$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft File: tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json) Hash identifier: iX7EK0/0e1Toc9VqezexGAoLAaC/6hYyhGw86SeTvoE= Subject key identifier: 87:17:81:8C:26:D0:A3:EA:E8:47:1D:D7:62:9A:A6:8A:23:4F:75:D4 Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E Certificate issuer: /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E Certificate serial: 1487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft Manifest number: 1460 Signing time: Sun 24 Nov 2024 16:46:18 +0000 Manifest this update: Sun 24 Nov 2024 16:46:18 +0000 Manifest next update: Sun 01 Dec 2024 16:46:18 +0000 Files and hashes: 1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: rspXqDJTNldzZS5zXdCZqNKeK5jfhGmXqv6h4/Ki/hs=) 2: E944914AF0F111E999D61615C4F9AE02.roa (hash: CswMMOqmMiOitfpF7BDG4iw+Ion78L9sD7jxwJR5zyk=) 3: 128FC51CBE5811EBAADC5261C4F9AE02.roa (hash: HSJzAZRfTBti4DaGKLfysl0LqqrKSEc/d5NqgYgxmYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 16:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5255 (0x1487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E Validity Not Before: Nov 24 16:46:18 2024 GMT Not After : Dec 1 16:46:18 2024 GMT Subject: CN=6743585a-5c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:34:14:65:d1:db:f0:d7:46:9d:d5:6e:80: 45:2f:ca:6b:65:c0:7d:f0:1b:71:43:a5:3d:b9:0a: 4e:f3:d1:dc:99:8f:96:24:ca:c8:3b:8c:f2:43:3c: c5:94:60:87:56:ae:3b:1e:d4:cf:fb:88:83:ab:11: a1:f3:5f:63:86:1d:1b:c6:17:20:98:7d:8e:32:a2: 95:3b:b2:cf:c1:c0:b0:a5:1a:33:3d:95:34:90:1f: 4a:cf:48:8e:75:81:c7:83:c0:a6:c7:8b:d6:fa:b6: a2:06:63:f5:52:3b:2e:34:c6:70:55:9d:53:76:6b: 33:15:28:86:29:30:09:d5:9f:05:5d:9f:6c:41:61: a4:be:a7:52:a9:91:2a:ce:26:37:bd:b9:fa:b1:08: 0d:51:6f:0d:0a:cb:c5:c5:e6:06:98:8c:09:b8:e0: 7a:81:71:64:48:6c:a7:87:51:00:99:53:88:d3:95: 7b:f1:33:c7:05:db:50:f4:a9:df:57:ea:36:3a:3a: 6a:41:f8:bf:56:89:f0:e2:d7:97:a6:ff:3f:90:3e: c6:16:c6:c2:dd:16:05:86:dd:7d:50:07:ba:de:96: a1:61:a6:ce:d8:fd:3c:b1:55:b0:db:b0:7e:e6:a6: 81:d0:90:ab:fe:89:44:2e:a0:d0:29:3b:6f:35:66: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:17:81:8C:26:D0:A3:EA:E8:47:1D:D7:62:9A:A6:8A:23:4F:75:D4 X509v3 Authority Key Identifier: keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d9:31:97:23:1e:e1:33:a1:bd:ad:60:97:18:56:39:f4:de: a5:13:62:d5:76:ba:68:62:c8:37:d2:e1:12:88:96:72:e7:57: bf:5d:90:0e:7c:9c:52:13:dc:56:f4:fb:bc:94:b7:17:86:3e: d1:6a:76:0d:90:aa:b1:c5:8a:bf:16:10:98:41:a2:ff:b1:f1: 48:28:70:c2:c9:65:8e:7f:93:15:10:d5:23:06:ac:7e:e8:06: 14:eb:73:95:5b:37:c8:25:20:04:3e:97:65:2d:43:b5:ec:9b: ed:d6:4c:40:19:d9:81:08:af:bc:29:2a:b5:54:37:78:2c:ea: 5d:5f:1d:03:d8:59:50:e6:f1:ae:fa:6e:87:18:27:32:b5:55: 17:00:8a:e1:37:c8:56:07:62:e8:60:be:70:ef:c9:a0:19:33: cc:6c:e6:5f:fe:6d:22:84:40:49:ca:e5:19:b4:4d:b5:6d:31: ba:2a:95:78:ae:f9:c6:72:2d:d1:e0:5e:95:76:17:c5:9e:d2: fc:ee:f8:70:07:fa:c7:ea:67:d3:02:4b:22:89:a4:91:34:c4: f5:97:b7:30:06:55:e0:c6:7f:76:70:53:58:86:24:d5:86:62: b3:56:3d:f7:f4:a4:8e:c4:9b:78:65:54:5e:dc:29:7a:8d:29: 64:50:56:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5RTAxMTAvBgNVBAUTKEI2QzI0M0M2MzlCMzExRTk4NzhFQzA2QkYyNDdGN0FE RTU0QjA5M0UwHhcNMjQxMTI0MTY0NjE4WhcNMjQxMjAxMTY0NjE4WjAYMRYwFAYD VQQDEw02NzQzNTg1YS01YzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJw0FGXR2/DXRp3VboBFL8prZcB98BtxQ6U9uQpO89HcmY+WJMrIO4zyQzzF lGCHVq47HtTP+4iDqxGh819jhh0bxhcgmH2OMqKVO7LPwcCwpRozPZU0kB9Kz0iO dYHHg8Cmx4vW+raiBmP1UjsuNMZwVZ1TdmszFSiGKTAJ1Z8FXZ9sQWGkvqdSqZEq ziY3vbn6sQgNUW8NCsvFxeYGmIwJuOB6gXFkSGynh1EAmVOI05V78TPHBdtQ9Knf V+o2OjpqQfi/Vonw4teXpv8/kD7GFsbC3RYFht19UAe63pahYabO2P08sVWw27B+ 5qaB0JCr/olELqDQKTtvNWYs7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcXgYwm 0KPq6Ecd12KapoojT3XUMB8GA1UdIwQYMBaAFLbCQ8Y5sxHph47Aa/JH963lSwk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFMC81MTU0QTExMDVG RkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVlbUhqc0JyOGtmM3JlVkxD VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzSkR4am16RWVtSGpzQnI4a2YzcmVWTENUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDlFMC81MTU0QTExMDVGRkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVl bUhqc0JyOGtmM3JlVkxDVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/2TGXIx7hM6G9rWCXGFY59N6lE2LVdrpoYsg30uESiJZy51e/XZAO fJxSE9xW9Pu8lLcXhj7RanYNkKqxxYq/FhCYQaL/sfFIKHDCyWWOf5MVENUjBqx+ 6AYU63OVWzfIJSAEPpdlLUO17Jvt1kxAGdmBCK+8KSq1VDd4LOpdXx0D2FlQ5vGu +m6HGCcytVUXAIrhN8hWB2LoYL5w78mgGTPMbOZf/m0ihEBJyuUZtE21bTG6KpV4 rvnGci3R4F6VdhfFntL87vhwB/rH6mfTAksiiaSRNMT1l7cwBlXgxn92cFNYhiTV hmKzVj339KSOxJt4ZVRe3Cl6jSlkUFYu -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:12 2024 by rpki-client on console-ams.rpki-client.org