$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json) Hash identifier: cbMDKTVvhaU0hCaSv/3LAePpQLdjBk84rInqlTdzobA= Subject key identifier: 03:9D:5E:E7:00:53:46:3D:82:DB:BB:67:AF:54:EF:70:C7:9F:41:81 Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Certificate serial: 0B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft Manifest number: 0B0B Signing time: Thu 02 May 2024 19:58:54 +0000 Manifest this update: Thu 02 May 2024 19:58:54 +0000 Manifest next update: Thu 09 May 2024 19:58:54 +0000 Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: mZu5urfJBnEsOV9tXyZCSTSCK1vAgS9RT1IXENgKCsY=) 2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: 5JAvfuZxeu8ChYZ2CIrMQKZADiR2blU/2OC6uLVE0qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2833 (0xb11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Validity Not Before: May 2 19:58:54 2024 GMT Not After : May 9 19:58:54 2024 GMT Subject: CN=6633f07e-8722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6b:5b:19:b2:19:60:59:d6:16:30:4e:f2:ab: ca:d1:30:2c:94:ff:49:94:41:7e:34:86:47:39:2d: f1:a5:c6:ce:fc:f7:92:e6:a4:ab:4a:11:11:9f:cb: 31:92:b2:61:5a:75:57:15:81:c9:69:3e:b3:98:a7: af:e3:aa:e8:bc:76:e9:7a:da:41:4e:40:04:61:fd: 63:03:24:90:3a:fa:14:3c:a5:54:37:cd:13:c2:e9: 29:16:0a:81:a8:f1:b4:c6:3a:90:6b:33:8b:c4:f2: f7:e3:d1:54:0b:8b:e5:65:12:8c:ae:ef:51:f7:76: 49:36:4b:83:fe:d5:e2:2a:ca:2c:bd:c5:da:49:f4: c8:93:41:5b:da:9a:e9:6f:b3:b6:ff:80:ea:f4:ca: 3a:b1:3b:a9:93:09:d3:7d:0b:78:ec:48:62:7f:29: c1:b6:84:22:3a:9e:64:a6:3f:e8:22:b6:da:6f:4a: 28:a6:6a:b3:c5:25:c4:55:15:64:e8:d2:09:c0:06: 62:94:8e:a7:a4:3d:99:e2:6e:49:d3:82:cd:6f:ce: 2a:1e:eb:64:3e:0b:67:8e:13:e3:09:8a:f6:9b:da: 9d:51:eb:57:24:19:e2:af:67:18:7a:57:a2:1e:2b: b1:fc:5e:22:e6:61:f0:e4:b2:94:ea:4f:3b:53:29: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9D:5E:E7:00:53:46:3D:82:DB:BB:67:AF:54:EF:70:C7:9F:41:81 X509v3 Authority Key Identifier: keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:35:2e:1b:cf:e0:db:da:0a:19:44:6a:6b:07:8b:34:15:2b: 84:0b:38:11:18:91:94:2f:73:a9:22:69:92:ce:db:a6:9c:73: f5:7f:bb:72:d7:12:4f:1b:1a:14:c4:90:45:70:63:49:b1:47: 62:28:bb:a3:51:16:3d:3c:23:a9:f3:59:c5:c0:2e:e9:a4:00: 22:6e:05:ba:a6:da:4e:1d:6e:a4:a0:a4:f7:8e:40:12:f4:e4: 8e:4d:21:8c:31:2c:0f:97:b6:6a:b0:99:5b:c4:e3:39:cb:e4: 92:8b:40:b9:8b:cc:da:da:4e:e7:2c:0a:ba:1c:93:cf:94:c7: 5d:63:6c:c2:da:0e:ba:6b:71:81:5d:de:72:f7:ef:c4:c7:7b: ba:2a:fd:47:ce:ff:55:42:62:3e:4f:ad:54:f9:51:59:b4:46: 68:11:19:f3:fa:59:de:40:7c:ad:f4:77:0b:d5:c6:a9:28:77: b8:e5:9a:9a:94:c5:b4:fa:52:da:b2:19:85:b6:5f:f1:55:96: 6f:9f:6a:fe:b5:bf:24:e9:48:e0:89:ad:02:d3:4b:5e:b6:5a: ee:83:59:07:71:0e:d2:7c:a4:42:05:3e:13:c0:dc:f6:e2:4e: 63:07:89:48:ae:46:d1:f6:f1:c7:05:08:b1:4f:3a:f5:5b:17: af:7d:aa:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1MzMxMTAvBgNVBAUTKDRDODFGMDE5M0ExQzU3MjQ0NTdGNTJFMDRFMTFGMjUy NzNFNkZFRTAwHhcNMjQwNTAyMTk1ODU0WhcNMjQwNTA5MTk1ODU0WjAYMRYwFAYD VQQDEw02NjMzZjA3ZS04NzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WtbGbIZYFnWFjBO8qvK0TAslP9JlEF+NIZHOS3xpcbO/PeS5qSrShERn8sx krJhWnVXFYHJaT6zmKev46rovHbpetpBTkAEYf1jAySQOvoUPKVUN80TwukpFgqB qPG0xjqQazOLxPL349FUC4vlZRKMru9R93ZJNkuD/tXiKsosvcXaSfTIk0Fb2prp b7O2/4Dq9Mo6sTupkwnTfQt47EhifynBtoQiOp5kpj/oIrbab0oopmqzxSXEVRVk 6NIJwAZilI6npD2Z4m5J04LNb84qHutkPgtnjhPjCYr2m9qdUetXJBnir2cYelei Hiux/F4i5mHw5LKU6k87UyntRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOdXucA U0Y9gtu7Z69U73DHn0GBMB8GA1UdIwQYMBaAFEyB8Bk6HFckRX9S4E4R8lJz5v7g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTUzMy8wNjExNTFGMjFB NEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5UkZmMUxnVGhIeVVuUG1f dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RJSHdHVG9jVnlSRmYxTGdUaEh5VW5QbV91QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTUzMy8wNjExNTFGMjFBNEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5 UkZmMUxnVGhIeVVuUG1fdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADNS4bz+Db2goZRGprB4s0FSuECzgRGJGUL3OpImmSztumnHP1f7ty 1xJPGxoUxJBFcGNJsUdiKLujURY9PCOp81nFwC7ppAAibgW6ptpOHW6koKT3jkAS 9OSOTSGMMSwPl7ZqsJlbxOM5y+SSi0C5i8za2k7nLAq6HJPPlMddY2zC2g66a3GB Xd5y9+/Ex3u6Kv1Hzv9VQmI+T61U+VFZtEZoERnz+lneQHyt9HcL1capKHe45Zqa lMW0+lLashmFtl/xVZZvn2r+tb8k6Ujgia0C00tetlrug1kHcQ7SfKRCBT4TwNz2 4k5jB4lIrkbR9vHHBQixTzr1Wxevfao1 -----END CERTIFICATE-----Generated at Thu May 2 22:28:54 2024 by rpki-client on console-ams.rpki-client.org