$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft File: TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json) Hash identifier: KqJg6yTo7EPIvo1TE06VkcSmelJSGxrNYOs78OGvIZ8= Subject key identifier: D3:1A:BD:9D:35:B8:7C:EE:2A:2A:CA:88:BD:F2:0B:9F:14:3B:E5:BE Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 Certificate issuer: /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Certificate serial: 063F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft Manifest number: 063A Signing time: Fri 22 Nov 2024 22:02:47 +0000 Manifest this update: Fri 22 Nov 2024 22:02:47 +0000 Manifest next update: Fri 29 Nov 2024 22:02:47 +0000 Files and hashes: 1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: EPf6i4KRHMFXnPHw02CBHKLzEY82geLlHtxfuHGPvoI=) 2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: W7le14999KEWD+G9NtgkVSRfMfJSgYHx2F5Qt/nqg0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1599 (0x63f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Validity Not Before: Nov 22 22:02:47 2024 GMT Not After : Nov 29 22:02:47 2024 GMT Subject: CN=6740ff87-46dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:1a:ed:cc:e5:76:94:5a:e4:19:df:2f:6b: c0:b9:e0:39:af:94:91:c8:af:ae:07:94:91:a9:7f: cf:8e:53:3e:a5:9e:9d:87:9c:e0:19:d3:1d:2a:e8: 19:fa:d6:76:ce:43:d7:2f:00:77:43:b9:6b:a2:9c: 4f:11:ea:bd:21:63:4a:9d:78:4f:67:d9:79:70:57: 1a:f2:86:1a:94:32:53:61:fb:9f:80:fc:75:0e:f0: 0c:f1:ea:2e:5d:14:c0:a1:97:4d:fb:70:73:66:77: f3:71:76:fe:ec:a4:0a:f7:da:72:57:4b:93:1f:65: e4:98:97:fc:42:37:68:d2:04:42:7d:79:77:41:e3: f8:e0:08:cd:fe:37:ec:7d:c9:1f:04:1a:b9:4b:42: 6b:32:1c:11:af:e8:7d:da:96:d6:3a:71:6e:9b:57: 8a:2e:d1:e9:23:83:33:1d:8b:17:3c:6a:9f:ce:bb: db:7a:c1:9d:0f:c5:b5:6f:54:d7:f8:fa:14:23:bb: 76:de:be:bc:65:6f:d1:36:d5:d0:c2:96:5c:13:e8: c3:78:14:b6:29:ac:6b:eb:ea:0f:ee:33:c5:cd:e8: 1e:c7:58:23:59:35:31:c6:71:97:2b:82:e2:d1:cb: 67:eb:29:58:c9:9b:c1:bb:2e:71:78:95:cd:2d:61: 5c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1A:BD:9D:35:B8:7C:EE:2A:2A:CA:88:BD:F2:0B:9F:14:3B:E5:BE X509v3 Authority Key Identifier: keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:fa:fe:0a:1f:04:43:df:b0:e9:7b:e3:8e:e2:d6:fe:68:ed: 7c:8f:87:79:e7:bd:50:24:d5:1b:29:29:70:2e:b4:5a:28:d6: 52:c5:6b:2f:2b:80:a4:4e:c1:cb:3a:9c:07:f8:91:d6:6b:e8: e4:f4:c7:e3:4d:5e:62:02:a2:a8:49:c7:13:9d:1d:43:4f:d3: 93:f9:1d:4e:a8:16:3c:48:08:d1:63:05:04:93:3d:77:15:64: 6b:fd:d3:9b:8b:cb:d8:8e:44:9d:97:73:c2:09:84:67:01:68: c2:09:7f:00:9a:18:63:cc:7c:d2:ff:c7:54:e5:92:94:c3:f8: f4:f3:bf:e7:d9:12:66:f0:01:58:64:81:57:b8:34:75:a0:11: 68:01:f5:48:a0:5d:fd:60:dd:f6:9e:d3:c7:bc:de:6f:27:96: b7:47:9c:d5:38:1f:53:1b:d0:08:af:05:4a:8a:20:e3:a2:c6: 03:ed:b2:f3:83:c8:8a:4f:63:2a:6b:4a:77:8f:3e:74:56:fe: 91:16:1e:95:9a:14:f3:0a:eb:fc:ac:9c:40:f9:10:35:7e:3d: 9a:df:50:43:38:fe:09:d6:f2:30:fd:cd:a7:0b:07:4e:21:56: 2a:87:78:62:e9:81:ff:8f:8e:42:c9:1f:52:0f:40:e5:db:25: 0f:fd:fe:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRFMDY2NTY2NjIw RUMzMEUyQTcwHhcNMjQxMTIyMjIwMjQ3WhcNMjQxMTI5MjIwMjQ3WjAYMRYwFAYD VQQDEw02NzQwZmY4Ny00NmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0wa7czldpRa5BnfL2vAueA5r5SRyK+uB5SRqX/PjlM+pZ6dh5zgGdMdKugZ +tZ2zkPXLwB3Q7lropxPEeq9IWNKnXhPZ9l5cFca8oYalDJTYfufgPx1DvAM8eou XRTAoZdN+3BzZnfzcXb+7KQK99pyV0uTH2XkmJf8Qjdo0gRCfXl3QeP44AjN/jfs fckfBBq5S0JrMhwRr+h92pbWOnFum1eKLtHpI4MzHYsXPGqfzrvbesGdD8W1b1TX +PoUI7t23r68ZW/RNtXQwpZcE+jDeBS2Kaxr6+oP7jPFzegex1gjWTUxxnGXK4Li 0ctn6ylYyZvBuy5xeJXNLWFcRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMavZ01 uHzuKirKiL3yC58UO+W+MB8GA1UdIwQYMBaAFEwFeeV8nR6UpOPk4GZWZiDsMOKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM0RC9GNEYwNDkxODZC NDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhwU2s0LVRnWmxabUlPd3c0 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVjU1WHlkSHBTazQtVGdabFptSU93dzRxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM0RC9GNEYwNDkxODZCNDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5ZEhw U2s0LVRnWmxabUlPd3c0cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3+v4KHwRD37Dpe+OO4tb+aO18j4d5571QJNUbKSlwLrRaKNZSxWsv K4CkTsHLOpwH+JHWa+jk9MfjTV5iAqKoSccTnR1DT9OT+R1OqBY8SAjRYwUEkz13 FWRr/dObi8vYjkSdl3PCCYRnAWjCCX8AmhhjzHzS/8dU5ZKUw/j087/n2RJm8AFY ZIFXuDR1oBFoAfVIoF39YN32ntPHvN5vJ5a3R5zVOB9TG9AIrwVKiiDjosYD7bLz g8iKT2Mqa0p3jz50Vv6RFh6VmhTzCuv8rJxA+RA1fj2a31BDOP4J1vIw/c2nCwdO IVYqh3hi6YH/j45CyR9SD0Dl2yUP/f42 -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org