$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: S3iAyHGVJUoxXyR03bgbxglZVddOywnE5gdrVWhOPNY= Subject key identifier: 7E:5D:C2:58:1A:D7:C9:6C:C8:87:E2:9F:A0:88:9B:CB:66:5A:FE:DC Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 09B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 09A9 Signing time: Fri 31 May 2024 21:32:57 +0000 Manifest this update: Fri 31 May 2024 21:32:56 +0000 Manifest next update: Fri 07 Jun 2024 21:32:56 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: yZSP+t5t43N+CConSI2Qu3xV/ychyEwvIK7nc3m3ZuQ=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: 1QYfJcrWIKG5Bwap3NySG0VLE3R8KvxRUMERVeUCCIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2489 (0x9b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: May 31 21:32:56 2024 GMT Not After : Jun 7 21:32:56 2024 GMT Subject: CN=665a4208-09d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:f6:bd:7d:a9:ca:a8:57:c8:05:cf:ea:ac: ef:98:f0:52:81:15:44:2d:00:9b:7a:8d:df:e6:b6: 84:43:db:5d:95:48:d0:55:bb:24:6f:6d:81:a6:54: 37:e6:70:49:a8:37:b0:55:a3:89:61:42:5f:cb:b5: 2f:33:34:f4:66:e3:a5:f3:bf:01:3a:03:93:1a:5a: c2:9c:53:65:42:67:5e:a4:79:83:a3:3a:f9:dc:21: a1:e3:75:57:3c:9d:f5:c2:57:6e:f2:a3:dd:b4:62: d8:64:c2:5f:c4:e2:82:07:2a:08:2d:46:bc:5c:3f: 99:29:a0:ee:7e:15:17:09:d5:73:ca:ec:d3:b9:7e: 30:75:80:87:23:af:f0:46:b2:99:25:1a:09:49:da: 94:8f:1d:cb:43:6e:4f:1b:92:88:75:50:98:ef:d4: a8:ef:27:ee:3e:a3:d8:10:ad:39:d1:a6:cd:0e:94: 05:a4:3f:f1:3f:48:86:8f:cb:3f:ed:98:8c:c6:db: 48:65:68:39:d6:18:5e:38:53:63:f5:e5:b2:8d:41: 92:eb:98:2c:f8:61:3d:e9:32:8c:fe:1e:c0:38:75: a5:45:ff:1f:e1:3b:a8:fb:39:1e:93:bf:29:d0:88: 16:3e:da:a6:c8:ce:59:27:cc:5d:23:4f:d7:c4:b4: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5D:C2:58:1A:D7:C9:6C:C8:87:E2:9F:A0:88:9B:CB:66:5A:FE:DC X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:84:3b:2a:b4:2a:80:d6:85:9c:38:c7:fa:39:73:d0:b3:32: 52:c9:93:6b:b3:2e:40:0f:28:01:83:4d:36:e5:77:10:9e:86: a7:6f:cd:9a:ef:7f:6f:7c:f8:03:4d:02:1f:99:e1:2d:af:55: 14:df:1a:07:ae:ca:0d:23:3e:08:b0:c9:7a:02:9b:d4:a9:2c: 84:f2:ce:eb:64:7c:ef:54:3a:0e:2e:97:77:fc:93:73:6b:7b: 6c:33:67:43:54:1c:1c:db:8c:c7:13:42:5c:2d:56:54:6d:b7: b5:d7:c8:32:44:b7:47:c9:e3:8b:89:19:37:88:91:bd:c6:a2: e3:71:f8:d5:50:5b:8b:1a:7d:3a:b3:b7:1e:e7:f9:c6:cc:4e: b4:f9:88:c6:e7:5c:67:93:9c:7b:c9:41:02:91:a9:91:3e:e2: f9:da:cd:2e:36:fb:c0:b8:2c:c4:e4:f8:54:34:b7:0d:30:74: 74:4b:69:d6:13:57:b0:ea:ee:1a:58:8b:db:63:1f:25:7f:3a: 8b:35:0b:75:0a:dd:cc:38:ec:ca:7e:8a:da:ae:e9:e8:81:06: 54:db:4d:01:2c:e8:af:34:63:23:1f:e2:7d:6c:e1:bf:18:0a: dc:33:d1:5d:f5:d1:0a:aa:4e:8c:d6:89:ce:0f:bf:7e:8a:6d: d2:17:59:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjQwNTMxMjEzMjU2WhcNMjQwNjA3MjEzMjU2WjAYMRYwFAYD VQQDEw02NjVhNDIwOC0wOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvY/2vX2pyqhXyAXP6qzvmPBSgRVELQCbeo3f5raEQ9tdlUjQVbskb22BplQ3 5nBJqDewVaOJYUJfy7UvMzT0ZuOl878BOgOTGlrCnFNlQmdepHmDozr53CGh43VX PJ31wldu8qPdtGLYZMJfxOKCByoILUa8XD+ZKaDufhUXCdVzyuzTuX4wdYCHI6/w RrKZJRoJSdqUjx3LQ25PG5KIdVCY79So7yfuPqPYEK050abNDpQFpD/xP0iGj8s/ 7ZiMxttIZWg51hheOFNj9eWyjUGS65gs+GE96TKM/h7AOHWlRf8f4Tuo+zkek78p 0IgWPtqmyM5ZJ8xdI0/XxLSEpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5dwlga 18lsyIfin6CIm8tmWv7cMB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqhDsqtCqA1oWcOMf6OXPQszJSyZNrsy5ADygBg0025XcQnoanb82a 739vfPgDTQIfmeEtr1UU3xoHrsoNIz4IsMl6ApvUqSyE8s7rZHzvVDoOLpd3/JNz a3tsM2dDVBwc24zHE0JcLVZUbbe118gyRLdHyeOLiRk3iJG9xqLjcfjVUFuLGn06 s7ce5/nGzE60+YjG51xnk5x7yUECkamRPuL52s0uNvvAuCzE5PhUNLcNMHR0S2nW E1ew6u4aWIvbYx8lfzqLNQt1Ct3MOOzKforarunogQZU200BLOivNGMjH+J9bOG/ GArcM9Fd9dEKqk6M1onOD79+im3SF1ne -----END CERTIFICATE-----Generated at Fri May 31 22:13:08 2024 by rpki-client on console-fra.rpki-client.org