$ rpki-client -vvf rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.mft File: RTGic8LE6mi2e5it5VtGI--TdaQ.mft (raw, json) Hash identifier: ajbIVS84A4S0ykwVOBkLh02IyNa5lBPEtL5n+aHdyfQ= Subject key identifier: 7A:60:02:C6:1D:63:9D:50:6F:6A:D0:3A:00:83:49:B7:A9:B5:FE:F4 Authority key identifier: 45:31:A2:73:C2:C4:EA:68:B6:7B:98:AD:E5:5B:46:23:EF:93:75:A4 Certificate issuer: /CN=A91954C1/serialNumber=4531A273C2C4EA68B67B98ADE55B4623EF9375A4 Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTGic8LE6mi2e5it5VtGI--TdaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.mft Manifest number: 0732 Signing time: Sat 18 May 2024 22:29:13 +0000 Manifest this update: Sat 18 May 2024 22:29:12 +0000 Manifest next update: Sat 25 May 2024 22:29:12 +0000 Files and hashes: 1: RTGic8LE6mi2e5it5VtGI--TdaQ.crl (hash: rY8AOI0KoCAlSVTTNpPah7bYKwiFQlt5FlzuLL04RXQ=) 2: EC1822CCFD1E11EE9596981DC4F9AE02.roa (hash: EJiTkyB0nA5gdAl3H8wUpo/Y6a/MvPurkq3YS4xRaZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.crl rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTGic8LE6mi2e5it5VtGI--TdaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954C1/serialNumber=4531A273C2C4EA68B67B98ADE55B4623EF9375A4 Validity Not Before: May 18 22:29:12 2024 GMT Not After : May 25 22:29:12 2024 GMT Subject: CN=66492bb8-e9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:75:4b:b6:ea:89:fc:9c:4f:e9:97:5b:b2: 0c:19:9e:47:eb:4a:98:a2:d5:79:33:1d:dd:35:43: 3d:7e:13:ec:ef:f4:e9:47:1b:e7:fe:9a:a9:cc:86: f8:17:9d:06:ea:b8:c4:b1:ae:04:b4:08:c0:b3:73: 66:23:54:20:7a:fa:e5:37:26:b6:21:fd:36:14:96: fe:40:6c:88:93:dd:86:09:fa:a5:43:9d:58:cf:40: 7c:60:a2:42:d2:56:cf:80:43:fd:ab:f3:78:23:25: 0d:d2:9a:8c:75:d5:5e:b7:5c:bd:f5:1e:b5:57:f5: f5:d7:dc:7d:e3:77:c7:83:e1:d1:2b:51:9b:47:11: 4d:7d:d0:69:3e:0c:a2:2d:b0:d3:70:d4:c1:f5:af: 19:c4:d4:fd:7a:72:aa:5b:39:53:8d:7e:6a:b3:a4: a3:26:5b:54:44:d5:f3:31:31:27:86:ef:4a:48:98: 66:9d:e9:59:46:dd:a3:51:97:ab:e8:ca:d6:95:cc: 5f:5c:82:3d:ca:43:d4:e6:35:08:06:a3:0b:42:07: cd:21:c6:78:f7:ca:2c:a6:bc:44:32:80:1a:c0:7a: e9:8c:d5:98:43:97:f8:b8:89:b5:3e:ce:01:bd:af: 17:70:64:b0:82:2f:11:bf:b8:6a:92:a7:08:06:af: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:60:02:C6:1D:63:9D:50:6F:6A:D0:3A:00:83:49:B7:A9:B5:FE:F4 X509v3 Authority Key Identifier: keyid:45:31:A2:73:C2:C4:EA:68:B6:7B:98:AD:E5:5B:46:23:EF:93:75:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTGic8LE6mi2e5it5VtGI--TdaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:51:c8:6f:c2:c0:23:63:81:db:b4:e0:ce:eb:46:e2:67:11: a9:90:e6:2e:52:4a:03:81:2c:ad:ed:67:fa:57:70:9e:2f:40: fd:1e:c0:b3:29:77:51:59:be:37:b5:db:9b:db:fa:6f:ce:3f: 76:d1:92:44:e2:a1:37:2e:9c:3f:38:d9:b5:51:ea:f2:2b:18: 16:9a:89:b1:80:fd:65:cc:5c:a5:21:a6:a7:ee:a8:b8:6f:18: 6e:a5:50:0e:77:a2:44:3a:2e:b1:40:f0:78:3f:d4:4e:cc:23: 5a:e2:96:8b:9e:a6:5c:9c:d7:a0:b6:d6:2c:7e:0b:a6:bc:ef: 4b:fd:70:27:2b:9c:ed:0b:dd:c9:26:89:e2:03:0a:9f:96:18: f9:48:db:c9:80:18:ea:e2:e1:da:f5:9b:be:e8:af:fa:c5:d3: eb:85:5f:ec:8f:f6:96:39:fb:cb:7f:75:95:72:cf:a6:60:d3: 72:ba:21:92:02:3b:08:b4:0d:d2:76:f1:31:3c:82:d2:e7:a6: 42:e7:79:98:e3:fb:96:d7:db:c1:b4:e9:49:e7:20:c1:55:5b: 07:0e:4f:ea:33:8d:b4:ef:9e:d3:de:8d:70:84:eb:a4:88:74: d7:f8:2f:e6:22:95:db:8d:8d:f6:cc:db:b0:9e:cf:a1:39:30: 93:de:5b:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QzExMTAvBgNVBAUTKDQ1MzFBMjczQzJDNEVBNjhCNjdCOThBREU1NUI0NjIz RUY5Mzc1QTQwHhcNMjQwNTE4MjIyOTEyWhcNMjQwNTI1MjIyOTEyWjAYMRYwFAYD VQQDEw02NjQ5MmJiOC1lOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAty51S7bqifycT+mXW7IMGZ5H60qYotV5Mx3dNUM9fhPs7/TpRxvn/pqpzIb4 F50G6rjEsa4EtAjAs3NmI1QgevrlNya2If02FJb+QGyIk92GCfqlQ51Yz0B8YKJC 0lbPgEP9q/N4IyUN0pqMddVet1y99R61V/X119x943fHg+HRK1GbRxFNfdBpPgyi LbDTcNTB9a8ZxNT9enKqWzlTjX5qs6SjJltURNXzMTEnhu9KSJhmnelZRt2jUZer 6MrWlcxfXII9ykPU5jUIBqMLQgfNIcZ498osprxEMoAawHrpjNWYQ5f4uIm1Ps4B va8XcGSwgi8Rv7hqkqcIBq8VuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpgAsYd Y51Qb2rQOgCDSbeptf70MB8GA1UdIwQYMBaAFEUxonPCxOpotnuYreVbRiPvk3Wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRDMS81MEM2RTczMkU4 NDAxMUVBOEE2Qjk5ODBDNEY5QUUwMi9SVEdpYzhMRTZtaTJlNWl0NVZ0R0ktLVRk YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUR2ljOExFNm1pMmU1aXQ1VnRHSS0tVGRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRDMS81MEM2RTczMkU4NDAxMUVBOEE2Qjk5ODBDNEY5QUUwMi9SVEdpYzhMRTZt aTJlNWl0NVZ0R0ktLVRkYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWUchvwsAjY4HbtODO60biZxGpkOYuUkoDgSyt7Wf6V3CeL0D9HsCz KXdRWb43tdub2/pvzj920ZJE4qE3Lpw/ONm1UeryKxgWmomxgP1lzFylIaan7qi4 bxhupVAOd6JEOi6xQPB4P9ROzCNa4paLnqZcnNegttYsfgumvO9L/XAnK5ztC93J JoniAwqflhj5SNvJgBjq4uHa9Zu+6K/6xdPrhV/sj/aWOfvLf3WVcs+mYNNyuiGS AjsItA3SdvExPILS56ZC53mY4/uW19vBtOlJ5yDBVVsHDk/qM420757T3o1whOuk iHTX+C/mIpXbjY32zNuwns+hOTCT3ltS -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org