$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft File: TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft (raw, json) Hash identifier: cqeHn3c3UOqr0AeQsjp1I5E2t4of0EEYUb8tqd9eiPA= Subject key identifier: 84:10:01:B6:48:92:0F:B7:04:04:BB:AE:52:9A:DE:0E:83:77:4D:7E Authority key identifier: 4E:44:53:B2:B6:6A:86:95:A0:3E:EA:3A:9B:E1:F8:5A:92:1A:2D:09 Certificate issuer: /CN=A9167CAE/serialNumber=4E4453B2B66A8695A03EEA3A9BE1F85A921A2D09 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRTsrZqhpWgPuo6m-H4WpIaLQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft Manifest number: 02F2 Signing time: Sun 19 May 2024 03:17:10 +0000 Manifest this update: Sun 19 May 2024 03:17:10 +0000 Manifest next update: Sun 26 May 2024 03:17:10 +0000 Files and hashes: 1: TkRTsrZqhpWgPuo6m-H4WpIaLQk.crl (hash: FD2vTV63WU1gFoD0Zr0AjnyjD4u2JL5JJLxyzWqxSi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.crl rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRTsrZqhpWgPuo6m-H4WpIaLQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CAE/serialNumber=4E4453B2B66A8695A03EEA3A9BE1F85A921A2D09 Validity Not Before: May 19 03:17:10 2024 GMT Not After : May 26 03:17:10 2024 GMT Subject: CN=66496f36-58fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:2d:d5:62:43:f5:53:f4:42:d5:27:2c:c1: e3:ee:5b:ed:9c:04:3c:41:eb:db:af:7f:1a:a0:d0: bc:1f:89:92:97:60:d4:b1:98:3d:c7:37:4d:07:a1: ce:fe:ce:a9:45:f8:5a:91:11:86:4f:ad:df:cc:1d: ea:c6:23:83:d3:60:b8:73:aa:e4:fb:0f:31:d3:df: 72:41:ac:94:6c:5b:de:fa:0c:5f:91:8a:ef:15:58: d9:36:82:c8:65:ae:51:d5:2a:3f:7f:79:b9:93:31: 90:82:ba:10:18:43:e1:06:90:23:bb:ab:80:fb:48: 90:e9:a6:cb:29:42:e7:23:2d:fb:f1:6b:03:ea:20: 42:75:33:00:45:a1:19:13:17:fe:0a:70:52:37:87: 91:74:90:e9:91:f1:77:08:f1:ba:c8:3d:f6:54:b6: 09:de:7e:f9:c3:e5:87:7e:50:90:c5:c6:ba:4a:f3: 1f:76:f3:38:fb:bc:39:5e:d3:3b:e5:51:85:71:0a: 07:7e:26:bc:ed:b4:d9:ef:c2:c2:32:8f:32:63:e2: 92:38:71:12:01:eb:1f:d2:44:52:33:cf:d8:33:14: 63:f6:f4:69:5e:90:f4:c5:06:a2:63:30:3d:ad:24: e7:ac:44:df:12:90:af:5e:02:3f:0f:b9:48:2d:ca: 5c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:10:01:B6:48:92:0F:B7:04:04:BB:AE:52:9A:DE:0E:83:77:4D:7E X509v3 Authority Key Identifier: keyid:4E:44:53:B2:B6:6A:86:95:A0:3E:EA:3A:9B:E1:F8:5A:92:1A:2D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRTsrZqhpWgPuo6m-H4WpIaLQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:68:9b:22:9f:a3:bc:6a:44:ce:32:dd:9e:84:ae:9c:b9:1c: 90:2f:2c:f6:d0:50:b0:fe:95:ac:86:89:d0:09:84:cb:8f:c1: 8a:2e:80:90:29:2b:b0:ac:18:30:75:50:be:ab:43:6a:e0:17: f0:ac:c2:a9:f6:28:6c:e2:c8:30:bb:61:67:52:89:f2:8d:9c: e5:c0:60:1e:77:c0:3b:de:84:38:78:45:dd:26:23:17:7a:4a: 38:84:59:49:d3:df:48:0a:7b:8d:45:7f:fb:05:80:6b:14:de: 76:cb:43:dc:46:1e:05:61:cc:db:f3:2b:8c:dd:d2:be:a2:c8: d4:93:0f:ff:02:32:5e:67:af:a8:02:d2:34:75:42:c9:2d:22: c9:b1:8a:b2:79:22:f9:76:29:87:10:b1:33:3b:b6:33:8d:1c: 0c:50:75:2e:58:b5:c0:05:52:83:1b:da:52:a1:af:17:35:51: 91:6e:0b:6a:49:4e:f4:8e:4b:d2:bb:78:a4:9f:37:b8:04:2f: b9:b8:3e:4f:b6:e8:0c:03:98:54:39:d7:8a:e0:6e:aa:a6:08: 94:da:fd:f8:6a:a4:4b:18:b8:e7:6d:6e:4d:f7:00:5f:b2:19: aa:02:84:7a:73:ec:db:d7:91:8e:61:c6:e6:80:b1:e4:03:49: 16:31:3a:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQUUxMTAvBgNVBAUTKDRFNDQ1M0IyQjY2QTg2OTVBMDNFRUEzQTlCRTFGODVB OTIxQTJEMDkwHhcNMjQwNTE5MDMxNzEwWhcNMjQwNTI2MDMxNzEwWjAYMRYwFAYD VQQDEw02NjQ5NmYzNi01OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrct1WJD9VP0QtUnLMHj7lvtnAQ8Qevbr38aoNC8H4mSl2DUsZg9xzdNB6HO /s6pRfhakRGGT63fzB3qxiOD02C4c6rk+w8x099yQayUbFve+gxfkYrvFVjZNoLI Za5R1So/f3m5kzGQgroQGEPhBpAju6uA+0iQ6abLKULnIy378WsD6iBCdTMARaEZ Exf+CnBSN4eRdJDpkfF3CPG6yD32VLYJ3n75w+WHflCQxca6SvMfdvM4+7w5XtM7 5VGFcQoHfia87bTZ78LCMo8yY+KSOHESAesf0kRSM8/YMxRj9vRpXpD0xQaiYzA9 rSTnrETfEpCvXgI/D7lILcpcBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQQAbZI kg+3BAS7rlKa3g6Dd01+MB8GA1UdIwQYMBaAFE5EU7K2aoaVoD7qOpvh+FqSGi0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NBRS8wNTdBMjVFRTk1 MzQxMUVDOTBFOTc3NTVDNEY5QUUwMi9Ua1JUc3JacWhwV2dQdW82bS1INFdwSWFM UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RrUlRzclpxaHBXZ1B1bzZtLUg0V3BJYUxRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NBRS8wNTdBMjVFRTk1MzQxMUVDOTBFOTc3NTVDNEY5QUUwMi9Ua1JUc3JacWhw V2dQdW82bS1INFdwSWFMUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTaJsin6O8akTOMt2ehK6cuRyQLyz20FCw/pWshonQCYTLj8GKLoCQ KSuwrBgwdVC+q0Nq4BfwrMKp9ihs4sgwu2FnUonyjZzlwGAed8A73oQ4eEXdJiMX eko4hFlJ099ICnuNRX/7BYBrFN52y0PcRh4FYczb8yuM3dK+osjUkw//AjJeZ6+o AtI0dULJLSLJsYqyeSL5dimHELEzO7YzjRwMUHUuWLXABVKDG9pSoa8XNVGRbgtq SU70jkvSu3iknze4BC+5uD5PtugMA5hUOdeK4G6qpgiU2v34aqRLGLjnbW5N9wBf shmqAoR6c+zb15GOYcbmgLHkA0kWMTp5 -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org