$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: mTsiSo7Khby+mHfAUbPASzHiLhQKwXfdAZmBaJ4FF3w= Subject key identifier: B5:41:45:5B:9C:05:64:20:38:67:8F:03:68:71:AC:0F:C1:3F:66:58 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 0668 Signing time: Fri 22 Nov 2024 21:57:19 +0000 Manifest this update: Fri 22 Nov 2024 21:57:18 +0000 Manifest next update: Fri 29 Nov 2024 21:57:18 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: DqWVzbV3PR/sqUuW09Ay6kZRND1VQXxQ2+/W35Z8Xg4=) 2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: 1vEsPhJeWhyQnwIKIqzXbxZ8WupHgagiJnru+3AAu00=) 3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: 4a2Znm17VSWHd8khdAf4BuKRqz28wksMetktUiXFduo=) 4: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: bN12kEkjlZla1N4j83RN6VmsHaTj7ZlEyR5tAFv0M0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Nov 22 21:57:18 2024 GMT Not After : Nov 29 21:57:18 2024 GMT Subject: CN=6740fe3e-e536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:2b:26:00:95:70:4c:f7:11:52:a0:e9:d4: b9:2c:2d:1f:40:0c:9e:b9:50:2a:9a:64:e8:54:94: 28:eb:1b:9d:28:f2:81:37:39:5a:3a:5f:3e:ce:ab: 41:89:68:1e:75:dd:4e:82:0d:bf:e9:b2:20:69:fb: 17:dc:ed:6d:66:5d:6b:ca:2a:d2:74:0a:5b:67:fa: cf:96:70:e3:38:cd:da:e0:dd:68:43:12:81:2e:1f: 93:3c:05:a8:56:62:48:2b:0b:9f:77:1a:ba:99:dc: 2f:5d:2d:4a:fd:7d:df:c9:81:0f:06:f6:4b:34:e1: 95:d3:56:c9:16:eb:c7:a9:dd:c0:fb:d0:c3:44:66: 0f:e9:a6:a3:2f:29:ff:dd:0e:34:9d:e1:d8:e9:8f: f0:16:a2:3f:40:64:b4:a7:ce:06:48:dd:99:13:5f: aa:2f:f1:31:7e:6d:bf:eb:93:8a:33:a6:8c:de:e6: a5:25:26:0e:7d:3e:6d:69:63:cb:db:75:2b:2b:98: 1a:d4:59:d9:83:6f:4f:33:6f:78:44:f1:88:6d:b7: fb:b2:dc:32:35:49:25:79:08:94:ef:98:1a:c0:e7: db:ab:74:7b:92:66:f2:ee:bd:24:af:b8:6e:75:e1: 21:11:98:45:00:45:c0:b4:b9:8e:76:12:16:03:50: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:41:45:5B:9C:05:64:20:38:67:8F:03:68:71:AC:0F:C1:3F:66:58 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8a:d5:a4:9d:16:63:60:c1:ac:67:f6:12:00:0d:8a:0d:1e: 4e:05:25:23:ea:28:4d:99:a9:f4:83:6e:11:50:ad:64:f5:d8: 30:53:7b:62:54:1b:53:af:bc:8f:eb:83:67:33:c6:23:66:09: 1f:41:2a:23:71:bf:73:90:21:55:f4:9e:b7:71:40:d3:3d:26: cf:7e:00:9f:b7:e9:23:e1:2c:77:79:b3:07:5d:04:30:e1:a9: 62:01:4c:00:f1:ba:ce:68:c3:4b:75:a2:d2:dc:1d:77:b1:9d: ab:8d:d5:d5:4d:52:ef:69:76:c6:ad:2d:f7:fa:78:e5:9c:71: 51:84:14:c6:ba:9e:59:da:ea:31:bb:94:c2:de:2c:d6:f9:45: 36:bf:13:b9:dc:fa:5b:b1:dd:01:2b:af:f8:76:88:ce:d9:62: cf:43:b3:63:d3:63:ac:87:82:6c:74:3c:03:08:66:bb:05:e0: b5:58:a7:2a:a3:44:0d:1e:bc:b3:5c:19:01:82:a2:ea:76:ab: 7f:1a:b1:44:65:ae:67:0a:c0:99:b2:4f:e3:6a:94:82:bc:78: f3:fb:ff:60:7e:71:2f:a5:b5:39:6a:41:7a:17:a0:1e:e5:9d: d8:b0:0c:61:db:06:42:71:01:4d:95:18:a9:7e:70:8c:91:e0: 39:36:02:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjQxMTIyMjE1NzE4WhcNMjQxMTI5MjE1NzE4WjAYMRYwFAYD VQQDEw02NzQwZmUzZS1lNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVYrJgCVcEz3EVKg6dS5LC0fQAyeuVAqmmToVJQo6xudKPKBNzlaOl8+zqtB iWgedd1Ogg2/6bIgafsX3O1tZl1ryirSdApbZ/rPlnDjOM3a4N1oQxKBLh+TPAWo VmJIKwufdxq6mdwvXS1K/X3fyYEPBvZLNOGV01bJFuvHqd3A+9DDRGYP6aajLyn/ 3Q40neHY6Y/wFqI/QGS0p84GSN2ZE1+qL/Exfm2/65OKM6aM3ualJSYOfT5taWPL 23UrK5ga1FnZg29PM294RPGIbbf7stwyNUkleQiU75gawOfbq3R7kmby7r0kr7hu deEhEZhFAEXAtLmOdhIWA1DG6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVBRVuc BWQgOGePA2hxrA/BP2ZYMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4itWknRZjYMGsZ/YSAA2KDR5OBSUj6ihNman0g24RUK1k9dgwU3ti VBtTr7yP64NnM8YjZgkfQSojcb9zkCFV9J63cUDTPSbPfgCft+kj4Sx3ebMHXQQw 4aliAUwA8brOaMNLdaLS3B13sZ2rjdXVTVLvaXbGrS33+njlnHFRhBTGup5Z2uox u5TC3izW+UU2vxO53Ppbsd0BK6/4dojO2WLPQ7Nj02Osh4JsdDwDCGa7BeC1WKcq o0QNHryzXBkBgqLqdqt/GrFEZa5nCsCZsk/japSCvHjz+/9gfnEvpbU5akF6F6Ae 5Z3YsAxh2wZCcQFNlRipfnCMkeA5NgIz -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org