$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json) Hash identifier: oKhPDPkMORv6/1U5kL91jYMIC6sVd+l64oZG5YAKLzg= Subject key identifier: FF:71:E7:52:4B:85:F4:A3:15:FC:E8:36:F8:05:7E:38:9F:4B:CD:9F Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft Manifest number: 03EB Signing time: Sat 23 Nov 2024 00:06:24 +0000 Manifest this update: Sat 23 Nov 2024 00:06:23 +0000 Manifest next update: Sat 30 Nov 2024 00:06:23 +0000 Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: OPd0pctUrWc/gZYRy57qm4DHAQMm1ew5Nz1CHuEjgJc=) 2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: jLktry4iXdQWD0/47QB08nrgPUPRx2Qy+Cc/teSX0cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414 Validity Not Before: Nov 23 00:06:23 2024 GMT Not After : Nov 30 00:06:23 2024 GMT Subject: CN=67411c7f-b94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:e4:a7:af:b3:c6:3d:23:47:1c:c6:98:69: be:a3:ea:6e:5e:fc:16:50:db:ac:3e:ca:19:fd:5f: dd:c9:8b:97:6d:34:e7:4c:3b:3a:7c:c1:57:26:7c: fe:de:ac:0e:ef:f5:e4:fc:53:45:c0:3e:a5:15:65: 72:a1:fa:df:89:d4:98:13:04:b3:11:51:20:59:32: 26:91:ed:fa:36:32:30:57:6d:33:c8:c1:14:f8:f4: 43:04:e4:d0:cc:5c:c5:c9:c8:7d:8c:a2:4e:ad:c3: b6:f3:3a:aa:a6:5d:98:44:89:27:88:88:9d:30:5f: c3:ec:31:a1:27:a6:a8:d9:28:8c:ba:cc:36:07:79: 14:42:19:b3:92:2f:68:79:18:b7:7f:08:8f:8e:56: 1e:bb:1d:74:e3:db:6a:72:2d:fd:1d:83:b5:4e:45: a1:3d:ae:22:72:37:70:3a:ad:2f:1e:2b:ca:4e:19: cb:3f:02:e7:b9:d9:8d:87:f1:b2:33:db:35:3f:fe: e8:41:87:dc:f7:fb:75:f5:c3:78:9f:a7:8b:91:d9: 8c:69:f5:23:78:ab:12:15:99:47:fe:57:7a:5c:2e: b3:c4:af:e8:b4:41:10:67:30:5e:7f:db:b0:4c:f7: 58:84:f9:f1:02:90:50:3a:f0:2c:7f:bb:b7:dc:39: 8c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:71:E7:52:4B:85:F4:A3:15:FC:E8:36:F8:05:7E:38:9F:4B:CD:9F X509v3 Authority Key Identifier: keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8f:c4:6a:6f:39:57:f0:ae:90:d6:4c:7f:9a:ea:bb:f0:e5: 91:af:42:db:2b:18:88:9e:26:48:c3:29:2c:ba:a7:8d:c2:46: 08:19:0b:8e:0b:61:38:9e:d8:2e:2c:3f:86:f9:f6:ba:c8:b9: 89:76:ed:ba:cd:4e:14:14:bd:dc:06:73:93:5c:82:b8:42:2f: f7:07:04:65:ee:5a:e4:fd:9d:02:a9:b3:19:89:63:34:a2:c1: 70:17:87:4a:c9:15:92:b7:b4:5a:4f:60:c3:49:91:ff:b4:53: 0f:01:4e:9f:e5:ea:fb:9e:73:57:20:1b:43:9d:d8:a3:aa:50: 36:9b:78:28:e4:f8:f1:ec:ee:02:c6:62:e6:08:07:80:9c:6e: cc:c3:50:68:ce:b6:da:55:98:7c:ad:cf:5d:03:91:9d:82:2f: 18:61:fc:b0:c6:2d:12:63:80:3a:18:26:b0:2e:19:7d:e2:c3: 7a:1e:98:90:0b:3b:7c:ac:27:14:92:07:5d:f2:65:b1:c6:a0: bd:42:f7:a3:58:dd:65:2c:12:4b:ee:ad:0e:1c:c0:eb:02:7a: 15:59:ef:36:97:19:4c:91:aa:9f:61:eb:53:2b:10:bc:48:a5: 0d:80:20:96:47:bd:d9:38:66:e0:a5:34:43:3b:b9:26:8b:c0: 8f:b7:e0:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAxODcxMTAvBgNVBAUTKEI2NDU1NjVDOTMxQjI4NDREMkY3NjBFQUFBQjBFMkFF NEJFMzE0MTQwHhcNMjQxMTIzMDAwNjIzWhcNMjQxMTMwMDAwNjIzWjAYMRYwFAYD VQQDEw02NzQxMWM3Zi1iOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlbkp6+zxj0jRxzGmGm+o+puXvwWUNusPsoZ/V/dyYuXbTTnTDs6fMFXJnz+ 3qwO7/Xk/FNFwD6lFWVyofrfidSYEwSzEVEgWTImke36NjIwV20zyMEU+PRDBOTQ zFzFych9jKJOrcO28zqqpl2YRIkniIidMF/D7DGhJ6ao2SiMusw2B3kUQhmzki9o eRi3fwiPjlYeux1049tqci39HYO1TkWhPa4icjdwOq0vHivKThnLPwLnudmNh/Gy M9s1P/7oQYfc9/t19cN4n6eLkdmMafUjeKsSFZlH/ld6XC6zxK/otEEQZzBef9uw TPdYhPnxApBQOvAsf7u33DmM3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9x51JL hfSjFfzoNvgFfjifS82fMB8GA1UdIwQYMBaAFLZFVlyTGyhE0vdg6qqw4q5L4xQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDE4Ny9GMUUyQTNGODU3 MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktFVFM5MkRxcXJEaXJrdmpG QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrVldYSk1iS0VUUzkyRHFxckRpcmt2akZCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDE4Ny9GMUUyQTNGODU3MUMxMUVDQkI2M0ZFODNDNEY5QUUwMi90a1ZXWEpNYktF VFM5MkRxcXJEaXJrdmpGQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbj8RqbzlX8K6Q1kx/muq78OWRr0LbKxiIniZIwyksuqeNwkYIGQuO C2E4ntguLD+G+fa6yLmJdu26zU4UFL3cBnOTXIK4Qi/3BwRl7lrk/Z0CqbMZiWM0 osFwF4dKyRWSt7RaT2DDSZH/tFMPAU6f5er7nnNXIBtDndijqlA2m3go5Pjx7O4C xmLmCAeAnG7Mw1BozrbaVZh8rc9dA5Gdgi8YYfywxi0SY4A6GCawLhl94sN6HpiQ Czt8rCcUkgdd8mWxxqC9QvejWN1lLBJL7q0OHMDrAnoVWe82lxlMkaqfYetTKxC8 SKUNgCCWR73ZOGbgpTRDO7kmi8CPt+D1 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org