$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: DzphsUupZwBSg1ZoBAJVCrCv1SOI5dY7xlkBIU4bESs= Subject key identifier: 4A:77:0A:DE:F5:32:67:7B:88:A9:56:4F:55:1A:E1:C2:5C:EF:9C:08 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 3444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 3434 Signing time: Fri 22 Nov 2024 14:55:47 +0000 Manifest this update: Fri 22 Nov 2024 14:55:46 +0000 Manifest next update: Fri 29 Nov 2024 14:55:46 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: TFI2t/Bdr3YZD6Nn48HPeJ97zTdF6EqEl1gw1F0cq1s=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: RwfQrmvNnRQyIUXieZHGYDJzOJ942Gv6AiVFyJelDe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13380 (0x3444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Nov 22 14:55:46 2024 GMT Not After : Nov 29 14:55:46 2024 GMT Subject: CN=67409b72-7a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:41:61:7a:ee:8f:26:31:30:e7:88:31:28: 1f:e7:74:5a:04:93:90:dc:86:53:3b:f7:3d:60:6b: 13:dd:8c:ac:33:79:69:04:4d:c5:1b:04:ea:59:67: a3:2b:b9:6f:47:a1:36:3e:70:d1:70:b1:8e:d1:fe: e8:1e:3b:4d:aa:70:16:44:ed:1e:9b:a6:51:6b:d1: 79:2b:d0:01:50:e5:c2:47:6c:91:c7:d8:2b:18:30: f5:1a:49:0b:85:50:f9:c0:79:88:67:1b:9a:a8:61: 93:37:95:de:4e:3c:dc:13:99:fc:39:d2:5f:35:ab: b1:29:f4:c1:cf:07:0a:b1:b3:2f:33:69:a2:5c:49: 9f:32:bf:81:7e:5c:22:23:da:c3:b4:49:95:5c:66: 86:9c:28:b8:88:de:f2:9d:20:13:47:29:7e:bf:cd: 94:b8:35:f2:f3:20:58:3e:c2:28:39:ee:3b:51:df: 50:7f:de:ab:0e:f8:c6:6e:a7:2a:a5:a2:ee:b9:eb: 1d:f7:35:44:7e:79:df:f6:56:6f:e6:ea:bc:ea:f8: 11:d0:73:94:d3:09:00:7b:99:78:87:c3:5d:6d:fa: 4e:4d:cc:dc:52:b3:76:94:c3:aa:dd:0f:1e:74:41: 1c:91:24:ee:3d:6f:fd:36:fd:43:1e:38:dc:06:34: be:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:77:0A:DE:F5:32:67:7B:88:A9:56:4F:55:1A:E1:C2:5C:EF:9C:08 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:96:9f:99:62:a1:27:0f:c8:d6:d1:38:60:26:d7:85:72:6f: 88:db:ee:4e:44:19:87:71:5c:62:dd:ff:07:3c:92:d3:bc:a4: b3:18:26:9e:e5:98:40:df:63:6e:d3:b3:f1:27:2a:51:a5:67: 2a:1a:f2:f6:8b:88:68:c9:a0:1a:7e:d6:68:f9:4e:10:85:ad: 1d:79:8b:51:be:49:fe:14:2a:40:f9:71:de:a3:02:bd:07:20: c0:14:c5:4d:7c:97:c3:a0:49:53:db:52:49:1a:a3:6f:eb:f7: 8e:ff:d6:ea:78:2e:c4:cf:7d:63:83:31:ee:83:9a:e5:79:89: 55:27:fd:82:fc:5b:5e:1e:b7:3a:6d:0c:a6:8e:ac:80:c2:31: 97:03:32:c0:b5:61:76:d8:10:bc:2f:21:d2:e8:6e:40:b0:e6: 69:9d:80:1c:1c:39:d3:e2:92:1b:0a:73:40:0c:35:bb:58:89: 73:71:13:00:52:5f:11:d4:d8:6a:d8:7a:17:6e:41:b3:85:ec: fd:1d:c3:14:bf:26:31:6c:91:1e:51:de:e0:a2:a1:15:a6:44: b5:16:fc:a8:b6:a6:57:91:3a:45:68:21:26:32:3b:97:36:da: 46:b4:3e:9f:76:92:c1:d5:c9:99:cc:78:ad:40:77:ac:50:aa: fe:19:3d:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjQxMTIyMTQ1NTQ2WhcNMjQxMTI5MTQ1NTQ2WjAYMRYwFAYD VQQDEw02NzQwOWI3Mi03YTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gFBYXrujyYxMOeIMSgf53RaBJOQ3IZTO/c9YGsT3YysM3lpBE3FGwTqWWej K7lvR6E2PnDRcLGO0f7oHjtNqnAWRO0em6ZRa9F5K9ABUOXCR2yRx9grGDD1GkkL hVD5wHmIZxuaqGGTN5XeTjzcE5n8OdJfNauxKfTBzwcKsbMvM2miXEmfMr+Bflwi I9rDtEmVXGaGnCi4iN7ynSATRyl+v82UuDXy8yBYPsIoOe47Ud9Qf96rDvjGbqcq paLuuesd9zVEfnnf9lZv5uq86vgR0HOU0wkAe5l4h8NdbfpOTczcUrN2lMOq3Q8e dEEckSTuPW/9Nv1DHjjcBjS+ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp3Ct71 Mmd7iKlWT1Ua4cJc75wIMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAElp+ZYqEnD8jW0ThgJteFcm+I2+5ORBmHcVxi3f8HPJLTvKSzGCae 5ZhA32Nu07PxJypRpWcqGvL2i4hoyaAaftZo+U4Qha0deYtRvkn+FCpA+XHeowK9 ByDAFMVNfJfDoElT21JJGqNv6/eO/9bqeC7Ez31jgzHug5rleYlVJ/2C/FteHrc6 bQymjqyAwjGXAzLAtWF22BC8LyHS6G5AsOZpnYAcHDnT4pIbCnNADDW7WIlzcRMA Ul8R1Nhq2HoXbkGzhez9HcMUvyYxbJEeUd7goqEVpkS1FvyotqZXkTpFaCEmMjuX NtpGtD6fdpLB1cmZzHitQHesUKr+GT0I -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:12 2024 by rpki-client on console-ams.rpki-client.org