$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: V8nuwDmPgGG27yy5a0aOhvU47CpC3C6ORaXUXtQnAPE= Subject key identifier: 3E:B6:74:B2:DE:55:39:B6:B9:F5:6F:93:BE:74:7A:93:15:B9:93:37 Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 0708 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 06F8 Signing time: Sat 04 May 2024 22:55:37 +0000 Manifest this update: Sat 04 May 2024 22:55:36 +0000 Manifest next update: Sat 11 May 2024 22:55:36 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: YBX0wIT5twr4ND0UZfk6mCjCpZq7Vh1PiGpEoXmeEOY=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: RDD72frvNOPZMt18kzGzNu68lXI5zOQOKbxpNTyOWDM=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: Mus4Pp8fg1rL2SYY2nH+YUCifMto6SDmrsJGtBCLaWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1800 (0x708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: May 4 22:55:36 2024 GMT Not After : May 11 22:55:36 2024 GMT Subject: CN=6636bce8-dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:00:66:43:2d:dc:95:be:50:51:52:78:7d:d9: 19:7b:c1:23:15:71:8d:ba:5c:e9:9d:9b:89:d0:e6: f9:a9:2e:73:29:cb:20:24:ca:95:71:6b:6e:f7:f3: 01:13:6e:e3:26:6a:a5:16:8c:0a:02:1c:aa:60:47: c7:88:c8:c1:78:93:5e:8d:a1:5d:f5:f3:5d:2a:20: bd:21:78:35:96:6d:a2:1d:d8:f9:b7:21:f4:54:05: 3d:c3:a9:29:a6:b2:fa:c7:50:7a:b3:f5:2f:94:a0: 7e:22:67:3b:f1:f2:9f:6d:af:e1:34:d9:84:dd:82: da:02:ed:08:45:13:b7:af:87:e5:4a:c0:54:9c:6d: 0a:9e:4b:65:8f:f9:33:6c:a0:bf:b0:e6:c8:f0:64: 7c:ac:89:11:a9:29:3b:f9:7e:8b:d1:5b:10:b1:90: 7b:96:4c:10:2a:94:7a:0b:80:f4:8d:f4:a2:8d:63: 41:ee:bb:75:46:30:5a:74:08:cd:9d:c1:ff:21:39: 14:d6:3d:20:0d:aa:89:ac:70:53:d6:f7:f4:37:bd: 7d:b7:4e:24:6d:3f:5b:84:4a:ba:df:e6:69:f6:30: 3f:43:92:23:97:4f:bd:c7:63:e5:7d:98:8c:e7:d9: e7:55:36:03:fa:7c:37:73:ab:77:a2:69:a0:54:37: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B6:74:B2:DE:55:39:B6:B9:F5:6F:93:BE:74:7A:93:15:B9:93:37 X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:04:64:6c:d6:ae:ad:56:9c:c1:3d:5f:3b:8d:fe:4f:4f:dc: 0d:10:cb:0f:39:60:02:99:b7:86:2c:8d:45:b4:4f:02:86:09: 37:ac:34:19:50:da:ad:52:87:45:b6:2f:a4:12:f9:7b:7e:11: 79:75:25:d7:79:5e:77:9c:42:da:18:fb:ac:c8:aa:ad:31:6e: 32:04:45:df:80:3b:12:4c:20:be:3d:ff:c5:bc:01:3f:c8:ca: ab:19:26:5d:67:9a:62:12:f1:a1:59:86:97:a0:5f:2b:6a:22: 4d:0c:52:c5:4d:30:18:88:ed:50:1d:ea:0c:40:db:82:9b:0a: 52:aa:c1:79:1a:cd:28:12:93:c9:0d:5b:bb:12:d6:70:76:fa: e8:ae:f4:cc:e5:6f:3b:e5:93:5a:6b:7a:d3:3f:3a:42:d7:86: fd:24:11:1d:e9:24:d8:4d:5a:6f:e2:d3:2b:b7:92:5f:59:14: e0:9b:20:fc:89:78:99:57:3c:15:35:18:6a:26:6b:d6:58:a5: 9e:19:85:4e:fa:2e:18:d0:96:8e:18:4f:88:38:03:db:68:89: b7:bc:45:1e:ff:3a:ea:8a:3a:89:97:ba:ca:de:d7:3d:27:cd: e2:90:f9:69:b4:03:5f:84:1e:ba:f9:06:5a:9f:f4:9e:82:f6: a6:2a:5b:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjQwNTA0MjI1NTM2WhcNMjQwNTExMjI1NTM2WjAYMRYwFAYD VQQDEw02NjM2YmNlOC1kY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8QBmQy3clb5QUVJ4fdkZe8EjFXGNulzpnZuJ0Ob5qS5zKcsgJMqVcWtu9/MB E27jJmqlFowKAhyqYEfHiMjBeJNejaFd9fNdKiC9IXg1lm2iHdj5tyH0VAU9w6kp prL6x1B6s/UvlKB+Imc78fKfba/hNNmE3YLaAu0IRRO3r4flSsBUnG0Knktlj/kz bKC/sObI8GR8rIkRqSk7+X6L0VsQsZB7lkwQKpR6C4D0jfSijWNB7rt1RjBadAjN ncH/ITkU1j0gDaqJrHBT1vf0N719t04kbT9bhEq63+Zp9jA/Q5Ijl0+9x2PlfZiM 59nnVTYD+nw3c6t3ommgVDfDIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD62dLLe VTm2ufVvk750epMVuZM3MB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChBGRs1q6tVpzBPV87jf5PT9wNEMsPOWACmbeGLI1FtE8Chgk3rDQZ UNqtUodFti+kEvl7fhF5dSXXeV53nELaGPusyKqtMW4yBEXfgDsSTCC+Pf/FvAE/ yMqrGSZdZ5piEvGhWYaXoF8raiJNDFLFTTAYiO1QHeoMQNuCmwpSqsF5Gs0oEpPJ DVu7EtZwdvrorvTM5W875ZNaa3rTPzpC14b9JBEd6STYTVpv4tMrt5JfWRTgmyD8 iXiZVzwVNRhqJmvWWKWeGYVO+i4Y0JaOGE+IOAPbaIm3vEUe/zrqijqJl7rK3tc9 J83ikPlptANfhB66+QZan/SegvamKltM -----END CERTIFICATE-----Generated at Sun May 5 00:14:46 2024 by rpki-client on console-ams.rpki-client.org