$ rpki-client -vvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft File: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json) Hash identifier: cYq4xvSKBgVl8d8vxHmT+/LeRvkTs5HY5ryqlJBpg+4= Subject key identifier: B3:03:89:69:B0:DC:5D:BA:20:97:DC:E5:9C:6B:39:1C:77:7C:9B:BE Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 Certificate issuer: /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Certificate serial: 0BE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft Manifest number: 0BD7 Signing time: Fri 22 Nov 2024 18:31:58 +0000 Manifest this update: Fri 22 Nov 2024 18:31:58 +0000 Manifest next update: Fri 29 Nov 2024 18:31:58 +0000 Files and hashes: 1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: 4uQzigEhH8wP04mJ9I+vLB8e+cvIaiw1JP/ml06Vj1w=) 2: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: KL0M4+3g2XqaVfbxusGBlTatgRMPvE5PObd0k3ZOEWQ=) 3: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: jPudNDyIs3wFcHG4KdMHyID890yLUJflYHvhMrNI58g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3046 (0xbe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040 Validity Not Before: Nov 22 18:31:58 2024 GMT Not After : Nov 29 18:31:58 2024 GMT Subject: CN=6740ce1e-aa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:35:2d:9d:bc:79:35:a2:2a:df:84:1c:f3:1b: 9e:ec:5e:05:f6:17:1d:c0:76:d1:5d:2e:e6:b2:34: 8b:f2:ab:df:15:65:9d:fd:79:2f:71:be:62:b0:b3: 85:0c:eb:8f:0a:ad:d0:f7:b8:8d:7d:f3:43:05:b7: 65:e9:89:c1:91:d4:e5:91:a0:cc:16:90:b5:be:9a: af:74:b9:ca:c1:4e:e6:cb:2d:c2:88:99:8b:2f:e9: eb:0a:2b:9c:58:4b:57:9b:b7:90:8a:22:c4:64:26: e1:84:5f:2f:fc:e3:46:d9:27:36:7f:28:a4:a5:ee: 66:c0:56:0e:ab:90:25:12:f9:b0:64:ac:7d:76:4d: 28:94:dd:b7:e3:29:07:e6:b9:61:09:35:be:c3:25: 88:72:8e:a3:e5:2c:3a:6c:e8:b1:80:b8:7e:31:17: 6d:2e:dc:42:79:73:8d:40:d1:67:0c:90:3e:94:01: 56:9c:48:e1:46:40:c7:f9:5d:9c:49:ac:00:24:a9: ba:04:e5:2d:9c:0f:6c:c1:40:ed:95:3e:25:0d:25: 55:b3:86:19:01:33:bd:27:43:9a:59:fd:77:18:18: 80:84:96:3c:a3:53:d9:26:97:8b:3d:9a:8f:4b:1c: b6:1c:3f:b8:2c:14:d5:cc:c9:34:69:c7:b5:5d:1d: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:03:89:69:B0:DC:5D:BA:20:97:DC:E5:9C:6B:39:1C:77:7C:9B:BE X509v3 Authority Key Identifier: keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:79:6c:ea:fd:9c:86:04:5b:1e:b1:d4:35:db:57:8e:3a:c0: 45:1b:34:7f:62:a7:14:6d:10:8c:76:4b:4d:e8:56:95:5e:7b: 30:2b:91:ba:99:05:2c:61:86:a8:8a:2a:16:c4:af:5b:05:85: 0b:90:ac:3d:dd:79:72:3a:60:90:ec:95:b1:3e:62:fa:ee:a4: 2f:ea:81:40:47:eb:49:4d:81:27:74:83:cc:3e:29:6e:bb:32: 60:e5:ee:fe:ef:f2:71:fd:d4:b1:91:38:89:c0:75:51:41:32: 16:7a:cc:21:d4:0d:1e:21:3c:c1:99:e2:d5:00:b5:9f:71:90: fb:93:d4:38:b3:2e:84:42:6f:7f:5f:83:ec:e5:54:41:89:f6: ff:5c:62:b2:95:cb:b5:13:2b:c6:65:9b:7d:56:00:af:60:f7: 52:31:37:1f:7a:35:e8:8d:7e:1e:bf:f4:5b:42:ab:73:79:4f: bc:4b:20:67:43:d9:65:d5:97:f5:b7:22:b5:7c:cb:40:c1:b5: 78:b7:2a:04:fd:51:e4:22:de:fa:1e:40:87:83:1f:c9:56:85: 24:3e:c1:e3:c1:56:66:e2:e1:b7:9a:98:f8:b4:56:c3:e9:a7: 58:0a:73:5f:9f:09:41:64:f1:c9:d9:6f:59:1f:94:36:c1:6a: 1f:31:2c:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0QUQxMTAvBgNVBAUTKDRENzZGNzkzRTJCMTI5RjQ2RjhGQzkwRTIxRjlEMEZF QUYxMEQwNDAwHhcNMjQxMTIyMTgzMTU4WhcNMjQxMTI5MTgzMTU4WjAYMRYwFAYD VQQDEw02NzQwY2UxZS1hYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTUtnbx5NaIq34Qc8xue7F4F9hcdwHbRXS7msjSL8qvfFWWd/Xkvcb5isLOF DOuPCq3Q97iNffNDBbdl6YnBkdTlkaDMFpC1vpqvdLnKwU7myy3CiJmLL+nrCiuc WEtXm7eQiiLEZCbhhF8v/ONG2Sc2fyikpe5mwFYOq5AlEvmwZKx9dk0olN234ykH 5rlhCTW+wyWIco6j5Sw6bOixgLh+MRdtLtxCeXONQNFnDJA+lAFWnEjhRkDH+V2c SawAJKm6BOUtnA9swUDtlT4lDSVVs4YZATO9J0OaWf13GBiAhJY8o1PZJpeLPZqP Sxy2HD+4LBTVzMk0ace1XR2sjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMDiWmw 3F26IJfc5ZxrORx3fJu+MB8GA1UdIwQYMBaAFE1295PisSn0b4/JDiH50P6vENBA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzRBRC8wREU0QUQwNDA4 RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtmUnZqOGtPSWZuUV9xOFEw RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYYjNrLUt4S2ZSdmo4a09JZm5RX3E4UTBFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzRBRC8wREU0QUQwNDA4RkUxMUVBOTgzM0M1NzhDNEY5QUUwMi9UWGIzay1LeEtm UnZqOGtPSWZuUV9xOFEwRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATeWzq/ZyGBFsesdQ121eOOsBFGzR/YqcUbRCMdktN6FaVXnswK5G6 mQUsYYaoiioWxK9bBYULkKw93XlyOmCQ7JWxPmL67qQv6oFAR+tJTYEndIPMPilu uzJg5e7+7/Jx/dSxkTiJwHVRQTIWeswh1A0eITzBmeLVALWfcZD7k9Q4sy6EQm9/ X4Ps5VRBifb/XGKylcu1EyvGZZt9VgCvYPdSMTcfejXojX4ev/RbQqtzeU+8SyBn Q9ll1Zf1tyK1fMtAwbV4tyoE/VHkIt76HkCHgx/JVoUkPsHjwVZm4uG3mpj4tFbD 6adYCnNfnwlBZPHJ2W9ZH5Q2wWofMSyk -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org