$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft File: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json) Hash identifier: 6FhK1pAZ+1h7mP2VrECcVREJ/PbY6LTDsXgs+UHidzM= Subject key identifier: 1E:78:62:64:22:B2:90:4B:46:36:2A:33:32:DD:B7:A1:10:18:A9:F8 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft Manifest number: 076F Signing time: Fri 22 Nov 2024 20:55:07 +0000 Manifest this update: Fri 22 Nov 2024 20:55:06 +0000 Manifest next update: Fri 29 Nov 2024 20:55:06 +0000 Files and hashes: 1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: tGR7LZX/S0Ne5gxvI4xUsTkSQULc0cG2muwxpwEfspc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Nov 22 20:55:06 2024 GMT Not After : Nov 29 20:55:06 2024 GMT Subject: CN=6740efab-51c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:72:3d:69:d5:33:59:b3:39:19:69:9f:0c: 60:57:38:fe:89:b1:2a:b7:fb:0c:43:2f:6b:f0:42: 9a:11:46:67:0f:10:16:fe:c3:8b:2a:ff:72:ac:6e: 1c:1f:21:df:7c:3c:1f:a6:9b:f0:ed:34:c6:9c:92: e8:cb:28:35:43:46:7f:30:c1:62:9b:45:eb:38:be: 10:01:a0:47:77:c1:55:1e:a4:b7:ca:3b:65:43:b8: 04:5b:c1:56:ea:16:42:b0:8b:91:6a:9b:c6:1f:19: c5:52:bc:8e:f3:c1:78:32:42:d0:29:e0:1f:25:4c: 88:7c:5e:ec:1e:39:ca:3d:e4:c4:fb:5b:66:3b:4a: 6c:a9:4d:f6:90:e4:59:df:27:18:20:24:eb:9f:c6: 68:64:e4:3d:b8:ae:02:90:50:14:57:a6:7d:47:c2: dc:ee:f5:41:27:d0:e9:26:a0:9b:56:e9:5d:7f:bb: 2f:f7:62:4f:4c:31:92:34:51:40:e9:a1:0c:81:4d: 49:64:69:45:1a:b2:8b:dc:cf:72:4a:0c:df:3b:8e: 1f:1c:e2:97:bd:84:47:64:96:f3:53:c6:ae:d2:a2: ee:cd:a9:d9:3e:d4:0e:d9:2b:39:d7:d8:76:d2:26: 69:43:9a:14:65:35:38:b7:45:cc:a0:cd:c1:5d:55: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:78:62:64:22:B2:90:4B:46:36:2A:33:32:DD:B7:A1:10:18:A9:F8 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:b6:20:20:7e:e5:8d:60:4b:cb:4c:12:bc:fd:49:9c:b0:57: 80:64:e7:58:b4:d1:c1:0e:dd:92:2b:9b:75:4b:f1:57:1e:30: 14:14:eb:08:99:41:ba:04:cd:c3:d5:5a:ae:3c:81:66:47:f6: 38:38:a6:d5:d9:bb:38:1c:f4:31:bd:4c:3d:c3:b6:06:fa:c1: 00:99:6e:f3:1c:7a:a8:2a:e0:e6:b4:0b:10:ef:3c:8c:97:cd: eb:58:a3:30:54:b1:fd:9f:40:8c:91:c2:4b:5f:8d:2b:7a:b1: 40:21:b2:50:c6:fd:7a:32:d9:c4:43:25:bc:83:d0:2a:98:23: a5:ae:ea:74:1d:71:87:86:da:b3:f2:a2:d6:b1:83:d2:09:c3: ab:a3:f2:39:c7:b2:b2:11:f1:9d:6a:3a:c8:13:19:d8:79:98: 2f:28:16:d9:6e:b7:60:98:6b:87:21:de:31:c4:fc:46:bb:fd: 82:d6:2e:5e:ec:57:0b:fa:61:dd:f1:a3:a2:53:6a:1d:4a:aa: 05:63:7a:c4:b6:2f:70:05:b6:85:68:d8:97:1b:5c:1e:88:b5: f6:f9:00:0b:3b:c4:ba:aa:8b:f4:14:3c:f8:36:44:b0:5d:be: 53:fd:52:67:f4:b0:81:61:9a:38:31:bc:06:84:20:b7:3f:ed: fe:81:a5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjQxMTIyMjA1NTA2WhcNMjQxMTI5MjA1NTA2WjAYMRYwFAYD VQQDEw02NzQwZWZhYi01MWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3VyPWnVM1mzORlpnwxgVzj+ibEqt/sMQy9r8EKaEUZnDxAW/sOLKv9yrG4c HyHffDwfppvw7TTGnJLoyyg1Q0Z/MMFim0XrOL4QAaBHd8FVHqS3yjtlQ7gEW8FW 6hZCsIuRapvGHxnFUryO88F4MkLQKeAfJUyIfF7sHjnKPeTE+1tmO0psqU32kORZ 3ycYICTrn8ZoZOQ9uK4CkFAUV6Z9R8Lc7vVBJ9DpJqCbVuldf7sv92JPTDGSNFFA 6aEMgU1JZGlFGrKL3M9ySgzfO44fHOKXvYRHZJbzU8au0qLuzanZPtQO2Ss519h2 0iZpQ5oUZTU4t0XMoM3BXVUo0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB54YmQi spBLRjYqMzLdt6EQGKn4MB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDUyMi8xQzNEQTNBQ0YwQTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYy dWxDUE5qYVJtTGhKSENzelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRtiAgfuWNYEvLTBK8/UmcsFeAZOdYtNHBDt2SK5t1S/FXHjAUFOsI mUG6BM3D1VquPIFmR/Y4OKbV2bs4HPQxvUw9w7YG+sEAmW7zHHqoKuDmtAsQ7zyM l83rWKMwVLH9n0CMkcJLX40rerFAIbJQxv16MtnEQyW8g9AqmCOlrup0HXGHhtqz 8qLWsYPSCcOro/I5x7KyEfGdajrIExnYeZgvKBbZbrdgmGuHId4xxPxGu/2C1i5e 7FcL+mHd8aOiU2odSqoFY3rEti9wBbaFaNiXG1weiLX2+QALO8S6qov0FDz4NkSw Xb5T/VJn9LCBYZo4MbwGhCC3P+3+gaWI -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org