$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: A8d8GWi9egyZxyIkVPhu7dGS2UZjEq1Fp62NgpsAut8= Subject key identifier: 3C:7E:3D:96:C6:C9:F8:D9:AC:D6:75:4E:58:AC:B1:90:80:2C:6B:15 Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 037F Signing time: Tue 07 May 2024 02:42:35 +0000 Manifest this update: Tue 07 May 2024 02:42:35 +0000 Manifest next update: Tue 14 May 2024 02:42:35 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: w4jyPeSHLnhmND2hXY7COCutrQYDmdMzguRR8NL7Hbg=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: 8LqVNZGnN7EEUzEyIO/ZMBYVHIlqnX+H5rTTwNu0+7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: May 7 02:42:35 2024 GMT Not After : May 14 02:42:35 2024 GMT Subject: CN=6639951b-4013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:64:93:cc:df:04:90:59:e2:0b:93:f1:53:88: 0e:b3:a2:5a:67:ee:24:a5:a4:c9:27:8e:75:27:fd: cc:b6:47:bb:bd:83:cb:78:d5:6e:11:78:bf:10:3f: 68:b5:9c:53:f4:bd:0e:19:21:6c:5d:d5:d7:ea:32: 5e:00:d1:d7:2d:d7:1d:b0:d5:21:e9:fd:38:95:b8: da:5d:af:e2:99:4f:d8:85:bb:f3:ac:65:9e:4c:54: de:48:e3:4c:29:0b:6f:83:90:73:e5:c4:92:89:33: f8:bf:fd:41:61:e7:35:ed:87:27:95:8f:95:bb:71: a9:31:5b:4e:b2:f7:d5:d7:e4:73:a6:ab:2d:98:af: e8:ce:99:ab:20:cc:b7:6a:38:d8:81:b8:0c:fc:00: 37:6c:f7:d6:a9:a3:97:13:1a:f1:d5:2a:14:2a:9a: 42:41:30:b0:35:76:4a:9f:f1:f0:c0:b4:f8:86:55: 8e:67:7a:9a:90:40:e2:68:c2:98:21:0b:58:58:9e: d9:4e:9d:b4:18:41:02:ca:a0:af:32:e2:dc:07:82: 10:40:56:75:26:f7:45:21:2e:f9:c8:7e:68:b6:48: 6c:15:b3:88:f2:78:ae:9a:bc:52:74:2c:26:13:28: 50:70:7d:7b:25:1e:86:1c:c7:cd:69:86:b9:9d:c5: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7E:3D:96:C6:C9:F8:D9:AC:D6:75:4E:58:AC:B1:90:80:2C:6B:15 X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:42:5d:9f:f3:2b:72:7f:58:1d:8c:ae:44:d5:42:2b:74:e9: 2e:a2:e4:b7:8e:b7:05:da:f5:ea:07:07:c8:34:c5:41:d1:1d: 91:a9:46:92:2f:e5:ed:b4:2a:40:c3:9a:65:12:11:49:7a:00: ca:ff:a8:93:99:29:38:a8:73:c2:64:2f:fa:e4:fa:9f:80:cf: 13:b4:70:cf:a8:7e:a6:97:b1:2b:1c:77:42:76:31:35:35:12: b9:0e:27:16:40:55:da:f3:c0:52:7a:e9:72:f6:f3:9b:5b:31: c9:19:3b:f3:36:fb:82:9a:28:7c:ca:c3:d3:88:45:71:c6:6b: 61:20:52:11:4c:7c:7e:10:cc:07:ef:82:49:20:b8:1d:75:cc: 7a:93:b5:a1:14:0a:64:ed:f7:c0:15:e8:75:17:4a:6a:7f:1d: 95:b5:27:39:d0:28:f7:c7:d9:2b:ac:32:19:c9:3a:13:b8:87: f3:05:39:ff:00:84:b5:f1:1d:e7:82:7c:59:00:98:ea:94:c6: bc:1f:0b:98:c0:f8:57:83:02:1d:e8:fe:22:e7:0b:05:f3:75: 4c:5c:50:2e:d0:e1:c8:35:af:c2:4f:e2:fb:96:55:b8:0d:ee: e2:7f:19:a5:14:46:cb:b1:99:62:bd:32:c7:9d:2d:94:d9:08: 9a:7f:f4:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjQwNTA3MDI0MjM1WhcNMjQwNTE0MDI0MjM1WjAYMRYwFAYD VQQDEw02NjM5OTUxYi00MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGSTzN8EkFniC5PxU4gOs6JaZ+4kpaTJJ451J/3Mtke7vYPLeNVuEXi/ED9o tZxT9L0OGSFsXdXX6jJeANHXLdcdsNUh6f04lbjaXa/imU/YhbvzrGWeTFTeSONM KQtvg5Bz5cSSiTP4v/1BYec17YcnlY+Vu3GpMVtOsvfV1+RzpqstmK/ozpmrIMy3 ajjYgbgM/AA3bPfWqaOXExrx1SoUKppCQTCwNXZKn/HwwLT4hlWOZ3qakEDiaMKY IQtYWJ7ZTp20GEECyqCvMuLcB4IQQFZ1JvdFIS75yH5otkhsFbOI8niumrxSdCwm EyhQcH17JR6GHMfNaYa5ncXoLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx+PZbG yfjZrNZ1TlissZCALGsVMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrQl2f8ytyf1gdjK5E1UIrdOkuouS3jrcF2vXqBwfINMVB0R2RqUaS L+XttCpAw5plEhFJegDK/6iTmSk4qHPCZC/65PqfgM8TtHDPqH6ml7ErHHdCdjE1 NRK5DicWQFXa88BSeuly9vObWzHJGTvzNvuCmih8ysPTiEVxxmthIFIRTHx+EMwH 74JJILgddcx6k7WhFApk7ffAFeh1F0pqfx2VtSc50Cj3x9krrDIZyToTuIfzBTn/ AIS18R3ngnxZAJjqlMa8HwuYwPhXgwId6P4i5wsF83VMXFAu0OHINa/CT+L7llW4 De7ifxmlFEbLsZlivTLHnS2U2Qiaf/QI -----END CERTIFICATE-----Generated at Tue May 7 03:49:59 2024 by rpki-client on console-ams.rpki-client.org