$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json) Hash identifier: cuKecyUow6SfHtQr3DU1aA/8lsVOwf/CWnu6NNs5uIk= Subject key identifier: 10:D1:C8:AB:1A:7E:83:18:87:C8:A4:5F:09:3E:B0:3F:4F:9E:46:B7 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft Manifest number: 0B09 Signing time: Sat 04 May 2024 20:04:55 +0000 Manifest this update: Sat 04 May 2024 20:04:54 +0000 Manifest next update: Sat 11 May 2024 20:04:54 +0000 Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: DJXTPOD4WHvIsB4W7ooxL2nPH2zIjxk/WgT/94Rmmd4=) 2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: Ts5oBok7cHgF7s6+IaaEWPvESWyczXjROfZF1hCcNGI=) 3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: 8hxIIGZEe1wDZc9xAw8ZheLa6bSLlQFzuoEr5TJ23WM=) 4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: Z3D+L/qJxKIXuxn8K2S5jNbQ4blqvpNfzAmj9hQoa48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2842 (0xb1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: May 4 20:04:54 2024 GMT Not After : May 11 20:04:54 2024 GMT Subject: CN=663694e6-9f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9c:d1:49:a9:a3:c8:df:99:1f:f7:fd:13:01: 04:e8:01:2b:3d:80:63:f8:1a:4c:67:f9:df:b5:ce: 63:c3:f9:6f:db:8c:67:01:8c:e5:2b:08:69:8b:88: f5:2d:4b:c0:e9:4e:ab:32:2f:b1:cc:ba:64:a4:dc: 0a:22:fd:68:a4:06:df:6f:56:01:5d:44:10:90:a9: 03:68:76:4e:0b:c0:65:d8:05:cb:f2:d4:7f:23:7c: fc:88:95:bb:63:4e:7a:b0:93:b1:f9:2a:a9:e8:82: 71:4a:c1:c7:36:06:7b:be:e9:1c:f1:91:6f:e8:87: fe:6e:22:31:28:5a:be:e2:be:0a:01:4c:24:88:4a: 89:15:a5:a2:86:e8:4c:c2:82:19:e2:a3:8e:84:bf: b4:57:88:25:42:0f:3b:e0:01:55:e7:d4:e0:62:32: 04:06:42:c8:34:6e:d4:1a:e0:b1:b9:43:c1:4d:dc: 55:73:0b:52:ad:e1:1e:f2:61:77:e7:3f:8c:f7:2b: 29:5d:c0:3c:70:e2:fd:80:b0:13:8e:41:2b:56:f1: aa:6b:59:da:99:28:fe:1e:94:dd:86:bc:ed:f7:10: 49:42:ac:9e:7f:ed:de:6f:bc:61:c2:fb:5e:e5:e1: b6:28:46:98:1c:ed:8b:34:63:2b:d6:8c:e2:47:1b: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:C8:AB:1A:7E:83:18:87:C8:A4:5F:09:3E:B0:3F:4F:9E:46:B7 X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b3:3d:7e:d1:ce:df:0d:33:7b:13:ba:f8:f3:a0:ac:98:ca: 51:3c:1b:16:e8:d8:33:83:33:75:85:3d:5d:46:1d:bf:6d:19: 74:08:12:29:db:64:2a:e4:34:45:ee:74:1e:ab:50:97:1d:4c: 24:03:2e:52:4b:d4:68:d4:e7:7a:6d:ad:29:c8:18:dd:97:50: 17:04:93:da:69:f8:a8:3a:09:5e:ea:82:55:40:ef:ae:fd:a7: 68:94:85:7e:a4:ce:87:96:b5:de:8b:15:35:24:62:bb:28:8c: 71:1b:c4:97:37:da:67:27:52:3e:3c:d5:1a:38:97:65:88:da: 87:e4:9c:58:2d:8b:fe:50:f1:ac:60:5a:bb:5f:1b:c8:a8:08: 66:6f:64:b4:d4:8f:cf:77:3c:67:6b:46:65:34:42:c2:fa:9a: 47:d4:99:59:c0:e8:61:5d:75:24:3b:e3:1d:34:f4:01:30:d3: a1:22:f2:fb:97:0d:f9:60:ae:6f:fe:d7:81:01:f1:0a:b6:2a: 81:50:31:dd:99:ff:b3:78:9a:2a:ad:e7:9f:f7:e3:da:57:56: 9c:3a:16:98:e0:96:ed:c7:86:c5:f5:3a:61:ef:f1:b4:95:3d: 0a:0d:d4:b1:aa:38:49:b1:92:ff:58:d1:e6:bf:96:75:fc:33: bf:bb:54:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjQwNTA0MjAwNDU0WhcNMjQwNTExMjAwNDU0WjAYMRYwFAYD VQQDEw02NjM2OTRlNi05ZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pzRSamjyN+ZH/f9EwEE6AErPYBj+BpMZ/nftc5jw/lv24xnAYzlKwhpi4j1 LUvA6U6rMi+xzLpkpNwKIv1opAbfb1YBXUQQkKkDaHZOC8Bl2AXL8tR/I3z8iJW7 Y056sJOx+Sqp6IJxSsHHNgZ7vukc8ZFv6If+biIxKFq+4r4KAUwkiEqJFaWihuhM woIZ4qOOhL+0V4glQg874AFV59TgYjIEBkLING7UGuCxuUPBTdxVcwtSreEe8mF3 5z+M9yspXcA8cOL9gLATjkErVvGqa1namSj+HpTdhrzt9xBJQqyef+3eb7xhwvte 5eG2KEaYHO2LNGMr1oziRxuzAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDRyKsa foMYh8ikXwk+sD9Pnka3MB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcwQS80MUFCRDI5RTFCODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBL c29RYnFUNlFMcWFDbVMycWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArsz1+0c7fDTN7E7r486CsmMpRPBsW6NgzgzN1hT1dRh2/bRl0CBIp 22Qq5DRF7nQeq1CXHUwkAy5SS9Ro1Od6ba0pyBjdl1AXBJPaafioOgle6oJVQO+u /adolIV+pM6HlrXeixU1JGK7KIxxG8SXN9pnJ1I+PNUaOJdliNqH5JxYLYv+UPGs YFq7XxvIqAhmb2S01I/Pdzxna0ZlNELC+ppH1JlZwOhhXXUkO+MdNPQBMNOhIvL7 lw35YK5v/teBAfEKtiqBUDHdmf+zeJoqreef9+PaV1acOhaY4Jbtx4bF9Tph7/G0 lT0KDdSxqjhJsZL/WNHmv5Z1/DO/u1Qo -----END CERTIFICATE-----Generated at Sat May 4 21:19:27 2024 by rpki-client on console-ams.rpki-client.org