$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json) Hash identifier: 7MV/XHcJiJYlTsn4dpxWy/LZm2IGYmBLBs5BG62OMjk= Subject key identifier: 35:F0:4B:F2:BD:51:3D:6D:E1:46:1E:01:4B:D9:B8:F6:F5:FB:2F:E7 Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft Manifest number: 04A2 Signing time: Sun 05 May 2024 01:43:29 +0000 Manifest this update: Sun 05 May 2024 01:43:29 +0000 Manifest next update: Sun 12 May 2024 01:43:29 +0000 Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: mxNOTyPqyMmGHuZYtcQ1PTPbmNaDPBBsDwy10vLBpk0=) 2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: gYS7tLTvZ8O/miE/j5J8QEIzPnWP687d61INazt3+OU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: May 5 01:43:29 2024 GMT Not After : May 12 01:43:29 2024 GMT Subject: CN=6636e441-d2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d3:94:2e:d1:b8:09:dd:e4:5b:7a:f6:3a:31: 12:c0:71:6f:ee:ab:fa:c4:62:89:e2:30:fb:3f:88: ed:f2:7f:6a:4d:a8:8c:ed:27:f6:8b:e1:6d:e8:ed: 89:29:09:cf:28:23:93:3d:82:04:f2:f4:7c:04:56: 29:ad:94:05:32:4d:03:0c:9c:78:f5:49:94:22:b9: 50:90:a3:8c:ac:c3:4d:3d:0e:f4:f4:0b:c4:60:d9: 77:85:55:9a:7f:a7:06:51:c2:fe:ae:77:18:4c:9e: d4:01:93:b2:78:72:ab:26:fd:f0:2f:3f:86:7b:aa: 60:34:33:31:b4:49:d6:56:1d:ad:8d:2f:ea:a7:b8: 42:f1:19:bd:3f:7f:19:1e:4a:a4:7e:9f:eb:6d:41: 2b:2c:e6:47:1c:2b:e3:8c:4b:19:57:47:74:99:2b: cc:87:bd:0f:07:5e:c8:a1:88:a9:2f:63:2c:d3:ae: 98:d2:2d:e5:7f:ce:64:5f:eb:eb:9e:94:23:50:7b: 57:ee:b9:cf:42:41:77:5d:a2:6e:a3:cc:6c:25:64: d4:c8:f0:60:24:f4:42:0c:2a:07:c8:62:5f:bd:a1: ae:d3:9a:f2:2f:4d:5f:a4:a0:c9:a3:6a:a5:a4:fa: 10:83:1d:fd:1b:03:10:de:c1:2d:c6:35:4a:e4:7c: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F0:4B:F2:BD:51:3D:6D:E1:46:1E:01:4B:D9:B8:F6:F5:FB:2F:E7 X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8b:f3:3c:c2:26:39:8c:3a:79:24:08:1e:f9:d4:4c:fd:4b: 13:5c:0a:ba:b8:2e:39:cf:9b:6a:4e:99:95:dc:fd:2c:00:96: 09:e9:f2:56:7a:31:3d:d8:2f:a0:58:1c:26:c9:14:a0:73:e8: 6e:0b:2d:d7:b2:a3:77:5a:a6:95:da:10:c1:63:9d:70:94:a2: e6:fd:da:c4:11:3f:4f:ad:e6:19:2f:3a:73:75:bc:e9:33:d7: 42:ab:78:88:aa:3b:3d:ab:da:97:91:1c:37:24:4b:f8:48:2d: ec:ba:3b:6b:c2:6e:27:8e:76:e1:1e:4e:5d:1b:cd:c6:cb:40: a4:db:d5:ed:22:fe:75:6f:a0:f5:92:3c:e0:45:35:3c:90:01: 51:a0:51:6b:89:ad:0b:df:49:4a:ae:b9:09:02:cb:ca:c9:98: 16:53:01:bf:fd:7f:92:6c:7c:4e:4f:36:41:eb:4d:ee:f8:87: 18:6a:d7:d6:07:d7:34:90:13:07:e3:78:77:e0:28:b7:c3:9c: 52:e4:e9:5d:6e:69:dd:3f:31:0b:3e:32:29:78:e9:f0:24:d2: 57:e4:81:dd:97:43:3f:ad:03:d0:e3:06:cc:09:fc:20:a9:87: 96:58:a9:16:1a:cc:d0:60:d7:e6:59:8c:1b:d6:96:6f:36:0d: 72:7b:f0:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjQwNTA1MDE0MzI5WhcNMjQwNTEyMDE0MzI5WjAYMRYwFAYD VQQDEw02NjM2ZTQ0MS1kMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NOULtG4Cd3kW3r2OjESwHFv7qv6xGKJ4jD7P4jt8n9qTaiM7Sf2i+Ft6O2J KQnPKCOTPYIE8vR8BFYprZQFMk0DDJx49UmUIrlQkKOMrMNNPQ709AvEYNl3hVWa f6cGUcL+rncYTJ7UAZOyeHKrJv3wLz+Ge6pgNDMxtEnWVh2tjS/qp7hC8Rm9P38Z Hkqkfp/rbUErLOZHHCvjjEsZV0d0mSvMh70PB17IoYipL2Ms066Y0i3lf85kX+vr npQjUHtX7rnPQkF3XaJuo8xsJWTUyPBgJPRCDCoHyGJfvaGu05ryL01fpKDJo2ql pPoQgx39GwMQ3sEtxjVK5HyROQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXwS/K9 UT1t4UYeAUvZuPb1+y/nMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCi/M8wiY5jDp5JAge+dRM/UsTXAq6uC45z5tqTpmV3P0sAJYJ6fJW ejE92C+gWBwmyRSgc+huCy3XsqN3WqaV2hDBY51wlKLm/drEET9PreYZLzpzdbzp M9dCq3iIqjs9q9qXkRw3JEv4SC3sujtrwm4njnbhHk5dG83Gy0Ck29XtIv51b6D1 kjzgRTU8kAFRoFFria0L30lKrrkJAsvKyZgWUwG//X+SbHxOTzZB603u+IcYatfW B9c0kBMH43h34Ci3w5xS5OldbmndPzELPjIpeOnwJNJX5IHdl0M/rQPQ4wbMCfwg qYeWWKkWGszQYNfmWYwb1pZvNg1ye/AM -----END CERTIFICATE-----Generated at Sun May 5 02:13:04 2024 by rpki-client on console-ams.rpki-client.org