$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft File: tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json) Hash identifier: FUhNAGV4xjQDii96DdyKrVAynzGNW8SRg6QBakvLnlM= Subject key identifier: D9:13:55:F0:1E:07:A8:11:2A:63:89:CA:02:EB:97:CC:80:18:D2:05 Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft Manifest number: 0170 Signing time: Sat 23 Nov 2024 02:12:57 +0000 Manifest this update: Sat 23 Nov 2024 02:12:57 +0000 Manifest next update: Sat 30 Nov 2024 02:12:57 +0000 Files and hashes: 1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: JP5Ik7QLopNWTP7kU6EsCB3UXjcafZSbXfOAO468N78=) 2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: 3vEc00Lhvt9vpvk+3SYKGQbU7UkYV0E+RqierHIRRXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Validity Not Before: Nov 23 02:12:57 2024 GMT Not After : Nov 30 02:12:57 2024 GMT Subject: CN=67413a29-fe6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:5d:09:a4:52:f8:ab:1d:bb:2e:57:5a:c6: 58:5c:89:da:3b:ad:e7:0c:73:1f:0e:8b:4e:6a:94: 1b:24:31:54:43:b1:4f:65:66:5d:07:c9:f9:e0:be: ee:9a:0a:4e:3e:ce:c5:bf:02:35:76:d6:7a:9e:0c: 36:49:ca:ee:77:74:24:e4:65:53:a2:97:8e:21:62: 80:38:c8:4f:26:a5:db:93:97:ea:8c:fa:ee:3b:49: fc:72:c9:28:17:68:ba:91:e9:0d:cc:1d:77:cf:e7: 5d:6c:d1:f4:d2:01:ce:7f:8b:90:69:91:d1:e9:8e: cf:72:ad:a9:ba:21:d9:84:d0:14:fc:d3:73:80:dd: 61:4d:3b:99:3f:03:0f:44:26:8c:a8:b5:e3:aa:37: b7:44:2d:d5:3b:ed:55:29:48:07:2c:95:38:ee:67: f3:c4:6c:2e:80:27:a3:7d:d5:97:6a:a7:bb:bf:17: 45:aa:f6:1a:6e:b2:11:23:0a:4f:70:d1:24:66:61: 02:5f:aa:97:a6:b3:57:66:92:cc:eb:fc:7b:e0:3c: 4d:f2:c2:11:b9:12:10:a6:b7:ac:a9:c6:12:33:9f: 4d:09:cf:dc:b8:5e:31:8d:97:e5:9a:3e:aa:86:1b: 50:f3:d4:f0:4b:c7:cd:41:71:0a:cb:6c:20:9c:77: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:13:55:F0:1E:07:A8:11:2A:63:89:CA:02:EB:97:CC:80:18:D2:05 X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:62:3b:bb:20:43:c6:07:4b:bd:9d:95:c9:17:60:17:8c:94: 25:86:78:48:fb:c5:9b:b3:3f:7a:a4:c4:11:e8:ad:00:53:d5: 02:c3:7e:04:0a:20:b7:45:1a:fc:0a:2e:5c:1a:db:69:03:c5: 1e:af:d2:73:d1:da:29:01:1f:95:46:b5:5e:36:72:a6:4a:e4: 5b:25:ee:8d:b6:99:8c:52:79:02:15:1c:3b:aa:10:c8:d9:ae: 13:8f:04:62:8f:7f:1c:88:ef:02:1f:f2:2b:d9:43:a5:5e:9a: 17:6f:2b:96:77:42:f0:03:09:87:21:32:13:b4:43:49:0b:9c: 45:19:15:82:23:75:ea:80:37:c7:cc:37:a4:a8:81:74:21:e2: 12:5f:ee:ad:e3:84:84:ce:6a:f2:78:94:b7:13:6c:26:b4:67: 89:64:16:9b:f9:02:6c:ef:c2:2f:ed:27:6d:b6:b5:dc:8a:f9: 56:7b:b8:8f:5a:fe:0c:d9:fb:3e:6b:70:bf:3e:51:51:56:d4: ae:b5:78:e6:63:b2:6e:05:e3:59:4c:6a:ae:cd:5e:2c:72:59: 20:c9:6b:4c:46:25:06:98:bf:bf:bd:1d:09:b9:ee:87:ae:db: 28:87:22:b2:8b:f3:3c:1c:2e:7c:1b:9a:1c:fd:b4:19:46:e5: 64:71:5d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjQxMTIzMDIxMjU3WhcNMjQxMTMwMDIxMjU3WjAYMRYwFAYD VQQDEw02NzQxM2EyOS1mZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGhdCaRS+Ksduy5XWsZYXInaO63nDHMfDotOapQbJDFUQ7FPZWZdB8n54L7u mgpOPs7FvwI1dtZ6ngw2Scrud3Qk5GVTopeOIWKAOMhPJqXbk5fqjPruO0n8csko F2i6kekNzB13z+ddbNH00gHOf4uQaZHR6Y7Pcq2puiHZhNAU/NNzgN1hTTuZPwMP RCaMqLXjqje3RC3VO+1VKUgHLJU47mfzxGwugCejfdWXaqe7vxdFqvYabrIRIwpP cNEkZmECX6qXprNXZpLM6/x74DxN8sIRuRIQpresqcYSM59NCc/cuF4xjZflmj6q hhtQ89TwS8fNQXEKy2wgnHcN3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkTVfAe B6gRKmOJygLrl8yAGNIFMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjZGNC8zQjhFMDJFNDc2QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdX ZFp5T1JYNlBBX0VFMlhWZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Yju7IEPGB0u9nZXJF2AXjJQlhnhI+8Wbsz96pMQR6K0AU9UCw34E CiC3RRr8Ci5cGttpA8Uer9Jz0dopAR+VRrVeNnKmSuRbJe6NtpmMUnkCFRw7qhDI 2a4TjwRij38ciO8CH/Ir2UOlXpoXbyuWd0LwAwmHITITtENJC5xFGRWCI3XqgDfH zDekqIF0IeISX+6t44SEzmryeJS3E2wmtGeJZBab+QJs78Iv7SdttrXcivlWe7iP Wv4M2fs+a3C/PlFRVtSutXjmY7JuBeNZTGquzV4sclkgyWtMRiUGmL+/vR0Jue6H rtsohyKyi/M8HC58G5oc/bQZRuVkcV0f -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org