$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft File: TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json) Hash identifier: DE/jUraItMQv9u3xLh+RpgI0Tk8xC5nwX4i4p9dD1RQ= Subject key identifier: F9:FE:5A:A0:7D:63:E5:7B:31:3C:6E:E7:9B:5A:5C:F7:F6:78:45:54 Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 Certificate issuer: /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft Manifest number: 05D5 Signing time: Tue 07 May 2024 00:06:42 +0000 Manifest this update: Tue 07 May 2024 00:06:42 +0000 Manifest next update: Tue 14 May 2024 00:06:42 +0000 Files and hashes: 1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: MB1j4+ComdGwYoJ9ZMuh18vwyUiC53WiQXJrYJydd6c=) 2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: W7le14999KEWD+G9NtgkVSRfMfJSgYHx2F5Qt/nqg0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Validity Not Before: May 7 00:06:42 2024 GMT Not After : May 14 00:06:42 2024 GMT Subject: CN=66397092-6052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:2b:31:c0:d7:f9:a2:93:bf:b0:cc:77:db: 29:13:51:85:dd:b7:5d:5d:7a:e4:82:db:f3:54:fb: 10:d2:17:50:5c:7e:27:79:c0:4e:d2:72:00:51:51: 80:86:be:18:d0:09:ca:01:35:f9:9c:88:d8:c2:e5: a3:dd:9a:1c:8c:f2:83:dd:4c:cb:57:8e:1d:06:d4: 14:52:c3:f1:94:dc:b8:7d:2d:26:d5:f9:f2:6c:b4: 34:52:86:65:86:8f:71:f1:60:90:12:77:1a:2e:6a: 5c:7b:56:46:80:fb:06:e7:f7:b9:5a:a5:57:f7:ac: c6:1b:60:ae:f8:d7:89:85:69:a7:a3:88:46:9e:6e: 03:9f:3c:08:3f:e7:de:55:73:e8:fb:2b:ae:c9:97: 18:24:fd:55:15:a5:77:4d:25:c9:bf:c9:b0:8e:9b: db:be:79:d6:c3:9c:1f:41:2b:cd:82:1a:a5:d1:5c: 70:3b:b4:7e:a9:9d:d8:b0:52:81:63:71:72:c5:e8: 25:5f:a9:e0:aa:78:da:5b:0a:16:32:9f:25:d1:c4: 93:88:01:a0:7a:6d:6a:f0:16:13:9e:60:e5:86:fd: 26:74:ff:66:33:8e:42:11:e6:12:74:56:93:09:a6: 87:2e:45:cf:ad:90:18:95:1c:8f:b8:1b:43:25:c9: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FE:5A:A0:7D:63:E5:7B:31:3C:6E:E7:9B:5A:5C:F7:F6:78:45:54 X509v3 Authority Key Identifier: keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:82:f5:08:80:e7:8e:b1:0b:74:7d:e8:62:17:c8:06:36:83: bd:f5:c8:96:75:39:af:43:e3:91:b9:70:df:61:af:c8:45:4d: 27:1c:7e:f8:0c:ae:6f:c3:61:5f:36:97:66:48:7e:cd:95:59: bd:eb:d0:ca:e0:21:59:64:49:c0:19:13:30:94:28:ac:da:f9: c5:ad:b1:d7:eb:e7:50:7c:1f:24:8b:5f:1b:1a:42:04:18:f4: bd:53:96:49:f4:16:14:86:e2:ab:f1:e4:98:b3:fd:13:d3:0c: b9:f0:5e:45:87:3e:56:a6:0b:3b:4a:fb:62:33:a5:5a:0f:0e: c1:e7:75:de:2a:68:1c:f6:2f:71:f6:09:83:28:8b:01:b1:e6: a0:6b:91:75:16:0e:09:9b:e5:f1:7a:40:a4:de:b0:07:6a:d0: ab:15:78:93:80:d0:ea:b8:4c:63:99:3b:b2:22:ec:7c:dc:ee: 44:6f:1c:47:57:ab:d3:14:40:22:e0:1d:cc:04:d1:a0:aa:85: a1:f8:30:08:47:f4:27:38:61:7d:af:65:3c:fa:f6:b9:c7:99: 6a:89:d7:52:7e:7e:23:75:e3:8b:a8:8b:99:8e:c5:8b:bb:89: 9d:69:33:86:f7:5f:20:eb:d1:12:da:73:21:8b:c1:39:ab:73: 39:ed:7c:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRFMDY2NTY2NjIw RUMzMEUyQTcwHhcNMjQwNTA3MDAwNjQyWhcNMjQwNTE0MDAwNjQyWjAYMRYwFAYD VQQDEw02NjM5NzA5Mi02MDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kgrMcDX+aKTv7DMd9spE1GF3bddXXrkgtvzVPsQ0hdQXH4necBO0nIAUVGA hr4Y0AnKATX5nIjYwuWj3ZocjPKD3UzLV44dBtQUUsPxlNy4fS0m1fnybLQ0UoZl ho9x8WCQEncaLmpce1ZGgPsG5/e5WqVX96zGG2Cu+NeJhWmno4hGnm4DnzwIP+fe VXPo+yuuyZcYJP1VFaV3TSXJv8mwjpvbvnnWw5wfQSvNghql0VxwO7R+qZ3YsFKB Y3FyxeglX6ngqnjaWwoWMp8l0cSTiAGgem1q8BYTnmDlhv0mdP9mM45CEeYSdFaT CaaHLkXPrZAYlRyPuBtDJckmrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPn+WqB9 Y+V7MTxu55taXPf2eEVUMB8GA1UdIwQYMBaAFEwFeeV8nR6UpOPk4GZWZiDsMOKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM0RC9GNEYwNDkxODZC NDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhwU2s0LVRnWmxabUlPd3c0 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVjU1WHlkSHBTazQtVGdabFptSU93dzRxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM0RC9GNEYwNDkxODZCNDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhw U2s0LVRnWmxabUlPd3c0cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWgvUIgOeOsQt0fehiF8gGNoO99ciWdTmvQ+ORuXDfYa/IRU0nHH74 DK5vw2FfNpdmSH7NlVm969DK4CFZZEnAGRMwlCis2vnFrbHX6+dQfB8ki18bGkIE GPS9U5ZJ9BYUhuKr8eSYs/0T0wy58F5Fhz5Wpgs7SvtiM6VaDw7B53XeKmgc9i9x 9gmDKIsBseaga5F1Fg4Jm+XxekCk3rAHatCrFXiTgNDquExjmTuyIux83O5EbxxH V6vTFEAi4B3MBNGgqoWh+DAIR/QnOGF9r2U8+va5x5lqiddSfn4jdeOLqIuZjsWL u4mdaTOG918g69ES2nMhi8E5q3M57Xw2 -----END CERTIFICATE-----Generated at Tue May 7 00:53:20 2024 by rpki-client on console-ams.rpki-client.org