$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft File: TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json) Hash identifier: jcOZayPWaX1Qt5fiXcrG0M4ELjRFwdNdjtk7dq3L254= Subject key identifier: 17:DE:7B:F0:EC:B8:23:86:34:DF:9F:5A:5F:18:A9:34:A5:D2:0A:7E Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft Manifest number: 37 Signing time: Thu 19 Sep 2024 05:50:03 +0000 Manifest this update: Thu 19 Sep 2024 05:50:02 +0000 Manifest next update: Thu 26 Sep 2024 05:50:02 +0000 Files and hashes: 1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: Qg6bq9IaRpxzb2KYE/uax3M6hpsPr8fLcW3428EBU3E=) 2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: +BYuc5eNV9QVdOv8+l4kTKaLYQnJEvaUX1OVi3Uj8pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Validity Not Before: Sep 19 05:50:02 2024 GMT Not After : Sep 26 05:50:02 2024 GMT Subject: CN=66ebbb8b-6afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4d:c6:40:94:4d:35:5e:5a:62:e7:d9:76:0e: fc:0e:88:e3:57:8f:1e:5a:28:41:15:c6:c5:86:9e: e7:6f:5b:7b:cd:00:9a:10:27:47:fd:47:2b:c2:3d: b9:a5:af:1f:f0:2c:99:b3:3d:4c:12:75:49:0e:1e: 76:65:1b:aa:bd:10:3e:19:2d:22:97:c9:d2:90:73: 40:6d:c1:82:63:10:bc:a1:a9:a3:da:8c:12:4b:6b: 4e:48:bd:64:ac:05:89:f9:33:58:20:1f:23:b6:4c: 12:37:52:85:d0:aa:f4:2b:bb:13:5b:bf:b5:bf:45: c8:8d:1b:30:0f:5c:8d:ef:0e:7a:d4:d8:ce:0b:30: 35:c8:7d:e4:58:df:a2:2c:d4:4c:3b:fb:bc:de:3d: 78:6b:84:4f:9b:ab:c3:28:78:9f:00:6b:b2:e0:f8: 2d:00:73:e7:5a:02:bd:94:11:c7:f4:7f:89:97:c6: af:55:9f:af:23:97:d5:e9:2a:21:b7:d4:dc:f7:d0: af:69:94:f8:ac:7b:bc:99:41:2b:f1:ae:c3:6b:a4: b1:3f:92:f1:57:06:45:df:7f:78:15:02:0e:8b:17: 64:89:71:56:44:df:f9:20:e2:4c:6c:2d:b4:d9:57: bb:b9:5a:86:a1:31:08:55:7a:04:bd:f8:16:b4:54: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DE:7B:F0:EC:B8:23:86:34:DF:9F:5A:5F:18:A9:34:A5:D2:0A:7E X509v3 Authority Key Identifier: keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:a9:af:9c:46:8b:3f:2b:0c:fd:36:9b:7b:07:52:a8:7f:d7: 41:70:f4:88:04:18:62:79:e2:4d:b0:f4:1a:30:6e:1e:61:0d: 65:2e:36:40:45:da:a7:5a:3c:6a:76:75:7d:2d:93:6d:1b:49: de:b3:42:16:b2:38:59:b6:66:25:72:ff:53:e0:b3:bc:94:dc: 68:5f:2e:61:5c:ef:f3:89:4f:6f:fc:da:92:60:3d:1b:6a:d2: 47:e9:f5:cc:49:6c:4c:9f:6a:35:f7:ff:53:e5:4d:97:9e:9a: 01:50:70:87:21:06:25:68:e2:5d:6c:e9:04:fb:3b:88:9c:94: 5c:e9:37:f9:31:44:cb:8e:c9:8f:2c:0f:03:55:a5:55:60:06: bc:e0:59:49:69:af:40:07:3c:1b:ad:0f:c5:99:cd:f3:f8:bc: 25:80:6c:45:f6:5a:cb:17:05:6b:0d:6c:ed:b1:8f:59:17:b5: dc:7f:65:e7:2b:be:9f:05:bb:26:9d:51:25:58:5c:b6:41:33: 02:d2:29:c1:9b:bb:16:dc:00:f0:d5:75:cf:aa:ff:9c:ff:40: a4:ff:12:70:b8:46:ae:09:bd:f6:ff:2f:92:76:ea:12:95:0c: 52:b8:c1:dd:7d:76:ab:6c:31:53:6c:62:3e:25:98:b8:30:f5: 67:16:a7:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTAyMzExMC8GA1UEBRMoNEYxNDZGNUNDNEY0QkM4NzM4MjJGQTFFMzM0NTJBNTQx QTFFRTU0NjAeFw0yNDA5MTkwNTUwMDJaFw0yNDA5MjYwNTUwMDJaMBgxFjAUBgNV BAMTDTY2ZWJiYjhiLTZhZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGTcZAlE01Xlpi59l2DvwOiONXjx5aKEEVxsWGnudvW3vNAJoQJ0f9RyvCPbml rx/wLJmzPUwSdUkOHnZlG6q9ED4ZLSKXydKQc0BtwYJjELyhqaPajBJLa05IvWSs BYn5M1ggHyO2TBI3UoXQqvQruxNbv7W/RciNGzAPXI3vDnrU2M4LMDXIfeRY36Is 1Ew7+7zePXhrhE+bq8MoeJ8Aa7Lg+C0Ac+daAr2UEcf0f4mXxq9Vn68jl9XpKiG3 1Nz30K9plPise7yZQSvxrsNrpLE/kvFXBkXff3gVAg6LF2SJcVZE3/kg4kxsLbTZ V7u5WoahMQhVegS9+Ba0VAAtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF9578Oy4 I4Y0359aXxipNKXSCn4wHwYDVR0jBBgwFoAUTxRvXMT0vIc4IvoeM0UqVBoe5UYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MDIzL0YzM0JCNEE2MjI4 MDExRUZBNzI4M0MxNEM0RjlBRTAyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVV WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVHhSdlhNVDB2SWM0SXZvZU0wVXFWQm9lNVVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MDIzL0YzM0JCNEE2MjI4MDExRUZBNzI4M0MxNEM0RjlBRTAyL1R4UnZYTVQwdklj NEl2b2VNMFVxVkJvZTVVWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMKpr5xGiz8rDP02m3sHUqh/10Fw9IgEGGJ54k2w9Bowbh5hDWUuNkBF 2qdaPGp2dX0tk20bSd6zQhayOFm2ZiVy/1Pgs7yU3GhfLmFc7/OJT2/82pJgPRtq 0kfp9cxJbEyfajX3/1PlTZeemgFQcIchBiVo4l1s6QT7O4iclFzpN/kxRMuOyY8s DwNVpVVgBrzgWUlpr0AHPButD8WZzfP4vCWAbEX2WssXBWsNbO2xj1kXtdx/Zecr vp8FuyadUSVYXLZBMwLSKcGbuxbcAPDVdc+q/5z/QKT/EnC4Rq4Jvfb/L5J26hKV DFK4wd19dqtsMVNsYj4lmLgw9WcWp2o= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:04 2024 by rpki-client on console-ams.rpki-client.org