$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json) Hash identifier: ByUe44yjQpbCaPsh5j1ySqETNArNsy1JO1Heu9aH1JU= Subject key identifier: CF:A8:A8:8F:06:A8:17:91:EF:FE:93:1E:46:8B:DC:A6:6C:E3:21:10 Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 33E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft Manifest number: 33D6 Signing time: Sat 18 May 2024 14:48:17 +0000 Manifest this update: Sat 18 May 2024 14:48:17 +0000 Manifest next update: Sat 25 May 2024 14:48:17 +0000 Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: 3OfxwYjP29lC2Gflle2qDSFudKDg62GFYGd/u5c5lMw=) 2: 2251B910AC7411EBBE196180C4F9AE02.roa (hash: /9MtAWjM3Biiq8nnUtxhVHZDm3Jggzrs5MJ2Ivek0VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13282 (0x33e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: May 18 14:48:17 2024 GMT Not After : May 25 14:48:17 2024 GMT Subject: CN=6648bfb1-c859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:cf:be:b6:a6:13:18:dd:70:ba:79:87:46: 0a:c3:7d:9c:54:62:42:01:64:eb:6c:7e:88:5b:c8: 6d:07:60:01:2f:2c:49:5a:e6:97:19:0a:97:a7:14: e7:b1:e9:60:7e:3d:15:60:3e:36:2d:6a:f1:a4:03: 6f:2c:af:6b:33:73:aa:47:78:be:4a:2c:9a:85:21: d7:94:2a:13:f3:d5:c4:6e:ac:37:06:80:7a:51:14: 66:1a:63:30:6c:bb:17:89:db:b3:eb:bc:ab:1b:1b: dc:fd:d2:c5:49:b6:63:f8:d5:d3:99:88:72:ea:80: 0a:13:60:1b:83:e7:66:7c:ce:dd:45:be:41:c9:c6: 3f:e6:4d:cb:4d:f4:8b:4a:13:5a:c4:85:c6:ed:7e: c0:bc:eb:8c:67:6f:bb:70:29:d4:49:5c:65:83:ee: 72:00:ef:85:33:e6:21:e3:fd:24:25:ec:d7:7d:17: 12:07:dd:06:19:2c:26:40:33:c9:5c:91:f3:9d:b9: c3:f6:72:92:eb:bb:28:26:dc:66:6f:19:89:60:35: 50:89:cf:71:92:65:2d:da:07:cf:c4:e5:66:a7:8f: 18:32:8e:29:23:06:d8:7a:a8:59:32:35:df:26:17: 8e:35:9f:73:e3:93:d4:df:20:e1:2d:a6:38:51:8e: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A8:A8:8F:06:A8:17:91:EF:FE:93:1E:46:8B:DC:A6:6C:E3:21:10 X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a7:82:c4:ff:a0:dc:b3:f3:76:7b:70:a0:6e:54:1c:a9:c8: c5:6b:02:c6:75:cb:47:7b:b2:c8:41:72:bc:7c:cb:28:98:47: 96:5c:23:67:b3:d5:41:cb:ee:c2:15:e9:40:c0:16:92:95:4b: 21:d7:45:18:62:f5:1d:0d:45:ab:c4:77:36:73:17:25:45:62: c8:0a:dd:1d:59:c6:7b:cb:d8:ce:fc:89:d3:2c:aa:24:98:5e: 93:b4:22:6b:79:be:19:d8:c9:fd:9f:6f:fe:a5:7c:4d:f3:0c: ff:b1:b1:30:b1:9a:b3:6f:f3:f2:09:c6:52:fe:36:74:5f:86: c3:cb:d6:5c:c6:1b:62:9b:8e:e5:d8:99:79:49:47:27:4b:ae: 23:f0:9b:a2:9f:28:54:0a:db:26:32:ca:c5:3b:4c:5f:de:9e: 0c:bc:c3:64:cc:e0:98:a0:7f:8f:aa:b9:51:28:f0:d0:62:e3: fa:f0:15:52:7e:f3:da:a5:1e:95:51:bf:01:a4:d0:29:5c:ac: bd:2d:73:de:bf:26:68:19:e3:42:93:6d:b0:90:7e:1c:9f:9e: 5f:cf:6b:98:66:c2:5d:6f:28:62:c3:31:2d:58:3c:d9:1c:d1: b5:bd:f4:93:b5:16:6a:ed:16:bd:9a:51:9a:4f:7e:33:b9:db: 3b:fd:47:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjQwNTE4MTQ0ODE3WhcNMjQwNTI1MTQ0ODE3WjAYMRYwFAYD VQQDEw02NjQ4YmZiMS1jODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG/PvramExjdcLp5h0YKw32cVGJCAWTrbH6IW8htB2ABLyxJWuaXGQqXpxTn selgfj0VYD42LWrxpANvLK9rM3OqR3i+SiyahSHXlCoT89XEbqw3BoB6URRmGmMw bLsXiduz67yrGxvc/dLFSbZj+NXTmYhy6oAKE2Abg+dmfM7dRb5BycY/5k3LTfSL ShNaxIXG7X7AvOuMZ2+7cCnUSVxlg+5yAO+FM+Yh4/0kJezXfRcSB90GGSwmQDPJ XJHznbnD9nKS67soJtxmbxmJYDVQic9xkmUt2gfPxOVmp48YMo4pIwbYeqhZMjXf JheONZ9z45PU3yDhLaY4UY6HNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+oqI8G qBeR7/6THkaL3KZs4yEQMB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjE2OC8yNEM2MkMwNjFEOTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BU TU1Hdi1VQmc0VkJWXzA3UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXp4LE/6Dcs/N2e3CgblQcqcjFawLGdctHe7LIQXK8fMsomEeWXCNn s9VBy+7CFelAwBaSlUsh10UYYvUdDUWrxHc2cxclRWLICt0dWcZ7y9jO/InTLKok mF6TtCJreb4Z2Mn9n2/+pXxN8wz/sbEwsZqzb/PyCcZS/jZ0X4bDy9Zcxhtim47l 2Jl5SUcnS64j8JuinyhUCtsmMsrFO0xf3p4MvMNkzOCYoH+PqrlRKPDQYuP68BVS fvPapR6VUb8BpNApXKy9LXPevyZoGeNCk22wkH4cn55fz2uYZsJdbyhiwzEtWDzZ HNG1vfSTtRZq7Ra9mlGaT34zuds7/UeC -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org