$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft File: tr-xkXvTGlViMihYRudjoUMyymg.mft (raw, json) Hash identifier: PO1Sg1XZy/ErS/EwT2Fo2n32SVKEydlb1C7DADV5SZU= Subject key identifier: 1E:E8:89:35:D6:5E:17:8F:10:DA:A4:35:03:AC:C8:AC:7A:BB:6F:3F Authority key identifier: B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 Certificate issuer: /CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft Manifest number: 04C9 Signing time: Fri 22 Nov 2024 23:21:59 +0000 Manifest this update: Fri 22 Nov 2024 23:21:58 +0000 Manifest next update: Fri 29 Nov 2024 23:21:58 +0000 Files and hashes: 1: tr-xkXvTGlViMihYRudjoUMyymg.crl (hash: FayNE+xUL9aW1cjZR9B7d1lWCgagAR+l3PPcFdCWf44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Validity Not Before: Nov 22 23:21:58 2024 GMT Not After : Nov 29 23:21:58 2024 GMT Subject: CN=67411217-d231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:28:2c:09:f4:82:78:a8:43:6a:fc:74:1a: ed:f5:21:f9:a4:0d:06:d3:a9:93:b7:69:9f:29:6f: b4:2a:a8:d7:00:e3:a2:d3:a2:5f:de:7d:46:f8:5f: c1:84:03:5a:34:16:3c:bc:4d:39:ec:e4:9a:ea:51: d5:7b:4f:10:e3:1d:c7:39:0b:da:03:a9:45:ca:af: 6c:23:d3:ac:7e:33:46:0c:52:e5:93:3d:34:86:a7: 5d:cb:f7:42:8b:ed:5e:44:22:d2:ab:be:01:83:9c: 38:9f:73:82:a4:13:e2:ba:76:6b:9b:2e:dd:c5:f1: b0:c0:e5:57:2a:0b:3d:b2:a1:df:9f:3c:a7:b4:9a: 69:37:a5:89:77:a7:ad:da:b9:f0:e1:b0:48:31:57: 37:87:68:c0:bc:64:10:fb:1c:43:17:5c:2a:ee:50: 73:98:37:bd:7c:b6:42:4c:70:f1:f4:64:0c:df:d5: ee:6d:60:41:6d:72:65:17:76:34:f2:02:fa:e2:08: dd:f8:00:2e:60:e9:bc:47:51:b2:9c:3d:1e:5b:d5: c8:7d:d6:ba:f2:96:cc:b3:03:67:bd:c4:85:79:5b: 96:de:f1:ec:98:b4:21:d6:fe:11:78:92:39:7d:17: 30:35:57:cb:ec:f8:3f:5f:8c:85:85:27:78:f7:eb: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E8:89:35:D6:5E:17:8F:10:DA:A4:35:03:AC:C8:AC:7A:BB:6F:3F X509v3 Authority Key Identifier: keyid:B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:55:51:11:87:5a:86:40:ce:71:78:11:f5:cf:0e:36:0a:09: 3d:62:88:63:e5:1d:06:dc:f4:87:ad:7e:32:10:aa:b6:56:e9: 4a:10:79:59:f0:8d:b8:02:4a:93:5c:65:e7:eb:c0:45:0b:87: 7b:e8:a3:87:44:43:bb:16:25:10:fb:79:6a:ec:f4:f1:a2:17: 94:e9:2c:cc:85:1d:97:eb:1c:5d:2d:43:4f:1b:85:b4:14:06: 6c:3f:2f:65:02:bb:08:a0:fa:07:3d:72:de:2c:11:f3:45:8b: 70:26:1a:14:d9:7b:7d:06:18:53:77:50:49:6b:cb:ec:97:3b: 30:14:80:84:37:de:1f:da:eb:ca:91:bf:d8:99:5a:d0:d9:31: 57:ce:00:e0:68:41:2f:24:6e:df:75:04:09:97:a7:0b:70:98: 85:37:61:e9:24:00:79:21:2a:94:82:2b:9b:24:ca:bc:ca:9c: 9b:6e:31:06:bf:db:7a:16:38:0d:10:22:24:9d:15:5d:83:91: 3b:af:18:27:82:24:ec:ba:7b:f5:37:de:c7:63:fe:98:e6:02: 9c:a5:38:b1:8d:7c:fa:27:61:ee:1a:fe:a0:72:e2:39:1e:2c: bf:d8:be:09:96:99:e2:8c:e0:68:04:bc:6b:91:99:c9:5c:e5: 67:e6:9f:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFNEQxMTAvBgNVBAUTKEI2QkZCMTkxN0JEMzFBNTU2MjMyMjg1ODQ2RTc2M0Ex NDMzMkNBNjgwHhcNMjQxMTIyMjMyMTU4WhcNMjQxMTI5MjMyMTU4WjAYMRYwFAYD VQQDEw02NzQxMTIxNy1kMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrcoLAn0gnioQ2r8dBrt9SH5pA0G06mTt2mfKW+0KqjXAOOi06Jf3n1G+F/B hANaNBY8vE057OSa6lHVe08Q4x3HOQvaA6lFyq9sI9OsfjNGDFLlkz00hqddy/dC i+1eRCLSq74Bg5w4n3OCpBPiunZrmy7dxfGwwOVXKgs9sqHfnzyntJppN6WJd6et 2rnw4bBIMVc3h2jAvGQQ+xxDF1wq7lBzmDe9fLZCTHDx9GQM39XubWBBbXJlF3Y0 8gL64gjd+AAuYOm8R1GynD0eW9XIfda68pbMswNnvcSFeVuW3vHsmLQh1v4ReJI5 fRcwNVfL7Pg/X4yFhSd49+sG9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7oiTXW XhePENqkNQOsyKx6u28/MB8GA1UdIwQYMBaAFLa/sZF70xpVYjIoWEbnY6FDMspo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkU0RC9EM0NDMEQ2NEZC NDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEdsVmlNaWhZUnVkam9VTXl5 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RyLXhrWHZUR2xWaU1paFlSdWRqb1VNeXltZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkU0RC9EM0NDMEQ2NEZCNDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEds VmlNaWhZUnVkam9VTXl5bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlVVERh1qGQM5xeBH1zw42Cgk9Yohj5R0G3PSHrX4yEKq2VulKEHlZ 8I24AkqTXGXn68BFC4d76KOHREO7FiUQ+3lq7PTxoheU6SzMhR2X6xxdLUNPG4W0 FAZsPy9lArsIoPoHPXLeLBHzRYtwJhoU2Xt9BhhTd1BJa8vslzswFICEN94f2uvK kb/YmVrQ2TFXzgDgaEEvJG7fdQQJl6cLcJiFN2HpJAB5ISqUgiubJMq8ypybbjEG v9t6FjgNECIknRVdg5E7rxgngiTsunv1N97HY/6Y5gKcpTixjXz6J2HuGv6gcuI5 Hiy/2L4JlpnijOBoBLxrkZnJXOVn5p+p -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org