$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft File: TZAcNCU7ylsnTusQaZPe9yCiUqw.mft (raw, json) Hash identifier: mg0KbGJEv9iBbjZLSeLUSS7bT8028rLakJkY1YLOz30= Subject key identifier: FE:73:C8:92:91:E2:F6:8D:32:D3:BD:C2:28:DE:D3:DE:BF:9D:55:A4 Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC Certificate issuer: /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft Manifest number: 0B80 Signing time: Fri 22 Nov 2024 20:41:22 +0000 Manifest this update: Fri 22 Nov 2024 20:41:21 +0000 Manifest next update: Fri 29 Nov 2024 20:41:21 +0000 Files and hashes: 1: TZAcNCU7ylsnTusQaZPe9yCiUqw.crl (hash: fjWAZsTH3Oe2DMneG86tTJDJr+UzNc2+3LpTgso67Hw=) 2: 577B4C026E1911ECBDBB1450C4F9AE02.roa (hash: or6MLiGLkaNfWXwUdz8g8M7TLx5qqBjRuEPQkeKQI98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC Validity Not Before: Nov 22 20:41:21 2024 GMT Not After : Nov 29 20:41:21 2024 GMT Subject: CN=6740ec72-b18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:9c:e6:22:ac:ab:70:f0:fb:56:84:04:6d: 5f:ef:51:69:7f:17:b6:56:dc:c9:ae:ac:ae:a4:c6: 29:12:cd:4d:64:b2:15:3d:96:f3:28:2c:55:63:d5: 64:18:07:df:ec:6b:aa:b8:10:59:2f:77:23:6a:57: 3b:cc:7c:53:d2:51:9a:04:dd:bc:62:3a:ae:ce:3b: b5:2c:af:43:dc:c2:8a:88:20:db:ee:15:ca:37:d7: 78:88:d3:3a:eb:bf:39:b8:ab:50:62:c6:3b:70:94: 7a:f1:3d:a1:8e:cc:e6:5f:7e:70:24:d8:2f:49:7f: da:62:55:13:18:e7:cc:de:2a:aa:7f:55:e8:d7:a4: 25:2c:26:d0:1b:ef:cc:2d:93:ee:40:fb:d0:45:ac: 15:4b:cd:fe:ba:77:fd:fb:f5:19:65:2a:06:d7:ec: c8:b9:66:68:01:cf:38:97:22:fc:e6:1f:7c:88:7d: 88:fe:23:bd:3d:35:83:eb:c9:6e:87:c7:6a:b9:af: 4e:3d:33:3f:ce:59:9d:9a:08:90:80:94:0b:36:38: 3c:92:34:74:a0:a9:32:d6:e9:59:36:1f:f7:d3:77: 4a:e9:33:ff:e7:de:17:58:78:6d:0c:cc:89:9f:c0: 32:7c:27:e9:de:c6:9e:8c:8b:ea:61:9f:cc:97:17: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:73:C8:92:91:E2:F6:8D:32:D3:BD:C2:28:DE:D3:DE:BF:9D:55:A4 X509v3 Authority Key Identifier: keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4d:19:b1:3f:a6:f6:f5:93:ec:d9:8a:c9:07:28:9c:2d:7e: 0a:fe:40:7d:8d:72:38:13:27:d1:88:ed:34:fa:16:b5:a4:c9: c5:63:0b:14:18:1c:83:d5:c8:23:d8:61:d7:16:0d:9a:9f:58: 90:82:ac:77:69:36:24:36:7e:ac:0d:a6:e3:98:c7:ea:e3:f7: 83:0b:92:95:e3:11:1d:08:be:98:10:3a:14:eb:fd:9f:b6:9a: 3c:43:b6:e8:f9:af:3a:44:0c:da:d3:77:6e:52:f3:c9:fe:45: 49:a6:ba:63:ce:7a:83:0b:b3:68:ba:1b:bc:cd:95:2e:f9:be: 74:51:ac:38:5e:44:23:da:f1:47:a0:be:81:2a:76:8b:7f:f0: 14:c0:26:8a:36:24:c0:4c:97:41:4a:18:ff:94:a1:97:3e:12: 06:53:e2:74:9a:da:5e:08:24:b3:36:7f:ec:bd:6b:88:6f:82: f5:ab:02:34:84:bc:e1:e2:14:6f:d5:e6:3f:3c:cd:83:4e:1a: 69:2d:3f:f0:fb:4f:9e:69:fe:08:6f:22:e3:2f:c3:32:39:d9: 1c:80:e1:79:71:e4:4e:b4:8a:c5:83:9b:e4:52:d1:e5:38:98: e8:a7:89:62:32:c5:25:02:2d:96:21:30:0f:5a:cb:94:e8:50: b3:7c:2b:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZBQjIxMTAvBgNVBAUTKDREOTAxQzM0MjUzQkNBNUIyNzRFRUIxMDY5OTNERUY3 MjBBMjUyQUMwHhcNMjQxMTIyMjA0MTIxWhcNMjQxMTI5MjA0MTIxWjAYMRYwFAYD VQQDEw02NzQwZWM3Mi1iMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbGc5iKsq3Dw+1aEBG1f71Fpfxe2VtzJrqyupMYpEs1NZLIVPZbzKCxVY9Vk GAff7GuquBBZL3cjalc7zHxT0lGaBN28Yjquzju1LK9D3MKKiCDb7hXKN9d4iNM6 6785uKtQYsY7cJR68T2hjszmX35wJNgvSX/aYlUTGOfM3iqqf1Xo16QlLCbQG+/M LZPuQPvQRawVS83+unf9+/UZZSoG1+zIuWZoAc84lyL85h98iH2I/iO9PTWD68lu h8dqua9OPTM/zlmdmgiQgJQLNjg8kjR0oKky1ulZNh/303dK6TP/594XWHhtDMyJ n8AyfCfp3saejIvqYZ/MlxcoCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5zyJKR 4vaNMtO9wije096/nVWkMB8GA1UdIwQYMBaAFE2QHDQlO8pbJ07rEGmT3vcgolKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkFCMi8wQUYyRUFBQUNG NzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3lsc25UdXNRYVpQZTl5Q2lV cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaQWNOQ1U3eWxzblR1c1FhWlBlOXlDaVVxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkFCMi8wQUYyRUFBQUNGNzAxMUVBOEFFNTVENDhDNEY5QUUwMi9UWkFjTkNVN3ls c25UdXNRYVpQZTl5Q2lVcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaTRmxP6b29ZPs2YrJByicLX4K/kB9jXI4EyfRiO00+ha1pMnFYwsU GByD1cgj2GHXFg2an1iQgqx3aTYkNn6sDabjmMfq4/eDC5KV4xEdCL6YEDoU6/2f tpo8Q7bo+a86RAza03duUvPJ/kVJprpjznqDC7Nouhu8zZUu+b50Uaw4XkQj2vFH oL6BKnaLf/AUwCaKNiTATJdBShj/lKGXPhIGU+J0mtpeCCSzNn/svWuIb4L1qwI0 hLzh4hRv1eY/PM2DThppLT/w+0+eaf4IbyLjL8MyOdkcgOF5ceROtIrFg5vkUtHl OJjop4liMsUlAi2WITAPWsuU6FCzfCuh -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org