$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: 7WCxH9IbERl2dHc4cTkYuKxSoTA56SNwLBzqj89UYhA= Subject key identifier: 23:71:8B:18:23:47:9A:73:21:4F:3E:3F:A0:79:F7:71:D0:A1:83:4A Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 80 Signing time: Wed 15 May 2024 07:18:01 +0000 Manifest this update: Wed 15 May 2024 07:18:01 +0000 Manifest next update: Wed 22 May 2024 07:18:01 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: 0NlGVhlpozUBSBoAo4q0MrQy3x0rdke+noNMD3/gzfw=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: Iz3zUvxtHSNWZfpL5BCeiQjySJjNZ9tgs9jYAv22K5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: May 15 07:18:01 2024 GMT Not After : May 22 07:18:01 2024 GMT Subject: CN=664461a9-5e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:56:3e:85:86:db:81:67:29:6c:b4:69:a3: 82:95:e0:14:b8:24:2a:a6:80:0f:8d:ff:41:4a:f9: a5:47:6c:6c:cc:a6:4e:36:41:d4:68:79:ce:e7:d5: c9:db:18:e6:16:7f:e3:f3:97:a1:72:74:ca:cb:f0: a4:53:f6:a9:73:10:ba:94:a5:3c:4a:61:e9:25:80: 17:26:42:8d:4d:8c:ff:1c:d5:44:00:b5:62:f7:bb: 5a:c3:61:23:5d:20:d1:9a:d9:fd:e8:43:56:c8:53: 5e:6f:19:c2:c7:27:1e:5f:7b:25:c1:55:93:4b:36: c6:06:aa:b0:e7:8b:a6:b5:ca:28:c1:20:5e:f3:a6: 90:ac:59:f0:bb:8e:55:d0:0f:0e:f7:7f:61:6b:0a: 65:a9:53:52:90:74:fc:3c:4e:f5:7f:0b:9b:a0:c6: 3c:a5:4a:fc:32:76:04:a7:09:92:a1:c4:62:30:a3: c2:cd:34:08:50:20:6d:3c:c9:bb:4d:94:3e:5f:ec: c6:61:0f:50:cd:cc:b3:b8:9e:32:5f:66:f2:4f:61: 0c:66:f7:f7:8b:9d:bc:5f:ba:b8:74:5f:4c:04:43: c7:3a:a1:4d:a9:16:87:45:47:59:91:a7:4d:c8:2c: 85:72:c5:c5:47:08:f5:56:a5:2e:7d:b8:01:0b:27: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:71:8B:18:23:47:9A:73:21:4F:3E:3F:A0:79:F7:71:D0:A1:83:4A X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:78:9e:1d:f2:a6:4b:ad:85:61:6d:23:7a:44:2a:63:fc:35: bc:b2:d3:f4:fc:dc:34:f8:8f:c9:17:60:71:52:d2:de:cb:0b: 35:2f:c3:3a:1a:7c:26:a9:7b:22:7c:cf:86:b5:c4:07:da:32: 9f:c2:be:03:a2:05:1b:59:28:b9:cb:0c:7e:74:5a:66:19:45: da:8d:64:5f:ca:51:46:a1:35:59:e5:cd:5d:16:da:81:be:9c: 07:8e:b8:a2:a2:f5:f4:87:74:c3:49:ba:50:72:5a:05:88:b0: 47:32:8c:4e:da:6b:6a:5f:b6:43:cf:31:94:bb:9b:80:13:be: b3:3d:49:b7:9d:3d:ff:cc:57:82:6b:9c:14:4d:7a:75:90:ec: a2:a7:76:25:6b:fd:da:0f:9d:d6:f8:d8:5b:73:10:b0:9a:06: 27:4c:9c:88:49:27:f0:63:a6:57:ec:ac:38:96:56:50:08:81: d9:8c:f1:04:b3:04:e5:18:a9:a4:50:fa:01:ed:c7:b4:96:69: 1b:17:ef:b7:74:09:df:4c:c7:5a:00:50:9c:60:79:f7:9b:b4: 41:91:e6:54:8c:29:95:6a:88:55:2d:7c:f7:77:5a:48:c7:cc: 08:12:4e:c9:39:2e:78:d7:4c:81:36:17:93:9c:2f:3b:1c:51: 70:e6:ce:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjQwNTE1MDcxODAxWhcNMjQwNTIyMDcxODAxWjAYMRYwFAYD VQQDEw02NjQ0NjFhOS01ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3lWPoWG24FnKWy0aaOCleAUuCQqpoAPjf9BSvmlR2xszKZONkHUaHnO59XJ 2xjmFn/j85ehcnTKy/CkU/apcxC6lKU8SmHpJYAXJkKNTYz/HNVEALVi97taw2Ej XSDRmtn96ENWyFNebxnCxyceX3slwVWTSzbGBqqw54umtcoowSBe86aQrFnwu45V 0A8O939hawplqVNSkHT8PE71fwuboMY8pUr8MnYEpwmSocRiMKPCzTQIUCBtPMm7 TZQ+X+zGYQ9QzcyzuJ4yX2byT2EMZvf3i528X7q4dF9MBEPHOqFNqRaHRUdZkadN yCyFcsXFRwj1VqUufbgBCyeFPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNxixgj R5pzIU8+P6B593HQoYNKMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoeJ4d8qZLrYVhbSN6RCpj/DW8stP0/Nw0+I/JF2BxUtLeyws1L8M6 GnwmqXsifM+GtcQH2jKfwr4DogUbWSi5ywx+dFpmGUXajWRfylFGoTVZ5c1dFtqB vpwHjriiovX0h3TDSbpQcloFiLBHMoxO2mtqX7ZDzzGUu5uAE76zPUm3nT3/zFeC a5wUTXp1kOyip3Yla/3aD53W+NhbcxCwmgYnTJyISSfwY6ZX7Kw4llZQCIHZjPEE swTlGKmkUPoB7ce0lmkbF++3dAnfTMdaAFCcYHn3m7RBkeZUjCmVaohVLXz3d1pI x8wIEk7JOS5410yBNheTnC87HFFw5s5j -----END CERTIFICATE-----Generated at Wed May 15 09:28:18 2024 by rpki-client on console-fra.rpki-client.org