$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: SDgZzCrw5Ux58mTAH48QDlgl7v9AHnLAtuu7VOlu2RI= Subject key identifier: D2:6E:91:5F:90:E7:0F:1F:7F:D8:9C:99:2D:7B:3C:60:9D:F3:6D:F6 Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 6D Signing time: Fri 17 May 2024 07:35:05 +0000 Manifest this update: Fri 17 May 2024 07:35:04 +0000 Manifest next update: Fri 24 May 2024 07:35:04 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: iQZjVn5FPjiFugwW8e82vf3ABhmNsdjGgJGfqfdXHPk=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: T6E4gLPcvRKv8UPp/vdwR69gD3qPRWyy46vPzjQPAUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: May 17 07:35:04 2024 GMT Not After : May 24 07:35:04 2024 GMT Subject: CN=664708a9-6a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:6b:c1:e8:d2:da:0a:1f:f0:86:d3:43:c2: b6:91:77:03:21:a2:87:1e:41:c0:1b:f2:b7:33:6e: 0f:1d:d4:ee:06:4d:5b:f6:80:3e:36:26:7f:99:31: b7:df:63:ea:50:c1:20:52:c8:43:c7:a2:a0:38:47: 0f:46:0b:3c:b5:dd:47:68:fb:4b:36:bd:36:fa:a2: 1d:df:45:92:86:bb:58:d3:64:43:ac:a0:ba:11:c1: 43:0a:05:3c:fe:69:a3:d4:f9:d4:d4:00:fd:2f:fd: 16:50:1c:ae:6a:7c:d1:fc:7b:71:ae:9c:df:3e:e0: bb:67:e0:49:7d:69:11:a1:9b:34:a7:ae:63:8b:02: 35:b2:8f:ae:15:da:e2:b6:b8:a9:1f:df:0b:7e:14: 25:4b:a1:c7:e2:21:a4:64:9b:5b:3d:60:2d:c5:b8: 62:30:90:a0:8c:64:9d:87:d5:d6:fa:2c:73:f8:de: 90:3e:e3:ea:0f:57:ae:4b:3d:ad:ed:04:e8:e3:3a: 70:a7:13:d0:1e:18:a6:55:8f:86:61:b4:f5:99:32: 15:e8:2c:a0:d2:fa:aa:5b:85:a3:51:8f:31:46:2b: b6:a2:b4:72:76:31:99:d8:ce:8e:de:93:2b:52:51: 5a:65:5c:da:0e:60:a6:3d:c7:85:bf:d8:f3:51:db: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6E:91:5F:90:E7:0F:1F:7F:D8:9C:99:2D:7B:3C:60:9D:F3:6D:F6 X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:19:b5:40:71:c2:02:e0:3c:e0:75:8e:41:6c:ab:6b:30:10: 91:a7:56:72:6a:ae:b4:f9:29:b9:f8:a5:36:94:ec:73:9b:e5: 05:69:86:70:29:61:3f:f6:98:a1:68:c9:b1:31:48:34:58:50: fc:0e:f2:f9:3a:5f:ed:d5:5a:8a:5c:1b:4e:f8:2f:bb:6a:ce: 92:4d:06:18:60:05:de:d4:68:dd:72:27:90:03:61:c8:d0:5e: 7f:bc:0c:4c:33:77:e2:f3:87:86:c7:14:95:e0:ca:df:5f:b6: ee:c7:da:ab:30:d6:7c:4f:e3:c8:60:45:0a:40:fb:cd:35:1e: eb:bf:0f:8f:9b:c8:b3:44:23:03:07:2d:13:b3:88:f0:f9:4f: 54:8d:06:8c:f3:86:63:4e:44:1a:de:73:a8:82:51:e3:a1:4b: a4:b8:c0:83:8c:bb:a5:44:6c:81:0b:52:df:1e:1c:52:a5:71: ca:0a:19:44:a9:67:a9:7d:89:af:7a:4b:35:73:33:75:5d:96: 34:4e:77:bb:a5:7f:c9:b4:3b:fe:2c:5b:bc:b8:c1:8e:81:5f: d1:0e:40:23:b4:69:11:1a:05:29:1a:27:55:41:f6:25:dd:ce: e4:04:e1:eb:19:f0:4b:b9:62:e7:ff:fb:36:83:34:8f:99:90: 35:eb:1f:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NENCRDExMC8GA1UEBRMoNEY2NzM1NjMxNjAwMjM2QzgwNTk4QTFFMzMyMTNCQkQ2 ODFFQ0U1NzAeFw0yNDA1MTcwNzM1MDRaFw0yNDA1MjQwNzM1MDRaMBgxFjAUBgNV BAMTDTY2NDcwOGE5LTZhMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHHmvB6NLaCh/whtNDwraRdwMhooceQcAb8rczbg8d1O4GTVv2gD42Jn+ZMbff Y+pQwSBSyEPHoqA4Rw9GCzy13Udo+0s2vTb6oh3fRZKGu1jTZEOsoLoRwUMKBTz+ aaPU+dTUAP0v/RZQHK5qfNH8e3GunN8+4Ltn4El9aRGhmzSnrmOLAjWyj64V2uK2 uKkf3wt+FCVLocfiIaRkm1s9YC3FuGIwkKCMZJ2H1db6LHP43pA+4+oPV65LPa3t BOjjOnCnE9AeGKZVj4ZhtPWZMhXoLKDS+qpbhaNRjzFGK7aitHJ2MZnYzo7ekytS UVplXNoOYKY9x4W/2PNR2zC1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0m6RX5Dn Dx9/2JyZLXs8YJ3zbfYwHwYDVR0jBBgwFoAUT2c1YxYAI2yAWYoeMyE7vWgezlcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0Q0JELzU4MEJFM0FFNkUy NDExRUU5MUQ4ODAzN0M0RjlBRTAyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXps Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVDJjMVl4WUFJMnlBV1lvZU15RTd2V2dlemxjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 Q0JELzU4MEJFM0FFNkUyNDExRUU5MUQ4ODAzN0M0RjlBRTAyL1QyYzFZeFlBSTJ5 QVdZb2VNeUU3dldnZXpsYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJsZtUBxwgLgPOB1jkFsq2swEJGnVnJqrrT5Kbn4pTaU7HOb5QVphnAp YT/2mKFoybExSDRYUPwO8vk6X+3VWopcG074L7tqzpJNBhhgBd7UaN1yJ5ADYcjQ Xn+8DEwzd+Lzh4bHFJXgyt9ftu7H2qsw1nxP48hgRQpA+801Huu/D4+byLNEIwMH LROziPD5T1SNBozzhmNORBrec6iCUeOhS6S4wIOMu6VEbIELUt8eHFKlccoKGUSp Z6l9ia96SzVzM3VdljROd7ulf8m0O/4sW7y4wY6BX9EOQCO0aREaBSkaJ1VB9iXd zuQE4esZ8Eu5Yuf/+zaDNI+ZkDXrHyU= -----END CERTIFICATE-----Generated at Fri May 17 08:52:51 2024 by rpki-client on console-ams.rpki-client.org