$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft File: TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft (raw, json) Hash identifier: Nl+F79QYQifIS4yLDftJ3sSThPHyF998vcjDDSktmqc= Subject key identifier: F6:11:68:60:D8:EB:9F:9A:DD:A3:F1:02:72:5D:77:8F:E3:F2:B1:BD Authority key identifier: 4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE Certificate issuer: /CN=A912BE49/serialNumber=4F1782E99564C28A36EEDC19F973D1D9274781FE Certificate serial: 1A2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft Manifest number: 1A19 Signing time: Sat 18 May 2024 16:46:56 +0000 Manifest this update: Sat 18 May 2024 16:46:55 +0000 Manifest next update: Sat 25 May 2024 16:46:55 +0000 Files and hashes: 1: TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl (hash: YsrvwT4+BvpbeW6g8fk5nVXAgy2WkrvkjFSp/94HDUs=) 2: BF3B175867E811E9ABCD3663C4F9AE02.roa (hash: t/FvvNciRjmciYEI96eRdvbv/n0u/KxMpuqCPzMwosY=) 3: BE3E903C67E811E9ABCD3663C4F9AE02.roa (hash: F3eCKm2haGN+job7FiPN12znl1G5TLxs1uzv1eHDVx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6699 (0x1a2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE49/serialNumber=4F1782E99564C28A36EEDC19F973D1D9274781FE Validity Not Before: May 18 16:46:55 2024 GMT Not After : May 25 16:46:55 2024 GMT Subject: CN=6648db7f-77f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:1e:e5:b2:76:dc:fa:1a:98:15:62:b2:75: 34:a4:cf:ba:f3:4d:50:1e:64:36:d4:55:1c:2a:81: a9:4b:0d:4f:40:1d:13:d9:f1:dc:c1:a4:da:0a:a7: 10:6c:83:fe:3f:c0:a9:00:d5:06:c2:da:10:9c:88: 7e:ab:f4:53:ea:ba:ba:68:fe:4d:6f:f6:ea:a5:58: ee:51:cf:17:aa:66:be:2a:2a:95:ed:f8:18:4e:52: 4c:ce:f2:78:89:78:b7:47:b6:80:f1:1b:9d:85:39: b9:d5:ef:c7:e9:b7:29:71:78:b8:f1:1a:29:84:7f: b0:ec:ea:f7:11:c3:4c:6c:6b:e3:28:a1:b1:23:79: 11:99:80:c4:17:6d:cf:af:ec:03:c0:59:3b:5d:19: a7:56:4b:4f:37:44:5a:08:1c:c2:9f:fb:8f:e8:af: cd:d4:47:26:dd:f8:29:64:58:14:76:96:18:1c:4b: b8:bf:9c:7a:fc:d4:fd:92:d7:31:97:9b:39:23:8b: dd:6c:e8:7c:48:5b:84:e8:3b:a1:38:ab:c5:6f:f4: 2a:40:b2:9a:ec:9b:2a:3a:b2:39:d5:46:64:25:5d: 7a:8c:58:b4:53:a9:55:33:4e:db:ac:63:e8:47:68: a1:d0:db:61:95:e3:bc:85:07:a8:38:43:5f:88:76: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:11:68:60:D8:EB:9F:9A:DD:A3:F1:02:72:5D:77:8F:E3:F2:B1:BD X509v3 Authority Key Identifier: keyid:4F:17:82:E9:95:64:C2:8A:36:EE:DC:19:F9:73:D1:D9:27:47:81:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TxeC6ZVkwoo27twZ-XPR2SdHgf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE49/C3C8B9FA28CB11E79BE43036C4F9AE02/TxeC6ZVkwoo27twZ-XPR2SdHgf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:04:8b:5b:1b:86:cf:f5:8c:d2:83:b1:b4:e8:89:bd:bb:95: f3:b7:13:3d:13:8c:1b:22:5e:1e:31:66:07:cd:87:81:3a:f5: af:bd:ad:d3:95:37:51:93:8b:87:8d:d4:99:3a:5d:8b:75:26: 21:3a:36:e0:78:5f:65:65:2e:04:67:4e:11:63:99:5d:8c:10: fb:5b:6a:07:53:a8:f4:31:11:26:54:7f:d8:8f:89:3c:9e:7c: 78:f8:84:2e:e6:d6:90:57:cb:ec:53:0f:77:60:7a:eb:e1:82: 51:d7:4b:f5:ce:72:b1:5a:c2:ba:e7:57:93:61:7f:5a:0a:5a: ba:0b:03:87:c5:ec:7b:1c:31:92:f7:62:21:94:d6:0b:7a:b5: f1:a4:31:fe:6e:e4:9b:46:65:b0:99:ac:b4:49:78:00:53:b3: fd:68:0d:b3:bf:7b:d3:b6:3a:a9:52:50:3c:20:54:6e:e7:ac: d7:cd:10:5f:64:61:6f:d7:1f:b6:27:e4:e8:25:a1:e8:9b:78: 1f:49:f5:25:c6:8b:2e:be:95:3d:d7:f2:16:71:05:db:e7:7e: 7c:95:fb:19:75:3d:aa:78:ca:9e:93:9c:53:e9:a3:ef:7b:f7: 7f:10:4d:5d:42:13:6d:a7:d2:93:41:99:32:51:51:f6:92:1c: f9:b5:12:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNDkxMTAvBgNVBAUTKDRGMTc4MkU5OTU2NEMyOEEzNkVFREMxOUY5NzNEMUQ5 Mjc0NzgxRkUwHhcNMjQwNTE4MTY0NjU1WhcNMjQwNTI1MTY0NjU1WjAYMRYwFAYD VQQDEw02NjQ4ZGI3Zi03N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrwe5bJ23PoamBVisnU0pM+6801QHmQ21FUcKoGpSw1PQB0T2fHcwaTaCqcQ bIP+P8CpANUGwtoQnIh+q/RT6rq6aP5Nb/bqpVjuUc8Xqma+KiqV7fgYTlJMzvJ4 iXi3R7aA8RudhTm51e/H6bcpcXi48RophH+w7Or3EcNMbGvjKKGxI3kRmYDEF23P r+wDwFk7XRmnVktPN0RaCBzCn/uP6K/N1Ecm3fgpZFgUdpYYHEu4v5x6/NT9ktcx l5s5I4vdbOh8SFuE6DuhOKvFb/QqQLKa7JsqOrI51UZkJV16jFi0U6lVM07brGPo R2ih0NthleO8hQeoOENfiHZp1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYRaGDY 65+a3aPxAnJdd4/j8rG9MB8GA1UdIwQYMBaAFE8XgumVZMKKNu7cGflz0dknR4H+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0OS9DM0M4QjlGQTI4 Q0IxMUU3OUJFNDMwMzZDNEY5QUUwMi9UeGVDNlpWa3dvbzI3dHdaLVhQUjJTZEhn ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R4ZUM2WlZrd29vMjd0d1otWFBSMlNkSGdmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0OS9DM0M4QjlGQTI4Q0IxMUU3OUJFNDMwMzZDNEY5QUUwMi9UeGVDNlpWa3dv bzI3dHdaLVhQUjJTZEhnZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjBItbG4bP9YzSg7G06Im9u5XztxM9E4wbIl4eMWYHzYeBOvWvva3T lTdRk4uHjdSZOl2LdSYhOjbgeF9lZS4EZ04RY5ldjBD7W2oHU6j0MREmVH/Yj4k8 nnx4+IQu5taQV8vsUw93YHrr4YJR10v1znKxWsK651eTYX9aClq6CwOHxex7HDGS 92IhlNYLerXxpDH+buSbRmWwmay0SXgAU7P9aA2zv3vTtjqpUlA8IFRu56zXzRBf ZGFv1x+2J+ToJaHom3gfSfUlxosuvpU91/IWcQXb5358lfsZdT2qeMqek5xT6aPv e/d/EE1dQhNtp9KTQZkyUVH2khz5tRKE -----END CERTIFICATE-----Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org