$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft File: TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json) Hash identifier: Zo8BoC3Hm0yKpmxV7DTB9h674wELhi9lWG6WmndkCg4= Subject key identifier: 7D:AF:91:B7:E4:54:A2:F9:E4:C3:4D:22:68:08:33:72:BD:FF:0F:E8 Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft Manifest number: 065B Signing time: Sat 18 May 2024 23:35:10 +0000 Manifest this update: Sat 18 May 2024 23:35:10 +0000 Manifest next update: Sat 25 May 2024 23:35:10 +0000 Files and hashes: 1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: f4roHFfj0pEuZDg+S4w56soYqZ21v3QqcPxjlflmNsE=) 2: E9573898390E11EBAC72036BC4F9AE02.roa (hash: obihlxRhU0PPosQc2ueIbFqyf53tOUTNgrbX1TDxlFA=) 3: E9E53D64390E11EBAC72036BC4F9AE02.roa (hash: c0U5pKKCCV/RAy6tBF7y0xcEN5d947WhkMFfGLpOrGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Validity Not Before: May 18 23:35:10 2024 GMT Not After : May 25 23:35:10 2024 GMT Subject: CN=66493b2e-c038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:8d:c8:7a:4f:c7:ce:d0:64:ad:23:5b:e0: 3d:79:2d:e4:88:a5:5f:12:17:83:b3:37:9a:ec:db: 2f:9a:b1:4f:dc:f2:b0:90:28:2b:16:41:c9:94:8b: 97:38:18:b5:26:9e:e8:ec:37:38:72:75:d2:a1:c2: 0b:de:65:e8:73:94:9e:ef:ba:13:3b:0e:67:f7:fc: f0:14:09:3a:ae:6a:6d:ba:62:c8:71:fc:b0:a6:0d: 20:03:8a:cc:f8:10:0b:a6:87:22:93:28:7f:64:b8: e0:99:ba:30:14:47:7d:de:22:6a:e7:10:9b:9c:4f: 9e:76:92:07:84:23:48:c6:05:d2:29:d6:fd:d4:44: 3e:08:6e:78:b6:b5:67:19:c8:81:63:67:1e:d1:1b: 5e:5e:f5:98:33:03:5c:8f:0e:da:39:41:e4:fe:e3: 64:0b:7c:eb:2d:e9:59:b0:22:de:78:4b:4f:8b:e3: 19:34:59:c5:52:05:92:5b:b4:5b:3c:14:67:1d:9d: af:d6:e0:69:6b:c3:56:ed:0d:ec:66:a5:e8:c7:31: 49:98:b6:db:8d:dd:eb:2a:a8:85:a2:a9:39:1f:1a: bd:30:bd:0a:8f:fc:3b:29:41:75:32:f1:9d:59:dd: 39:23:64:41:a0:8e:d7:eb:a9:f7:84:cd:70:95:22: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AF:91:B7:E4:54:A2:F9:E4:C3:4D:22:68:08:33:72:BD:FF:0F:E8 X509v3 Authority Key Identifier: keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:2c:d7:96:e0:b3:a3:08:58:ba:5a:26:7d:a9:fc:ef:a3:5e: f8:c5:01:da:e4:1f:d1:d5:84:55:4d:a9:ae:30:49:1b:3e:e6: 40:65:54:92:34:25:e0:a0:b6:ea:eb:bd:bb:a5:8d:a0:02:da: 25:e0:34:bb:4a:8c:1a:00:99:8d:ae:d0:f9:04:8c:b1:cf:92: 8f:bf:84:99:cb:41:64:ad:d1:d0:ee:87:9c:f2:3f:d2:31:45: ba:9b:d2:f9:1c:c5:b4:18:f0:b4:6c:1e:d2:48:81:5c:62:55: 78:2c:fa:ca:53:a4:d2:98:63:17:e7:c4:c2:c2:69:96:7f:d5: 90:06:f5:5a:69:8f:c9:be:41:e5:8c:38:08:8f:ec:30:88:7b: 4c:75:32:19:3a:2c:c1:26:41:a5:8b:5f:c8:ce:8d:f0:05:6b: 92:a4:eb:ce:b5:ef:b1:3d:8c:0a:7c:d3:7f:ba:7f:9e:6e:75: 4a:93:7b:9a:4e:63:99:65:e1:0e:2c:5c:75:fc:2e:1d:2a:a4: e2:44:fd:05:cb:10:0c:93:07:f9:1b:3e:52:08:6c:6d:0a:13: 99:18:62:6e:f1:00:6d:87:87:0c:76:a0:90:d2:f6:ae:84:1c: c9:41:10:7a:79:13:0e:48:06:01:05:34:bb:b1:0a:cc:51:ea: d6:9f:b8:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC MEZEMjFENUMwHhcNMjQwNTE4MjMzNTEwWhcNMjQwNTI1MjMzNTEwWjAYMRYwFAYD VQQDEw02NjQ5M2IyZS1jMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrKNyHpPx87QZK0jW+A9eS3kiKVfEheDszea7NsvmrFP3PKwkCgrFkHJlIuX OBi1Jp7o7Dc4cnXSocIL3mXoc5Se77oTOw5n9/zwFAk6rmptumLIcfywpg0gA4rM +BALpocikyh/ZLjgmbowFEd93iJq5xCbnE+edpIHhCNIxgXSKdb91EQ+CG54trVn GciBY2ce0RteXvWYMwNcjw7aOUHk/uNkC3zrLelZsCLeeEtPi+MZNFnFUgWSW7Rb PBRnHZ2v1uBpa8NW7Q3sZqXoxzFJmLbbjd3rKqiFoqk5Hxq9ML0Kj/w7KUF1MvGd Wd05I2RBoI7X66n3hM1wlSInTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2vkbfk VKL55MNNImgIM3K9/w/oMB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5 MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU5MC8yRjdCMTdDNDM5MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3Jk QkV2Q2p2WGZJWmF3X1NIVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVLNeW4LOjCFi6WiZ9qfzvo174xQHa5B/R1YRVTamuMEkbPuZAZVSS NCXgoLbq6727pY2gAtol4DS7SowaAJmNrtD5BIyxz5KPv4SZy0FkrdHQ7oec8j/S MUW6m9L5HMW0GPC0bB7SSIFcYlV4LPrKU6TSmGMX58TCwmmWf9WQBvVaaY/JvkHl jDgIj+wwiHtMdTIZOizBJkGli1/Izo3wBWuSpOvOte+xPYwKfNN/un+ebnVKk3ua TmOZZeEOLFx1/C4dKqTiRP0FyxAMkwf5Gz5SCGxtChOZGGJu8QBth4cMdqCQ0vau hBzJQRB6eRMOSAYBBTS7sQrMUerWn7gq -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org