$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: Rr44D8TK30aovZgieZXxlKqmyPyguuDeoYZzD/psj5s= Subject key identifier: 0D:72:B6:CA:EE:D0:CE:38:B9:2E:04:DD:D8:5F:1E:8A:C4:EF:CF:FB Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 3431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 342B Signing time: Fri 22 Nov 2024 15:08:38 +0000 Manifest this update: Fri 22 Nov 2024 15:08:38 +0000 Manifest next update: Fri 29 Nov 2024 15:08:38 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: LDMdG27Pot3RFQJ7RMOxqs8cXobCWKaM8WwoeCHY3nE=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13361 (0x3431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Nov 22 15:08:38 2024 GMT Not After : Nov 29 15:08:38 2024 GMT Subject: CN=67409e76-f0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:93:bc:b1:75:b1:f1:cd:67:d9:f3:3d:81: 1f:d3:46:bf:bd:d1:0f:25:57:ef:a0:cb:be:7a:e1: d1:da:6f:e3:5c:73:b4:69:8f:9d:0d:8e:bb:75:65: 96:d5:d0:d1:3a:15:06:a1:24:8e:ca:98:67:a6:08: 9c:d0:09:24:85:2b:1b:59:16:55:88:3f:5c:64:cf: 8c:e0:dc:e2:1b:c5:e1:8c:9c:db:4a:35:0d:44:39: ca:89:22:9a:78:eb:e2:b4:ee:56:75:38:1f:ff:2c: e4:f8:59:f6:12:de:40:f1:fd:7b:95:92:58:0c:16: 48:50:6a:af:04:2e:4d:c5:7a:7f:f9:5a:3f:d2:40: bb:79:23:bc:51:0f:e7:73:1c:a6:b8:7a:5b:fa:52: cd:20:a4:c2:8a:6b:78:4d:4e:bd:8a:44:54:2a:1f: 44:db:b9:8b:6b:e2:75:52:a2:5d:c4:c5:4e:70:54: f0:02:58:48:b4:87:f2:fa:3b:d3:3b:9e:da:11:6d: b1:20:12:00:75:f7:bf:6c:a2:97:10:e6:1c:ed:95: c2:52:62:25:c3:ca:b7:fb:81:8f:0d:b4:6c:5c:a6: 1e:82:0e:84:2f:89:5e:0d:c4:a1:cc:72:5c:01:b9: 7d:46:e2:b2:92:18:f1:38:d3:02:37:ae:7d:fd:a4: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:72:B6:CA:EE:D0:CE:38:B9:2E:04:DD:D8:5F:1E:8A:C4:EF:CF:FB X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:fc:ca:3b:bb:8f:31:8e:b1:a8:2b:9b:4c:eb:24:c8:57:bc: c5:86:0e:85:b7:59:e0:c3:65:27:b0:b4:70:62:99:35:9d:22: c9:4a:34:bd:5d:6c:ce:c8:ec:1e:3d:16:13:d2:24:dd:8a:40: 7d:ba:6d:bb:a5:86:8c:dc:4e:f6:e5:08:83:d5:67:29:bd:c3: 70:54:af:14:81:40:60:4a:31:bb:7d:15:f4:b8:21:f2:c5:ec: c1:8e:2a:71:8d:fe:46:0b:b8:a5:32:e8:87:2f:97:4c:ff:80: de:f4:a6:81:42:f3:fd:d9:a1:f3:c1:05:6e:09:24:2d:b6:f9: 90:b6:47:cb:29:22:f1:37:ef:65:ed:52:c2:15:6d:b2:86:a6: e0:42:4d:91:8c:e3:71:bc:f8:e6:e8:6c:9d:13:82:67:0a:b1: 8c:e4:38:d5:16:1c:e2:31:a2:84:e1:97:82:f5:ef:02:de:43: aa:a3:14:75:3c:43:43:d0:60:09:75:db:38:46:ae:b2:f4:48: 40:77:c9:f8:90:1f:38:06:94:78:0e:63:14:63:c1:4b:31:dc: 85:54:98:d3:e0:89:86:40:7c:8a:4f:55:4f:13:da:48:75:ca: c0:46:3b:e8:04:31:c2:b1:f1:27:8f:fd:62:17:a9:0c:18:19: 4a:3f:1a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjQxMTIyMTUwODM4WhcNMjQxMTI5MTUwODM4WjAYMRYwFAYD VQQDEw02NzQwOWU3Ni1mMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD+TvLF1sfHNZ9nzPYEf00a/vdEPJVfvoMu+euHR2m/jXHO0aY+dDY67dWWW 1dDROhUGoSSOyphnpgic0AkkhSsbWRZViD9cZM+M4NziG8XhjJzbSjUNRDnKiSKa eOvitO5WdTgf/yzk+Fn2Et5A8f17lZJYDBZIUGqvBC5NxXp/+Vo/0kC7eSO8UQ/n cxymuHpb+lLNIKTCimt4TU69ikRUKh9E27mLa+J1UqJdxMVOcFTwAlhItIfy+jvT O57aEW2xIBIAdfe/bKKXEOYc7ZXCUmIlw8q3+4GPDbRsXKYegg6EL4leDcShzHJc Abl9RuKykhjxONMCN659/aSDvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1ytsru 0M44uS4E3dhfHorE78/7MB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2/Mo7u48xjrGoK5tM6yTIV7zFhg6Ft1ngw2UnsLRwYpk1nSLJSjS9 XWzOyOwePRYT0iTdikB9um27pYaM3E725QiD1WcpvcNwVK8UgUBgSjG7fRX0uCHy xezBjipxjf5GC7ilMuiHL5dM/4De9KaBQvP92aHzwQVuCSQttvmQtkfLKSLxN+9l 7VLCFW2yhqbgQk2RjONxvPjm6GydE4JnCrGM5DjVFhziMaKE4ZeC9e8C3kOqoxR1 PEND0GAJdds4Rq6y9EhAd8n4kB84BpR4DmMUY8FLMdyFVJjT4ImGQHyKT1VPE9pI dcrARjvoBDHCsfEnj/1iF6kMGBlKPxqm -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org