$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft File: tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json) Hash identifier: a+bY+bPL3/QOu/kKKP2OlS4uK1D3PjEMychxrr+5jug= Subject key identifier: 6F:95:D3:AB:A4:35:05:8A:88:BA:65:3E:17:6F:91:DC:F8:3B:D1:2D Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A Certificate issuer: /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft Manifest number: 0A02 Signing time: Fri 22 Nov 2024 19:38:21 +0000 Manifest this update: Fri 22 Nov 2024 19:38:20 +0000 Manifest next update: Fri 29 Nov 2024 19:38:20 +0000 Files and hashes: 1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: jsHdSxp0LqfdDG8fJl+LH47LeFCMKdVKfbxqCPJvTxY=) 2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: 1QYfJcrWIKG5Bwap3NySG0VLE3R8KvxRUMERVeUCCIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A Validity Not Before: Nov 22 19:38:20 2024 GMT Not After : Nov 29 19:38:20 2024 GMT Subject: CN=6740ddad-b4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:2d:cd:d9:1f:fa:8f:79:93:94:8a:95:51: 87:6c:ff:f9:b6:63:14:d1:96:11:55:f1:f8:87:f9: 80:24:55:f5:e6:5d:28:4e:ef:5a:6f:0e:2b:bb:63: 18:49:23:6a:52:9e:e0:be:e1:f3:40:71:95:30:08: 41:0a:c0:b2:f0:b4:55:76:8d:a2:c2:b6:4d:c4:27: 11:37:4c:e0:ea:73:6a:2c:db:2c:c6:cc:29:1f:a5: 71:04:e3:63:5b:e3:d7:a3:0d:02:3a:79:4b:8f:e3: 4f:fc:14:f1:b3:45:19:5f:67:2c:4a:5c:bb:d4:42: 4f:fc:f6:a6:e6:da:00:1a:44:30:fe:d2:c0:ae:03: b7:66:e2:d1:56:eb:77:0d:6c:2c:a7:47:5a:9f:7d: 18:11:25:91:80:c8:92:86:6c:eb:5a:da:79:2d:ac: c4:31:e2:2d:91:93:71:51:76:a8:85:d1:d3:be:64: cc:c9:85:50:7e:d0:4d:e3:b4:e1:e1:6c:75:c3:28: 78:99:de:b5:ff:68:d1:b1:01:ba:67:02:1e:0a:7c: d6:ca:a4:bc:34:b6:80:f1:ed:d8:8d:fb:4d:a7:d0: a4:cf:c5:bc:e6:10:b0:45:ca:41:7a:19:b7:ca:40: 02:82:53:a9:00:e2:e4:89:7d:97:98:f6:ce:23:b7: a9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:95:D3:AB:A4:35:05:8A:88:BA:65:3E:17:6F:91:DC:F8:3B:D1:2D X509v3 Authority Key Identifier: keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e4:81:29:db:e5:63:64:24:39:16:56:d8:69:d8:3f:47:8b: 29:96:72:5e:e6:2e:7c:98:f3:bb:c8:e5:cb:ee:e5:cb:5c:e0: 7a:0f:8d:a0:25:6c:c7:9d:f7:73:31:3c:51:0f:51:09:48:75: 5f:bc:ce:be:bc:9d:c6:10:f2:0d:0a:9c:56:bb:e3:66:f2:31: 9e:fc:c3:29:b6:a6:c3:3c:4b:a4:fb:dc:94:32:e9:9e:a4:e3: 3f:16:f9:a5:7e:2f:48:9e:54:f4:e4:46:c0:5d:9b:2b:4b:22: c0:21:d1:1b:2f:0a:e9:4c:2b:66:30:ac:f5:90:79:5c:5c:a1: b9:40:4b:0e:00:79:95:2f:fd:b5:cb:69:c0:41:90:d3:6b:82: f6:f5:41:31:92:07:31:e9:78:42:67:27:71:3f:aa:89:d5:58: b1:02:0d:1c:ea:15:2e:5e:90:3f:3e:63:60:21:85:12:f5:67: bd:d5:60:08:b3:52:ad:c5:04:4a:fb:60:9c:c5:2b:b7:ef:1d: e4:98:dc:2d:33:93:d5:d1:bd:62:45:31:15:b1:41:6b:0d:03: 46:a9:85:15:e5:0b:a5:b8:f6:77:bc:d6:9d:44:a6:23:b7:71: 82:f8:80:87:db:f8:54:b4:a4:9b:d3:79:00:ee:78:df:db:35: d9:4f:28:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzAxMTAvBgNVBAUTKEI1RDQ2QzBGNzVCQkJGMjQxMTI5OEFFQkQyQjU2MkI1 QUE5NUVDNkEwHhcNMjQxMTIyMTkzODIwWhcNMjQxMTI5MTkzODIwWjAYMRYwFAYD VQQDEw02NzQwZGRhZC1iNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bQtzdkf+o95k5SKlVGHbP/5tmMU0ZYRVfH4h/mAJFX15l0oTu9abw4ru2MY SSNqUp7gvuHzQHGVMAhBCsCy8LRVdo2iwrZNxCcRN0zg6nNqLNssxswpH6VxBONj W+PXow0COnlLj+NP/BTxs0UZX2csSly71EJP/Pam5toAGkQw/tLArgO3ZuLRVut3 DWwsp0dan30YESWRgMiShmzrWtp5LazEMeItkZNxUXaohdHTvmTMyYVQftBN47Th 4Wx1wyh4md61/2jRsQG6ZwIeCnzWyqS8NLaA8e3YjftNp9Ckz8W85hCwRcpBehm3 ykACglOpAOLkiX2XmPbOI7epqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+V06uk NQWKiLplPhdvkdz4O9EtMB8GA1UdIwQYMBaAFLXUbA91u78kESmK69K1YrWqlexq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMC8yOTU0QUJEQzY1 NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5UVJLWXJyMHJWaXRhcVY3 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkUnNEM1c3dnlRUktZcnIwclZpdGFxVjdHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIzMC8yOTU0QUJEQzY1NEUxMUVBOTBDNjM1ODBDNEY5QUUwMi90ZFJzRDNXN3Z5 UVJLWXJyMHJWaXRhcVY3R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs5IEp2+VjZCQ5FlbYadg/R4splnJe5i58mPO7yOXL7uXLXOB6D42g JWzHnfdzMTxRD1EJSHVfvM6+vJ3GEPINCpxWu+Nm8jGe/MMptqbDPEuk+9yUMume pOM/Fvmlfi9InlT05EbAXZsrSyLAIdEbLwrpTCtmMKz1kHlcXKG5QEsOAHmVL/21 y2nAQZDTa4L29UExkgcx6XhCZydxP6qJ1VixAg0c6hUuXpA/PmNgIYUS9We91WAI s1KtxQRK+2CcxSu37x3kmNwtM5PV0b1iRTEVsUFrDQNGqYUV5QuluPZ3vNadRKYj t3GC+ICH2/hUtKSb03kA7njf2zXZTygn -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org