$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft File: tXSEdav1kHeBiVHMH-bti9LzEhM.mft (raw, json) Hash identifier: z9v5wWNsuyKYYXnnhE4fhWueKHpOzfo9egcsD+X4ROQ= Subject key identifier: 08:A2:5D:66:45:85:34:49:57:FB:C4:28:E9:1E:7F:86:FB:7A:D8:87 Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 Certificate issuer: /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft Manifest number: 0C37 Signing time: Fri 22 Nov 2024 18:11:55 +0000 Manifest this update: Fri 22 Nov 2024 18:11:54 +0000 Manifest next update: Fri 29 Nov 2024 18:11:54 +0000 Files and hashes: 1: tXSEdav1kHeBiVHMH-bti9LzEhM.crl (hash: dhTUuvxYaBENmdtr75pyf8qSX+bkIu1VwFKx8/Jibqg=) 2: E458D4E0F4A011E98C19332EC4F9AE02.roa (hash: 7jk/rr6LxzX1IditaP54a6jKieqp/It8jKrxJlUcU9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Validity Not Before: Nov 22 18:11:54 2024 GMT Not After : Nov 29 18:11:54 2024 GMT Subject: CN=6740c96a-6686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:98:15:57:0e:19:c2:3f:3d:c2:19:49:ea:4e: fb:87:3e:07:94:38:36:fd:65:d3:1e:58:c4:fa:1f: 26:0f:88:9d:24:33:ff:fa:aa:ce:a7:7e:6e:2c:b7: 66:79:98:62:1d:71:49:ea:18:3d:1f:12:09:d1:5f: be:f0:01:bd:32:83:9b:01:54:3f:d2:d5:a8:2d:93: 5b:29:66:82:0b:a0:b0:32:99:f9:18:65:e4:c4:52: 37:05:b7:c2:91:d9:23:c7:dc:66:c2:95:c6:a2:82: a8:05:43:98:56:01:ba:7a:64:8d:6b:71:fa:a8:da: 81:87:b6:3e:c7:4e:16:20:08:a3:da:02:f3:aa:e2: 5a:03:77:8c:29:4d:9b:70:7e:78:6d:93:d9:2f:b2: 0f:e3:0b:49:65:74:06:81:44:95:a2:0c:33:0d:79: 5b:63:eb:10:f3:a5:62:57:d4:a4:d3:bf:ac:c3:28: a3:86:e7:ef:5d:23:6c:54:fc:66:c4:8c:ca:c5:38: 70:a4:8b:6a:4e:d2:56:c7:16:8b:7b:a5:71:89:41: 5f:e7:8c:e0:e6:02:27:9e:31:ed:02:7e:8b:ff:fc: 54:5e:68:81:1a:0d:f4:f8:fd:17:fa:e1:94:28:46: 8a:e2:6f:2e:cb:4a:3f:29:8b:f1:d1:a3:78:65:63: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A2:5D:66:45:85:34:49:57:FB:C4:28:E9:1E:7F:86:FB:7A:D8:87 X509v3 Authority Key Identifier: keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f0:f9:5d:ce:53:61:ca:24:9c:ad:5d:df:e9:08:39:0d:ae: 44:84:e5:7e:77:bb:ae:b3:6c:5a:c4:13:a2:0b:62:23:57:9c: 2e:1c:b4:14:38:19:dc:4b:c7:ea:eb:c6:24:7f:40:d0:46:4d: 13:92:fb:c5:b6:3b:79:6a:10:24:78:6e:ce:78:36:d0:d8:d7: 11:1a:56:a1:5d:f7:d9:75:d4:ca:74:46:f2:10:fa:f9:f7:f0: 42:97:d0:fa:59:98:82:05:4d:49:8d:cd:99:1d:b4:5d:ca:ab: ca:d0:ab:74:bf:c3:70:f8:8e:01:43:a7:2b:00:ed:01:79:dd: 60:7a:95:fe:52:e4:8a:68:7a:37:7c:36:41:db:cf:ba:ed:f0: 60:19:39:3d:4b:fe:5b:d1:d4:ce:77:26:92:af:10:eb:eb:e3: 2e:a3:ca:2a:db:5a:a8:d0:39:47:d1:bf:cc:5e:0d:85:61:38: 2b:3b:82:9d:0c:55:7d:45:ab:b6:99:1f:22:77:9f:a3:a5:e1: db:b3:66:51:6c:88:4c:ef:4e:ba:09:d2:67:44:af:11:cc:a0: bd:33:79:93:03:e6:f1:50:dd:70:4d:ec:6e:93:de:24:88:04: da:ac:5a:3b:ea:7c:1b:6a:30:c0:95:0d:c3:95:2a:16:32:9e: b6:26:6c:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNTAxMTAvBgNVBAUTKEI1NzQ4NDc1QUJGNTkwNzc4MTg5NTFDQzFGRTZFRDhC RDJGMzEyMTMwHhcNMjQxMTIyMTgxMTU0WhcNMjQxMTI5MTgxMTU0WjAYMRYwFAYD VQQDEw02NzQwYzk2YS02Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JgVVw4Zwj89whlJ6k77hz4HlDg2/WXTHljE+h8mD4idJDP/+qrOp35uLLdm eZhiHXFJ6hg9HxIJ0V++8AG9MoObAVQ/0tWoLZNbKWaCC6CwMpn5GGXkxFI3BbfC kdkjx9xmwpXGooKoBUOYVgG6emSNa3H6qNqBh7Y+x04WIAij2gLzquJaA3eMKU2b cH54bZPZL7IP4wtJZXQGgUSVogwzDXlbY+sQ86ViV9Sk07+swyijhufvXSNsVPxm xIzKxThwpItqTtJWxxaLe6VxiUFf54zg5gInnjHtAn6L//xUXmiBGg30+P0X+uGU KEaK4m8uy0o/KYvx0aN4ZWPnkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiiXWZF hTRJV/vEKOkef4b7etiHMB8GA1UdIwQYMBaAFLV0hHWr9ZB3gYlRzB/m7YvS8xIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE1MC9ENDlCRDIxMEY0 OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtIZUJpVkhNSC1idGk5THpF aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RYU0VkYXYxa0hlQmlWSE1ILWJ0aTlMekVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE1MC9ENDlCRDIxMEY0OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtI ZUJpVkhNSC1idGk5THpFaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg8PldzlNhyiScrV3f6Qg5Da5EhOV+d7uus2xaxBOiC2IjV5wuHLQU OBncS8fq68Ykf0DQRk0TkvvFtjt5ahAkeG7OeDbQ2NcRGlahXffZddTKdEbyEPr5 9/BCl9D6WZiCBU1Jjc2ZHbRdyqvK0Kt0v8Nw+I4BQ6crAO0Bed1gepX+UuSKaHo3 fDZB28+67fBgGTk9S/5b0dTOdyaSrxDr6+Muo8oq21qo0DlH0b/MXg2FYTgrO4Kd DFV9Rau2mR8id5+jpeHbs2ZRbIhM7066CdJnRK8RzKC9M3mTA+bxUN1wTexuk94k iATarFo76nwbajDAlQ3DlSoWMp62Jmwu -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org