$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft File: TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json) Hash identifier: 6FpCdEUO8vELn5++1Vtk09m/nmBt7mURXK6cbr+ehoo= Subject key identifier: 37:D0:35:DD:BE:BB:7C:23:F1:57:5D:C1:AA:E0:A0:8A:87:EB:CC:F5 Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Certificate serial: 17EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft Manifest number: 17C6 Signing time: Tue 30 Apr 2024 17:09:26 +0000 Manifest this update: Tue 30 Apr 2024 17:09:25 +0000 Manifest next update: Tue 07 May 2024 17:09:25 +0000 Files and hashes: 1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: kNlCG/Mje1kpf/Ki/Qs8mQi/kUPzMV8DZJGk6Ooho5s=) 2: EC6D3E86C82D11EEA128EF45C4F9AE02.roa (hash: tIodGgzTtrSwHBWaZYb/3vkiJKF6q/kRwV0x2lo08tA=) 3: EE826AB0C83311EEA202644EC4F9AE02.roa (hash: CypTIf1EBegC6vfig2SSrdyROe9emX+5AHEvCIwSkVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6123 (0x17eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23 Validity Not Before: Apr 30 17:09:25 2024 GMT Not After : May 7 17:09:25 2024 GMT Subject: CN=663125c5-b715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:14:f3:e7:dc:7e:51:bd:e6:54:6d:d0:2e:78: c4:f2:ae:a1:fa:2b:a9:3d:00:9c:a0:18:67:ae:09: 79:81:88:cf:a4:15:5a:be:00:51:0f:db:2a:6d:c1: 99:de:6b:71:33:2d:b5:a6:f5:de:5d:ec:53:46:e4: bc:12:60:b4:7f:d6:00:4b:04:fb:c3:c2:ff:f5:7d: 7f:17:04:2c:f8:88:b1:68:cb:dd:2b:88:3d:6e:c9: 12:23:38:a9:f3:47:a0:fa:62:b3:04:0a:cc:37:95: 3e:2a:fb:fb:55:6f:85:b2:b7:a4:34:05:8c:f5:0b: 0a:0c:bb:c5:bd:8d:1a:f8:d1:91:1c:7b:ea:80:7f: 1f:b3:c4:10:1a:b4:40:62:ae:94:5e:4d:3f:5f:65: 74:5f:a4:bd:47:eb:8d:99:69:af:f7:3d:2c:45:73: 9e:a0:eb:b8:c0:ee:39:35:66:d3:72:c7:2c:36:9a: 65:3b:d4:f0:46:ad:a3:ff:ed:03:02:a1:93:98:ae: c3:e6:8c:e1:f7:9f:c2:fc:c9:62:d7:f8:d8:d9:e9: 68:ba:34:f6:d3:c0:96:83:8b:9f:69:ec:3b:c2:9f: 31:ac:71:96:04:34:ab:d7:aa:63:2c:80:46:87:27: 3f:80:40:09:c1:a4:bc:13:d6:c3:84:cd:35:75:13: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D0:35:DD:BE:BB:7C:23:F1:57:5D:C1:AA:E0:A0:8A:87:EB:CC:F5 X509v3 Authority Key Identifier: keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:ba:25:c6:15:fe:32:b8:27:57:89:64:1b:75:25:67:7f:b0: 4e:32:09:21:49:be:78:52:db:d0:b9:cc:c4:d7:b6:ce:7c:3a: 01:97:22:12:03:72:a7:b7:a3:13:3f:2d:12:86:53:4b:fb:4e: bc:07:76:32:7f:84:bc:8d:85:3d:3e:e4:31:60:33:dc:ff:77: a1:22:b4:92:c3:fa:65:0f:d1:06:d1:61:26:1b:dc:4f:21:d1: 21:ef:a4:9a:3e:81:91:30:4d:ef:4a:bd:6c:56:66:8b:eb:19: 93:b8:dd:38:80:b2:5c:11:e1:b7:60:8a:2e:d2:75:ee:6e:8a: f2:a0:ae:9f:89:78:7f:9b:b5:bd:ef:82:14:9e:a7:b5:24:54: da:bb:4e:ad:4a:c4:6c:0e:f6:24:55:6b:d5:f2:95:23:01:9e: 4e:a9:8c:1c:7b:40:a3:d5:d3:9b:45:27:35:81:e4:b6:06:8d: 71:3c:96:92:c2:4b:7e:79:95:20:14:d1:c4:69:ce:70:50:8c: 3a:cf:0a:d4:47:ac:29:71:b7:f6:bd:04:9e:e3:ff:65:fa:87: 32:e8:b5:6f:32:2b:83:bf:34:d1:9f:8d:7f:97:ab:59:5d:27: 68:b1:3a:9b:a1:f9:a5:23:27:6f:0f:b0:2c:ff:85:5e:27:be: c6:45:e3:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF NjhBREZEMjMwHhcNMjQwNDMwMTcwOTI1WhcNMjQwNTA3MTcwOTI1WjAYMRYwFAYD VQQDEw02NjMxMjVjNS1iNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBTz59x+Ub3mVG3QLnjE8q6h+iupPQCcoBhnrgl5gYjPpBVavgBRD9sqbcGZ 3mtxMy21pvXeXexTRuS8EmC0f9YASwT7w8L/9X1/FwQs+IixaMvdK4g9bskSIzip 80eg+mKzBArMN5U+Kvv7VW+FsrekNAWM9QsKDLvFvY0a+NGRHHvqgH8fs8QQGrRA Yq6UXk0/X2V0X6S9R+uNmWmv9z0sRXOeoOu4wO45NWbTcscsNpplO9TwRq2j/+0D AqGTmK7D5ozh95/C/Mli1/jY2eloujT208CWg4ufaew7wp8xrHGWBDSr16pjLIBG hyc/gEAJwaS8E9bDhM01dRMz1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfQNd2+ u3wj8VddwargoIqH68z1MB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1 QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCRi9FMzYxQkEyMEE1QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1 S1Yzc1ljR3pLazdtaXRfU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTuiXGFf4yuCdXiWQbdSVnf7BOMgkhSb54UtvQuczE17bOfDoBlyIS A3Knt6MTPy0ShlNL+068B3Yyf4S8jYU9PuQxYDPc/3ehIrSSw/plD9EG0WEmG9xP IdEh76SaPoGRME3vSr1sVmaL6xmTuN04gLJcEeG3YIou0nXuboryoK6fiXh/m7W9 74IUnqe1JFTau06tSsRsDvYkVWvV8pUjAZ5OqYwce0Cj1dObRSc1geS2Bo1xPJaS wkt+eZUgFNHEac5wUIw6zwrUR6wpcbf2vQSe4/9l+ocy6LVvMiuDvzTRn41/l6tZ XSdosTqbofmlIydvD7As/4VeJ77GReM9 -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:39 2024 by rpki-client on console-ams.rpki-client.org