$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft File: TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json) Hash identifier: MUuXhWLswfU7WfjZmTS0GphY5euJyOEGSbyjVYbmvB8= Subject key identifier: CE:0C:C6:68:E4:6F:E0:0B:F7:27:D9:40:A2:21:94:85:A6:91:2B:07 Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft Manifest number: 013E Signing time: Sat 23 Nov 2024 02:40:37 +0000 Manifest this update: Sat 23 Nov 2024 02:40:37 +0000 Manifest next update: Sat 30 Nov 2024 02:40:37 +0000 Files and hashes: 1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: LgQS0Tq6xAoixsCve9QJ/q9KnixWf5RHRsXTVGUHME0=) 2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: qChpEQLnwvQfQt0g6Fvv38do/llT7ziZs8Oh2reiHWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Nov 23 02:40:37 2024 GMT Not After : Nov 30 02:40:37 2024 GMT Subject: CN=674140a5-8238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:65:3f:1d:0b:55:e8:cc:14:00:9f:23:71:28: 37:d4:a5:36:56:c8:2b:f6:57:8d:8c:d8:22:b7:fb: 72:67:d0:89:9b:85:11:49:84:98:7b:b2:49:f4:26: 27:6e:12:34:1f:04:37:0a:56:42:e1:4e:cc:fc:35: f5:90:89:40:32:47:25:37:17:bb:29:3f:b4:e0:79: 05:34:9a:0a:4b:52:3c:67:6c:31:28:42:77:0d:ca: 5f:9e:d2:f9:9a:51:58:ee:ea:41:eb:d1:cb:62:e2: 82:f9:69:08:45:53:f8:91:77:2f:f6:0f:00:4b:32: fb:40:d3:a3:40:b7:ad:32:10:51:b1:51:15:91:d8: d4:bf:af:a7:ce:c7:a1:44:02:b8:54:bc:1a:15:9b: 33:68:5a:28:f9:f1:2d:34:1d:80:bf:46:00:7f:5b: 7b:a5:cd:6a:be:05:c4:15:73:c0:0d:df:44:2f:1a: 82:76:c1:16:42:4f:0f:5f:0f:82:44:e8:df:5e:7d: 15:18:df:b0:d7:40:1f:8d:71:aa:c9:c3:2b:0e:51: bc:4d:9f:56:50:c7:07:0c:8a:c6:a9:2a:6e:49:53: 4a:12:b7:67:b5:dd:57:20:3b:54:c3:1b:45:83:14: e7:17:45:3b:c8:13:1d:64:e9:dd:3c:3e:b1:67:82: 5b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0C:C6:68:E4:6F:E0:0B:F7:27:D9:40:A2:21:94:85:A6:91:2B:07 X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:84:8b:f9:39:20:08:cd:da:8e:41:7e:60:0c:5d:16:e6:c9: b1:20:00:02:59:5a:0e:e7:3e:fa:f0:6b:98:4f:36:14:5f:b7: 14:0f:c8:ba:46:60:ab:c0:8a:19:16:c6:37:6e:8d:0f:25:58: d4:31:46:99:7a:1e:a0:70:66:ae:d1:3c:f5:24:ed:aa:fe:fe: 67:c5:39:b9:8c:d8:14:52:fb:62:ec:95:fb:0d:a5:b5:0e:56: fe:a5:7e:7f:1e:73:8a:73:e0:f7:49:54:46:3a:cb:58:ec:c8: e8:dd:da:84:a2:dd:22:f1:05:fc:86:72:1b:56:d4:03:a9:64: 1e:31:a7:00:cb:cc:eb:19:31:00:e2:9b:00:d3:c5:d8:7e:7c: 77:b9:4a:ac:35:cc:4d:64:bf:0c:27:36:b3:4d:35:e5:7c:e7: 17:f7:8c:7b:1f:74:86:58:5b:d2:92:4e:31:20:93:f6:95:cc: 6b:f6:ad:aa:b7:a8:8f:fd:9f:a6:b3:9b:f0:ac:84:72:a3:7e: 07:e2:3f:de:4e:0e:80:d8:84:e4:ef:6e:f8:06:95:61:cd:10: b4:10:a4:bd:b9:52:10:c0:b7:0b:48:cf:85:57:e5:26:a5:e5: e4:02:7c:05:38:97:c7:47:1b:2e:bd:e1:7d:31:4f:3a:92:71: 9d:e8:db:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjQxMTIzMDI0MDM3WhcNMjQxMTMwMDI0MDM3WjAYMRYwFAYD VQQDEw02NzQxNDBhNS04MjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72U/HQtV6MwUAJ8jcSg31KU2Vsgr9leNjNgit/tyZ9CJm4URSYSYe7JJ9CYn bhI0HwQ3ClZC4U7M/DX1kIlAMkclNxe7KT+04HkFNJoKS1I8Z2wxKEJ3DcpfntL5 mlFY7upB69HLYuKC+WkIRVP4kXcv9g8ASzL7QNOjQLetMhBRsVEVkdjUv6+nzseh RAK4VLwaFZszaFoo+fEtNB2Av0YAf1t7pc1qvgXEFXPADd9ELxqCdsEWQk8PXw+C ROjfXn0VGN+w10AfjXGqycMrDlG8TZ9WUMcHDIrGqSpuSVNKErdntd1XIDtUwxtF gxTnF0U7yBMdZOndPD6xZ4JbvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4Mxmjk b+AL9yfZQKIhlIWmkSsHMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK NjgtVUFzaGlBTnpYUkd0c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFhIv5OSAIzdqOQX5gDF0W5smxIAACWVoO5z768GuYTzYUX7cUD8i6 RmCrwIoZFsY3bo0PJVjUMUaZeh6gcGau0Tz1JO2q/v5nxTm5jNgUUvti7JX7DaW1 Dlb+pX5/HnOKc+D3SVRGOstY7Mjo3dqEot0i8QX8hnIbVtQDqWQeMacAy8zrGTEA 4psA08XYfnx3uUqsNcxNZL8MJzazTTXlfOcX94x7H3SGWFvSkk4xIJP2lcxr9q2q t6iP/Z+ms5vwrIRyo34H4j/eTg6A2ITk7274BpVhzRC0EKS9uVIQwLcLSM+FV+Um peXkAnwFOJfHRxsuveF9MU86knGd6Nvd -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org