$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: V/CgyNzcUDl7UfC2H7b95wMLTA1VP4ObvDb2CrSvSFc= Subject key identifier: 8A:C2:8D:FE:86:B9:DB:5E:3D:67:16:7B:CB:90:D0:01:12:54:45:EE Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 14AF Signing time: Sat 04 May 2024 17:38:19 +0000 Manifest this update: Sat 04 May 2024 17:38:19 +0000 Manifest next update: Sat 11 May 2024 17:38:19 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: ihav4Wq7CDeTFJM6JoldHYm2+w4wQwUVdQ0x09UOjko=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: tZs7Jo2Vwt4OV24GTrtVhwZBng8xDrHXDmJyWLYnaQg=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: tEvhbktaxXSOPBsOlOp9gbkXZKZjLCAbmL8sFIx8930=) 4: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: t4b6owy4NRrP0RobCmaoRMjmGrWzoOMmUErgUnimxkk=) 5: 57A65AD4DF7111EE9EDAA07FC4F9AE02.roa (hash: fe6IvIjCbWXCkN2JL02yOsGbahkAqiDHbSFxSUxuY1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5408 (0x1520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: May 4 17:38:19 2024 GMT Not After : May 11 17:38:19 2024 GMT Subject: CN=6636728b-af00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0d:a2:64:28:66:8c:35:16:9a:df:2c:a8:65: 0e:42:7e:98:43:b1:b6:b6:f2:d6:4f:32:51:b6:42: f8:f3:9a:db:53:f6:61:93:14:9d:55:44:53:98:6d: 03:01:6a:67:eb:ea:87:96:1e:4f:b7:cd:66:42:83: 04:bb:cc:14:24:d7:4f:65:a0:b0:b8:70:c4:0e:16: 93:0c:f0:e9:e6:fd:bc:c9:f3:15:18:4b:02:0d:b0: fd:85:79:0f:fa:11:6d:f8:b4:ca:b2:10:16:9e:fe: df:ca:a5:ef:25:12:7f:27:59:59:62:fa:5b:51:54: 3f:12:8b:28:b1:05:2e:5d:e8:ca:9f:85:17:8a:92: 02:65:93:9f:fd:5a:de:7b:bc:0e:92:46:1f:24:15: f2:5f:1f:ef:7c:ab:c5:01:26:82:63:4c:00:45:c1: f0:8c:98:50:96:3c:6f:56:07:20:ae:7e:0b:27:d9: 38:4f:b1:ec:28:f3:b7:29:49:72:c5:27:9a:67:84: f8:e7:9f:1a:d7:89:08:f8:2c:fa:d9:e9:94:99:fd: 0e:4e:d3:8e:ba:9e:18:65:f9:75:22:5b:ba:87:4d: 88:ec:92:29:d7:fe:6e:70:26:5e:66:63:e7:18:5f: 30:e6:5b:da:51:22:50:9e:38:94:b8:77:de:35:c2: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C2:8D:FE:86:B9:DB:5E:3D:67:16:7B:CB:90:D0:01:12:54:45:EE X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8b:ae:22:d1:b5:16:48:37:07:a6:1b:70:16:79:b4:f6:7e: 5e:18:02:e0:62:31:20:a9:a5:08:7e:20:8b:4a:af:ce:51:27: 97:e1:c9:b2:bc:66:7f:b5:0e:ce:61:51:c9:a8:ec:09:eb:43: f7:6e:7a:89:91:ca:88:32:e0:82:8d:73:1d:cf:ac:09:76:b5: 96:5e:e2:e2:af:80:3a:2a:be:b7:7f:53:a0:2f:e7:81:0b:ab: 4b:c9:94:8f:7e:4d:a5:f4:b7:b6:10:82:c7:e4:11:56:ec:97: ea:fc:15:c0:a8:62:47:b9:3f:16:f3:a2:6b:67:08:b9:2f:6a: 52:1e:10:33:11:d4:48:9e:7a:ff:bf:2e:ea:4e:0e:f4:d8:26: 8c:ae:d6:2f:f3:59:00:5f:90:87:4e:b9:24:ef:f5:48:25:ca: a3:b7:ee:db:d1:09:0a:51:2b:66:9b:a7:86:d6:fd:3d:03:bd: 55:3a:22:7a:19:28:50:84:4c:78:57:ee:2d:6f:e5:c0:b5:a1: ad:13:c7:06:dc:43:2a:ea:f0:32:2a:91:d6:f3:a7:07:7d:8b: 8e:e1:ae:ad:13:11:43:c6:c5:49:ae:b9:f8:f7:09:fc:7d:0e: 99:c3:bf:74:e2:6d:e5:82:f2:36:db:40:16:b3:de:88:08:18: 1d:ae:4d:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjQwNTA0MTczODE5WhcNMjQwNTExMTczODE5WjAYMRYwFAYD VQQDEw02NjM2NzI4Yi1hZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5A2iZChmjDUWmt8sqGUOQn6YQ7G2tvLWTzJRtkL485rbU/ZhkxSdVURTmG0D AWpn6+qHlh5Pt81mQoMEu8wUJNdPZaCwuHDEDhaTDPDp5v28yfMVGEsCDbD9hXkP +hFt+LTKshAWnv7fyqXvJRJ/J1lZYvpbUVQ/EososQUuXejKn4UXipICZZOf/Vre e7wOkkYfJBXyXx/vfKvFASaCY0wARcHwjJhQljxvVgcgrn4LJ9k4T7HsKPO3KUly xSeaZ4T4558a14kI+Cz62emUmf0OTtOOup4YZfl1Ilu6h02I7JIp1/5ucCZeZmPn GF8w5lvaUSJQnjiUuHfeNcKW/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrCjf6G udtePWcWe8uQ0AESVEXuMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxi64i0bUWSDcHphtwFnm09n5eGALgYjEgqaUIfiCLSq/OUSeX4cmy vGZ/tQ7OYVHJqOwJ60P3bnqJkcqIMuCCjXMdz6wJdrWWXuLir4A6Kr63f1OgL+eB C6tLyZSPfk2l9Le2EILH5BFW7Jfq/BXAqGJHuT8W86JrZwi5L2pSHhAzEdRInnr/ vy7qTg702CaMrtYv81kAX5CHTrkk7/VIJcqjt+7b0QkKUStmm6eG1v09A71VOiJ6 GShQhEx4V+4tb+XAtaGtE8cG3EMq6vAyKpHW86cHfYuO4a6tExFDxsVJrrn49wn8 fQ6Zw7904m3lgvI220AWs96ICBgdrk1k -----END CERTIFICATE-----Generated at Sat May 4 19:58:40 2024 by rpki-client on console-ams.rpki-client.org