$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: ZXKKNpX4TIQhKyzQmDasHrfblRbtZNIpI/2EmDDeQNI= Subject key identifier: 3A:57:84:D9:B3:11:AC:D2:DC:55:24:17:48:D4:F1:CE:68:44:E6:D2 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0A43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0A3E Signing time: Thu 02 May 2024 20:33:42 +0000 Manifest this update: Thu 02 May 2024 20:33:42 +0000 Manifest next update: Thu 09 May 2024 20:33:42 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: 296CAFf8sywRxSBfnJ77cwHvsNObyCrRkPtXSus3qJ0=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: XV/2YtAMQuwWvAtVZQzbXRUZ2i6TAIVPRKA0MGf0zTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2627 (0xa43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: May 2 20:33:42 2024 GMT Not After : May 9 20:33:42 2024 GMT Subject: CN=6633f8a6-c38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:51:c7:5c:0f:d9:d4:d5:97:af:07:7f:7b: a8:ac:02:63:50:75:fc:dd:6f:a0:3b:4d:74:9b:a1: 19:11:b7:66:a0:8e:37:82:ea:7b:b8:a9:56:c2:93: f6:26:e7:a4:71:5c:c4:17:8e:19:6a:e9:96:37:8e: 30:5f:cb:46:ab:d2:fd:36:ff:28:37:09:bf:1b:43: ae:1f:43:de:90:fa:bb:cb:18:33:17:44:c3:f4:a3: 44:b3:21:74:de:80:69:5f:3f:8f:46:e1:b9:c3:52: fd:d9:6b:0d:c6:95:a9:22:a3:b1:5a:b1:05:94:ea: 19:e0:a5:1b:36:22:c1:b2:56:e4:28:cd:2b:14:2c: bd:04:7c:13:99:09:1f:51:4d:c3:d5:57:d1:36:ea: da:2f:f7:b8:28:dc:bb:b7:0f:a5:56:32:84:b9:4a: 65:e3:27:67:e3:a0:b9:85:66:c8:2f:d3:1c:f4:15: 47:76:ad:9f:44:aa:41:cb:2b:10:32:fe:aa:9d:e3: 53:87:fb:5e:06:1c:60:cb:08:95:14:36:90:d7:1e: ed:1f:d2:7c:fa:d0:6d:9d:af:6b:51:46:cc:27:35: 36:7e:83:fe:8b:ba:9e:7b:92:78:5e:fe:6f:1a:06: 67:34:41:6b:4b:5f:7f:5e:25:ac:d7:1c:85:4b:7a: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:57:84:D9:B3:11:AC:D2:DC:55:24:17:48:D4:F1:CE:68:44:E6:D2 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:72:0c:3b:fc:8e:4f:c7:ae:82:59:27:e4:b8:7f:05:23:53: 15:43:a1:46:cf:76:a6:91:5f:f9:20:a5:d2:b7:5a:20:d6:3e: a7:70:f1:42:dd:db:af:f2:f2:e9:99:71:f3:90:40:26:79:89: 43:44:e2:d5:e3:33:1b:2d:a3:07:6e:05:39:b5:30:71:dd:1b: 0e:22:35:48:c4:c2:fe:43:13:c6:ea:9e:e0:81:fd:04:d1:4b: eb:93:aa:9b:df:e3:80:0e:0c:77:90:11:5b:dd:cf:7a:9e:4b: 62:25:2b:66:09:a8:53:a2:14:b5:d5:1c:7e:b9:b0:37:d1:e1: 0a:e5:1e:ac:a9:78:ca:05:82:0b:e1:94:4c:1b:ab:20:66:42: 80:30:b0:d5:26:cb:d7:df:f8:f1:2e:f6:d9:76:d2:1a:ac:bf: e7:5d:59:a5:b5:18:75:d7:83:b9:58:57:a3:8e:54:ae:25:df: c3:5d:41:d4:b9:4f:a3:a3:bf:e1:1e:0f:d5:6b:fa:ef:e9:72: a3:14:ad:43:23:37:55:7c:21:ce:4e:69:25:b4:38:67:4b:45: 9b:16:86:d0:17:a6:2e:d5:63:6b:5d:a1:34:d2:59:c1:6f:fd: 1e:f0:64:1e:dc:30:7f:5b:8f:9f:de:b9:16:6b:8f:e9:0f:10: 21:9b:24:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjQwNTAyMjAzMzQyWhcNMjQwNTA5MjAzMzQyWjAYMRYwFAYD VQQDEw02NjMzZjhhNi1jMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJxRx1wP2dTVl68Hf3uorAJjUHX83W+gO010m6EZEbdmoI43gup7uKlWwpP2 JuekcVzEF44ZaumWN44wX8tGq9L9Nv8oNwm/G0OuH0PekPq7yxgzF0TD9KNEsyF0 3oBpXz+PRuG5w1L92WsNxpWpIqOxWrEFlOoZ4KUbNiLBslbkKM0rFCy9BHwTmQkf UU3D1VfRNuraL/e4KNy7tw+lVjKEuUpl4ydn46C5hWbIL9Mc9BVHdq2fRKpByysQ Mv6qneNTh/teBhxgywiVFDaQ1x7tH9J8+tBtna9rUUbMJzU2foP+i7qee5J4Xv5v GgZnNEFrS19/XiWs1xyFS3rxhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpXhNmz EazS3FUkF0jU8c5oRObSMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZcgw7/I5Px66CWSfkuH8FI1MVQ6FGz3amkV/5IKXSt1og1j6ncPFC 3duv8vLpmXHzkEAmeYlDROLV4zMbLaMHbgU5tTBx3RsOIjVIxML+QxPG6p7ggf0E 0Uvrk6qb3+OADgx3kBFb3c96nktiJStmCahTohS11Rx+ubA30eEK5R6sqXjKBYIL 4ZRMG6sgZkKAMLDVJsvX3/jxLvbZdtIarL/nXVmltRh114O5WFejjlSuJd/DXUHU uU+jo7/hHg/Va/rv6XKjFK1DIzdVfCHOTmkltDhnS0WbFobQF6Yu1WNrXaE00lnB b/0e8GQe3DB/W4+f3rkWa4/pDxAhmyQG -----END CERTIFICATE-----Generated at Thu May 2 22:13:17 2024 by rpki-client on console-fra.rpki-client.org