$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: eOzeTZeE4OAdT2gi0iXR9W5TuyuYG+ml7bvJqJ0dhsA= Subject key identifier: 91:8C:D7:EF:A1:94:48:75:06:73:7C:6A:53:2D:C0:42:D3:A0:8E:8F Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 08A3 Signing time: Sat 04 May 2024 22:21:39 +0000 Manifest this update: Sat 04 May 2024 22:21:38 +0000 Manifest next update: Sat 11 May 2024 22:21:38 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: jD13UaU5UUMh8p4D/6tEIcKf7JJ0IyPBQE7fKCv9g5M=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: LMAVU6IlMpA/ZKPM4+7tcXj9rbVtGqoDvGA31wXa8Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: May 4 22:21:38 2024 GMT Not After : May 11 22:21:38 2024 GMT Subject: CN=6636b4f3-5e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:ce:9c:8a:ba:bb:ab:70:7a:08:c8:e0:8c: f5:b6:bd:e3:49:3e:d4:c1:8d:37:86:a7:3b:d5:75: e8:70:69:02:40:07:a4:48:64:e6:83:79:20:63:45: 46:75:f5:c4:8c:39:0e:b4:3f:23:7b:9c:2f:d1:9e: 47:73:70:b0:24:d0:ed:d6:a1:4c:4d:78:e2:c5:92: 6a:7d:39:40:82:5f:58:c3:6c:4f:ca:4f:f7:11:6f: 74:f2:9e:3a:3d:35:b6:16:a7:00:2b:99:e6:ed:7c: c9:58:c4:2e:ae:7e:53:74:ef:8d:a8:c2:a3:7f:43: 03:65:27:2a:e4:aa:99:2e:04:16:d4:38:4b:a4:9b: af:d7:cf:3c:5b:db:07:69:a6:d5:3e:ba:c8:49:bd: 55:da:fd:c6:2e:46:31:3c:c4:26:fd:0a:5d:5d:b1: 75:2b:27:28:d2:82:1e:2f:bc:3b:2c:4a:3e:37:a1: 3b:33:df:cb:f8:42:0b:59:e7:58:00:3d:b1:c3:68: 1a:38:87:e7:c9:e7:4d:fd:e1:79:2d:b2:77:f6:25: f2:3e:c5:db:8a:6d:8d:e2:0e:2e:a5:7b:13:3e:0f: 4f:7a:c3:6b:df:d6:2d:b7:45:a9:68:24:fe:a7:fe: 85:35:59:d7:8f:66:8b:25:ff:a0:bd:ad:9c:ab:92: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8C:D7:EF:A1:94:48:75:06:73:7C:6A:53:2D:C0:42:D3:A0:8E:8F X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:80:0b:45:66:ae:48:4f:4f:cf:e1:c9:d3:a9:da:74:0b:cd: 55:3e:16:22:2d:31:1d:27:1e:9d:0b:a9:62:66:02:a3:3c:91: 18:2b:16:69:d0:f6:d4:c8:17:03:67:f9:46:39:64:73:f1:85: 49:07:6f:75:e2:42:e9:7e:b5:42:67:3f:fe:b4:50:a2:38:29: 54:89:2a:81:5d:10:ab:f8:31:ee:86:20:72:32:07:48:44:c4: 96:b8:f8:b9:c2:21:aa:19:a4:fb:b0:78:4d:53:27:ed:09:ae: 79:a6:34:d7:18:5b:21:9b:63:2d:c9:5a:a8:2c:3c:52:44:97: 60:1c:94:73:e9:cf:b0:ad:d0:e4:a5:8a:0f:dd:71:69:82:27: 1a:12:7e:0e:92:50:c2:62:d1:ed:04:11:d8:34:94:75:00:e5: 02:d1:59:f3:bc:d0:94:74:91:85:df:6f:96:b4:91:63:11:5b: d3:35:d5:75:f3:c8:57:be:62:d9:ce:de:00:19:5f:dc:83:10: 85:3b:d1:16:02:38:da:f0:e1:b5:e3:3a:11:40:05:28:fd:f9: 62:72:40:eb:00:c1:f9:74:16:e0:b9:e5:4a:63:7f:4d:e8:5b: 8b:79:4e:30:84:84:d1:46:a9:05:a4:ec:9e:1f:55:dd:e7:04: 27:71:54:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjQwNTA0MjIyMTM4WhcNMjQwNTExMjIyMTM4WjAYMRYwFAYD VQQDEw02NjM2YjRmMy01ZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8HOnIq6u6twegjI4Iz1tr3jST7UwY03hqc71XXocGkCQAekSGTmg3kgY0VG dfXEjDkOtD8je5wv0Z5Hc3CwJNDt1qFMTXjixZJqfTlAgl9Yw2xPyk/3EW908p46 PTW2FqcAK5nm7XzJWMQurn5TdO+NqMKjf0MDZScq5KqZLgQW1DhLpJuv1888W9sH aabVPrrISb1V2v3GLkYxPMQm/QpdXbF1Kyco0oIeL7w7LEo+N6E7M9/L+EILWedY AD2xw2gaOIfnyedN/eF5LbJ39iXyPsXbim2N4g4upXsTPg9PesNr39Ytt0WpaCT+ p/6FNVnXj2aLJf+gva2cq5IzbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGM1++h lEh1BnN8alMtwELToI6PMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4gAtFZq5IT0/P4cnTqdp0C81VPhYiLTEdJx6dC6liZgKjPJEYKxZp 0PbUyBcDZ/lGOWRz8YVJB2914kLpfrVCZz/+tFCiOClUiSqBXRCr+DHuhiByMgdI RMSWuPi5wiGqGaT7sHhNUyftCa55pjTXGFshm2MtyVqoLDxSRJdgHJRz6c+wrdDk pYoP3XFpgicaEn4OklDCYtHtBBHYNJR1AOUC0VnzvNCUdJGF32+WtJFjEVvTNdV1 88hXvmLZzt4AGV/cgxCFO9EWAjja8OG14zoRQAUo/flickDrAMH5dBbgueVKY39N 6FuLeU4whITRRqkFpOyeH1Xd5wQncVRh -----END CERTIFICATE-----Generated at Sun May 5 00:12:29 2024 by rpki-client on console-fra.rpki-client.org