$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json) Hash identifier: oZWxjDaRX8kYzIDLLguDZ0DfiPl/ELI0yAg9pvkQLxE= Subject key identifier: AD:45:96:9E:0F:8F:F6:3F:5C:B7:AA:D4:69:F3:DF:58:3C:41:E4:26 Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft Manifest number: 05AA Signing time: Sun 19 May 2024 00:17:19 +0000 Manifest this update: Sun 19 May 2024 00:17:19 +0000 Manifest next update: Sun 26 May 2024 00:17:19 +0000 Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: S4DF9Pp5CLwTorr8oLSvQjSZH4nfwaRDPpdLZC8aotI=) 2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: wvKmIi2++zbJbE9MCN6birY4f8q7zR7YkJ8AOwoHL0c=) 3: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: GKP5taJaLT0/BVslpBvisPkis2pdFhShqf+TdK4IIA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Validity Not Before: May 19 00:17:19 2024 GMT Not After : May 26 00:17:19 2024 GMT Subject: CN=6649450f-5348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:d9:ae:3d:c8:e2:d2:94:76:62:68:bf:b4: 0e:e9:f6:93:55:e5:46:66:bb:11:ba:a4:47:72:95: 9c:a1:ef:c8:6f:0a:a2:6f:71:6b:81:73:8b:51:af: 80:06:ae:81:47:6b:d6:65:cd:5a:91:82:f0:ab:2b: 51:6c:b8:d2:d6:a7:9b:0e:dd:cc:4c:1b:c8:73:c3: 56:a3:92:47:43:35:2f:af:38:90:ff:7e:5a:20:a6: 34:7c:fd:d7:48:0a:cf:ff:25:8c:0b:74:a7:1c:2a: 54:f7:29:98:0c:b6:a8:47:54:96:c5:7a:f9:93:e8: a6:db:ca:5b:49:84:c9:f6:40:74:4e:2f:b8:8b:8e: c6:4a:e8:50:78:3a:58:59:9d:44:6a:1b:65:78:42: a1:ba:56:b5:80:c1:8e:50:90:67:81:c3:03:a7:14: 7f:09:a0:56:a0:ee:32:1a:df:09:d4:0c:62:e6:27: 52:6e:a5:bc:2c:c2:3f:26:dc:3d:3c:12:58:c4:0b: e6:59:92:f7:ca:ea:a5:3e:6d:47:42:da:be:04:e5: fc:af:07:c2:fb:be:2c:61:4e:21:55:f2:66:c4:e6: 6f:5c:7e:00:d0:c0:2c:2a:8e:99:24:40:8f:69:e7: 98:4d:e0:e9:25:a0:9a:24:df:c8:7c:c7:ab:f7:ce: bb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:45:96:9E:0F:8F:F6:3F:5C:B7:AA:D4:69:F3:DF:58:3C:41:E4:26 X509v3 Authority Key Identifier: keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:1c:e9:03:b4:17:6c:37:e7:98:89:b5:92:32:b8:dc:a4:25: 4c:bc:fa:24:cb:6b:4b:a3:da:03:74:6e:dd:80:97:fa:f1:7c: 67:d9:54:21:b9:3f:6c:87:a3:51:4c:1d:e7:1b:5e:54:55:54: 31:e4:47:d6:eb:9f:57:21:0d:cc:71:41:27:97:01:11:18:87: 91:9b:76:08:70:94:1d:84:93:78:eb:16:e4:c9:be:d5:fd:2a: 46:d8:7f:42:d3:c0:97:14:38:da:eb:88:2e:c2:56:f0:49:32: e7:b7:8f:bb:01:9c:51:50:60:0a:bb:16:3b:bf:a1:b8:61:cc: c5:95:00:82:3c:87:69:53:53:c1:88:f2:3d:87:06:81:e1:63: b7:48:9e:01:58:e8:8e:0a:ea:71:0a:f4:61:c0:37:5f:b1:35: c3:d9:54:14:77:f4:39:1f:2c:5d:d5:48:07:64:25:65:89:97: 39:f4:ab:24:17:2f:83:35:91:e8:74:bc:81:01:98:97:2e:9c: 7e:d6:92:7a:60:46:cd:6d:05:5a:8b:5a:29:27:df:3c:56:3a: c5:5d:c0:7c:7f:d9:d1:e8:fa:58:ce:94:24:1c:d7:66:72:07: 0c:1d:8b:21:f3:0c:ad:44:c9:6c:52:7d:6c:7d:31:1f:77:63: f2:32:b5:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC NUE4QkJBNzIwHhcNMjQwNTE5MDAxNzE5WhcNMjQwNTI2MDAxNzE5WjAYMRYwFAYD VQQDEw02NjQ5NDUwZi01MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKHZrj3I4tKUdmJov7QO6faTVeVGZrsRuqRHcpWcoe/Ibwqib3FrgXOLUa+A Bq6BR2vWZc1akYLwqytRbLjS1qebDt3MTBvIc8NWo5JHQzUvrziQ/35aIKY0fP3X SArP/yWMC3SnHCpU9ymYDLaoR1SWxXr5k+im28pbSYTJ9kB0Ti+4i47GSuhQeDpY WZ1EahtleEKhula1gMGOUJBngcMDpxR/CaBWoO4yGt8J1Axi5idSbqW8LMI/Jtw9 PBJYxAvmWZL3yuqlPm1HQtq+BOX8rwfC+74sYU4hVfJmxOZvXH4A0MAsKo6ZJECP aeeYTeDpJaCaJN/IfMer9867JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1Flp4P j/Y/XLeq1Gnz31g8QeQmMB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC82REQ5RjMzNDdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5 UjhXWktac3VpNi0xcUx1bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoHOkDtBdsN+eYibWSMrjcpCVMvPoky2tLo9oDdG7dgJf68Xxn2VQh uT9sh6NRTB3nG15UVVQx5EfW659XIQ3McUEnlwERGIeRm3YIcJQdhJN46xbkyb7V /SpG2H9C08CXFDja64guwlbwSTLnt4+7AZxRUGAKuxY7v6G4YczFlQCCPIdpU1PB iPI9hwaB4WO3SJ4BWOiOCupxCvRhwDdfsTXD2VQUd/Q5Hyxd1UgHZCVliZc59Ksk Fy+DNZHodLyBAZiXLpx+1pJ6YEbNbQVai1opJ988VjrFXcB8f9nR6PpYzpQkHNdm cgcMHYsh8wytRMlsUn1sfTEfd2PyMrW4 -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org