$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft File: tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json) Hash identifier: 3h49qmWzGRYXnkPBgcG+dzY1ofUh5hJf6ZK7bsG/NVg= Subject key identifier: C6:F1:60:F1:DB:06:9E:B5:B7:91:62:55:2D:00:A6:31:6E:53:25:8B Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 Certificate issuer: /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft Manifest number: 0107 Signing time: Sat 23 Nov 2024 03:11:26 +0000 Manifest this update: Sat 23 Nov 2024 03:11:26 +0000 Manifest next update: Sat 30 Nov 2024 03:11:26 +0000 Files and hashes: 1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: WA6lN6n4Jrt6HI2A7FcJrrQ+99sCrMbWvQcblf0osXc=) 2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: SF9Y/S/Ql9q4YuiPXmmr85flblCi8Ls3X2BfxxKztwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849 Validity Not Before: Nov 23 03:11:26 2024 GMT Not After : Nov 30 03:11:26 2024 GMT Subject: CN=674147de-b983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:81:4b:28:32:36:ad:38:c3:1b:da:e2:3e: ad:11:03:c4:ec:34:7f:60:31:8b:fd:5d:c4:a8:a2: 3b:53:08:72:5d:7f:9e:c4:ba:5e:97:fb:be:4c:ff: aa:25:06:75:91:da:be:ca:6f:93:2b:2d:e7:1c:89: 4b:40:7c:1d:c9:59:93:dd:a0:f2:1b:88:fa:4b:a8: 00:8f:e2:f7:1a:cd:63:7c:58:d1:f2:4e:fe:9b:c2: 99:05:c0:b9:71:de:e2:4e:6c:dc:68:d9:74:0f:ef: 7c:5a:53:be:7e:74:da:bd:0f:50:ec:e6:50:99:a3: 4c:3e:73:5f:f8:97:45:ca:b5:b2:49:0d:64:06:cf: ff:68:d9:b3:12:51:1e:cf:20:17:f1:48:d7:ae:0b: b5:0a:4e:62:b2:c1:f5:80:d0:c9:2f:a4:65:af:0b: c1:b7:b9:b8:88:d6:b8:45:0f:24:8a:36:89:23:50: 90:fd:06:f1:4b:88:81:1d:18:f7:02:fd:31:97:26: ac:54:39:e7:84:74:79:93:64:b5:e8:4d:2d:1f:b1: 9a:91:a2:69:63:dc:47:24:de:76:85:7a:0c:ec:15: e6:ff:64:12:3c:d2:e7:23:21:4b:25:4f:71:33:9a: dd:e0:72:e6:b8:b1:d9:05:3b:99:ca:1f:3d:e2:29: 8c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F1:60:F1:DB:06:9E:B5:B7:91:62:55:2D:00:A6:31:6E:53:25:8B X509v3 Authority Key Identifier: keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:64:86:62:1b:c3:df:12:df:54:52:49:f8:94:bb:6c:83:49: 58:fb:95:5b:a7:30:24:7a:bd:a5:c1:ae:d6:93:f8:c9:29:c4: 57:9d:13:69:85:2d:ef:89:81:4b:09:85:1a:f7:cf:ce:e2:ca: 65:67:70:2e:aa:6f:dd:40:76:2a:bb:45:93:84:4e:89:f9:c6: 20:bb:45:53:55:b6:1b:16:52:32:5f:76:2e:2a:8b:c8:ba:df: 6d:ee:d4:45:5c:cd:74:01:2f:46:27:c5:af:53:45:05:74:40: 1a:a9:9e:44:ba:c4:80:a1:75:be:23:96:b4:d8:82:d2:07:c6: 37:8e:31:e8:7b:65:6d:31:53:54:f6:21:38:93:4d:88:ee:51: b3:65:c9:9f:0b:52:79:bb:25:2d:68:9b:71:d4:d0:f6:87:c6: a1:17:f1:ce:c6:98:d1:a0:1a:cb:61:8f:77:95:51:46:f6:bf: de:07:9a:8b:a8:0d:7e:de:72:67:20:97:a8:5c:92:12:2a:fe: 6c:db:d3:d6:8c:c7:d1:c3:e9:72:20:38:df:c7:6f:b9:ae:04: 1e:59:2a:77:22:bc:ba:08:fa:d4:bd:f9:12:dd:73:04:59:d6: 47:95:cf:43:75:26:79:63:42:8c:f7:29:c7:41:cd:68:2d:6b: f7:d5:25:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyOTMxMTAvBgNVBAUTKEI0OTg1Nzc0OUI0MzFERjMyMzJGOEQ3QjBCODM5NUE3 MkZGRDE4NDkwHhcNMjQxMTIzMDMxMTI2WhcNMjQxMTMwMDMxMTI2WjAYMRYwFAYD VQQDEw02NzQxNDdkZS1iOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iCBSygyNq04wxva4j6tEQPE7DR/YDGL/V3EqKI7UwhyXX+exLpel/u+TP+q JQZ1kdq+ym+TKy3nHIlLQHwdyVmT3aDyG4j6S6gAj+L3Gs1jfFjR8k7+m8KZBcC5 cd7iTmzcaNl0D+98WlO+fnTavQ9Q7OZQmaNMPnNf+JdFyrWySQ1kBs//aNmzElEe zyAX8UjXrgu1Ck5issH1gNDJL6RlrwvBt7m4iNa4RQ8kijaJI1CQ/QbxS4iBHRj3 Av0xlyasVDnnhHR5k2S16E0tH7GakaJpY9xHJN52hXoM7BXm/2QSPNLnIyFLJU9x M5rd4HLmuLHZBTuZyh894imMvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbxYPHb Bp61t5FiVS0ApjFuUyWLMB8GA1UdIwQYMBaAFLSYV3SbQx3zIy+NewuDlacv/RhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTI5My8yODQxRDkyRTE3 REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhmTWpMNDE3QzRPVnB5XzlH RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RKaFhkSnRESGZNakw0MTdDNE9WcHlfOUdFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTI5My8yODQxRDkyRTE3REMxMUVFODg4MDRBNzFDNEY5QUUwMi90SmhYZEp0REhm TWpMNDE3QzRPVnB5XzlHRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVZIZiG8PfEt9UUkn4lLtsg0lY+5VbpzAker2lwa7Wk/jJKcRXnRNp hS3viYFLCYUa98/O4splZ3Auqm/dQHYqu0WThE6J+cYgu0VTVbYbFlIyX3YuKovI ut9t7tRFXM10AS9GJ8WvU0UFdEAaqZ5EusSAoXW+I5a02ILSB8Y3jjHoe2VtMVNU 9iE4k02I7lGzZcmfC1J5uyUtaJtx1ND2h8ahF/HOxpjRoBrLYY93lVFG9r/eB5qL qA1+3nJnIJeoXJISKv5s29PWjMfRw+lyIDjfx2+5rgQeWSp3Iry6CPrUvfkS3XME WdZHlc9DdSZ5Y0KM9ynHQc1oLWv31SWD -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org