$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft File: T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json) Hash identifier: XalyQ5A25Ho1FUBe/8MKsLH0bjjNMTJeEykmIl+gjsk= Subject key identifier: 0A:73:B2:81:96:38:6A:5E:43:99:2A:0F:02:57:53:6C:E8:DD:DA:37 Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 Certificate issuer: /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Certificate serial: 0C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft Manifest number: 0C1E Signing time: Fri 22 Nov 2024 18:15:32 +0000 Manifest this update: Fri 22 Nov 2024 18:15:31 +0000 Manifest next update: Fri 29 Nov 2024 18:15:31 +0000 Files and hashes: 1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: 05Dedt7SCuXk4HITe5DLLKbRrDQu3FA5HEjCy9AMX9E=) 2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: e3KA8e3Ufpsbkl9pexRMLVRDG3/Nhcl7F6sL/8AP/TA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76 Validity Not Before: Nov 22 18:15:31 2024 GMT Not After : Nov 29 18:15:31 2024 GMT Subject: CN=6740ca43-7937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:8c:14:57:ea:45:41:88:55:3c:36:72:9e: fc:98:29:57:86:ce:1f:6f:9d:5b:05:6e:bc:1f:64: ec:7f:ff:af:33:9e:d3:79:af:ad:c0:9d:ce:1f:8b: d8:2b:f9:c3:d8:c9:8b:35:b6:a2:69:3c:1a:3d:c8: 91:0a:25:d0:b0:19:27:a4:44:d1:ff:23:59:89:8d: eb:fd:fb:dd:ae:93:8b:a3:5b:e9:22:b5:86:f3:6f: af:d1:12:9b:da:fd:5e:1b:54:9a:38:f9:27:7e:89: 4b:43:d9:14:51:66:c7:31:9e:cb:e4:a1:37:b3:9d: f0:91:4b:3e:ce:8f:9c:06:35:00:4d:6c:91:87:5b: 21:97:29:95:2b:e5:5a:87:98:a2:14:ff:8c:c9:5b: da:68:41:a2:37:25:67:98:75:89:f7:9a:87:8d:2b: bc:74:76:e6:bd:7e:aa:a2:30:e5:31:8c:e1:00:26: 58:4e:bc:50:84:ef:99:2b:c8:5a:af:0c:cd:64:0a: 91:f6:04:fb:fd:24:11:6c:a0:6e:fe:a4:09:4c:e9: 2c:22:25:9d:6d:2f:68:35:18:76:cd:24:c5:76:de: 97:f6:0f:9c:f6:ae:9b:ae:e6:e2:b4:38:e0:ba:82: ac:c7:3d:66:c8:e2:62:4b:08:a2:80:d9:57:28:1e: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:73:B2:81:96:38:6A:5E:43:99:2A:0F:02:57:53:6C:E8:DD:DA:37 X509v3 Authority Key Identifier: keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:01:52:02:7d:34:e1:41:ec:c5:ed:93:c9:3f:2c:17:57:7a: 2b:22:16:e3:68:cf:b2:f8:b0:80:f9:09:7c:0d:fd:5b:17:89: 65:42:b8:ee:42:ac:b2:fb:33:41:9a:7e:51:a5:06:36:a0:a3: 0a:6b:5a:2a:b6:20:1a:06:49:ff:7d:80:9b:fc:29:b9:cf:1a: 84:e2:e7:69:89:18:71:58:82:fb:b7:aa:fb:80:ee:0a:6d:dc: 6f:8b:6a:c6:7c:b7:3b:1d:ee:99:86:03:ed:91:30:48:5c:df: d9:82:8b:97:b0:25:5f:1b:92:53:f9:1e:18:56:38:4e:e8:7c: d0:26:4c:04:db:bd:d4:5a:c7:18:b7:ad:57:87:50:ce:f5:cf: f9:d3:2c:e2:4d:e4:e0:42:35:dc:cf:7c:5c:ac:6d:94:aa:86: bc:ae:00:30:86:dd:b0:c1:9a:a0:ce:0c:d2:57:54:05:79:94: 9e:55:f8:2f:71:75:0c:54:a8:1c:b2:5f:59:11:7c:fb:c8:75: b6:83:7b:99:64:fb:96:4d:8d:1d:84:3c:1b:0b:80:18:be:0c: f7:c1:ce:1f:30:e5:b3:49:da:a1:41:30:c8:f9:ba:1b:63:dc: 0b:94:bc:cb:fe:72:18:ed:ed:92:41:53:ed:26:65:e7:0d:7d: ef:4d:be:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzREQUQxMTAvBgNVBAUTKDRGNkIxQzVCNDJCNjFERDVFMjgxOTM5NjdBNzBEMThB MjI4RkVGNzYwHhcNMjQxMTIyMTgxNTMxWhcNMjQxMTI5MTgxNTMxWjAYMRYwFAYD VQQDEw02NzQwY2E0My03OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YGMFFfqRUGIVTw2cp78mClXhs4fb51bBW68H2Tsf/+vM57Tea+twJ3OH4vY K/nD2MmLNbaiaTwaPciRCiXQsBknpETR/yNZiY3r/fvdrpOLo1vpIrWG82+v0RKb 2v1eG1SaOPknfolLQ9kUUWbHMZ7L5KE3s53wkUs+zo+cBjUATWyRh1shlymVK+Va h5iiFP+MyVvaaEGiNyVnmHWJ95qHjSu8dHbmvX6qojDlMYzhACZYTrxQhO+ZK8ha rwzNZAqR9gT7/SQRbKBu/qQJTOksIiWdbS9oNRh2zSTFdt6X9g+c9q6brubitDjg uoKsxz1myOJiSwiigNlXKB6hOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApzsoGW OGpeQ5kqDwJXU2zo3do3MB8GA1UdIwQYMBaAFE9rHFtCth3V4oGTlnpw0Yoij+92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NERBRC9GQzYwRTVCQUY5 NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhkWGlnWk9XZW5EUmlpS1A3 M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Qyc2NXMEsySGRYaWdaT1dlbkRSaWlLUDczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NERBRC9GQzYwRTVCQUY5NTQxMUU5ODAzQkI5NzJDNEY5QUUwMi9UMnNjVzBLMkhk WGlnWk9XZW5EUmlpS1A3M1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUAVICfTThQezF7ZPJPywXV3orIhbjaM+y+LCA+Ql8Df1bF4llQrju Qqyy+zNBmn5RpQY2oKMKa1oqtiAaBkn/fYCb/Cm5zxqE4udpiRhxWIL7t6r7gO4K bdxvi2rGfLc7He6ZhgPtkTBIXN/ZgouXsCVfG5JT+R4YVjhO6HzQJkwE273UWscY t61Xh1DO9c/50yziTeTgQjXcz3xcrG2Uqoa8rgAwht2wwZqgzgzSV1QFeZSeVfgv cXUMVKgcsl9ZEXz7yHW2g3uZZPuWTY0dhDwbC4AYvgz3wc4fMOWzSdqhQTDI+bob Y9wLlLzL/nIY7e2SQVPtJmXnDX3vTb7E -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org