$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: 3mhi8E5wlgBxW348rqT3p+gkaFSYZZFx+kGQXV1LGKM= Subject key identifier: F6:55:F8:2F:58:B6:0D:BD:38:D6:0C:75:F1:03:D8:5E:AF:58:B1:78 Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0B67 Signing time: Mon 06 May 2024 19:36:52 +0000 Manifest this update: Mon 06 May 2024 19:36:51 +0000 Manifest next update: Mon 13 May 2024 19:36:51 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: FMXvkPpty6GkGX/AFjRtIrs0ls6hu7hvVYPHBs0Ldqc=) 2: 7BE1470408FE11EAA003E778C4F9AE02.roa (hash: TFfPXkPhTzfbgxWKAcVkf/eEjOSO4xe5jtJeyRtnr8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: May 6 19:36:51 2024 GMT Not After : May 13 19:36:51 2024 GMT Subject: CN=66393153-154c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:35:87:d5:74:6d:71:b2:10:81:e1:43:70: a7:40:7f:ae:c3:44:d0:b6:8b:c3:1c:29:30:5f:9f: aa:1a:fd:a8:e4:4e:cd:50:66:13:a5:d8:e6:83:44: a6:41:79:89:13:ec:d3:b7:da:ae:4f:35:bf:2f:9e: 1a:21:77:49:6b:9f:8c:b3:f4:89:a1:de:c0:4c:1b: d0:80:9c:21:7d:e7:e0:55:52:f2:b4:f7:7b:9a:c4: 28:e6:aa:84:5c:1a:04:74:23:21:f2:09:18:f3:2d: f2:aa:e5:46:5f:ca:64:98:c2:6d:98:ea:56:b9:ed: 0e:f2:65:bd:4d:5f:8f:31:47:4f:86:9c:fc:2d:cf: 36:9c:da:b2:53:53:1c:0b:f0:99:53:3a:2e:4c:7f: 51:50:a9:03:27:b3:4e:2f:89:87:ad:26:7e:ce:a9: 83:da:5e:52:6a:ec:f9:16:bf:c1:d2:1a:68:a2:06: d3:36:53:0a:64:62:26:86:f0:01:28:a2:9d:5b:85: 5e:53:26:b3:ee:7d:6f:d1:60:57:f6:9c:07:a1:6f: 46:8e:5f:a6:6e:a6:4b:81:95:81:2a:ef:81:32:d5: 59:cf:b2:a2:57:6c:cc:34:dc:34:c7:5b:a2:09:43: 76:59:d6:f4:a5:a0:85:01:43:06:1d:79:20:98:6b: 1e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:55:F8:2F:58:B6:0D:BD:38:D6:0C:75:F1:03:D8:5E:AF:58:B1:78 X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a1:1d:84:bd:c6:2a:04:04:4b:50:71:9d:45:c7:d1:3c:aa: 64:d2:aa:9b:b3:6a:c1:2e:05:79:ed:1c:46:25:20:c6:78:48: 07:0d:75:8d:43:6e:96:3d:62:e4:c0:ec:d1:71:60:96:84:92: 12:c7:51:01:09:ea:a6:29:12:6d:35:25:d5:2a:74:bc:63:f9: ba:59:4e:3d:45:85:39:7b:76:bc:df:1d:bc:66:8c:25:d9:52: a9:e7:97:31:fe:2e:b0:2a:09:ec:b0:c7:c3:40:bf:e3:f7:69: 94:12:fe:14:d8:d5:52:03:a0:07:9e:23:79:02:81:c6:5c:cb: de:0b:82:fd:ca:0a:84:a0:fd:d6:cb:4e:c1:d5:be:cf:39:8a: 1d:5e:f7:cf:c0:77:2a:be:dd:2e:ae:29:13:4d:73:5b:82:e5: 92:ef:9e:64:70:52:e4:d2:66:dc:a7:dd:ed:ac:d7:50:ce:50: 61:81:6a:cf:96:49:6d:55:e4:32:94:86:a6:f6:39:b0:df:74: c2:6f:aa:f8:dc:3a:3f:53:e4:04:63:d9:65:26:2a:bd:7f:27: 90:d1:da:70:f4:47:f9:6b:9c:7c:11:a1:d3:22:56:80:f1:71: 6c:ca:d1:c0:c4:23:59:13:af:f6:90:d6:ad:bd:cb:fc:f7:51: a4:fe:23:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjQwNTA2MTkzNjUxWhcNMjQwNTEzMTkzNjUxWjAYMRYwFAYD VQQDEw02NjM5MzE1My0xNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta41h9V0bXGyEIHhQ3CnQH+uw0TQtovDHCkwX5+qGv2o5E7NUGYTpdjmg0Sm QXmJE+zTt9quTzW/L54aIXdJa5+Ms/SJod7ATBvQgJwhfefgVVLytPd7msQo5qqE XBoEdCMh8gkY8y3yquVGX8pkmMJtmOpWue0O8mW9TV+PMUdPhpz8Lc82nNqyU1Mc C/CZUzouTH9RUKkDJ7NOL4mHrSZ+zqmD2l5Sauz5Fr/B0hpoogbTNlMKZGImhvAB KKKdW4VeUyaz7n1v0WBX9pwHoW9Gjl+mbqZLgZWBKu+BMtVZz7KiV2zMNNw0x1ui CUN2Wdb0paCFAUMGHXkgmGseKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZV+C9Y tg29ONYMdfED2F6vWLF4MB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfoR2EvcYqBARLUHGdRcfRPKpk0qqbs2rBLgV57RxGJSDGeEgHDXWN Q26WPWLkwOzRcWCWhJISx1EBCeqmKRJtNSXVKnS8Y/m6WU49RYU5e3a83x28Zowl 2VKp55cx/i6wKgnssMfDQL/j92mUEv4U2NVSA6AHniN5AoHGXMveC4L9ygqEoP3W y07B1b7POYodXvfPwHcqvt0urikTTXNbguWS755kcFLk0mbcp93trNdQzlBhgWrP lkltVeQylIam9jmw33TCb6r43Do/U+QEY9llJiq9fyeQ0dpw9Ef5a5x8EaHTIlaA 8XFsytHAxCNZE6/2kNatvcv891Gk/iOR -----END CERTIFICATE-----Generated at Mon May 6 20:19:14 2024 by rpki-client on console-fra.rpki-client.org