$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: oQa+/93DrJ6cv7LCCzGV6B9XiC8KZ0CzpNgpJZaqrKw= Subject key identifier: 30:2D:05:94:B3:17:8D:BF:98:63:7A:BB:9C:25:BF:D6:8A:26:17:4C Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: A3 Signing time: Sat 23 Nov 2024 04:14:54 +0000 Manifest this update: Sat 23 Nov 2024 04:14:53 +0000 Manifest next update: Sat 30 Nov 2024 04:14:53 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: qJrxGdRR367Mpbtz/eYSlIx8tKX8QNJ4Hk8DXGtXCWo=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: PyHDxWHAQBRstEaBQGKJKU4xDLvrnmfCe4ocdyC+br0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Nov 23 04:14:53 2024 GMT Not After : Nov 30 04:14:53 2024 GMT Subject: CN=674156be-3107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:6c:22:2d:19:71:11:e1:8f:4e:e6:af:6e: 00:52:66:1d:98:9a:fe:e4:2e:38:b8:53:60:45:db: fa:40:55:8a:eb:5f:3f:a0:7a:f4:9e:04:07:87:4d: 83:28:04:74:25:0a:90:93:b3:93:e6:0f:8a:4f:f4: c4:02:dc:c6:4d:ae:6c:da:eb:e9:31:61:71:60:11: 3d:3e:6e:24:33:b9:3b:76:78:fa:65:65:53:c0:0d: 76:88:cc:72:de:dc:79:2c:30:da:ca:79:2e:07:9c: 9b:45:6e:af:ec:06:44:72:a9:53:bc:22:99:2e:ef: 6c:e3:3d:25:b0:b0:5d:ad:50:97:2f:44:b5:9e:13: cf:1f:91:a2:88:62:09:ea:47:4c:33:1a:10:7c:2a: 17:84:af:60:82:54:c9:08:86:78:db:46:bc:21:c2: c5:f2:20:6b:c8:ca:38:e6:a9:aa:92:40:ee:41:9c: 76:35:91:85:53:8b:b9:1b:5c:42:67:5d:a4:0f:ac: 55:10:c7:eb:f6:65:cd:89:c3:cd:af:f1:46:b0:67: 99:f6:3a:28:70:17:aa:f4:38:5e:3e:a5:66:2c:04: dc:d1:96:17:19:44:f0:c0:20:40:7e:78:1b:8c:4e: c0:0e:a8:5c:80:c2:5d:02:fc:0b:26:21:07:0e:c2: 6d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2D:05:94:B3:17:8D:BF:98:63:7A:BB:9C:25:BF:D6:8A:26:17:4C X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e0:27:c6:f4:50:69:9b:20:72:bf:a2:f3:c9:79:c3:2e:2a: 54:66:eb:71:33:ff:54:70:6a:5d:91:b1:cd:87:7a:55:10:6a: 94:5d:57:8e:43:c5:2d:32:55:d4:b8:67:fa:85:3a:3a:69:fd: 49:30:ad:3c:b7:5c:3b:d0:60:c7:0e:68:f3:f4:4d:10:a1:7f: 65:11:25:27:b5:1c:d9:01:be:25:c7:ab:af:a2:6e:ec:2c:66: cf:ad:0e:02:a1:61:4e:8c:48:3c:c9:b5:70:a1:b8:dc:d6:18: f6:bc:21:ba:00:43:16:8c:13:84:41:ad:b4:8d:a0:c7:b2:3b: 29:cd:64:ee:ee:e6:79:06:6d:0b:0b:7c:58:ba:0a:b3:38:1f: e6:e2:3c:18:14:fb:b5:6a:9b:d1:c1:f3:68:ed:8d:de:a7:58: 2a:7b:82:f5:c2:a8:54:65:ac:50:85:60:03:d7:e9:13:79:55: 46:8b:53:57:5c:f8:a0:4f:ad:c9:ca:49:5a:57:47:ec:95:ac: e2:e0:26:a5:f4:e6:92:4a:aa:a7:a4:a0:85:2f:4d:e1:22:cc: d0:c2:aa:fe:ff:66:f1:fa:af:bb:c2:d6:ad:58:01:a9:7e:6a: 6f:00:c2:eb:b7:9e:dd:2f:09:e9:82:5b:06:b6:f2:d2:d1:fe: ed:6f:d8:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjQxMTIzMDQxNDUzWhcNMjQxMTMwMDQxNDUzWjAYMRYwFAYD VQQDEw02NzQxNTZiZS0zMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPFsIi0ZcRHhj07mr24AUmYdmJr+5C44uFNgRdv6QFWK618/oHr0ngQHh02D KAR0JQqQk7OT5g+KT/TEAtzGTa5s2uvpMWFxYBE9Pm4kM7k7dnj6ZWVTwA12iMxy 3tx5LDDaynkuB5ybRW6v7AZEcqlTvCKZLu9s4z0lsLBdrVCXL0S1nhPPH5GiiGIJ 6kdMMxoQfCoXhK9gglTJCIZ420a8IcLF8iBryMo45qmqkkDuQZx2NZGFU4u5G1xC Z12kD6xVEMfr9mXNicPNr/FGsGeZ9joocBeq9DhePqVmLATc0ZYXGUTwwCBAfngb jE7ADqhcgMJdAvwLJiEHDsJtBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAtBZSz F42/mGN6u5wlv9aKJhdMMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM4CfG9FBpmyByv6LzyXnDLipUZutxM/9UcGpdkbHNh3pVEGqUXVeO Q8UtMlXUuGf6hTo6af1JMK08t1w70GDHDmjz9E0QoX9lESUntRzZAb4lx6uvom7s LGbPrQ4CoWFOjEg8ybVwobjc1hj2vCG6AEMWjBOEQa20jaDHsjspzWTu7uZ5Bm0L C3xYugqzOB/m4jwYFPu1apvRwfNo7Y3ep1gqe4L1wqhUZaxQhWAD1+kTeVVGi1NX XPigT63JyklaV0fslazi4Cal9OaSSqqnpKCFL03hIszQwqr+/2bx+q+7wtatWAGp fmpvAMLrt57dLwnpglsGtvLS0f7tb9gK -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org