$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json) Hash identifier: +T+Q8tF5WCHK0ef2vL2tTnQ8+tBPKPM20G/aEMvcong= Subject key identifier: E2:62:E8:B4:03:6B:E5:D3:83:4D:FC:E1:C7:1C:2D:CF:CA:8C:56:22 Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Certificate serial: 0B9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft Manifest number: 0B93 Signing time: Sat 18 May 2024 19:17:31 +0000 Manifest this update: Sat 18 May 2024 19:17:30 +0000 Manifest next update: Sat 25 May 2024 19:17:30 +0000 Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: pvDDPRZKZ7BltDwa1PG56tr3MFcJXa+a8Dr/nApnJ1s=) 2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: sksRMVI3q7oJNtyDgmTVFUq7ceYvdVbVuSS4jEJcQsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F Validity Not Before: May 18 19:17:30 2024 GMT Not After : May 25 19:17:30 2024 GMT Subject: CN=6648feca-0674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:96:b6:27:31:b4:47:51:83:42:0c:6c:17: fa:00:5a:05:39:d0:15:24:2c:4f:96:4c:e5:de:55: 53:dc:c7:19:30:a0:50:45:47:d6:56:11:41:cb:08: e7:fb:e0:92:02:97:1f:22:cd:77:bc:2e:c6:61:3e: db:4e:52:30:27:2e:c0:00:23:a3:34:75:32:22:9a: 38:09:37:5a:21:ed:58:3e:51:2a:c5:82:7e:49:e5: 8c:96:ba:bf:e0:89:c8:e4:f8:f8:b1:35:93:6d:5d: 1d:9e:29:4a:30:8a:10:85:e6:35:77:72:30:60:b5: c1:e6:61:e2:24:79:22:8b:0a:03:ea:ec:95:b3:90: ac:a7:1a:e6:35:0b:d8:b5:a0:02:93:3d:69:88:38: 15:bf:dd:6e:f0:1b:31:b4:f0:24:5d:10:50:98:a1: a5:be:bc:50:31:8d:09:6a:9c:25:18:f0:39:80:7d: 96:fd:dd:83:7f:1b:30:97:1f:d2:44:53:ae:d6:03: 7d:7e:cd:95:19:12:ae:5c:a4:87:06:a6:e8:51:3a: cb:86:fc:ca:3a:79:c6:35:3c:5b:49:92:0b:e5:84: fa:b2:c1:ff:dc:c2:f1:06:3d:6f:be:64:36:70:a2: 3d:cc:2a:d1:61:be:41:49:6f:be:8a:36:72:54:c2: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:62:E8:B4:03:6B:E5:D3:83:4D:FC:E1:C7:1C:2D:CF:CA:8C:56:22 X509v3 Authority Key Identifier: keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:cf:06:e7:80:8c:b5:12:f4:20:a6:b5:87:a0:10:ce:aa:6a: 6c:07:5a:8e:47:a4:6a:66:3b:1e:c8:96:6a:86:8b:cb:ce:6b: 9e:9e:3d:fa:42:60:0c:10:b7:88:65:97:df:04:4f:8d:f3:e3: 93:46:c0:81:8d:f2:c4:d4:f2:49:b6:d7:ba:f8:40:f6:78:13: a2:10:fb:11:7e:88:50:d9:a9:73:bf:05:e7:ee:58:05:4b:38: cb:1d:a6:a1:7f:aa:20:f0:f8:29:94:59:a2:57:ea:a4:17:d4: a3:23:70:25:d4:4d:31:b8:00:52:30:2f:38:8d:84:e0:ed:83: d3:d2:78:74:15:f6:65:42:fd:b7:c1:80:48:13:ba:5d:6b:1f: 31:4a:f9:81:0f:6c:cd:96:fa:df:7a:8d:d0:9d:9f:ac:37:56: a0:32:45:99:49:a1:7b:3a:ad:c3:17:6e:08:ef:cb:00:25:c7: c8:b3:33:17:c2:fe:4a:33:da:9a:6b:69:02:48:9d:1e:c3:e5: f8:a0:e3:43:22:b6:c8:cd:53:9b:fa:3f:14:67:2d:a9:e4:f2: 87:33:90:b4:3d:b4:9a:38:03:2d:59:a6:19:da:b8:01:0e:cf: ed:0c:2b:86:82:8e:9d:3a:97:0d:11:47:62:65:c4:fb:14:9d: 0b:3e:0a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCRUExMTAvBgNVBAUTKEY5MzA4MjkyNDM2RDEwQUE5ODcyNkI0NkZDRkNCRUEw NzkxOTRGNEYwHhcNMjQwNTE4MTkxNzMwWhcNMjQwNTI1MTkxNzMwWjAYMRYwFAYD VQQDEw02NjQ4ZmVjYS0wNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xSWticxtEdRg0IMbBf6AFoFOdAVJCxPlkzl3lVT3McZMKBQRUfWVhFBywjn ++CSApcfIs13vC7GYT7bTlIwJy7AACOjNHUyIpo4CTdaIe1YPlEqxYJ+SeWMlrq/ 4InI5Pj4sTWTbV0dnilKMIoQheY1d3IwYLXB5mHiJHkiiwoD6uyVs5CspxrmNQvY taACkz1piDgVv91u8BsxtPAkXRBQmKGlvrxQMY0JapwlGPA5gH2W/d2Dfxswlx/S RFOu1gN9fs2VGRKuXKSHBqboUTrLhvzKOnnGNTxbSZIL5YT6ssH/3MLxBj1vvmQ2 cKI9zCrRYb5BSW++ijZyVMK8dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJi6LQD a+XTg0384cccLc/KjFYiMB8GA1UdIwQYMBaAFPkwgpJDbRCqmHJrRvz8vqB5GU9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJFQS83QzlDNTkxODAx RDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVLcVljbXRHX1B5LW9Ia1pU MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1UQ0Nra050RUtxWWNtdEdfUHktb0hrWlQwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJFQS83QzlDNTkxODAxRDgxMUVBQjdEN0I0NDRDNEY5QUUwMi8tVENDa2tOdEVL cVljbXRHX1B5LW9Ia1pUMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChzwbngIy1EvQgprWHoBDOqmpsB1qOR6RqZjseyJZqhovLzmuenj36 QmAMELeIZZffBE+N8+OTRsCBjfLE1PJJtte6+ED2eBOiEPsRfohQ2alzvwXn7lgF SzjLHaahf6og8PgplFmiV+qkF9SjI3Al1E0xuABSMC84jYTg7YPT0nh0FfZlQv23 wYBIE7pdax8xSvmBD2zNlvrfeo3QnZ+sN1agMkWZSaF7Oq3DF24I78sAJcfIszMX wv5KM9qaa2kCSJ0ew+X4oONDIrbIzVOb+j8UZy2p5PKHM5C0PbSaOAMtWaYZ2rgB Ds/tDCuGgo6dOpcNEUdiZcT7FJ0LPgoj -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org