$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: ajSewKeJrfk7g+fcBYE54c8f3T1MJFyWpjjNkoG05nQ= Subject key identifier: FF:87:F2:36:42:74:F0:48:8A:AA:F9:45:67:C2:45:34:E4:94:0A:4E Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 0612 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 05FE Signing time: Fri 26 Apr 2024 23:55:04 +0000 Manifest this update: Fri 26 Apr 2024 23:55:04 +0000 Manifest next update: Fri 03 May 2024 23:55:03 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: bGdVi9t02zDkxqWcchQ69lyxiH99l41OBqj5BNKuyhQ=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: 1vEsPhJeWhyQnwIKIqzXbxZ8WupHgagiJnru+3AAu00=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: 4a2Znm17VSWHd8khdAf4BuKRqz28wksMetktUiXFduo=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: bN12kEkjlZla1N4j83RN6VmsHaTj7ZlEyR5tAFv0M0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Apr 26 23:55:04 2024 GMT Not After : May 3 23:55:03 2024 GMT Subject: CN=662c3ed8-7392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:94:29:2d:0c:25:0a:fc:3a:e0:5c:ce:90: 0e:db:52:7b:e3:1f:d9:d6:70:50:06:28:cd:d4:e3: 76:f4:c3:ae:87:7a:0f:50:1b:77:01:ca:95:22:af: 08:15:24:77:e3:08:cb:af:a9:67:02:cf:e0:4b:0a: 0d:78:c6:6a:98:91:a4:96:f1:54:3b:d7:c7:ef:77: 70:02:7d:5a:5c:b7:a3:57:c0:03:ea:f6:c5:9c:93: 3c:41:93:e0:9d:e4:df:ae:3b:77:ff:fb:e8:33:e0: 57:c5:06:d6:b9:a8:cd:7d:63:7d:e4:12:c0:b4:2b: 3a:b6:7b:e7:56:21:e6:79:7c:ae:ee:9e:42:44:9e: 23:b1:4f:72:2b:a8:b0:85:ca:81:c0:8a:6b:f1:0d: 68:76:9e:98:6a:20:6e:fb:60:07:38:5e:f0:25:8f: 52:fc:61:98:5f:ef:13:85:cc:02:de:2e:17:4b:6e: ed:5a:dd:13:5e:2b:bc:21:2f:d5:b5:35:68:77:6c: 5f:84:26:77:97:1f:92:4a:76:34:53:1d:37:cc:61: f0:47:4a:48:24:f3:16:fb:dd:bb:04:c5:5f:80:13: 0e:83:d1:cc:fa:bb:f3:8a:3d:4b:ce:67:94:6c:de: fa:1a:90:da:a4:22:e3:a9:ba:fb:20:0e:ee:e4:29: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:87:F2:36:42:74:F0:48:8A:AA:F9:45:67:C2:45:34:E4:94:0A:4E X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:15:16:ba:c6:16:c2:d7:f6:f0:5b:86:80:62:cd:a1:10:53: 61:ab:30:3d:ae:16:c6:f4:7b:9a:50:0b:37:6f:ab:d0:02:77: b5:93:33:f1:7f:5c:0d:86:08:30:73:ec:9a:22:98:64:24:36: 14:07:3d:31:1c:4a:46:cc:3f:df:08:a6:cc:2a:44:c7:ee:87: 27:82:17:96:90:d6:9b:97:69:11:bb:8a:54:41:dd:ab:6d:1b: 24:8f:1a:23:c0:8b:f1:21:9e:55:39:4c:84:64:fe:fb:df:98: b8:07:49:fb:aa:d6:12:fc:93:64:b0:fb:74:a1:33:bf:4c:88: c9:e3:35:cd:a9:1d:14:17:bb:d3:5b:a9:bf:c9:76:b6:c4:28: 8a:06:f8:24:4d:8e:96:7d:1a:f6:36:17:4e:0a:e3:1c:49:41: b6:ba:f9:c2:08:a1:2c:94:20:d7:3e:3c:f3:de:09:4d:b1:3f: 71:95:c0:0f:ea:4a:56:54:c9:49:20:a5:d9:c8:ea:b8:d1:07: f7:bd:11:a4:cd:92:c6:36:71:6e:28:1d:9a:c8:be:07:66:f8: 8e:79:c1:ea:06:9e:23:24:c0:6e:51:c0:ef:d9:b3:5d:ac:8c: a1:c0:d0:09:16:5c:cc:a0:87:12:24:0a:6b:c3:fc:f6:9f:00: 0e:3d:fe:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjQwNDI2MjM1NTA0WhcNMjQwNTAzMjM1NTAzWjAYMRYwFAYD VQQDEw02NjJjM2VkOC03MzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xSUKS0MJQr8OuBczpAO21J74x/Z1nBQBijN1ON29MOuh3oPUBt3AcqVIq8I FSR34wjLr6lnAs/gSwoNeMZqmJGklvFUO9fH73dwAn1aXLejV8AD6vbFnJM8QZPg neTfrjt3//voM+BXxQbWuajNfWN95BLAtCs6tnvnViHmeXyu7p5CRJ4jsU9yK6iw hcqBwIpr8Q1odp6YaiBu+2AHOF7wJY9S/GGYX+8ThcwC3i4XS27tWt0TXiu8IS/V tTVod2xfhCZ3lx+SSnY0Ux03zGHwR0pIJPMW+927BMVfgBMOg9HM+rvzij1LzmeU bN76GpDapCLjqbr7IA7u5CmQlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+H8jZC dPBIiqr5RWfCRTTklApOMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOFRa6xhbC1/bwW4aAYs2hEFNhqzA9rhbG9HuaUAs3b6vQAne1kzPx f1wNhggwc+yaIphkJDYUBz0xHEpGzD/fCKbMKkTH7ocngheWkNabl2kRu4pUQd2r bRskjxojwIvxIZ5VOUyEZP7735i4B0n7qtYS/JNksPt0oTO/TIjJ4zXNqR0UF7vT W6m/yXa2xCiKBvgkTY6WfRr2NhdOCuMcSUG2uvnCCKEslCDXPjzz3glNsT9xlcAP 6kpWVMlJIKXZyOq40Qf3vRGkzZLGNnFuKB2ayL4HZviOecHqBp4jJMBuUcDv2bNd rIyhwNAJFlzMoIcSJAprw/z2nwAOPf6p -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:10 2024 by rpki-client on console-ams.rpki-client.org