$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft File: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json) Hash identifier: hOTmeqIPR1TlCNCZ0ELmhy8EJXpnpcVX6Vt1eoAk+Wk= Subject key identifier: 9E:1A:78:7C:55:96:93:B8:86:59:AA:3D:AE:FB:4B:E7:FE:31:42:69 Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Certificate serial: 1010 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft Manifest number: 0FFB Signing time: Mon 24 Jun 2024 17:50:15 +0000 Manifest this update: Mon 24 Jun 2024 17:50:14 +0000 Manifest next update: Mon 01 Jul 2024 17:50:14 +0000 Files and hashes: 1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: 6eJy2RXq3mGU8quQP33UDiHwFM5rsutnmerV4cdlBig=) 2: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: 6mPv2FPkPdVn8mEbOR89pKQkkNqTmbALuQL8Sady2qs=) 3: 0D0B79E478F511EC83E56014C4F9AE02.roa (hash: ygNC39ZsxtAGAtuQH3emuo307vQgk7jb+zvcr9M4ndI=) 4: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: VECQZxdYNeax7w8PdOp72wQ1jo/3BdHCyClKAC1SUgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 17:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4112 (0x1010) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Validity Not Before: Jun 24 17:50:14 2024 GMT Not After : Jul 1 17:50:14 2024 GMT Subject: CN=6679b1d7-7102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d6:6b:b4:c5:e9:09:f9:f0:76:d3:e2:91:a8: 80:48:f6:ac:e3:39:ff:30:4d:82:1f:d7:7f:a8:8a: 18:be:76:0b:5a:dd:25:d8:cd:c5:6a:89:ab:e5:4a: f0:9d:0e:e1:2c:ee:9e:71:cd:bb:66:80:85:81:d8: a1:a1:db:7f:96:fc:21:d4:b5:53:29:32:81:65:e9: fc:a4:1e:4c:ac:10:2e:6d:eb:01:4c:14:4e:43:6d: 38:12:46:d0:61:c0:97:3d:a5:a4:fc:78:7d:2b:09: fa:e4:fa:ae:cf:85:01:0e:25:78:61:55:59:7a:d3: cf:d4:01:19:4b:03:c6:60:16:b8:a7:16:a9:56:2f: e0:40:65:8d:b6:fe:1e:c1:f5:b5:c5:c4:22:04:5f: 82:f5:66:35:d5:bf:5f:2b:e4:86:ed:f6:25:1c:2c: 57:13:46:d3:bc:c9:5f:21:3e:ea:b3:ab:15:9a:d0: e4:f9:a3:7d:10:80:16:97:66:8d:0a:c9:a4:c5:bc: ce:ba:34:a5:4f:f7:91:01:12:d7:49:63:c9:0e:74: 05:5d:d3:c1:ed:74:49:8a:b2:13:8c:4e:af:1b:dc: 45:29:dd:06:04:b2:20:10:29:37:b1:49:36:39:2d: 9d:da:e4:b9:98:e4:7c:76:96:35:7b:4e:ea:56:98: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1A:78:7C:55:96:93:B8:86:59:AA:3D:AE:FB:4B:E7:FE:31:42:69 X509v3 Authority Key Identifier: keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:72:c7:4f:cc:2a:db:81:d1:c0:51:58:e2:9d:b6:d7:64:33: d0:07:91:38:4c:f1:95:36:17:33:f4:c3:f0:b7:e4:14:eb:34: a2:9e:a0:30:31:82:c4:21:4a:05:b7:50:5a:2f:e9:1d:80:a8: c1:44:19:90:8e:da:0b:60:28:89:64:26:e0:67:3e:96:c5:84: 6d:6f:ae:08:60:04:c6:1b:31:fe:b5:21:9b:38:8f:18:15:65: 8c:21:06:d5:cd:ce:36:28:74:5f:fe:9a:3e:36:d7:50:df:1c: 2a:f4:32:66:2b:ed:96:4a:13:16:f4:4e:92:82:3a:56:af:87: 29:ce:6f:f4:c1:66:83:c2:8c:67:5d:ad:58:82:9b:7e:9c:31: cb:a0:aa:ad:93:ac:f4:10:b8:39:68:2a:f5:2e:23:c3:14:7a: 3d:09:ca:8b:c0:33:a1:63:a0:60:62:84:99:ec:cf:6c:2a:e1: e0:54:5a:d7:24:53:98:8c:d9:97:5a:48:81:d9:07:c7:85:ab: 22:c6:e2:97:f0:a2:1e:d0:80:5e:58:32:da:f6:ba:6b:62:9b: a5:34:01:9d:05:4d:23:c0:7b:89:e6:54:3b:e6:db:ee:83:01: 53:59:89:48:bf:1f:1c:c1:28:da:f0:70:1a:6b:68:d1:09:12: 14:9b:dc:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYwOEQxMTAvBgNVBAUTKEQyRDgwODA0OUE0NkVENzk3QzIxRjlGNjAyNTIzNDU2 NDYzMUIzRjkwHhcNMjQwNjI0MTc1MDE0WhcNMjQwNzAxMTc1MDE0WjAYMRYwFAYD VQQDEw02Njc5YjFkNy03MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tZrtMXpCfnwdtPikaiASPas4zn/ME2CH9d/qIoYvnYLWt0l2M3Faomr5Urw nQ7hLO6ecc27ZoCFgdihodt/lvwh1LVTKTKBZen8pB5MrBAubesBTBROQ204EkbQ YcCXPaWk/Hh9Kwn65Pquz4UBDiV4YVVZetPP1AEZSwPGYBa4pxapVi/gQGWNtv4e wfW1xcQiBF+C9WY11b9fK+SG7fYlHCxXE0bTvMlfIT7qs6sVmtDk+aN9EIAWl2aN CsmkxbzOujSlT/eRARLXSWPJDnQFXdPB7XRJirITjE6vG9xFKd0GBLIgECk3sUk2 OS2d2uS5mOR8dpY1e07qVphY+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4aeHxV lpO4hlmqPa77S+f+MUJpMB8GA1UdIwQYMBaAFNLYCASaRu15fCH59gJSNFZGMbP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjA4RC84MTA3M0EzMDI4 NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdYbDhJZm4yQWxJMFZrWXhz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB0Z0lCSnBHN1hsOElmbjJBbEkwVmtZeHNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjA4RC84MTA3M0EzMDI4NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdY bDhJZm4yQWxJMFZrWXhzX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTcsdPzCrbgdHAUVjinbbXZDPQB5E4TPGVNhcz9MPwt+QU6zSinqAw MYLEIUoFt1BaL+kdgKjBRBmQjtoLYCiJZCbgZz6WxYRtb64IYATGGzH+tSGbOI8Y FWWMIQbVzc42KHRf/po+NtdQ3xwq9DJmK+2WShMW9E6SgjpWr4cpzm/0wWaDwoxn Xa1Ygpt+nDHLoKqtk6z0ELg5aCr1LiPDFHo9CcqLwDOhY6BgYoSZ7M9sKuHgVFrX JFOYjNmXWkiB2QfHhasixuKX8KIe0IBeWDLa9rprYpulNAGdBU0jwHuJ5lQ75tvu gwFTWYlIvx8cwSja8HAaa2jRCRIUm9yo -----END CERTIFICATE-----Generated at Mon Jun 24 21:23:51 2024 by rpki-client on console-ams.rpki-client.org