$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: PH0P67fzoLjM4nw9NHExD329Yg5jUSIzgs/2kNQMM84= Subject key identifier: 5A:51:F6:76:52:03:D7:F4:C0:B4:5C:42:C9:D2:9C:9D:6F:95:1B:4D Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 055A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 0556 Signing time: Sat 01 Jun 2024 01:47:04 +0000 Manifest this update: Sat 01 Jun 2024 01:47:04 +0000 Manifest next update: Sat 08 Jun 2024 01:47:04 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: 5eX0du3jBXzH1/OQSE3tLCj8QCRPoc4euqtjJQn5VWU=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: KzdmZEqJybWPyDEGiwej7P7ZjZ9dGsHz/bpMhD8sTy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Jun 1 01:47:04 2024 GMT Not After : Jun 8 01:47:04 2024 GMT Subject: CN=665a7d98-65fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:e0:85:59:0d:b4:5e:43:b7:05:51:02:d7: 1c:fe:14:cf:d6:fc:a2:ed:58:06:63:9d:82:f6:5f: bf:de:07:1d:41:e7:10:05:73:58:d6:b4:c9:02:b5: e4:c1:1a:4e:b9:68:74:56:93:eb:49:57:86:cc:5d: 61:ad:7e:e2:47:8b:93:dd:ae:bd:4e:d6:6a:d2:44: 48:3b:b8:bd:02:76:19:79:00:94:5f:b4:81:e7:b4: 60:e4:c9:08:e5:93:fd:33:66:3b:80:b9:c6:97:d9: 63:e6:05:be:64:60:b9:ff:d7:20:0a:f1:54:3f:58: 7a:e5:65:7b:89:ca:ba:29:34:64:2d:43:15:ef:32: f1:8b:97:2e:bb:68:99:45:08:fd:33:8d:43:df:70: 79:24:cb:18:30:92:f2:24:d0:b2:ea:d8:cd:f9:f3: b1:27:b8:19:a9:18:7c:bf:da:9d:bd:19:9f:ab:ab: 51:4c:99:78:bc:8b:c9:c0:d5:05:cc:9c:c3:02:99: c2:67:a9:26:25:e3:fe:2d:0e:98:9f:4b:53:04:95: 68:32:00:6d:bf:f5:b9:61:04:f3:00:40:e6:cd:e9: bd:51:d8:bd:96:25:97:d9:76:2a:95:92:71:72:d0: 24:1b:88:c8:85:e6:1d:30:20:68:fc:de:16:2a:9f: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:51:F6:76:52:03:D7:F4:C0:B4:5C:42:C9:D2:9C:9D:6F:95:1B:4D X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:33:b2:d3:00:59:09:ff:f1:ad:9c:1f:8d:cf:63:46:21:4b: 79:7e:ab:39:d9:77:09:47:d3:d5:72:2f:a6:8f:62:f1:51:a7: 9e:97:db:e1:68:9e:89:2c:d7:b0:c7:73:b7:7e:29:31:c6:0a: ed:dd:ce:41:d4:63:85:55:16:d8:a7:3d:0c:63:00:f7:aa:00: 29:14:cf:04:9b:9b:58:03:f8:87:ed:b9:4e:f9:c0:18:69:d3: 26:69:f6:8b:06:76:d5:d5:43:db:fb:b6:0d:74:64:93:00:7d: 2c:ce:1c:72:0a:47:d0:e2:e6:34:f5:21:87:dd:45:3d:61:84: 73:80:01:6d:b5:0f:3f:86:34:0c:14:e5:49:43:4c:2b:70:78: 90:30:60:f1:67:ca:62:64:a0:4f:09:9f:c0:16:6a:12:74:43: 3f:f4:b0:96:89:26:dc:8b:e2:70:14:5c:af:53:f9:41:cc:70: 2a:69:87:9e:34:91:a6:52:88:8c:38:03:6a:53:2b:a0:87:73: 7f:90:0e:ef:46:d7:28:1f:35:42:10:9f:b8:99:75:59:b1:c5: 3e:5e:56:01:fd:78:53:ee:7d:f5:57:b0:98:21:a4:4b:11:69: d7:83:76:4a:19:4c:6b:be:02:91:55:37:11:e0:69:0b:4e:59: fe:ac:4d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjQwNjAxMDE0NzA0WhcNMjQwNjA4MDE0NzA0WjAYMRYwFAYD VQQDEw02NjVhN2Q5OC02NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzezghVkNtF5DtwVRAtcc/hTP1vyi7VgGY52C9l+/3gcdQecQBXNY1rTJArXk wRpOuWh0VpPrSVeGzF1hrX7iR4uT3a69TtZq0kRIO7i9AnYZeQCUX7SB57Rg5MkI 5ZP9M2Y7gLnGl9lj5gW+ZGC5/9cgCvFUP1h65WV7icq6KTRkLUMV7zLxi5cuu2iZ RQj9M41D33B5JMsYMJLyJNCy6tjN+fOxJ7gZqRh8v9qdvRmfq6tRTJl4vIvJwNUF zJzDApnCZ6kmJeP+LQ6Yn0tTBJVoMgBtv/W5YQTzAEDmzem9Udi9liWX2XYqlZJx ctAkG4jIheYdMCBo/N4WKp9hAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpR9nZS A9f0wLRcQsnSnJ1vlRtNMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABM7LTAFkJ//GtnB+Nz2NGIUt5fqs52XcJR9PVci+mj2LxUaeel9vh aJ6JLNewx3O3fikxxgrt3c5B1GOFVRbYpz0MYwD3qgApFM8Em5tYA/iH7blO+cAY adMmafaLBnbV1UPb+7YNdGSTAH0szhxyCkfQ4uY09SGH3UU9YYRzgAFttQ8/hjQM FOVJQ0wrcHiQMGDxZ8piZKBPCZ/AFmoSdEM/9LCWiSbci+JwFFyvU/lBzHAqaYee NJGmUoiMOANqUyugh3N/kA7vRtcoHzVCEJ+4mXVZscU+XlYB/XhT7n31V7CYIaRL EWnXg3ZKGUxrvgKRVTcR4GkLTln+rE2P -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:17 2024 by rpki-client on console-fra.rpki-client.org