$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft File: tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json) Hash identifier: o9P6jK4I7z62ME68JIBMabB+p1YAPbuD8I/m7BfzzKY= Subject key identifier: C5:E3:64:7D:98:36:3B:B5:46:36:55:8F:4C:5E:24:5C:5A:7C:17:25 Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft Manifest number: 04B4 Signing time: Fri 22 Nov 2024 23:29:27 +0000 Manifest this update: Fri 22 Nov 2024 23:29:27 +0000 Manifest next update: Fri 29 Nov 2024 23:29:27 +0000 Files and hashes: 1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: paTSCuOjLZr3lbu6KqZb2sTuk9yA9aHICkhppX+g/lo=) 2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=) 3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: La5FvOPI2E2R6GVCVJ+J2lxP1YUFPxCtd2lubZQviSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A Validity Not Before: Nov 22 23:29:27 2024 GMT Not After : Nov 29 23:29:27 2024 GMT Subject: CN=674113d7-a30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:33:ea:85:4c:c2:cd:97:ff:e9:16:ad:fb: 88:cd:f9:7c:fe:cc:8a:b9:d6:56:aa:22:d4:1e:06: 08:a7:c8:bf:78:1c:6d:4d:a3:a7:27:39:a4:43:f3: 45:92:4e:19:08:66:b3:4f:02:c2:39:23:1f:60:f5: 7c:89:c6:fb:86:99:5b:64:9c:c5:3f:44:81:4f:69: d4:ed:0c:a8:2a:fe:ab:d9:36:19:03:2f:15:0a:24: 6e:e6:cb:1d:38:73:c5:7f:1e:1d:07:e4:4b:28:4a: 8e:11:38:33:5e:8c:33:29:18:10:03:ec:52:7d:2a: 1c:e6:91:d6:a7:11:82:4c:f3:1c:d1:91:7a:ae:e1: 0a:27:5d:70:28:44:cb:39:f3:1f:c3:78:88:a9:ec: 80:a1:cd:61:e7:35:b1:b9:40:9d:40:9f:b4:56:84: 3d:ae:83:a7:8b:c9:60:0c:3f:6c:ee:26:3f:d6:31: b2:f3:e8:cf:e6:50:31:03:09:8f:eb:4d:fd:e8:f8: e4:49:86:a2:ce:b0:d9:6b:f2:45:e1:64:7a:84:f6: af:b1:28:f8:06:16:7a:5b:20:e2:0d:a8:ef:52:d5: 3e:c9:f4:07:59:54:9a:a1:be:46:bf:40:0f:6a:1d: e6:b6:a9:74:bc:ae:0c:eb:5b:40:b8:0d:4a:63:88: 5c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E3:64:7D:98:36:3B:B5:46:36:55:8F:4C:5E:24:5C:5A:7C:17:25 X509v3 Authority Key Identifier: keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:38:c6:f0:f9:19:6a:1c:56:84:85:37:1d:ee:7a:b5:88:a9: 3e:5f:f6:36:bb:ed:c8:70:f9:0d:15:e5:63:7f:4b:ff:39:6f: 0b:d4:2d:33:09:12:e5:41:e6:48:b5:67:16:14:56:7b:2f:d2: 73:8c:c0:71:3c:4a:78:0c:d3:ff:de:c9:a2:90:53:1c:16:45: 74:63:b9:cc:03:0d:43:b3:44:ad:c4:3a:b7:1c:a2:c5:af:7a: 70:3f:f4:0e:6e:d2:03:2d:9b:ca:f6:72:c2:4a:68:9a:99:63: 44:79:f5:99:32:d4:91:8b:00:eb:49:f8:99:cc:34:6a:f3:fb: 01:82:f0:dd:a1:d0:1b:e1:0a:3c:e4:51:cb:f3:8e:4e:6f:bf: 2f:2a:bf:7d:cf:f7:45:3d:48:a1:09:23:91:4f:94:d1:60:77: 36:06:4b:7b:33:7b:c8:09:98:40:95:4e:50:df:fb:11:bf:31: ac:4b:d2:3f:28:47:00:c8:16:b7:f7:f5:b4:c5:d5:83:0a:0a: 1f:0c:8b:e3:90:8f:fb:60:a8:4e:11:0e:b3:7d:62:dd:84:6a: 54:96:4b:cd:d0:a4:cb:f8:6f:df:51:94:20:d3:71:93:71:13: 5e:e8:60:d8:6f:08:9e:22:59:b1:68:e7:db:00:18:47:99:97: a6:12:a8:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw MUQwREJBMkEwHhcNMjQxMTIyMjMyOTI3WhcNMjQxMTI5MjMyOTI3WjAYMRYwFAYD VQQDEw02NzQxMTNkNy1hMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoA4z6oVMws2X/+kWrfuIzfl8/syKudZWqiLUHgYIp8i/eBxtTaOnJzmkQ/NF kk4ZCGazTwLCOSMfYPV8icb7hplbZJzFP0SBT2nU7QyoKv6r2TYZAy8VCiRu5ssd OHPFfx4dB+RLKEqOETgzXowzKRgQA+xSfSoc5pHWpxGCTPMc0ZF6ruEKJ11wKETL OfMfw3iIqeyAoc1h5zWxuUCdQJ+0VoQ9roOni8lgDD9s7iY/1jGy8+jP5lAxAwmP 60396PjkSYaizrDZa/JF4WR6hPavsSj4BhZ6WyDiDajvUtU+yfQHWVSaob5Gv0AP ah3mtql0vK4M61tAuA1KY4hcMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXjZH2Y Nju1RjZVj0xeJFxafBclMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51 aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmOMbw+RlqHFaEhTcd7nq1iKk+X/Y2u+3IcPkNFeVjf0v/OW8L1C0z CRLlQeZItWcWFFZ7L9JzjMBxPEp4DNP/3smikFMcFkV0Y7nMAw1Ds0StxDq3HKLF r3pwP/QObtIDLZvK9nLCSmiamWNEefWZMtSRiwDrSfiZzDRq8/sBgvDdodAb4Qo8 5FHL845Ob78vKr99z/dFPUihCSORT5TRYHc2Bkt7M3vICZhAlU5Q3/sRvzGsS9I/ KEcAyBa39/W0xdWDCgofDIvjkI/7YKhOEQ6zfWLdhGpUlkvN0KTL+G/fUZQg03GT cRNe6GDYbwieIlmxaOfbABhHmZemEqhk -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org