$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: voe6B5Ep63XW+zt+dUzaW10DBqB7pWc2o2sMUSi5+/w= Subject key identifier: C8:2A:D6:BD:39:25:75:B9:52:0A:46:06:73:13:1F:B7:CE:6F:56:A8 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 272C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 2717 Signing time: Sat 18 May 2024 15:54:09 +0000 Manifest this update: Sat 18 May 2024 15:54:08 +0000 Manifest next update: Sat 25 May 2024 15:54:08 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: aRz05Tkw9lNWtMlZFhUaZhpqQxRze3moGDjUefYjzk8=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: c1eWaKTgL9+AH+cc5xMKE7jFxnzkuE21gtTwanMOgV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10028 (0x272c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: May 18 15:54:08 2024 GMT Not After : May 25 15:54:08 2024 GMT Subject: CN=6648cf20-64d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:0f:dd:c5:88:9a:a1:54:91:69:34:15:80: 96:d9:06:1d:a3:2e:67:fd:a4:8b:fb:2b:ed:96:56: 86:81:b7:44:5b:fd:11:6e:a6:c1:84:cd:84:96:50: cd:53:41:d8:58:fe:2d:fb:df:cb:41:42:03:e1:30: 39:28:53:f5:d6:19:c2:c1:3d:5c:ab:b2:65:90:66: 89:63:59:4d:46:40:c0:73:1e:9c:ee:7c:36:22:22: b5:d0:3c:8c:cf:18:53:9d:db:c8:9a:5b:fe:e7:db: 6d:b8:3d:1e:8a:aa:98:6d:f3:8c:e5:da:48:71:e5: 1c:36:24:34:cc:ee:e7:ad:e6:76:e6:86:96:8d:fe: 76:d4:9c:36:55:80:f0:35:af:2e:03:81:c9:2d:d2: 44:6b:e6:bf:52:73:7c:ff:d0:f4:54:ee:6b:3f:be: 9f:d3:44:dd:4a:2a:60:42:02:84:36:de:c5:fe:d7: a9:c4:cf:f2:33:7b:98:b6:82:7d:12:12:8b:03:32: 84:12:54:47:8b:d8:a1:c2:ca:33:aa:89:f0:a0:32: 24:37:c9:c8:84:44:d0:a9:e6:06:72:35:a6:b3:be: 74:03:a6:20:8b:e9:68:43:c0:53:d1:bb:54:26:a2: fe:2b:b7:c5:3b:a8:c7:ae:5b:18:76:73:92:79:ef: b2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2A:D6:BD:39:25:75:B9:52:0A:46:06:73:13:1F:B7:CE:6F:56:A8 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:4c:24:75:58:0b:a0:22:d5:42:80:00:36:1f:65:70:91:24: be:c6:97:43:2c:e8:2a:7f:68:5a:93:c9:c4:e1:75:0c:63:dd: 22:e0:eb:30:6d:ee:d4:8c:be:bc:89:de:12:ba:dc:99:12:07: 34:d0:d1:41:dc:43:5e:bc:07:20:34:b2:cd:24:dc:31:f0:0a: f5:22:5e:0a:7a:d6:24:a2:69:8d:27:0d:3e:7a:1a:57:ab:fa: 52:dc:1f:8c:46:4f:b9:53:69:b3:8a:89:78:30:ab:3f:35:4f: 1f:32:27:92:80:38:ca:ea:da:02:07:7b:53:48:ee:bd:93:fe: 6e:fe:2b:44:43:b6:1c:a7:b1:1f:73:10:8f:db:a6:9d:5c:dd: a7:c8:09:2d:65:fa:ca:86:9e:c6:87:5c:aa:be:0d:60:ab:ae: 03:af:0c:b5:b0:55:af:ed:8c:2a:d7:37:9a:00:82:02:5a:2a: 97:f9:7c:07:80:f1:f0:ed:1d:b4:ae:1a:0d:f2:e8:99:1e:5a: c3:24:2f:07:c4:05:37:d4:fb:a5:83:bf:a3:9d:51:ef:a1:18: dd:f9:fb:89:3c:36:5e:16:80:97:07:ff:5a:ad:3a:01:3a:71: dc:59:bb:08:b8:e5:7d:cb:2f:e6:88:7b:99:71:9f:07:42:e2: 55:80:12:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjQwNTE4MTU1NDA4WhcNMjQwNTI1MTU1NDA4WjAYMRYwFAYD VQQDEw02NjQ4Y2YyMC02NGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHoP3cWImqFUkWk0FYCW2QYdoy5n/aSL+yvtllaGgbdEW/0RbqbBhM2EllDN U0HYWP4t+9/LQUID4TA5KFP11hnCwT1cq7JlkGaJY1lNRkDAcx6c7nw2IiK10DyM zxhTndvImlv+59ttuD0eiqqYbfOM5dpIceUcNiQ0zO7nreZ25oaWjf521Jw2VYDw Na8uA4HJLdJEa+a/UnN8/9D0VO5rP76f00TdSipgQgKENt7F/tepxM/yM3uYtoJ9 EhKLAzKEElRHi9ihwsozqonwoDIkN8nIhETQqeYGcjWms750A6Ygi+loQ8BT0btU JqL+K7fFO6jHrlsYdnOSee+y4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgq1r05 JXW5UgpGBnMTH7fOb1aoMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoTCR1WAugItVCgAA2H2VwkSS+xpdDLOgqf2hak8nE4XUMY90i4Osw be7UjL68id4SutyZEgc00NFB3ENevAcgNLLNJNwx8Ar1Il4KetYkommNJw0+ehpX q/pS3B+MRk+5U2mziol4MKs/NU8fMieSgDjK6toCB3tTSO69k/5u/itEQ7Ycp7Ef cxCP26adXN2nyAktZfrKhp7Gh1yqvg1gq64Drwy1sFWv7Ywq1zeaAIICWiqX+XwH gPHw7R20rhoN8uiZHlrDJC8HxAU31Pulg7+jnVHvoRjd+fuJPDZeFoCXB/9arToB OnHcWbsIuOV9yy/miHuZcZ8HQuJVgBLJ -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org