$ rpki-client -vvf rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft File: twc6HQnyOiR_zleFKqS4poDG2nA.mft (raw, json) Hash identifier: dNSYXDJT64t4/CVvMhxJE98XsUKe+gzf5At1xGP+LIw= Subject key identifier: 72:3B:71:53:F1:78:96:AB:41:CC:DB:C7:AF:AD:2D:8C:74:74:12:5B Authority key identifier: B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70 Certificate issuer: /CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70 Certificate serial: 32EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft Manifest number: 32EC Signing time: Fri 22 Nov 2024 15:22:54 +0000 Manifest this update: Fri 22 Nov 2024 15:22:54 +0000 Manifest next update: Fri 29 Nov 2024 15:22:54 +0000 Files and hashes: 1: twc6HQnyOiR_zleFKqS4poDG2nA.crl (hash: GTvOUf4HVClhyuoKmsoOmNyT4eSs5S9gOqdulPGToFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13036 (0x32ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E75D/serialNumber=B7073A1D09F23A247FCE57852AA4B8A680C6DA70 Validity Not Before: Nov 22 15:22:54 2024 GMT Not After : Nov 29 15:22:54 2024 GMT Subject: CN=6740a1ce-83fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:e5:51:52:26:21:90:c2:46:d3:44:63:03: a8:59:2f:69:3a:f5:87:2e:21:2b:59:e7:3b:6f:dc: a1:d5:26:3d:1f:1f:09:5d:88:88:47:4c:92:45:a8: e1:37:45:55:09:9e:f7:66:3b:41:82:37:88:1c:e3: c9:b6:08:e2:f6:12:05:29:58:a7:57:ce:c1:3a:ae: 81:08:73:2c:34:4a:c8:ba:be:c6:8c:1f:73:e1:14: c4:fd:13:7d:8c:21:ab:de:c3:1c:6b:f0:f9:f5:27: e2:2f:d1:0a:ad:ed:28:a9:90:ba:2c:5b:5a:94:8c: 70:e1:a3:bd:07:a5:40:f6:c4:f8:eb:9d:2e:64:6e: c3:02:6a:55:18:bf:b5:76:c8:e9:01:46:c6:05:41: 44:4c:63:0f:21:e9:c1:2c:34:c8:8b:c6:2a:65:9b: f1:b9:51:93:c4:73:62:2e:7a:d5:85:69:e7:c5:67: db:62:bd:54:eb:2d:c1:09:8e:a8:0b:68:03:9f:16: d8:59:31:52:c1:96:be:13:de:b3:79:d2:2e:33:0a: b1:15:d7:0b:06:6e:d4:dd:f8:0a:f5:81:55:13:4d: 1b:34:a6:b0:af:37:8e:df:8a:5c:84:ff:6f:b5:22: df:a0:77:3b:8f:13:4a:da:c4:f9:97:52:9a:38:5f: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3B:71:53:F1:78:96:AB:41:CC:DB:C7:AF:AD:2D:8C:74:74:12:5B X509v3 Authority Key Identifier: keyid:B7:07:3A:1D:09:F2:3A:24:7F:CE:57:85:2A:A4:B8:A6:80:C6:DA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twc6HQnyOiR_zleFKqS4poDG2nA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E75D/8602302259F611E2A14BEC382979BB20/twc6HQnyOiR_zleFKqS4poDG2nA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:74:a5:fc:bf:ea:24:c4:6b:c1:1b:8a:1a:79:13:8d:58:5f: 19:ce:88:07:87:74:7c:43:db:be:8c:17:a2:26:ce:18:93:66: 48:ed:52:dc:f8:aa:b7:2c:40:df:9d:d3:92:29:67:9f:84:70: 84:cc:03:ed:fb:7c:69:a9:0f:7e:25:d8:95:7f:b5:f7:cb:b4: 34:d1:e8:3c:80:66:fc:e3:24:a4:af:f1:58:c9:96:e7:0e:79: 4d:16:32:0e:55:dc:1b:97:5c:d1:86:19:08:08:32:b6:33:fd: 6e:67:fb:6b:b4:ef:f1:89:c7:ad:73:c6:97:ca:da:58:1d:cf: cc:e7:8f:7c:91:a0:f3:8c:c5:61:f9:11:b6:95:68:e7:18:4f: 49:cc:90:d6:be:35:ca:7d:27:87:d1:b1:fb:11:53:32:42:b3: 21:ba:fd:17:f5:60:94:2c:65:5d:8b:76:8b:e6:58:fb:65:fb: 95:5f:3f:ed:ff:c8:34:b2:40:b7:cc:c6:9f:b0:69:3b:2e:af: c9:73:42:e2:a8:34:20:b5:b9:bf:2d:23:70:03:13:5e:05:7b: 75:5e:3e:7d:f4:e1:70:f6:83:b6:18:ec:60:37:f4:58:68:bd: 78:76:1f:10:c3:14:12:18:39:09:a5:bd:ee:2f:0d:0b:9a:b8: cc:f4:b3:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3NUQxMTAvBgNVBAUTKEI3MDczQTFEMDlGMjNBMjQ3RkNFNTc4NTJBQTRCOEE2 ODBDNkRBNzAwHhcNMjQxMTIyMTUyMjU0WhcNMjQxMTI5MTUyMjU0WjAYMRYwFAYD VQQDEw02NzQwYTFjZS04M2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW7lUVImIZDCRtNEYwOoWS9pOvWHLiErWec7b9yh1SY9Hx8JXYiIR0ySRajh N0VVCZ73ZjtBgjeIHOPJtgji9hIFKVinV87BOq6BCHMsNErIur7GjB9z4RTE/RN9 jCGr3sMca/D59SfiL9EKre0oqZC6LFtalIxw4aO9B6VA9sT4650uZG7DAmpVGL+1 dsjpAUbGBUFETGMPIenBLDTIi8YqZZvxuVGTxHNiLnrVhWnnxWfbYr1U6y3BCY6o C2gDnxbYWTFSwZa+E96zedIuMwqxFdcLBm7U3fgK9YFVE00bNKawrzeO34pchP9v tSLfoHc7jxNK2sT5l1KaOF/AlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHI7cVPx eJarQczbx6+tLYx0dBJbMB8GA1UdIwQYMBaAFLcHOh0J8jokf85XhSqkuKaAxtpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTc1RC84NjAyMzAyMjU5 RjYxMUUyQTE0QkVDMzgyOTc5QkIyMC90d2M2SFFueU9pUl96bGVGS3FTNHBvREcy bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3YzZIUW55T2lSX3psZUZLcVM0cG9ERzJuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTc1RC84NjAyMzAyMjU5RjYxMUUyQTE0QkVDMzgyOTc5QkIyMC90d2M2SFFueU9p Ul96bGVGS3FTNHBvREcybkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArdKX8v+okxGvBG4oaeRONWF8ZzogHh3R8Q9u+jBeiJs4Yk2ZI7VLc +Kq3LEDfndOSKWefhHCEzAPt+3xpqQ9+JdiVf7X3y7Q00eg8gGb84ySkr/FYyZbn DnlNFjIOVdwbl1zRhhkICDK2M/1uZ/trtO/xicetc8aXytpYHc/M5498kaDzjMVh +RG2lWjnGE9JzJDWvjXKfSeH0bH7EVMyQrMhuv0X9WCULGVdi3aL5lj7ZfuVXz/t /8g0skC3zMafsGk7Lq/Jc0LiqDQgtbm/LSNwAxNeBXt1Xj599OFw9oO2GOxgN/RY aL14dh8QwxQSGDkJpb3uLw0LmrjM9LMW -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org