/LawX 3a93BJZUvX1dd00TeiXzvFMNCHYUSVkXT4E7OU9DDldMi/kAqDuLTi4JzF4T4+Ac m2pZbul7oR+ZlhPVOR/5aVYACdJlIG/g8fIF+53dXFgNMdz64IitxO6M0WgtZ+Br BUFnTFPq3MT6QstevHHk4b45Hc5DbtL/dfjnh6zMI/HG2VWcaOmszl44ouhYZ+4x o3THjDVs9RfGKYj9Fwc10pn5oY+hHsNLSKWurHXzMSmo01pKhaIcM3vzY4LMHsJ/ UhcaM/vwlamsMAVolWrsJ5IbWWkldGVb -----END CERTIFICATE-----Generated at Tue May 7 02:01:01 2024 by rpki-client on console-ams.rpki-client.org