$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: FxjOCQzslKyeje09hpQbGyrvJGD/eyrGBpvMp30DiLk= Subject key identifier: 34:99:4A:88:41:3C:C4:73:E3:B1:33:93:AC:BE:5C:9F:A4:21:BC:39 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0B16 Signing time: Sat 18 May 2024 19:55:38 +0000 Manifest this update: Sat 18 May 2024 19:55:38 +0000 Manifest next update: Sat 25 May 2024 19:55:38 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: SL+pzMsNfp/XRDr5tB/Qne9rzthhNMYo2zLyZWPF02Y=) 2: E11035DE02E311EFA9712859C4F9AE02.roa (hash: V6mkU1t+do01ENnx0fHkUqNhuyY++hkugss11RhFtvg=) 3: 964720467E4211EAA06E325AC4F9AE02.roa (hash: +jUXihUR5Pw095uTshI3CobqNch15pUyoZ/w6dUJWBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: May 18 19:55:38 2024 GMT Not After : May 25 19:55:38 2024 GMT Subject: CN=664907ba-f405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:68:6e:a8:81:3f:7d:40:bb:a2:2e:9e:d4: df:7d:5a:68:71:a4:6c:97:f3:f7:18:c9:59:50:fc: 0f:5e:07:a3:47:98:38:7c:08:fc:fa:c2:82:f4:93: f1:15:1f:64:d8:72:dc:b4:56:ae:af:97:90:5d:8b: 57:d6:44:1b:39:0e:1c:7f:b1:9e:f2:63:46:ac:ab: 15:f9:9c:36:2f:9f:92:3e:4e:35:6f:d5:eb:a5:a4: 7c:9a:ea:b6:b7:34:e2:e7:14:75:12:8f:e4:6e:57: 70:84:11:cf:5f:8a:74:62:01:99:56:7a:5e:ed:ab: d9:05:4c:81:7b:11:60:5b:03:f7:10:2d:ce:ad:29: 1f:eb:23:cf:a1:2c:a0:10:57:18:52:e1:29:a9:32: ef:8b:fe:2f:e7:f5:80:ab:87:d0:e6:1a:6d:2f:62: 76:eb:92:91:3f:ba:b7:a2:60:18:a6:ae:aa:70:eb: df:e7:98:8d:e3:6b:ea:f7:30:0d:58:ab:c3:f4:0d: 0d:80:d8:3a:e1:8e:6b:a4:ac:48:93:46:1a:22:0b: 53:2a:80:a4:38:c4:3e:10:cc:7f:20:66:61:c1:90: 5b:e3:ea:63:77:1a:06:bb:b2:33:1e:31:1b:47:a4: b7:e9:89:2b:1c:ed:0d:3c:52:2c:0e:79:79:9c:20: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:99:4A:88:41:3C:C4:73:E3:B1:33:93:AC:BE:5C:9F:A4:21:BC:39 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5b:0f:96:fb:11:34:9d:67:de:5b:7e:4a:70:1f:91:26:b2: d2:52:10:7d:53:76:89:e9:9b:b0:17:17:a2:d2:04:cc:3a:ca: 44:95:e0:8e:10:14:91:28:5c:7b:7e:88:16:d9:aa:2f:77:9c: fb:e9:37:c8:22:2c:2b:bb:d8:a1:cd:ad:b3:a4:3a:c7:b1:d7: 96:30:a4:3f:35:19:e4:10:10:ef:6f:80:b4:b6:7d:36:1a:33: 90:e6:aa:ec:1c:3b:bc:42:dd:0a:c4:b5:0c:64:e8:98:d3:13: 98:c4:34:25:9e:5c:30:7c:08:27:98:e8:2e:f2:2f:f5:74:6e: 72:4d:b7:6c:bf:cc:d9:93:e3:e2:f3:8b:33:36:63:ec:87:83: 68:a8:c9:e7:69:6d:53:68:01:47:bd:59:3f:83:94:11:f3:55: 23:fb:53:85:e7:6f:fa:9c:df:54:6a:14:8d:24:b9:f0:89:42: 07:cf:9c:be:2a:16:c5:d7:f5:d2:6b:90:61:51:25:b5:e1:f8: 63:9c:7d:81:52:80:ba:c7:49:7c:5e:fe:66:0b:01:b8:a6:49: 43:f5:05:81:79:67:77:e9:7c:18:28:09:92:de:71:17:1a:ee: 37:ba:82:47:42:2e:ce:43:e0:90:f1:da:9c:3e:ff:02:dc:0a: 49:fe:74:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjQwNTE4MTk1NTM4WhcNMjQwNTI1MTk1NTM4WjAYMRYwFAYD VQQDEw02NjQ5MDdiYS1mNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunZobqiBP31Au6IuntTffVpocaRsl/P3GMlZUPwPXgejR5g4fAj8+sKC9JPx FR9k2HLctFaur5eQXYtX1kQbOQ4cf7Ge8mNGrKsV+Zw2L5+SPk41b9XrpaR8muq2 tzTi5xR1Eo/kbldwhBHPX4p0YgGZVnpe7avZBUyBexFgWwP3EC3OrSkf6yPPoSyg EFcYUuEpqTLvi/4v5/WAq4fQ5hptL2J265KRP7q3omAYpq6qcOvf55iN42vq9zAN WKvD9A0NgNg64Y5rpKxIk0YaIgtTKoCkOMQ+EMx/IGZhwZBb4+pjdxoGu7IzHjEb R6S36YkrHO0NPFIsDnl5nCAOfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSZSohB PMRz47Ezk6y+XJ+kIbw5MB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfWw+W+xE0nWfeW35KcB+RJrLSUhB9U3aJ6ZuwFxei0gTMOspEleCO EBSRKFx7fogW2aovd5z76TfIIiwru9ihza2zpDrHsdeWMKQ/NRnkEBDvb4C0tn02 GjOQ5qrsHDu8Qt0KxLUMZOiY0xOYxDQlnlwwfAgnmOgu8i/1dG5yTbdsv8zZk+Pi 84szNmPsh4NoqMnnaW1TaAFHvVk/g5QR81Uj+1OF52/6nN9UahSNJLnwiUIHz5y+ KhbF1/XSa5BhUSW14fhjnH2BUoC6x0l8Xv5mCwG4pklD9QWBeWd36XwYKAmS3nEX Gu43uoJHQi7OQ+CQ8dqcPv8C3ApJ/nT6 -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org