$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: CjIthEOOi0T0d8OXE47RD98ji2C1BSifpDaG1CCgcgA= Subject key identifier: 5A:69:8E:D2:A4:09:65:65:E2:35:7B:17:17:42:8E:C6:72:50:77:8E Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0F17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 0F0D Signing time: Thu 02 May 2024 18:18:53 +0000 Manifest this update: Thu 02 May 2024 18:18:52 +0000 Manifest next update: Thu 09 May 2024 18:18:52 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: H0yNmnTyY4MpPYvio6GfU7rSnZdqGvLHxgc/dq0+WGQ=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: vD+qYIZoui8GSvqnoCeAE8Hm7uycn+cn703sjAepaaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3863 (0xf17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: May 2 18:18:52 2024 GMT Not After : May 9 18:18:52 2024 GMT Subject: CN=6633d90c-4866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2d:e3:fe:3d:6e:f5:c6:84:91:65:4d:e2:ba: ca:f2:ae:a6:11:7b:f9:36:49:79:07:9a:ab:76:23: f6:e9:1b:ca:03:1a:fd:04:1a:c3:04:c4:37:9f:e3: dc:67:29:9c:d7:d8:88:28:90:ce:66:0f:2a:ef:e0: b1:05:5e:d9:9c:06:91:b9:ed:48:b3:9b:5b:7d:39: 6c:ca:be:f6:5c:55:e4:d2:0a:6c:a5:62:fc:d0:87: 39:67:db:76:c3:1c:1c:24:e4:7f:e6:4d:0f:66:7f: ec:63:79:de:2b:64:5a:cb:9a:6f:c6:94:b5:72:ab: 25:fc:5a:bc:40:a1:a8:6e:fc:dc:ba:22:b4:ba:89: 7d:9d:d4:09:1c:1c:43:59:f9:38:71:9d:0f:3f:9f: 3d:0f:42:8b:9e:14:b8:55:da:be:4a:75:0a:14:94: 8d:14:2e:bd:e7:32:13:ba:b7:05:3e:fd:f2:b1:6f: 9a:6b:65:46:b5:fe:ab:c6:01:12:d4:31:3f:e0:4c: 81:9c:bb:cc:1a:b1:cc:db:af:01:23:31:5b:d4:14: 4a:97:dc:49:19:7c:52:69:25:cc:45:5f:6d:48:3b: ca:6c:59:9c:3d:ae:f9:ac:40:b9:8c:1f:d6:d1:1c: 43:d1:fc:35:82:83:b2:f4:5c:ba:3b:96:f4:18:3f: 75:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:69:8E:D2:A4:09:65:65:E2:35:7B:17:17:42:8E:C6:72:50:77:8E X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:04:53:20:82:e8:57:ca:b7:8a:97:be:4d:04:4d:7d:15:13: d7:70:fd:9a:24:66:cd:a2:24:c6:de:d3:56:e6:d7:ba:0e:37: b3:1c:23:dc:30:33:49:f8:2b:42:3d:8b:b8:9e:32:5e:06:55: 06:fc:9d:74:0a:b5:5b:d0:4f:96:22:9a:c0:db:4b:9f:7d:33: 05:00:34:75:ef:2c:f2:fd:19:d7:dc:52:6c:99:b8:3b:22:ee: 7e:39:af:9c:a3:f7:44:a8:51:d8:3c:d3:04:c2:88:02:ed:11: e0:c1:1b:01:0e:c5:36:dc:5a:b3:5f:ba:44:90:b5:01:b5:a5: bd:75:d1:8c:89:2e:ce:76:b5:fb:8a:16:b5:de:97:0d:4d:55: 20:16:fe:b7:e8:e0:5a:96:f6:19:00:42:69:13:4a:c9:fc:03: cf:4b:b3:f9:ec:43:6e:cb:00:7d:89:e7:81:8c:b6:28:5d:d7: a2:03:1e:68:14:25:ca:68:03:0b:22:2e:bb:08:2b:c2:1a:3b: b8:9b:61:c9:61:89:06:d6:cb:37:6d:6e:e1:83:93:96:c5:69: 19:af:f4:cc:92:42:37:0f:2c:25:db:b7:d4:72:7d:b5:21:a0: 93:3a:c0:66:2f:51:e8:ff:3f:40:4c:68:d3:d3:63:49:49:da: 28:a0:95:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjQwNTAyMTgxODUyWhcNMjQwNTA5MTgxODUyWjAYMRYwFAYD VQQDEw02NjMzZDkwYy00ODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3i3j/j1u9caEkWVN4rrK8q6mEXv5Nkl5B5qrdiP26RvKAxr9BBrDBMQ3n+Pc Zymc19iIKJDOZg8q7+CxBV7ZnAaRue1Is5tbfTlsyr72XFXk0gpspWL80Ic5Z9t2 wxwcJOR/5k0PZn/sY3neK2Ray5pvxpS1cqsl/Fq8QKGobvzcuiK0uol9ndQJHBxD Wfk4cZ0PP589D0KLnhS4Vdq+SnUKFJSNFC695zITurcFPv3ysW+aa2VGtf6rxgES 1DE/4EyBnLvMGrHM268BIzFb1BRKl9xJGXxSaSXMRV9tSDvKbFmcPa75rEC5jB/W 0RxD0fw1goOy9Fy6O5b0GD91ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFppjtKk CWVl4jV7FxdCjsZyUHeOMB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHBFMgguhXyreKl75NBE19FRPXcP2aJGbNoiTG3tNW5te6DjezHCPc MDNJ+CtCPYu4njJeBlUG/J10CrVb0E+WIprA20uffTMFADR17yzy/RnX3FJsmbg7 Iu5+Oa+co/dEqFHYPNMEwogC7RHgwRsBDsU23FqzX7pEkLUBtaW9ddGMiS7OdrX7 iha13pcNTVUgFv636OBalvYZAEJpE0rJ/APPS7P57ENuywB9ieeBjLYoXdeiAx5o FCXKaAMLIi67CCvCGju4m2HJYYkG1ss3bW7hg5OWxWkZr/TMkkI3Dywl27fUcn21 IaCTOsBmL1Ho/z9ATGjT02NJSdoooJUF -----END CERTIFICATE-----Generated at Thu May 2 20:50:33 2024 by rpki-client on console-fra.rpki-client.org