$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft File: tZsFZqgqmDvebfHF3kxYLJvKg5I.mft (raw, json) Hash identifier: 5O1e7k7JtJEOKAztjjm8t5vcWDWSwUtgYt/D9WSlQIc= Subject key identifier: B1:7F:9C:DD:BE:21:0A:17:26:AC:C4:5E:AE:79:4D:95:1B:12:97:7F Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft Manifest number: 0B79 Signing time: Fri 22 Nov 2024 18:51:24 +0000 Manifest this update: Fri 22 Nov 2024 18:51:23 +0000 Manifest next update: Fri 29 Nov 2024 18:51:23 +0000 Files and hashes: 1: tZsFZqgqmDvebfHF3kxYLJvKg5I.crl (hash: why020xfNq90ZTk8J2vFcFBh4MZhv8iFoSuxSACPjQY=) 2: CB46AC50509111EF9E40402FC4F9AE02.roa (hash: K8DXfa2KpJIWwXMiWiou4JA6kdULo74eDG10kFAOey4=) 3: CA822F60509111EF9E40402FC4F9AE02.roa (hash: GIHKrYmqM8MKDjowEs+tYW1CsqN91Pe+ZU5CGo2TAv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Nov 22 18:51:23 2024 GMT Not After : Nov 29 18:51:23 2024 GMT Subject: CN=6740d2ab-3f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:ac:2b:63:10:71:16:b5:e8:da:01:bf:8e: e6:fd:31:0e:30:47:52:f1:bc:85:f9:b1:3e:37:09: 45:0a:6b:68:e5:1c:6d:9c:5c:fe:e2:4b:18:84:cf: 8b:8d:29:d9:ff:78:94:51:77:b7:4a:7a:74:52:36: 59:15:c4:df:bb:12:29:bb:cb:0c:1b:8d:be:47:73: 24:04:0a:61:1d:4a:1f:11:6a:3f:8c:dc:d6:cb:bd: 28:77:bf:77:ee:f6:85:26:29:92:53:78:6e:3c:af: 3b:61:64:ce:37:51:97:02:58:25:49:1e:2a:99:12: 17:2e:ac:1a:a6:48:7d:8f:a3:7a:c7:10:60:ea:5b: bd:85:3f:c8:66:af:21:3f:e2:22:74:e7:bc:7b:b4: 84:48:0b:70:12:7a:d9:e2:6e:75:d0:11:22:8e:2a: c2:a8:92:c7:bd:d8:a3:93:16:d2:82:f2:16:ab:a4: 99:d4:cd:2d:10:2e:ed:15:40:ef:f8:78:79:ec:16: 04:af:0c:44:f5:1e:2b:af:2f:cd:cb:1a:81:a7:6d: 5e:c0:c7:02:90:a2:aa:46:8e:d5:88:44:8a:90:26: ee:87:5b:02:9d:57:01:aa:d0:b4:11:1f:36:6b:9c: 45:10:09:a0:72:54:b2:6a:10:a6:8d:a7:2f:c6:81: 82:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7F:9C:DD:BE:21:0A:17:26:AC:C4:5E:AE:79:4D:95:1B:12:97:7F X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:dd:df:40:d4:a0:30:32:f3:47:71:84:c8:c7:06:da:8e:7b: 25:b2:2d:f1:37:58:cf:ff:e4:b3:9f:08:d7:e3:34:3a:8a:1b: 3e:63:1e:c3:70:93:dd:0d:a8:1d:c9:92:b6:31:dd:a0:d7:92: 6e:bb:78:d6:7c:e9:df:e3:76:62:ae:40:d2:ec:e3:f4:3b:10: 77:ee:95:2c:e6:a0:f1:fd:aa:b0:c7:3c:21:8f:f7:75:df:84: 90:8d:ba:1f:bc:39:94:e9:1b:ac:fe:3e:68:34:76:48:9b:f9: be:0b:00:8f:f1:ff:f3:4d:7e:e4:2e:78:0c:c2:c5:71:58:d1: b3:84:35:22:40:e1:62:07:f8:7e:90:8c:64:d3:39:8a:f9:0d: 12:9c:7c:f5:2f:34:e4:3f:f5:8c:da:cf:f7:9d:23:f0:9d:fc: 58:09:5a:42:97:c4:46:9d:2e:bc:d9:a7:ba:6a:1c:2a:9e:33: b0:a2:36:dd:4d:2f:1e:41:c0:17:b7:80:ad:a5:69:eb:3b:7e: ca:f0:46:44:f4:07:a8:cd:e8:51:66:87:8b:eb:cf:a0:ba:45: 08:6a:a6:6a:37:18:c7:c6:d4:78:03:bc:d3:e2:99:1e:d6:97: 55:6e:64:86:bf:49:83:74:00:b8:3a:c1:2f:40:20:2a:69:9a: ba:26:89:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjQxMTIyMTg1MTIzWhcNMjQxMTI5MTg1MTIzWjAYMRYwFAYD VQQDEw02NzQwZDJhYi0zZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo42sK2MQcRa16NoBv47m/TEOMEdS8byF+bE+NwlFCmto5RxtnFz+4ksYhM+L jSnZ/3iUUXe3Snp0UjZZFcTfuxIpu8sMG42+R3MkBAphHUofEWo/jNzWy70od793 7vaFJimSU3huPK87YWTON1GXAlglSR4qmRIXLqwapkh9j6N6xxBg6lu9hT/IZq8h P+IidOe8e7SESAtwEnrZ4m510BEijirCqJLHvdijkxbSgvIWq6SZ1M0tEC7tFUDv +Hh57BYErwxE9R4rry/NyxqBp21ewMcCkKKqRo7ViESKkCbuh1sCnVcBqtC0ER82 a5xFEAmgclSyahCmjacvxoGC2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLF/nN2+ IQoXJqzEXq55TZUbEpd/MB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxRS9DNzhFNEE3MjFDQTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1E dmViZkhGM2t4WUxKdktnNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF3d9A1KAwMvNHcYTIxwbajnslsi3xN1jP/+SznwjX4zQ6ihs+Yx7D cJPdDagdyZK2Md2g15Juu3jWfOnf43ZirkDS7OP0OxB37pUs5qDx/aqwxzwhj/d1 34SQjbofvDmU6Rus/j5oNHZIm/m+CwCP8f/zTX7kLngMwsVxWNGzhDUiQOFiB/h+ kIxk0zmK+Q0SnHz1LzTkP/WM2s/3nSPwnfxYCVpCl8RGnS682ae6ahwqnjOwojbd TS8eQcAXt4CtpWnrO37K8EZE9AeozehRZoeL68+gukUIaqZqNxjHxtR4A7zT4pke 1pdVbmSGv0mDdAC4OsEvQCAqaZq6JonP -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org