$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: IxBCoQEwfqwrFKFqS0Ey2q/pkQ6aSDMbsbwJyg0aJOY= Subject key identifier: 2D:A6:88:6B:0B:64:49:B3:BF:74:1B:B2:5F:A0:6C:F9:40:0B:26:65 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0B10 Signing time: Sat 04 May 2024 20:07:26 +0000 Manifest this update: Sat 04 May 2024 20:07:25 +0000 Manifest next update: Sat 11 May 2024 20:07:25 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: SDR76+Su8O/yZf2i1mjE+pygbBpVyAAwNCoRm8HFBao=) 2: E11035DE02E311EFA9712859C4F9AE02.roa (hash: V6mkU1t+do01ENnx0fHkUqNhuyY++hkugss11RhFtvg=) 3: 964720467E4211EAA06E325AC4F9AE02.roa (hash: +jUXihUR5Pw095uTshI3CobqNch15pUyoZ/w6dUJWBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: May 4 20:07:25 2024 GMT Not After : May 11 20:07:25 2024 GMT Subject: CN=6636957e-845d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:91:dc:f3:33:e0:f2:a7:e2:42:b3:dc:f4:19: ad:24:d1:9e:61:26:83:9d:f1:cd:18:c0:8a:d3:9e: 7a:f2:2c:fc:1d:b5:2f:ed:fb:cc:c8:8f:2b:8b:01: 96:2c:9c:9b:a3:97:9a:8d:77:eb:cb:7e:b2:9f:bc: bc:74:a7:07:62:e0:5d:5d:3d:25:bb:db:40:4e:f6: 22:03:27:06:00:b0:1f:a5:37:2c:22:f4:20:75:d0: e9:c7:d4:c3:1b:66:25:52:de:40:2f:f3:4f:cc:59: 42:9b:43:2c:c6:e2:9d:f2:f0:7d:5c:23:a9:6a:f5: 54:c7:ed:fb:4a:d2:67:bf:93:f8:e8:7d:6a:f8:3a: 73:67:2f:b4:b5:ef:6a:c5:05:0c:f8:6f:e7:b1:98: 09:d8:60:db:b3:61:df:cf:8f:32:c6:f9:4d:7c:53: a9:64:7b:53:16:f6:94:79:b6:fa:01:97:70:f9:6e: 82:aa:33:8d:26:b3:bb:d3:35:26:52:3b:65:28:ef: 66:d6:85:f2:89:b8:1a:b5:28:5d:48:da:be:5d:e8: 4c:7e:d0:c3:8e:f7:db:fc:c5:83:32:5c:c2:ce:53: 07:98:99:ad:75:65:24:71:a7:45:c9:88:3a:56:a6: 7a:63:c6:71:00:22:ec:4c:4f:5d:d7:51:42:73:80: c0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A6:88:6B:0B:64:49:B3:BF:74:1B:B2:5F:A0:6C:F9:40:0B:26:65 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d8:54:06:85:1f:de:89:56:ad:92:cb:e4:f9:0a:91:2b:7b: 03:b1:4b:2d:7c:93:46:a3:fe:fc:4e:0b:3e:21:1a:bd:25:24: 02:65:c2:7e:20:c4:aa:62:99:27:5c:8f:f4:df:38:6f:cb:80: 71:42:3a:ad:a7:0b:fc:18:22:9b:3b:e8:b1:92:77:65:68:c6: 32:1b:90:5e:14:de:b9:51:29:54:0c:fb:8c:a7:d5:23:81:cd: cd:36:b3:58:56:09:4e:ff:d8:fa:9d:fd:5b:89:75:93:4b:72: fb:b4:4e:f0:14:7c:e1:e7:c0:f2:99:40:b6:58:dc:fd:51:2d: 2b:a9:d5:8a:f7:bd:aa:a9:36:56:5d:df:73:c9:9b:80:d3:78: f8:8c:82:39:b0:93:ae:a6:0f:61:94:ce:12:ce:a5:71:47:98: 2e:29:a9:73:0f:1e:c3:5b:f0:53:c3:6b:0b:19:22:25:c3:92: 3c:7c:db:cf:df:3a:7d:f9:6b:e4:ec:01:09:59:a0:c2:66:b7: de:dd:da:84:f7:5f:c5:ef:1e:ff:3e:9e:4a:b3:73:07:52:fa: 06:5a:03:1e:2a:f8:1c:dc:56:bf:49:93:95:31:47:18:b5:f8: bc:f1:98:45:56:e6:c8:bc:96:cb:17:41:2f:f3:98:3c:9c:8e: b8:e1:c8:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjQwNTA0MjAwNzI1WhcNMjQwNTExMjAwNzI1WjAYMRYwFAYD VQQDEw02NjM2OTU3ZS04NDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JHc8zPg8qfiQrPc9BmtJNGeYSaDnfHNGMCK05568iz8HbUv7fvMyI8riwGW LJybo5eajXfry36yn7y8dKcHYuBdXT0lu9tATvYiAycGALAfpTcsIvQgddDpx9TD G2YlUt5AL/NPzFlCm0MsxuKd8vB9XCOpavVUx+37StJnv5P46H1q+DpzZy+0te9q xQUM+G/nsZgJ2GDbs2Hfz48yxvlNfFOpZHtTFvaUebb6AZdw+W6CqjONJrO70zUm UjtlKO9m1oXyibgatShdSNq+XehMftDDjvfb/MWDMlzCzlMHmJmtdWUkcadFyYg6 VqZ6Y8ZxACLsTE9d11FCc4DAwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2miGsL ZEmzv3Qbsl+gbPlACyZlMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ2FQGhR/eiVatksvk+QqRK3sDsUstfJNGo/78Tgs+IRq9JSQCZcJ+ IMSqYpknXI/03zhvy4BxQjqtpwv8GCKbO+ixkndlaMYyG5BeFN65USlUDPuMp9Uj gc3NNrNYVglO/9j6nf1biXWTS3L7tE7wFHzh58DymUC2WNz9US0rqdWK972qqTZW Xd9zyZuA03j4jII5sJOupg9hlM4SzqVxR5guKalzDx7DW/BTw2sLGSIlw5I8fNvP 3zp9+Wvk7AEJWaDCZrfe3dqE91/F7x7/Pp5Ks3MHUvoGWgMeKvgc3Fa/SZOVMUcY tfi88ZhFVubIvJbLF0Ev85g8nI644ch3 -----END CERTIFICATE-----Generated at Sat May 4 20:37:11 2024 by rpki-client on console-fra.rpki-client.org