$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: iJpWB7jlwxUS6ox4kfd7wiegxcFRDgOTP3kqDyPF6Mo= Subject key identifier: 72:A1:C5:AD:D4:38:39:BF:0E:BC:23:B5:E8:0D:4A:F3:8A:7E:D2:06 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0AB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0A86 Signing time: Fri 24 May 2024 20:26:31 +0000 Manifest this update: Fri 24 May 2024 20:26:31 +0000 Manifest next update: Fri 31 May 2024 20:26:31 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: GRd5bjqytHaTIKpCKLsPdJc79Mq8+PMF9B3AafJcaak=) 2: 946C9032170C11EF9616D914C4F9AE02.roa (hash: eZbzets2NnIpQlXnpxHjcK387J7I0d6vk9iOAq6eEqQ=) 3: E7DE70DC3D9A11EA9606E13AC4F9AE02.roa (hash: devSm5ZGB3czKgy3n2V9OzUuNNTaXd53LcQTXNq4H04=) 4: 3F0F6E96BE5411EDAD9B2A1BC4F9AE02.roa (hash: vPkGIHgQPJ1VAQ3X3HAo9z/KW3qD/rBAtvMfS+J6XPE=) 5: 9584CC888FD611ECB5BAF00AC4F9AE02.roa (hash: VcVU0/0tTaasbm9jhiz7e/Hf2MQnH1cEpcPF+kDjdno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2737 (0xab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: May 24 20:26:31 2024 GMT Not After : May 31 20:26:31 2024 GMT Subject: CN=6650f7f7-ce18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:0d:6f:5c:9c:d0:1a:cb:bd:df:9c:1e:25: 36:0a:9d:87:c3:f0:c7:b8:23:1f:16:bd:28:42:2b: 1f:a1:50:bb:43:cc:e7:ab:59:a1:9d:ab:e8:51:12: 17:21:66:8d:63:c3:b1:db:13:30:e4:47:4a:3d:7c: de:59:a4:88:ed:ae:88:70:12:96:e1:a2:b9:71:b3: 57:46:7b:2e:c1:c2:26:5c:34:e4:e2:8f:ae:3c:b3: 54:94:60:0f:22:8d:cc:0e:5e:4a:71:d5:fc:95:5b: 7a:7d:95:0c:f7:47:29:72:d7:4e:67:8d:59:ff:d3: 96:83:33:83:73:4d:d4:6c:c9:48:0b:bf:d0:8c:e2: de:85:26:b0:4e:0c:f8:92:1d:e1:61:c2:79:59:dc: 0b:13:2a:86:e9:97:17:2e:84:54:0c:9c:b1:e7:4e: 11:55:96:13:96:41:5e:70:a6:1b:8c:64:e8:fb:3a: 2a:5c:e3:98:7b:14:68:0f:e5:3e:9f:3d:d4:64:f2: b5:0d:47:c5:05:48:25:2e:c6:9c:b5:9e:d5:95:ef: a7:67:a6:f9:39:98:2e:7d:45:4b:b2:ec:54:12:89: a9:19:dc:c1:39:b1:ab:98:b1:87:c8:4d:6e:0b:96: 4b:f5:f5:49:7d:66:43:c2:75:69:20:12:77:18:0b: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A1:C5:AD:D4:38:39:BF:0E:BC:23:B5:E8:0D:4A:F3:8A:7E:D2:06 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f9:33:a7:37:b6:1e:29:0c:ff:6f:71:66:87:77:0e:ed:4c: ba:d7:3c:fd:43:48:f8:59:96:f5:04:3b:9e:54:50:dd:38:5b: 01:10:44:81:fb:e0:33:7d:31:97:46:30:66:7f:72:ca:ab:71: ed:d4:4d:fc:31:ee:26:0a:a2:17:fa:28:f9:79:c5:5b:74:7e: 92:2c:06:2b:77:a0:72:bc:c7:25:89:26:55:4c:6e:32:79:fe: 7c:51:45:0d:fe:00:ec:3e:69:ff:e7:36:21:03:f1:f0:fc:a3: b0:b1:73:eb:5d:26:cc:57:39:7d:88:9c:1d:89:db:9b:ae:53: 0e:59:75:21:db:59:99:32:fa:e9:56:e6:35:75:80:e3:80:ad: fd:a8:b4:28:33:2b:1c:e5:f9:5a:29:d9:a4:08:c1:05:e7:1d: e1:48:53:1f:a4:46:24:6c:2e:ce:0b:80:7a:b8:19:77:26:fe: 8c:2b:85:7f:4b:e9:00:df:2c:20:a5:a1:09:8a:6b:c6:0e:fb: 77:fc:f1:4b:e7:75:3a:2f:92:ca:65:8d:68:5f:5f:d8:e3:e8: 64:a5:8e:c1:da:14:c4:d8:bd:09:ba:0f:00:f3:1d:e8:92:7a: b1:25:93:6f:78:af:28:1b:af:47:db:af:29:b6:5c:64:cb:52: 7e:6f:a0:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjQwNTI0MjAyNjMxWhcNMjQwNTMxMjAyNjMxWjAYMRYwFAYD VQQDEw02NjUwZjdmNy1jZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+kNb1yc0BrLvd+cHiU2Cp2Hw/DHuCMfFr0oQisfoVC7Q8znq1mhnavoURIX IWaNY8Ox2xMw5EdKPXzeWaSI7a6IcBKW4aK5cbNXRnsuwcImXDTk4o+uPLNUlGAP Io3MDl5KcdX8lVt6fZUM90cpctdOZ41Z/9OWgzODc03UbMlIC7/QjOLehSawTgz4 kh3hYcJ5WdwLEyqG6ZcXLoRUDJyx504RVZYTlkFecKYbjGTo+zoqXOOYexRoD+U+ nz3UZPK1DUfFBUglLsactZ7Vle+nZ6b5OZgufUVLsuxUEompGdzBObGrmLGHyE1u C5ZL9fVJfWZDwnVpIBJ3GAtOKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKhxa3U ODm/DrwjtegNSvOKftIGMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0+TOnN7YeKQz/b3Fmh3cO7Uy61zz9Q0j4WZb1BDueVFDdOFsBEESB ++AzfTGXRjBmf3LKq3Ht1E38Me4mCqIX+ij5ecVbdH6SLAYrd6ByvMcliSZVTG4y ef58UUUN/gDsPmn/5zYhA/Hw/KOwsXPrXSbMVzl9iJwdidubrlMOWXUh21mZMvrp VuY1dYDjgK39qLQoMysc5flaKdmkCMEF5x3hSFMfpEYkbC7OC4B6uBl3Jv6MK4V/ S+kA3ywgpaEJimvGDvt3/PFL53U6L5LKZY1oX1/Y4+hkpY7B2hTE2L0Jug8A8x3o knqxJZNveK8oG69H268ptlxky1J+b6AL -----END CERTIFICATE-----Generated at Fri May 24 21:43:21 2024 by rpki-client on console-ams.rpki-client.org