$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: fdmqhPB17qU+n7WGrrwJNV0rwniHCbI98aqiX/a+3hA= Subject key identifier: F1:42:7E:93:58:1E:E8:F8:FF:E7:30:A0:E8:F4:35:30:9B:E6:F9:3E Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: 25 Signing time: Mon 01 Jul 2024 08:12:51 +0000 Manifest this update: Mon 01 Jul 2024 08:12:51 +0000 Manifest next update: Mon 08 Jul 2024 08:12:51 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: ZxOiph/1Se70TO2bih/VIWXO8sUphJiV8Fcq+b9u++0=) 2: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: qJIeqrgvCSqMs8+P3KeM1F5hY5WT3B+IFIjWWFc0WLk=) 3: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: wEtGlzkarGn03dBjE4SQLfRy6nk8r9fN3HDFHlt9mQY=) 4: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: OxXlFTh6o0hdm5zRnG9YrbxWsj3c5r5ToTCPNyKoHps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jul 2024 07:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: Jul 1 08:12:51 2024 GMT Not After : Jul 8 08:12:51 2024 GMT Subject: CN=66826503-f0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0b:92:fc:90:73:6a:bc:51:61:19:45:cd:8c: 41:f0:87:13:c1:6f:99:c9:d9:be:0a:3e:29:8c:eb: 7c:74:b8:76:48:b9:c0:fd:9f:ed:6a:91:ca:63:d7: 44:24:99:cf:f2:05:84:eb:79:5d:a9:0f:f7:92:1f: 90:88:17:41:e4:c2:f2:2a:94:62:7b:18:bc:0b:41: 68:75:2d:9e:0a:74:db:e3:51:9b:ad:42:57:bd:e9: 38:82:f5:f1:ce:9e:6d:a5:fd:05:7e:e0:cc:8c:c0: 61:e1:92:33:4a:5a:27:f6:25:76:15:bb:d0:68:28: d9:fb:48:6a:0a:ae:42:46:08:ec:be:9c:70:b2:0c: 5b:af:66:85:70:53:58:26:af:f6:be:c6:3d:9f:d9: a4:ad:19:c5:bd:b3:0e:47:a2:52:12:18:0f:b1:c4: 58:ac:6b:b3:40:bf:63:63:0d:86:ed:68:99:05:e7: 4b:8a:08:a7:0e:62:da:8c:83:e6:48:bb:bd:e2:7d: bf:ae:95:3f:8f:f7:d3:e8:20:a2:cd:6e:96:cc:63: 43:c7:bb:b9:98:9b:ff:a3:22:2b:a1:bf:23:0e:b8: cf:1a:25:f0:9a:7c:84:6a:ec:88:a6:00:da:c5:78: a6:69:28:91:7c:a4:21:05:af:11:04:b0:c0:f3:a3: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:7E:93:58:1E:E8:F8:FF:E7:30:A0:E8:F4:35:30:9B:E6:F9:3E X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e3:74:0a:04:9c:88:41:5b:4b:72:20:b9:6f:b9:f1:a8:8e: 28:ac:a8:b9:8c:14:dc:89:31:e7:ef:f9:0e:34:59:11:d8:05: 35:0d:a7:b2:62:dd:c3:51:92:65:b0:3b:7e:b5:d9:9a:5f:c9: 7f:f7:a5:23:15:74:b5:ce:08:92:95:9f:1d:e3:b4:6e:8f:72: 48:52:1e:6a:84:17:0b:05:64:63:e1:4e:45:fd:be:6b:ed:2a: ae:1c:d0:5e:9a:79:3c:92:51:ef:68:6f:04:a4:c6:a9:8f:9c: 05:02:14:2f:4f:91:b8:bb:b2:66:10:93:59:d0:f0:c0:93:78: 17:f7:25:b7:ea:4a:cd:30:10:b3:af:72:56:ba:79:a5:26:84: 4a:de:39:e5:db:84:3d:57:1a:7a:94:3f:fe:ae:a3:ab:dc:be: 87:55:53:ff:6f:16:d0:f4:8d:12:73:55:6e:bc:6e:c7:7f:ca: db:3d:f6:3a:ba:30:1f:f9:30:2d:0e:cd:4a:3f:1a:1b:82:e1: da:9b:30:e1:b0:87:99:a8:77:ef:41:8b:93:bc:d0:20:62:ed: da:aa:e4:ca:0e:24:86:05:c6:61:01:8b:9f:3a:38:85:7b:52: 99:d5:c6:90:a0:34:ce:96:b0:27:6f:eb:e0:29:14:0d:15:ba: 0a:03:5b:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0Y1RDExMC8GA1UEBRMoQjQwODE4MTVDNkJBRUQ5OEExQ0M5NTBBQzZGQTEwQkM2 MDA1ODkwMjAeFw0yNDA3MDEwODEyNTFaFw0yNDA3MDgwODEyNTFaMBgxFjAUBgNV BAMTDTY2ODI2NTAzLWYwY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhC5L8kHNqvFFhGUXNjEHwhxPBb5nJ2b4KPimM63x0uHZIucD9n+1qkcpj10Qk mc/yBYTreV2pD/eSH5CIF0HkwvIqlGJ7GLwLQWh1LZ4KdNvjUZutQle96TiC9fHO nm2l/QV+4MyMwGHhkjNKWif2JXYVu9BoKNn7SGoKrkJGCOy+nHCyDFuvZoVwU1gm r/a+xj2f2aStGcW9sw5HolISGA+xxFisa7NAv2NjDYbtaJkF50uKCKcOYtqMg+ZI u73ifb+ulT+P99PoIKLNbpbMY0PHu7mYm/+jIiuhvyMOuM8aJfCafIRq7IimANrF eKZpKJF8pCEFrxEEsMDzo4Y/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8UJ+k1ge 6Pj/5zCg6PQ1MJvm+T4wHwYDVR0jBBgwFoAUtAgYFca67ZihzJUKxvoQvGAFiQIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzRjVELzEwRjk0RUYwMDZB QjExRUY4N0JGQTcyNUM0RjlBRTAyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlR SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEFnWUZjYTY3WmloekpVS3h2b1F2R0FGaVFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz RjVELzEwRjk0RUYwMDZBQjExRUY4N0JGQTcyNUM0RjlBRTAyL3RBZ1lGY2E2N1pp aHpKVUt4dm9RdkdBRmlRSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACTjdAoEnIhBW0tyILlvufGojiisqLmMFNyJMefv+Q40WRHYBTUNp7Ji 3cNRkmWwO3612ZpfyX/3pSMVdLXOCJKVnx3jtG6PckhSHmqEFwsFZGPhTkX9vmvt Kq4c0F6aeTySUe9obwSkxqmPnAUCFC9Pkbi7smYQk1nQ8MCTeBf3JbfqSs0wELOv cla6eaUmhEreOeXbhD1XGnqUP/6uo6vcvodVU/9vFtD0jRJzVW68bsd/yts99jq6 MB/5MC0OzUo/GhuC4dqbMOGwh5mod+9Bi5O80CBi7dqq5MoOJIYFxmEBi586OIV7 UpnVxpCgNM6WsCdv6+ApFA0VugoDWyU= -----END CERTIFICATE-----Generated at Mon Jul 1 10:03:44 2024 by rpki-client on console-fra.rpki-client.org