$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft File: Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json) Hash identifier: nE2xz8ZhKN1DRWb7pfHOlmBLyWamU5mnInfnq/tutug= Subject key identifier: CD:92:59:74:4E:84:D7:AC:47:12:2E:BD:35:F8:2E:EA:0C:CA:43:0B Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31 Certificate issuer: /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031 Certificate serial: 0402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft Manifest number: 03FE Signing time: Sat 23 Nov 2024 00:01:42 +0000 Manifest this update: Sat 23 Nov 2024 00:01:42 +0000 Manifest next update: Sat 30 Nov 2024 00:01:42 +0000 Files and hashes: 1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: fAkNWssTAtShYPT02sgGpK2XktV8us4qRIiCn8JSmzc=) 2: C36AEA764F7911ECAA7C6A6FC4F9AE02.roa (hash: 6pwSl/tH7jpCf2nCpLbxQOYWHD+R7qNFnABfqWkqa5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031 Validity Not Before: Nov 23 00:01:42 2024 GMT Not After : Nov 30 00:01:42 2024 GMT Subject: CN=67411b66-1129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:23:65:e2:bb:dd:50:60:1a:2d:d1:5c:36:05: b1:95:e0:d9:f3:30:1f:2e:10:cc:02:bc:c4:73:51: 66:3f:db:7d:0b:6d:00:04:b3:83:f1:c9:15:6d:35: 93:96:0b:6e:71:aa:eb:14:16:c6:33:31:9c:8b:c4: 58:7d:74:90:cf:ff:55:bb:29:70:9a:d3:5a:51:5d: 5c:b5:35:b4:5d:13:f1:05:5b:a5:19:9f:71:f2:b0: 70:d2:41:f6:e8:12:a3:b5:8c:09:b8:03:c9:71:e2: b1:44:0e:84:48:e4:b5:5a:5b:9b:14:83:85:8c:2f: e8:cb:61:9b:03:97:14:2d:07:a6:47:c1:03:2c:52: 4d:65:6c:00:58:43:03:bf:d4:2c:fc:59:f8:01:c7: 7e:08:e1:64:06:81:2a:b8:d3:fa:7e:5a:69:c4:66: 40:ca:58:7b:ef:af:c0:d4:12:75:36:87:44:96:8f: 99:29:0e:2d:e2:77:be:4f:57:b9:d3:89:74:7e:a7: b4:09:58:1c:74:8f:05:95:52:1b:50:c9:3f:a9:ee: a8:06:8b:5d:8d:0c:5f:26:8e:37:1a:3a:51:d8:9e: 58:8e:40:34:9a:16:b0:d5:f1:56:06:c2:23:28:dc: 12:a0:3d:f7:ef:96:f3:ec:cc:ed:a4:7b:da:33:8b: f6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:92:59:74:4E:84:D7:AC:47:12:2E:BD:35:F8:2E:EA:0C:CA:43:0B X509v3 Authority Key Identifier: keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:7c:5b:87:a9:38:59:d3:e7:c3:af:bf:35:0e:8b:ef:81:31: 45:2b:2e:9f:9e:69:4e:91:12:9b:e0:95:52:aa:b8:f5:85:a8: 12:98:98:75:fc:ad:fc:93:3a:80:3c:39:93:c1:74:bf:f5:8a: d8:d9:aa:4d:73:a9:60:03:4e:39:25:1a:10:21:a0:62:4e:77: da:39:dd:68:e0:4f:59:ed:5c:d7:8b:9d:f0:e5:ed:e9:1a:88: fc:af:1c:68:9a:f1:39:43:d2:7a:1e:0e:b5:bf:71:b5:4f:cf: 03:1d:d1:58:a8:5c:0e:67:9b:33:3f:69:d1:1d:59:bf:02:5d: f4:a5:e3:9f:32:f9:40:15:53:eb:c4:c6:4c:44:75:a8:f0:fb: a7:49:bf:e9:8a:78:98:1e:0c:8a:e6:45:56:4b:76:48:b0:a2: 2a:9a:6f:1e:14:f6:bc:e3:b1:87:15:38:00:af:b9:42:d8:d4: 82:90:4b:30:4c:5b:89:2c:16:10:07:77:4a:23:a9:1c:a7:f2: 7d:cb:86:87:ae:9e:56:4e:f8:6e:0c:9d:dd:9d:58:29:ea:ad: 44:2a:33:96:94:6f:f3:55:cf:5a:17:ee:d9:3e:14:f2:5e:cf: aa:ea:ba:bf:d9:00:9d:de:86:f5:63:6a:26:a1:7b:b4:74:87: 60:3b:53:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5RTYxMTAvBgNVBAUTKDRFNENCNEI5MTUxRTdCQUUxMTJCRUM1MzU5QzMxQzk1 NTgwRUUwMzEwHhcNMjQxMTIzMDAwMTQyWhcNMjQxMTMwMDAwMTQyWjAYMRYwFAYD VQQDEw02NzQxMWI2Ni0xMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iNl4rvdUGAaLdFcNgWxleDZ8zAfLhDMArzEc1FmP9t9C20ABLOD8ckVbTWT lgtucarrFBbGMzGci8RYfXSQz/9VuylwmtNaUV1ctTW0XRPxBVulGZ9x8rBw0kH2 6BKjtYwJuAPJceKxRA6ESOS1WlubFIOFjC/oy2GbA5cULQemR8EDLFJNZWwAWEMD v9Qs/Fn4Acd+COFkBoEquNP6flppxGZAylh776/A1BJ1NodElo+ZKQ4t4ne+T1e5 04l0fqe0CVgcdI8FlVIbUMk/qe6oBotdjQxfJo43GjpR2J5YjkA0mhaw1fFWBsIj KNwSoD3375bz7MztpHvaM4v2FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2SWXRO hNesRxIuvTX4LuoMykMLMB8GA1UdIwQYMBaAFE5MtLkVHnuuESvsU1nDHJVYDuAx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDlFNi9CNjE2Qzg2QTRG NzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2NFJLLXhUV2NNY2xWZ080 REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RreTB1UlVlZTY0UksteFRXY01jbFZnTzRERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDlFNi9CNjE2Qzg2QTRGNzcxMUVDOUYwOTQ1NkVDNEY5QUUwMi9Ua3kwdVJVZWU2 NFJLLXhUV2NNY2xWZ080REUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6fFuHqThZ0+fDr781DovvgTFFKy6fnmlOkRKb4JVSqrj1hagSmJh1 /K38kzqAPDmTwXS/9YrY2apNc6lgA045JRoQIaBiTnfaOd1o4E9Z7VzXi53w5e3p Goj8rxxomvE5Q9J6Hg61v3G1T88DHdFYqFwOZ5szP2nRHVm/Al30peOfMvlAFVPr xMZMRHWo8PunSb/piniYHgyK5kVWS3ZIsKIqmm8eFPa847GHFTgAr7lC2NSCkEsw TFuJLBYQB3dKI6kcp/J9y4aHrp5WTvhuDJ3dnVgp6q1EKjOWlG/zVc9aF+7ZPhTy Xs+q6rq/2QCd3ob1Y2omoXu0dIdgO1Mt -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org