$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: XWu08HaxrXb96YuS6EaD7EZ4zSt07yqXhG7vHl24xMs= Subject key identifier: 80:4C:09:77:40:B8:3D:8D:29:6E:2C:1D:94:AE:59:A8:59:08:4B:4F Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 0183 Signing time: Fri 31 May 2024 05:25:43 +0000 Manifest this update: Fri 31 May 2024 05:25:42 +0000 Manifest next update: Fri 07 Jun 2024 05:25:42 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: +/eKtkGGnDh2GIJYuUEwWGNF1WH1FdJwCFYcjaF3SKs=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: xpfrYDKPzjoHWeZlLq26d5p3ePByaxJAIpAZ2Y8ZoPQ=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: L4TlPuitdCVJvDa3eVIfYJ+Xo6yVuCK7UPo8jhWcDZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: May 31 05:25:42 2024 GMT Not After : Jun 7 05:25:42 2024 GMT Subject: CN=66595f56-0919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:bd:d4:ca:d4:b2:76:28:27:91:fe:d9:08: 58:95:b9:b1:ad:88:a8:ce:8e:a9:fa:9e:92:11:ef: 8c:57:d4:b6:45:cf:f1:23:b8:7d:a9:0d:63:99:23: f1:a2:97:4d:f7:64:d7:30:53:4b:6d:e9:bf:83:2b: 48:6f:6e:1a:15:22:c5:f3:ad:2b:98:34:b3:ee:7e: 04:9c:f3:9b:6a:93:c7:96:48:7e:81:7d:dc:21:51: 1c:9c:9a:e6:86:1c:d0:f5:cb:33:d9:15:14:94:b8: c8:69:bb:aa:b0:41:60:10:61:f0:17:01:ba:7e:0e: 3f:5b:e0:4d:dc:57:d0:a2:80:f8:48:7a:32:10:b8: 52:7e:c3:4f:03:22:d2:de:21:8d:28:71:a9:b5:08: b2:b3:f6:bf:d2:05:bb:4f:32:f0:b7:0e:ca:2b:23: 42:1e:d3:13:a5:94:aa:ec:8a:31:10:b7:2b:f6:b0: 36:96:28:b3:55:e6:85:2d:a7:69:b9:f0:0d:08:af: 0b:4f:99:4f:86:53:92:4d:b8:a7:7a:4c:d8:ec:4b: 63:bf:2d:f3:3a:55:e9:8b:96:f3:07:88:e0:02:da: 73:94:25:cf:59:b3:a7:6c:1d:aa:77:9e:62:5a:12: e5:96:2a:b6:5c:be:d1:41:64:f2:14:1e:4a:8b:50: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4C:09:77:40:B8:3D:8D:29:6E:2C:1D:94:AE:59:A8:59:08:4B:4F X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:45:a1:cc:d8:db:49:cc:ce:58:aa:a7:98:96:2f:59:85:07: 35:c0:98:ce:38:c1:2c:1d:a4:b1:56:2b:b7:10:2d:03:b5:21: c7:8a:20:38:49:41:ed:e7:24:c8:00:c5:0d:37:d9:9c:23:1e: 96:e7:e4:57:05:24:cd:93:c2:75:1a:dd:84:13:94:4f:20:06: c6:cb:33:1d:86:3f:f1:ed:c6:47:17:b2:37:37:0d:da:e6:18: 5a:25:f7:4b:96:be:2f:7a:ea:27:58:81:e3:af:cc:de:b8:83: fa:06:5e:1e:ca:12:e5:90:53:30:f3:35:04:a8:dc:7b:b6:8d: 9b:7c:9f:07:1f:85:b6:da:e6:bd:62:ea:73:30:fe:c3:99:86: 05:37:ea:e7:df:67:5e:ef:42:63:02:0a:e2:33:7d:87:04:95: cb:1f:df:12:29:40:0e:b7:54:71:48:d6:bf:ec:37:82:70:d3: 43:f9:1d:2a:42:a6:34:18:27:8f:c7:37:51:61:c5:2c:63:0b: d9:e7:56:4b:4a:73:ba:c5:85:63:cc:bb:7f:6c:a0:e4:5e:22: 18:77:49:d6:8e:f8:d9:d6:e5:15:d5:6f:78:bf:b5:9c:d9:83: 53:fe:5f:11:41:71:c8:dc:7d:8f:82:1d:7a:6e:ee:a5:2f:b5: a0:f8:4c:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjQwNTMxMDUyNTQyWhcNMjQwNjA3MDUyNTQyWjAYMRYwFAYD VQQDEw02NjU5NWY1Ni0wOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4i91MrUsnYoJ5H+2QhYlbmxrYiozo6p+p6SEe+MV9S2Rc/xI7h9qQ1jmSPx opdN92TXMFNLbem/gytIb24aFSLF860rmDSz7n4EnPObapPHlkh+gX3cIVEcnJrm hhzQ9csz2RUUlLjIabuqsEFgEGHwFwG6fg4/W+BN3FfQooD4SHoyELhSfsNPAyLS 3iGNKHGptQiys/a/0gW7TzLwtw7KKyNCHtMTpZSq7IoxELcr9rA2liizVeaFLadp ufANCK8LT5lPhlOSTbinekzY7Etjvy3zOlXpi5bzB4jgAtpzlCXPWbOnbB2qd55i WhLlliq2XL7RQWTyFB5Ki1BQSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBMCXdA uD2NKW4sHZSuWahZCEtPMB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyRaHM2NtJzM5YqqeYli9ZhQc1wJjOOMEsHaSxViu3EC0DtSHHiiA4 SUHt5yTIAMUNN9mcIx6W5+RXBSTNk8J1Gt2EE5RPIAbGyzMdhj/x7cZHF7I3Nw3a 5hhaJfdLlr4veuonWIHjr8zeuIP6Bl4eyhLlkFMw8zUEqNx7to2bfJ8HH4W22ua9 YupzMP7DmYYFN+rn32de70JjAgriM32HBJXLH98SKUAOt1RxSNa/7DeCcNND+R0q QqY0GCePxzdRYcUsYwvZ51ZLSnO6xYVjzLt/bKDkXiIYd0nWjvjZ1uUV1W94v7Wc 2YNT/l8RQXHI3H2Pgh16bu6lL7Wg+EyI -----END CERTIFICATE-----Generated at Fri May 31 06:49:24 2024 by rpki-client on console-ams.rpki-client.org