$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft File: PTTx6lntsIbxczTVmekxDXH-B0Q.mft (raw, json) Hash identifier: UoJRC4u9VogVIGuiNLDj1IF8JSsroXz97Gf+5p4KP0s= Subject key identifier: FD:01:48:0E:5C:87:B5:A2:12:13:7D:A8:52:30:7F:D6:AC:D1:BA:FE Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0DAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft Manifest number: 0D96 Signing time: Thu 02 May 2024 18:36:15 +0000 Manifest this update: Thu 02 May 2024 18:36:15 +0000 Manifest next update: Thu 09 May 2024 18:36:15 +0000 Files and hashes: 1: PTTx6lntsIbxczTVmekxDXH-B0Q.crl (hash: 7JBbzczyuR4dyPiXEdgBrPw21ARX2JDQ24uoDhb7DNQ=) 2: 3D69458C9E2111E9BCDFAE69C4F9AE02.roa (hash: JgAzd4b/Exw3WmYoicyj95VsDOgmvLq+AR0pC67cCiA=) 3: A152FA389E2211E99CA85B6CC4F9AE02.roa (hash: l0ylgCDZO+lWci1SHyFWiAvCy7GcuDTqjNekg+93CcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3499 (0xdab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Validity Not Before: May 2 18:36:15 2024 GMT Not After : May 9 18:36:15 2024 GMT Subject: CN=6633dd1f-b8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:72:4c:76:b8:ea:f4:c7:0f:6d:f1:ae:06: ee:b8:31:aa:9a:64:8e:8c:64:37:47:5f:71:e4:b9: a5:d3:88:3e:cb:34:76:0f:5a:42:c2:3a:b3:38:b9: 5d:c1:a2:a7:98:a3:b4:e6:25:16:7f:cb:e8:1f:d6: 4e:25:bb:c6:ff:1a:08:84:23:2c:ec:8f:3d:2c:05: 60:d7:ab:70:44:a8:75:93:a7:82:ad:ce:af:4e:0e: 38:fa:22:c2:d5:06:2f:2f:c9:3b:46:15:ad:36:54: 61:72:8d:9e:94:0e:0c:a5:e1:d7:fc:b5:8e:04:ca: 54:7c:2f:77:a7:02:83:17:3d:3e:60:76:55:e7:a8: 78:99:9a:39:ff:f5:7a:fe:cf:97:4a:01:e0:df:8e: cb:a5:34:fb:81:9c:5e:9f:29:1e:2d:55:65:32:2e: 0b:4f:51:ec:57:c1:52:ef:43:f3:62:93:d3:c1:9d: 7b:52:02:65:1c:8d:b3:51:24:db:de:0a:e1:2d:0e: 54:8f:2f:ae:4a:fc:2c:79:9e:d7:08:a7:a0:cf:31: 91:69:60:c1:69:34:a1:b2:00:e7:56:10:54:5e:f9: 4c:c0:ee:ae:09:d4:c3:32:ee:0a:9c:4c:58:a0:02: 7b:20:da:8f:d3:eb:fd:73:de:b6:75:53:5a:7e:72: c7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:01:48:0E:5C:87:B5:A2:12:13:7D:A8:52:30:7F:D6:AC:D1:BA:FE X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e0:52:0b:70:a3:2f:8a:68:c4:b9:eb:7e:f4:a0:c9:14:6a: 79:7f:ee:77:79:a0:dc:1b:2b:9d:f8:9c:be:3b:8f:2b:0b:ec: 09:70:14:83:2c:14:15:13:8c:8a:55:58:35:3b:44:97:cf:b7: eb:bd:17:2e:6e:a3:12:90:de:04:4b:b7:4c:5d:c2:57:3e:d3: f4:25:d4:d9:c2:33:67:31:23:51:42:40:a5:f1:57:da:c0:98: 1a:8c:51:fa:85:86:0c:94:31:e4:a3:46:94:6e:26:20:5a:9d: 98:84:97:f2:10:73:6a:55:32:75:a9:58:72:b6:94:a4:33:cb: 3c:dd:33:b8:47:c7:ce:fa:ad:ce:7a:d2:70:84:1c:5d:a2:a3: c3:31:56:d3:04:cc:0a:28:95:b7:cd:86:86:90:d9:91:d1:93: bc:5a:68:56:52:95:a3:48:ee:a1:87:29:83:d3:e4:3a:73:e7: 30:74:f7:06:9b:d3:a7:3b:27:65:28:aa:b2:eb:d7:06:33:5f: 42:64:fb:3c:ae:eb:b5:00:f8:9c:33:a6:fe:c6:fa:08:e9:5e: aa:fc:f4:3d:57:93:64:f8:a2:4f:01:f1:d1:10:4f:62:1d:93: d4:3c:63:35:07:02:35:c0:a5:ab:50:5b:77:36:a9:4e:52:c4: 36:9a:10:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjQwNTAyMTgzNjE1WhcNMjQwNTA5MTgzNjE1WjAYMRYwFAYD VQQDEw02NjMzZGQxZi1iOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WVyTHa46vTHD23xrgbuuDGqmmSOjGQ3R19x5Lml04g+yzR2D1pCwjqzOLld waKnmKO05iUWf8voH9ZOJbvG/xoIhCMs7I89LAVg16twRKh1k6eCrc6vTg44+iLC 1QYvL8k7RhWtNlRhco2elA4MpeHX/LWOBMpUfC93pwKDFz0+YHZV56h4mZo5//V6 /s+XSgHg347LpTT7gZxenykeLVVlMi4LT1HsV8FS70PzYpPTwZ17UgJlHI2zUSTb 3grhLQ5Ujy+uSvwseZ7XCKegzzGRaWDBaTShsgDnVhBUXvlMwO6uCdTDMu4KnExY oAJ7INqP0+v9c962dVNafnLHuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0BSA5c h7WiEhN9qFIwf9as0br+MB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUFFNi83QkMyOTMyNjlCRjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJ YnhjelRWbWVreERYSC1CMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD4FILcKMvimjEuet+9KDJFGp5f+53eaDcGyud+Jy+O48rC+wJcBSD LBQVE4yKVVg1O0SXz7frvRcubqMSkN4ES7dMXcJXPtP0JdTZwjNnMSNRQkCl8Vfa wJgajFH6hYYMlDHko0aUbiYgWp2YhJfyEHNqVTJ1qVhytpSkM8s83TO4R8fO+q3O etJwhBxdoqPDMVbTBMwKKJW3zYaGkNmR0ZO8WmhWUpWjSO6hhymD0+Q6c+cwdPcG m9OnOydlKKqy69cGM19CZPs8ruu1APicM6b+xvoI6V6q/PQ9V5Nk+KJPAfHREE9i HZPUPGM1BwI1wKWrUFt3NqlOUsQ2mhBA -----END CERTIFICATE-----Generated at Thu May 2 20:50:22 2024 by rpki-client on console-fra.rpki-client.org