$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: kcD+l5e4DIBulFbpIiYbGWs41j4UVfpOc+4QttAxz5s= Subject key identifier: 46:24:5F:B6:50:0C:7E:9E:FC:51:EF:52:0C:D6:4D:CF:B8:D9:C5:0C Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 1C Signing time: Fri 17 May 2024 08:53:32 +0000 Manifest this update: Fri 17 May 2024 08:53:31 +0000 Manifest next update: Fri 24 May 2024 08:53:31 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: yQyJeGR5jgwOSptiay9pBoXhYEvRPQzQ42uErWRsjRs=) 2: 0DBEE8A6F37011EEACC7EB7AC4F9AE02.roa (hash: /gSA3t31p4sHh/nVImDlZ6C1qeedlIwa0gXefZnIFWo=) 3: B1262C9810F811EF96FA272DC4F9AE02.roa (hash: tAVRX3SHoqRLI89WpAeTtRA5Xg2CX2loZ9TU0oqL8wI=) 4: 6C8DB570FE1911EEBC22905DC4F9AE02.roa (hash: hPgoNHbP8TnQMLHkO9eUXhsu4qNgnVEZOfgux/wVtSU=) 5: 69E4E8640B7C11EF8E4FA72DC4F9AE02.roa (hash: uzbfP6PSi15+cB5q+5efmAHUZVI1i0WZIgt2xCf4cvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: May 17 08:53:31 2024 GMT Not After : May 24 08:53:31 2024 GMT Subject: CN=66471b0c-f87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0f:01:e6:4c:60:2f:80:3d:79:4a:40:63:cd: 15:97:91:e6:da:58:a7:dd:0d:4e:7a:ba:17:a6:44: 9b:df:1d:29:81:a6:a4:b8:0a:e6:b0:cd:6b:a3:0f: fb:c8:bb:ca:57:34:1b:f3:af:ef:c7:36:2c:a9:82: e9:a3:06:8a:ea:0c:94:c6:b2:18:94:e8:3a:6a:61: 67:df:93:a9:bd:42:dd:23:66:4c:3f:11:a1:bc:72: 26:6e:83:ff:55:59:b6:dd:cf:de:f2:94:b7:a1:2c: 96:e3:19:ef:ee:78:c8:18:64:7a:30:ef:55:11:af: da:08:c8:bd:b1:ee:e6:18:23:cd:b0:9b:7c:96:20: a6:9b:12:70:38:8b:d6:ef:06:c2:a2:86:a4:50:7e: b8:18:84:e3:ed:58:64:b0:86:2c:e9:23:c5:ca:3d: 56:28:a6:4b:a3:7d:ea:38:f3:20:ce:03:ea:5d:f0: 1e:f9:84:a6:19:21:6c:d9:0e:cf:46:ef:23:28:c7: a3:96:9e:60:91:5f:dc:da:6c:72:a6:a8:40:d3:1e: 5c:72:6a:b6:5c:42:39:36:ff:8b:64:9e:5f:10:35: 32:42:3c:d6:d9:33:52:c5:0a:dc:cd:72:e4:6e:09: 7e:b4:db:2c:55:8a:bc:87:b6:06:b9:5a:a1:bc:09: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:24:5F:B6:50:0C:7E:9E:FC:51:EF:52:0C:D6:4D:CF:B8:D9:C5:0C X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0a:a1:4b:95:eb:6d:4b:c6:bc:2d:2e:df:62:3d:08:ce:9f: 4f:2d:84:c0:88:77:40:40:5d:d5:40:dd:f8:4c:f8:ba:66:0d: d3:7b:53:a2:52:8d:75:4f:ba:52:7a:dc:62:c5:cf:55:7f:e7: 71:45:ea:53:a0:e3:12:56:87:c4:f3:de:2c:e5:01:b3:b7:a7: c8:2a:25:6d:5a:04:18:00:bc:53:f1:01:96:32:66:eb:00:88: 61:7b:58:c4:0b:d7:df:42:74:dc:52:0b:77:36:50:7a:ff:95: b9:a1:01:c0:b1:c7:a8:b0:dc:64:0e:74:ee:fa:31:ed:52:c5: 9d:96:ca:f5:10:c8:f3:ab:c1:12:85:7f:5d:dd:9f:d2:9b:26: 54:cd:ac:04:c8:e8:49:b8:d0:fc:58:52:5e:9a:e9:7e:5f:68: c4:b1:4b:af:0e:99:8e:07:49:87:a7:28:e9:e5:32:a6:a4:9f: ba:28:b5:66:f9:34:3e:f9:b5:bd:ce:4a:f3:aa:f4:d1:5d:25: 81:8b:b5:e9:9f:28:2a:57:0e:14:c1:f3:49:e6:91:8e:e6:e5: 85:85:5f:f4:00:bb:8f:f7:0f:6f:13:f9:3f:e7:4c:b0:f4:6e: b5:b0:c5:0c:38:60:17:16:88:6b:6b:a8:27:8c:4c:46:34:87: e0:6c:a0:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTY0NzExMC8GA1UEBRMoQUQzNDQ1REI0MjAxMEIxMjE1QTQ5RTQyN0YxQUU3NDAw RDc4OEJGQjAeFw0yNDA1MTcwODUzMzFaFw0yNDA1MjQwODUzMzFaMBgxFjAUBgNV BAMTDTY2NDcxYjBjLWY4N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSDwHmTGAvgD15SkBjzRWXkebaWKfdDU56uhemRJvfHSmBpqS4CuawzWujD/vI u8pXNBvzr+/HNiypgumjBorqDJTGshiU6DpqYWffk6m9Qt0jZkw/EaG8ciZug/9V Wbbdz97ylLehLJbjGe/ueMgYZHow71URr9oIyL2x7uYYI82wm3yWIKabEnA4i9bv BsKihqRQfrgYhOPtWGSwhizpI8XKPVYopkujfeo48yDOA+pd8B75hKYZIWzZDs9G 7yMox6OWnmCRX9zabHKmqEDTHlxyarZcQjk2/4tknl8QNTJCPNbZM1LFCtzNcuRu CX602yxViryHtga5WqG8CWYFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURiRftlAM fp78Ue9SDNZNz7jZxQwwHwYDVR0jBBgwFoAUrTRF20IBCxIVpJ5CfxrnQA14i/sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NjQ3LzkwNUMxMDQ2RjM2 RjExRUU5OTcyRUI3OUM0RjlBRTAyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlf cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclRSRjIwSUJDeElWcEo1Q2Z4cm5RQTE0aV9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 NjQ3LzkwNUMxMDQ2RjM2RjExRUU5OTcyRUI3OUM0RjlBRTAyL3JUUkYyMElCQ3hJ VnBKNUNmeHJuUUExNGlfcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFgKoUuV621LxrwtLt9iPQjOn08thMCId0BAXdVA3fhM+LpmDdN7U6JS jXVPulJ63GLFz1V/53FF6lOg4xJWh8Tz3izlAbO3p8gqJW1aBBgAvFPxAZYyZusA iGF7WMQL199CdNxSC3c2UHr/lbmhAcCxx6iw3GQOdO76Me1SxZ2WyvUQyPOrwRKF f13dn9KbJlTNrATI6Em40PxYUl6a6X5faMSxS68OmY4HSYenKOnlMqakn7ootWb5 ND75tb3OSvOq9NFdJYGLtemfKCpXDhTB80nmkY7m5YWFX/QAu4/3D28T+T/nTLD0 brWwxQw4YBcWiGtrqCeMTEY0h+BsoCg= -----END CERTIFICATE-----Generated at Fri May 17 10:59:10 2024 by rpki-client on console-ams.rpki-client.org