$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: m9QG4DVS0xAMJ0yTbqRj+kLdxf2hJEMDyv729vWlQYw= Subject key identifier: F2:68:FA:FE:85:BE:19:B1:49:76:16:FE:53:9D:B6:71:2F:53:C7:76 Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 29E0 Signing time: Thu 02 May 2024 17:00:13 +0000 Manifest this update: Thu 02 May 2024 17:00:12 +0000 Manifest next update: Thu 09 May 2024 17:00:12 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: nDuUvktlAc2PDzry71tK9K9nFsY9cEX8v/Q76cAby1I=) 2: 1863E71EE86511ED9B3E3257C4F9AE02.roa (hash: d0+VsKWqslGrsihw5DgPjKXNZkQWNLKVvJ8jNtxr1ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: May 2 17:00:12 2024 GMT Not After : May 9 17:00:12 2024 GMT Subject: CN=6633c69d-1ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:78:bf:70:c1:8a:68:47:eb:33:0c:2a:97: 89:74:c1:8b:21:d2:9e:a9:d5:eb:2d:62:f8:8d:e3: 12:07:d5:5b:fd:ef:c2:f3:1b:f3:86:bd:66:df:f4: bc:96:1f:4d:1a:30:9d:5e:79:d4:c6:f4:f5:db:48: 99:e9:1d:2f:f1:9c:36:4d:d2:8a:70:09:fb:5a:aa: 51:45:70:95:3f:dd:5c:43:8a:4e:37:99:0a:a5:15: e4:0a:3f:8c:d9:f5:71:5e:66:14:cc:55:51:7c:f6: f4:17:1e:da:8a:42:e8:da:ca:84:cf:96:13:65:ae: 95:0a:a5:af:b0:a3:2c:1b:a8:8c:fc:60:d5:44:40: 4d:67:8c:3d:ab:7b:24:94:99:e9:5b:2a:e4:fd:55: 34:b7:30:6f:5b:b5:c0:88:5b:28:41:b6:3b:a7:5c: 11:6f:7f:79:63:16:8a:96:79:af:6d:50:ec:8e:4a: f7:b8:de:6c:a2:6d:f3:b7:2d:b6:65:86:cf:57:17: 77:f9:be:8e:09:07:49:91:4a:8c:40:e0:ba:5a:0b: ea:f9:94:2f:a1:eb:44:e6:5f:ef:47:95:ef:ff:bd: 54:92:e2:2f:a0:e8:ff:08:7c:49:0c:b9:f8:e8:eb: 23:cc:c6:93:6e:3d:88:60:b2:b6:27:5f:a0:0c:c6: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:68:FA:FE:85:BE:19:B1:49:76:16:FE:53:9D:B6:71:2F:53:C7:76 X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c2:e7:03:42:48:01:54:84:95:26:92:37:4d:88:24:56:54: f3:cf:b3:1c:db:f3:f6:57:03:31:7d:2c:88:b9:5b:28:9e:ce: 1d:8a:94:5a:d4:c2:44:85:a2:ab:26:ce:5d:6d:4e:e0:fe:ae: 04:6f:77:4b:19:7e:7f:ce:42:7a:c1:2f:29:9d:a8:8e:2a:fc: 02:2b:29:44:da:f2:94:cb:90:d5:f4:c4:a0:14:d5:0f:d8:ca: e8:3d:75:a3:73:79:c7:4b:b3:aa:61:e5:4e:88:9e:9d:77:72: 01:6b:19:41:fd:59:1e:3a:47:92:22:10:e2:83:5a:f6:71:1c: 58:45:49:69:fa:c4:38:cb:8e:d9:a6:a3:16:fe:86:06:b6:1d: c4:4e:3c:8f:ef:e5:64:db:14:f7:09:16:77:13:0b:95:c5:56: e9:49:7f:03:7c:71:9d:4d:c5:34:11:7c:01:cf:2d:1a:a0:95: c0:e8:68:89:7b:3e:eb:04:48:16:20:67:5f:54:5f:75:ff:51: 27:c3:75:e4:ea:9d:bf:63:9c:b4:15:d6:ba:e5:cb:3f:d7:82: e4:e2:e1:17:0d:25:ad:12:5e:3e:61:00:81:ee:07:79:20:e0: 8e:38:77:68:d6:0a:03:67:3e:fd:44:29:37:1a:3f:11:71:a1: e6:5d:d7:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjQwNTAyMTcwMDEyWhcNMjQwNTA5MTcwMDEyWjAYMRYwFAYD VQQDEw02NjMzYzY5ZC0xZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCp4v3DBimhH6zMMKpeJdMGLIdKeqdXrLWL4jeMSB9Vb/e/C8xvzhr1m3/S8 lh9NGjCdXnnUxvT120iZ6R0v8Zw2TdKKcAn7WqpRRXCVP91cQ4pON5kKpRXkCj+M 2fVxXmYUzFVRfPb0Fx7aikLo2sqEz5YTZa6VCqWvsKMsG6iM/GDVREBNZ4w9q3sk lJnpWyrk/VU0tzBvW7XAiFsoQbY7p1wRb395YxaKlnmvbVDsjkr3uN5som3zty22 ZYbPVxd3+b6OCQdJkUqMQOC6Wgvq+ZQvoetE5l/vR5Xv/71UkuIvoOj/CHxJDLn4 6OsjzMaTbj2IYLK2J1+gDMZ6kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJo+v6F vhmxSXYW/lOdtnEvU8d2MB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOwucDQkgBVISVJpI3TYgkVlTzz7Mc2/P2VwMxfSyIuVsons4dipRa 1MJEhaKrJs5dbU7g/q4Eb3dLGX5/zkJ6wS8pnaiOKvwCKylE2vKUy5DV9MSgFNUP 2MroPXWjc3nHS7OqYeVOiJ6dd3IBaxlB/VkeOkeSIhDig1r2cRxYRUlp+sQ4y47Z pqMW/oYGth3ETjyP7+Vk2xT3CRZ3EwuVxVbpSX8DfHGdTcU0EXwBzy0aoJXA6GiJ ez7rBEgWIGdfVF91/1Enw3Xk6p2/Y5y0Fda65cs/14Lk4uEXDSWtEl4+YQCB7gd5 IOCOOHdo1goDZz79RCk3Gj8RcaHmXddM -----END CERTIFICATE-----Generated at Thu May 2 17:43:52 2024 by rpki-client on console-fra.rpki-client.org