$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json) Hash identifier: 2LX6FFO1pavKZlg9LLd8j5YHwzjHMN5ZJel/47Q0uAM= Subject key identifier: 85:FD:20:9F:16:10:F1:88:82:79:36:BF:03:B4:42:B3:A3:04:11:C6 Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft Manifest number: 54 Signing time: Wed 15 May 2024 08:02:20 +0000 Manifest this update: Wed 15 May 2024 08:02:20 +0000 Manifest next update: Wed 22 May 2024 08:02:19 +0000 Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: S+c3vMHalxBP4DNkrqizscybxjPHt7ZrFs/H5YbLvT8=) 2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: vPemC0+Cb61WpL0wN60mXGc+hzmPWM8h3mLXfwGXPxk=) 3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: ecZYutUNN9dukiWdjI7RXtlJlSSR4QXlFMWvlx987w0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: May 15 08:02:20 2024 GMT Not After : May 22 08:02:19 2024 GMT Subject: CN=66446c0c-2580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7a:6a:3e:f5:ae:1c:51:80:c8:58:79:49:12: 45:3b:2a:bc:7f:65:4d:6b:ed:e9:7f:ec:dc:a7:3b: 61:94:02:a4:73:0c:3f:22:b0:e5:65:26:ff:46:73: 98:f6:ea:a0:34:a4:92:b6:3b:06:6e:aa:18:74:ba: 2a:9d:91:98:32:96:de:f4:9d:c4:cb:30:f0:81:97: 2f:4f:62:e2:5e:9d:3c:41:96:90:e3:55:18:bd:1f: 68:98:43:15:20:cd:2f:06:5e:d6:d9:51:50:2e:92: da:a2:4c:bc:41:75:9d:d5:7d:76:bd:9a:bd:95:cc: a7:b7:e5:d6:b3:39:5b:52:04:2b:f2:72:0f:2e:90: f8:cd:86:e1:59:4c:b0:8e:b3:18:98:d9:0c:7b:c1: ca:9e:db:ef:00:1d:20:de:d4:7e:16:ad:b6:f7:b8: 96:ab:fb:30:53:f9:5c:73:49:7c:44:8d:57:96:22: 06:ec:b0:8f:bc:e6:cd:6b:df:d1:18:f0:a4:56:6a: a4:f5:a3:66:df:9b:ae:c2:db:66:30:00:92:a3:cd: 57:d0:f9:9e:b2:63:9d:bd:f6:c6:86:3d:b8:2a:5c: 8c:43:86:d1:f3:ff:de:09:5b:0b:f1:9c:d4:ce:2e: fe:23:d5:14:90:32:fd:ce:3e:87:ff:72:a4:ec:75: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FD:20:9F:16:10:F1:88:82:79:36:BF:03:B4:42:B3:A3:04:11:C6 X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:4a:99:48:fe:63:4c:09:21:b0:b9:49:6e:f3:97:c9:cb:72: ce:15:c3:5d:81:2a:f5:c4:ac:1d:45:10:54:6f:76:75:59:5f: e1:d3:13:c7:42:23:fe:ed:2d:2c:ea:30:30:5f:70:93:43:82: 21:14:b7:4f:0f:d6:f5:13:02:4a:02:7b:9e:69:f6:07:be:96: c2:d4:85:2c:77:7e:ba:86:ad:33:46:ca:79:e9:d5:60:e3:77: 5f:e2:42:34:1c:22:71:9a:98:5e:cb:3f:75:ee:55:e6:77:6e: 63:3f:cf:79:b3:c6:8e:d0:9a:8b:91:70:da:b2:67:4c:77:ec: fa:0e:a8:b3:8f:fd:50:0e:6f:ec:82:00:d8:73:9b:52:f1:fe: f5:cf:3f:65:a3:1c:ea:60:53:39:62:e7:0d:87:ec:5d:c5:bc: c4:81:1a:a5:a6:63:91:b2:6f:c9:05:26:6a:1a:21:03:cf:cb: 47:22:60:1e:b0:84:9e:c1:b6:68:ad:55:b5:c5:e9:e2:7b:37: 9c:17:43:86:c1:f5:97:a3:87:b6:c2:af:fc:3c:2e:88:6b:ac: f8:f6:d6:20:f4:93:9f:ae:61:d5:2c:2a:a1:9b:4c:10:06:b0: d3:7a:92:18:e2:ad:fe:51:de:57:53:c0:a5:3b:c7:dc:58:c6: 2a:38:84:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUE2RTExMC8GA1UEBRMoNENBRDI3MkJBRDFEODcwOUIxNkU5OTc1MDA2RTEyMjU1 MjA1QzhGNjAeFw0yNDA1MTUwODAyMjBaFw0yNDA1MjIwODAyMTlaMBgxFjAUBgNV BAMTDTY2NDQ2YzBjLTI1ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtemo+9a4cUYDIWHlJEkU7Krx/ZU1r7el/7NynO2GUAqRzDD8isOVlJv9Gc5j2 6qA0pJK2OwZuqhh0uiqdkZgylt70ncTLMPCBly9PYuJenTxBlpDjVRi9H2iYQxUg zS8GXtbZUVAuktqiTLxBdZ3VfXa9mr2VzKe35dazOVtSBCvycg8ukPjNhuFZTLCO sxiY2Qx7wcqe2+8AHSDe1H4Wrbb3uJar+zBT+VxzSXxEjVeWIgbssI+85s1r39EY 8KRWaqT1o2bfm67C22YwAJKjzVfQ+Z6yY5299saGPbgqXIxDhtHz/94JWwvxnNTO Lv4j1RSQMv3OPof/cqTsdcW7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhf0gnxYQ 8YiCeTa/A7RCs6MEEcYwHwYDVR0jBBgwFoAUTK0nK60dhwmxbpl1AG4SJVIFyPYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5QTZFL0Y1MUZGODg2OUFG OTExRUVBMTZEQkM1NUM0RjlBRTAyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEswbks2MGRod214YnBsMUFHNFNKVklGeVBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 QTZFL0Y1MUZGODg2OUFGOTExRUVBMTZEQkM1NUM0RjlBRTAyL1RLMG5LNjBkaHdt eGJwbDFBRzRTSlZJRnlQWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZKmUj+Y0wJIbC5SW7zl8nLcs4Vw12BKvXErB1FEFRvdnVZX+HTE8dC I/7tLSzqMDBfcJNDgiEUt08P1vUTAkoCe55p9ge+lsLUhSx3frqGrTNGynnp1WDj d1/iQjQcInGamF7LP3XuVeZ3bmM/z3mzxo7QmouRcNqyZ0x37PoOqLOP/VAOb+yC ANhzm1Lx/vXPP2WjHOpgUzli5w2H7F3FvMSBGqWmY5Gyb8kFJmoaIQPPy0ciYB6w hJ7BtmitVbXF6eJ7N5wXQ4bB9Zejh7bCr/w8LohrrPj21iD0k5+uYdUsKqGbTBAG sNN6khjirf5R3ldTwKU7x9xYxio4hJM= -----END CERTIFICATE-----Generated at Wed May 15 09:28:17 2024 by rpki-client on console-fra.rpki-client.org