$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json) Hash identifier: X1tkLO9ft004e7IfmZV3Fv39aTnHA5q6JD5Xiow9oYM= Subject key identifier: D1:55:E2:CA:35:DA:F0:24:CF:A6:61:F8:1E:0A:D6:82:93:3B:CB:7A Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B Certificate issuer: /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft Manifest number: 03F6 Signing time: Sat 23 Nov 2024 00:02:40 +0000 Manifest this update: Sat 23 Nov 2024 00:02:39 +0000 Manifest next update: Sat 30 Nov 2024 00:02:39 +0000 Files and hashes: 1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: Tt1a+GcUJpuwrnq/LfEsp2EpNPyQ7Gedzpz+9Fkm8a0=) 2: F593443851B011ECB5188E24C4F9AE02.roa (hash: wMMQ5Gg9qCouXIcWbLn86vQgUXd3BSP9FGBHooJe2V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Validity Not Before: Nov 23 00:02:39 2024 GMT Not After : Nov 30 00:02:39 2024 GMT Subject: CN=67411ba0-a7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:77:d7:f9:f6:41:3d:cc:be:1e:05:3a:73: a2:0e:1a:02:ef:ae:e4:78:7a:0d:5b:01:52:95:38: 01:c2:25:9d:61:ea:9c:40:70:6a:c6:f0:cf:fd:57: 07:f3:bb:ce:88:a4:92:7e:f8:67:65:64:4b:d6:a9: 3f:bc:6d:fe:7c:f6:7e:d0:22:91:79:b8:2e:d3:02: 69:09:6a:40:8e:93:a6:97:c8:66:d4:d1:2c:d3:2c: dd:d0:5f:e7:a4:50:6c:6a:39:d7:99:02:72:f8:c5: 76:3d:8f:14:ad:7b:0b:d0:94:77:ff:62:0c:0e:6e: f0:e8:65:3b:ae:2c:53:ae:1b:53:1c:f8:da:82:13: 6b:ad:52:0a:84:e6:0e:2d:4f:1c:fc:b0:b5:92:1c: 0a:e6:b3:7a:16:b8:f6:83:4b:3b:eb:bb:06:6f:18: c7:f3:6c:27:03:c7:6b:68:0c:6b:c7:cd:32:7e:bb: 75:eb:b0:79:80:59:c8:de:3b:5d:84:c2:cb:c8:82: 53:1c:65:09:df:2f:b9:f9:a9:cb:d6:a8:08:03:e3: c2:82:52:a3:14:e7:c4:66:11:71:c6:a9:45:d8:c2: 2c:7a:b4:8b:1d:66:4e:ba:da:25:ba:c4:69:da:4d: 09:e9:01:e2:77:35:3b:cf:15:cc:dc:bf:09:d9:39: 72:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:55:E2:CA:35:DA:F0:24:CF:A6:61:F8:1E:0A:D6:82:93:3B:CB:7A X509v3 Authority Key Identifier: keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:66:73:96:96:7b:51:2e:db:0a:5e:c3:3a:c9:a1:47:95:11: 82:9f:46:33:4c:47:4b:90:7d:96:8f:a9:e3:05:d5:0b:4b:7f: 62:07:a7:d5:6d:e6:58:22:1b:31:0a:41:9e:7a:fb:22:9b:9f: 2a:70:0f:9d:74:8e:02:b8:fd:43:61:35:be:15:cb:c5:99:fa: 29:f8:f0:59:dc:5c:f9:31:c3:f7:17:9e:f8:c9:2f:da:5d:5c: 8d:f5:76:e0:14:11:5b:dd:a6:e4:33:0a:dc:08:dc:33:5e:46: 9e:23:6d:d1:70:8d:6e:9b:56:a5:16:ae:b6:51:1b:5a:28:7c: 9e:31:23:26:a3:7c:b1:6f:1e:3b:78:fd:1f:e7:e6:a4:7e:77: c1:37:87:05:d3:47:0d:0f:74:94:3b:2e:4a:bd:5c:d7:b0:47: 53:13:bf:d9:70:4a:49:24:91:2d:08:a6:35:0f:64:7d:e1:e7: 75:af:77:56:ab:93:2a:71:c8:c7:b4:7d:01:64:7c:ec:12:df: 01:7b:eb:06:9b:0e:f5:33:13:25:6d:f2:d3:a3:e2:d7:19:35: 39:40:9c:41:14:b5:7a:68:cf:34:38:bf:da:e2:5f:1e:7d:c3: 66:67:c1:b5:21:b5:8f:b6:0d:01:31:77:54:a7:19:a9:c9:ae: a5:39:25:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QkMxMTAvBgNVBAUTKDRERkVDMzQzN0M5MEJGNDE0RDA1MTg4QjQ4MkM3ODQ4 RTZGMzE2MUIwHhcNMjQxMTIzMDAwMjM5WhcNMjQxMTMwMDAwMjM5WjAYMRYwFAYD VQQDEw02NzQxMWJhMC1hN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcB31/n2QT3Mvh4FOnOiDhoC767keHoNWwFSlTgBwiWdYeqcQHBqxvDP/VcH 87vOiKSSfvhnZWRL1qk/vG3+fPZ+0CKRebgu0wJpCWpAjpOml8hm1NEs0yzd0F/n pFBsajnXmQJy+MV2PY8UrXsL0JR3/2IMDm7w6GU7rixTrhtTHPjaghNrrVIKhOYO LU8c/LC1khwK5rN6Frj2g0s767sGbxjH82wnA8draAxrx80yfrt167B5gFnI3jtd hMLLyIJTHGUJ3y+5+anL1qgIA+PCglKjFOfEZhFxxqlF2MIserSLHWZOutolusRp 2k0J6QHidzU7zxXM3L8J2TlyTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFV4so1 2vAkz6Zh+B4K1oKTO8t6MB8GA1UdIwQYMBaAFE3+w0N8kL9BTQUYi0gseEjm8xYb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRCQy9BOTcwQjJFQzUx QUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYwRk5CUmlMU0N4NFNPYnpG aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RmN0RRM3lRdjBGTkJSaUxTQ3g0U09iekZocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRCQy9BOTcwQjJFQzUxQUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5UXYw Rk5CUmlMU0N4NFNPYnpGaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAZnOWlntRLtsKXsM6yaFHlRGCn0YzTEdLkH2Wj6njBdULS39iB6fV beZYIhsxCkGeevsim58qcA+ddI4CuP1DYTW+FcvFmfop+PBZ3Fz5McP3F574yS/a XVyN9XbgFBFb3abkMwrcCNwzXkaeI23RcI1um1alFq62URtaKHyeMSMmo3yxbx47 eP0f5+akfnfBN4cF00cND3SUOy5KvVzXsEdTE7/ZcEpJJJEtCKY1D2R94ed1r3dW q5MqccjHtH0BZHzsEt8Be+sGmw71MxMlbfLTo+LXGTU5QJxBFLV6aM80OL/a4l8e fcNmZ8G1IbWPtg0BMXdUpxmpya6lOSVQ -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org