$ rpki-client -vvf rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft File: TLgV1pdFW8swK3TXnapq5Bu3t4k.mft (raw, json) Hash identifier: Bbybj11ij2MZv8HalYCg4ZK3ZHglV/wzhvGqk5NuP80= Subject key identifier: AF:B9:F5:D3:94:F7:F7:8E:48:DB:47:60:A3:F2:E7:E1:1F:27:0B:7A Authority key identifier: 4C:B8:15:D6:97:45:5B:CB:30:2B:74:D7:9D:AA:6A:E4:1B:B7:B7:89 Certificate issuer: /CN=A91395A9/serialNumber=4CB815D697455BCB302B74D79DAA6AE41BB7B789 Certificate serial: 0712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLgV1pdFW8swK3TXnapq5Bu3t4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft Manifest number: 1AF2 Signing time: Thu 02 May 2024 17:31:13 +0000 Manifest this update: Thu 02 May 2024 17:31:13 +0000 Manifest next update: Thu 09 May 2024 17:31:13 +0000 Files and hashes: 1: TLgV1pdFW8swK3TXnapq5Bu3t4k.crl (hash: GIUatM6TEZLTg+592cKrbkTKIf/AFGf6mayUL8jrp5o=) 2: 19C035C6F3EF11EA82F3C251C4F9AE02.roa (hash: FUGlXdXF81JPx5LHKvaIKbXTVuBi7QATMPLpsYgWq5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.crl rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLgV1pdFW8swK3TXnapq5Bu3t4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91395A9/serialNumber=4CB815D697455BCB302B74D79DAA6AE41BB7B789 Validity Not Before: May 2 17:31:13 2024 GMT Not After : May 9 17:31:13 2024 GMT Subject: CN=6633cde1-7d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:b5:d0:96:e5:ae:17:9e:ea:94:d2:f8:ec: 2f:18:e1:d7:08:e0:cc:91:ca:39:5b:cf:c6:de:d4: fc:86:a4:3a:0c:d9:ba:c4:32:03:b9:83:25:98:a6: fc:7a:81:3d:5a:5e:cd:09:5a:ca:2d:ce:7f:b6:24: cd:d7:a8:37:06:dd:a3:e0:f0:94:d1:0e:b8:ed:56: 34:e2:68:e2:3c:b0:2a:5f:2c:ac:7a:af:25:d0:8b: 89:80:62:f3:38:3c:3f:0f:83:d9:e0:be:39:21:04: 08:fa:66:b9:44:df:c1:72:3a:12:29:34:a9:88:c8: f9:df:5e:ad:93:37:0e:91:78:80:a2:c1:9f:2f:26: 2b:e9:2c:7d:19:f5:3f:14:91:d7:20:e0:a7:db:fc: 15:35:ab:c5:86:c5:92:7a:1f:07:4b:c7:c3:d9:7c: cc:9b:19:d8:96:ba:c7:58:51:76:df:8f:a8:a7:a6: 3a:a3:1c:bb:bd:0a:16:07:b4:56:e4:4a:3a:4f:cd: f7:29:3a:1b:80:de:54:2e:1d:9f:6f:aa:30:fd:2f: 7d:20:cb:af:b7:a9:6a:8a:ee:97:b4:cb:f9:fd:f8: 4b:4c:eb:5b:89:30:e1:51:0b:6a:ff:e5:e6:96:db: 62:15:33:5e:19:02:e3:9e:e2:dc:77:f5:b3:7a:b3: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B9:F5:D3:94:F7:F7:8E:48:DB:47:60:A3:F2:E7:E1:1F:27:0B:7A X509v3 Authority Key Identifier: keyid:4C:B8:15:D6:97:45:5B:CB:30:2B:74:D7:9D:AA:6A:E4:1B:B7:B7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLgV1pdFW8swK3TXnapq5Bu3t4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:16:ab:38:be:01:b8:ca:8d:0c:f7:e4:8d:19:29:63:34:4d: 16:5b:90:c6:7c:ae:02:42:b9:e7:e0:9f:b5:42:af:0b:c0:4d: 49:6f:2c:9f:4c:bf:25:8b:d9:a7:c0:54:56:2c:db:90:05:ea: 85:5e:55:5c:ea:52:e6:77:e6:e5:6b:ab:84:86:52:55:a7:00: a6:48:b2:fb:57:87:9a:06:65:fe:52:65:af:8b:27:18:3a:b9: 8b:66:c1:79:5e:44:54:e2:f5:ee:4e:c9:6a:e2:b3:b2:ff:5e: e1:95:1d:60:08:9e:56:ef:31:ca:53:9d:34:c2:f5:d0:35:3c: 7a:c6:21:2d:f0:c0:68:06:c7:dc:12:51:96:d4:fc:c7:2d:64: 91:23:a2:36:b0:04:85:41:a0:13:a6:06:7c:d0:4b:c0:99:84: ef:57:e5:36:bb:73:95:e4:4f:71:0f:3e:0f:c1:36:01:f3:5c: 62:02:17:c5:4b:56:01:d2:2a:b4:25:ca:cf:a9:6d:a2:3a:45: ac:e4:62:e6:70:1f:c5:4f:94:85:6f:52:bd:ee:75:a5:58:b4: d3:19:b3:21:5d:23:69:3a:59:32:42:b2:00:6a:db:12:27:58: ef:ad:86:91:8b:97:12:de:a3:26:c0:3a:8b:bf:5b:77:cb:58: 3b:f2:5c:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk1QTkxMTAvBgNVBAUTKDRDQjgxNUQ2OTc0NTVCQ0IzMDJCNzRENzlEQUE2QUU0 MUJCN0I3ODkwHhcNMjQwNTAyMTczMTEzWhcNMjQwNTA5MTczMTEzWjAYMRYwFAYD VQQDEw02NjMzY2RlMS03ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4K10Jblrhee6pTS+OwvGOHXCODMkco5W8/G3tT8hqQ6DNm6xDIDuYMlmKb8 eoE9Wl7NCVrKLc5/tiTN16g3Bt2j4PCU0Q647VY04mjiPLAqXyyseq8l0IuJgGLz ODw/D4PZ4L45IQQI+ma5RN/BcjoSKTSpiMj5316tkzcOkXiAosGfLyYr6Sx9GfU/ FJHXIOCn2/wVNavFhsWSeh8HS8fD2XzMmxnYlrrHWFF234+op6Y6oxy7vQoWB7RW 5Eo6T833KTobgN5ULh2fb6ow/S99IMuvt6lqiu6XtMv5/fhLTOtbiTDhUQtq/+Xm lttiFTNeGQLjnuLcd/WzerP3pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+59dOU 9/eOSNtHYKPy5+EfJwt6MB8GA1UdIwQYMBaAFEy4FdaXRVvLMCt0152qauQbt7eJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTVBOS82N0FFREU4QzVE MTkxMUU4OERERTM5M0VDNEY5QUUwMi9UTGdWMXBkRlc4c3dLM1RYbmFwcTVCdTN0 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RMZ1YxcGRGVzhzd0szVFhuYXBxNUJ1M3Q0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTVBOS82N0FFREU4QzVEMTkxMUU4OERERTM5M0VDNEY5QUUwMi9UTGdWMXBkRlc4 c3dLM1RYbmFwcTVCdTN0NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANFqs4vgG4yo0M9+SNGSljNE0WW5DGfK4CQrnn4J+1Qq8LwE1Jbyyf TL8li9mnwFRWLNuQBeqFXlVc6lLmd+bla6uEhlJVpwCmSLL7V4eaBmX+UmWviycY OrmLZsF5XkRU4vXuTslq4rOy/17hlR1gCJ5W7zHKU500wvXQNTx6xiEt8MBoBsfc ElGW1PzHLWSRI6I2sASFQaATpgZ80EvAmYTvV+U2u3OV5E9xDz4PwTYB81xiAhfF S1YB0iq0JcrPqW2iOkWs5GLmcB/FT5SFb1K97nWlWLTTGbMhXSNpOlkyQrIAatsS J1jvrYaRi5cS3qMmwDqLv1t3y1g78lzp -----END CERTIFICATE-----Generated at Thu May 2 20:04:27 2024 by rpki-client on console-ams.rpki-client.org