$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft File: tTRQOC5F-KPX1ikQ83nHidFH_7A.mft (raw, json) Hash identifier: wKwRl9zKf8gv/n6Sj1DvPmqQiHHzbnGd2xQfb/xqieI= Subject key identifier: BB:EF:74:C9:7D:B2:CC:08:D2:55:98:42:F3:40:B4:1C:36:E1:C4:79 Authority key identifier: B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 Certificate issuer: /CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft Manifest number: 017C Signing time: Sat 23 Nov 2024 02:07:12 +0000 Manifest this update: Sat 23 Nov 2024 02:07:11 +0000 Manifest next update: Sat 30 Nov 2024 02:07:11 +0000 Files and hashes: 1: tTRQOC5F-KPX1ikQ83nHidFH_7A.crl (hash: gwP3saFhg+etw2FVKVsptMP3R1lTrPFAlc5xuwt3p5U=) 2: 61B47D886B5211EDB97A2834C4F9AE02.roa (hash: SkncgeBbiv/lu2mdnjdJvGjNCM0sgqD2W+tqKeNRWjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA83/serialNumber=B53450382E45F8A3D7D62910F379C789D147FFB0 Validity Not Before: Nov 23 02:07:11 2024 GMT Not After : Nov 30 02:07:11 2024 GMT Subject: CN=674138cf-8784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:08:57:1f:f9:92:80:a0:45:9b:91:14:5f: 44:41:7d:d9:b9:0d:20:f9:7f:13:6a:0b:5e:43:d2: 6a:82:b6:a7:40:51:d1:e9:d3:5f:dc:49:13:bd:82: 28:58:19:54:24:1f:80:b7:bd:be:1f:30:43:b7:79: dc:c0:c8:6d:d6:e4:d4:4b:22:b7:a1:93:9e:b6:30: 41:c1:58:0b:d3:81:47:1e:52:5a:10:84:05:40:6a: b8:b6:b4:32:25:45:93:cb:07:d8:3c:4a:dd:97:3f: 58:03:a1:37:79:8e:cd:a3:f2:22:6a:14:a5:ff:fd: 39:ce:84:96:a8:05:2b:f1:19:1c:22:36:4d:43:54: 27:8e:45:44:9e:74:41:1c:d5:d0:6b:1a:e7:6d:a5: fa:95:d4:74:16:b1:13:97:11:6f:49:71:11:75:48: c8:28:42:c2:75:49:29:3b:92:f0:70:f1:df:4f:fa: 0b:1b:ff:21:a9:c0:cb:55:75:08:14:c8:13:d9:8e: c3:5c:2a:83:3f:4e:d1:01:f2:22:e4:06:b0:74:23: e1:43:c0:87:6f:42:12:3b:fb:c0:0f:00:90:44:34: a6:f4:48:81:f9:c2:a4:2f:bc:74:d7:82:08:75:40: 1c:db:df:22:32:51:73:6a:22:ca:8f:38:83:d3:cc: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EF:74:C9:7D:B2:CC:08:D2:55:98:42:F3:40:B4:1C:36:E1:C4:79 X509v3 Authority Key Identifier: keyid:B5:34:50:38:2E:45:F8:A3:D7:D6:29:10:F3:79:C7:89:D1:47:FF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTRQOC5F-KPX1ikQ83nHidFH_7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA83/64AF80026B3211EDB4ECB768C4F9AE02/tTRQOC5F-KPX1ikQ83nHidFH_7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:89:e7:85:92:33:6c:a8:fd:a2:4a:49:64:64:bb:f7:21:22: 53:17:61:4a:b7:a4:e7:e1:4e:b4:94:4b:d2:b0:b0:f1:f2:cf: 90:65:06:99:a6:67:e3:b2:1e:97:79:82:1b:2d:9b:8a:ea:52: 68:d1:6c:18:18:8e:8f:67:6c:22:69:0e:7f:5d:4d:b0:95:1d: 21:54:cb:e1:c7:e9:d2:42:14:54:ed:12:6d:05:4d:b5:91:fe: 54:4f:48:8f:44:09:71:ce:12:55:14:60:73:21:e4:92:7c:9d: ae:af:0f:f0:eb:f5:d6:ef:e1:58:92:63:5c:48:ad:b2:72:22: 56:79:f4:ab:db:cb:3c:3d:0b:80:0b:21:ec:9e:51:70:7d:7e: 0e:05:ac:cb:42:22:6c:73:97:34:02:26:18:61:df:68:f5:21: 20:be:fa:f8:6d:81:8e:77:90:75:4f:b4:60:24:81:35:91:93: a7:0a:97:50:60:45:46:bc:ac:bb:14:b8:e0:0e:ea:ef:42:ba: 75:2c:79:17:d2:d0:9f:bf:f8:53:55:22:c2:d4:5b:c1:d9:06: e1:a9:a7:b6:cf:c2:57:65:7a:8b:48:d7:95:9d:ae:56:55:11: c9:fc:87:f5:78:2e:79:79:61:58:70:78:78:37:4a:cf:27:0e: a1:2f:7b:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBODMxMTAvBgNVBAUTKEI1MzQ1MDM4MkU0NUY4QTNEN0Q2MjkxMEYzNzlDNzg5 RDE0N0ZGQjAwHhcNMjQxMTIzMDIwNzExWhcNMjQxMTMwMDIwNzExWjAYMRYwFAYD VQQDEw02NzQxMzhjZi04Nzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF0IVx/5koCgRZuRFF9EQX3ZuQ0g+X8TagteQ9JqgranQFHR6dNf3EkTvYIo WBlUJB+At72+HzBDt3ncwMht1uTUSyK3oZOetjBBwVgL04FHHlJaEIQFQGq4trQy JUWTywfYPErdlz9YA6E3eY7No/IiahSl//05zoSWqAUr8RkcIjZNQ1QnjkVEnnRB HNXQaxrnbaX6ldR0FrETlxFvSXERdUjIKELCdUkpO5LwcPHfT/oLG/8hqcDLVXUI FMgT2Y7DXCqDP07RAfIi5AawdCPhQ8CHb0ISO/vADwCQRDSm9EiB+cKkL7x014II dUAc298iMlFzaiLKjziD08w16QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvvdMl9 sswI0lWYQvNAtBw24cR5MB8GA1UdIwQYMBaAFLU0UDguRfij19YpEPN5x4nRR/+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkE4My82NEFGODAwMjZC MzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1LUFgxaWtRODNuSGlkRkhf N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUUlFPQzVGLUtQWDFpa1E4M25IaWRGSF83QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkE4My82NEFGODAwMjZCMzIxMUVEQjRFQ0I3NjhDNEY5QUUwMi90VFJRT0M1Ri1L UFgxaWtRODNuSGlkRkhfN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUieeFkjNsqP2iSklkZLv3ISJTF2FKt6Tn4U60lEvSsLDx8s+QZQaZ pmfjsh6XeYIbLZuK6lJo0WwYGI6PZ2wiaQ5/XU2wlR0hVMvhx+nSQhRU7RJtBU21 kf5UT0iPRAlxzhJVFGBzIeSSfJ2urw/w6/XW7+FYkmNcSK2yciJWefSr28s8PQuA CyHsnlFwfX4OBazLQiJsc5c0AiYYYd9o9SEgvvr4bYGOd5B1T7RgJIE1kZOnCpdQ YEVGvKy7FLjgDurvQrp1LHkX0tCfv/hTVSLC1FvB2Qbhqae2z8JXZXqLSNeVna5W VRHJ/If1eC55eWFYcHh4N0rPJw6hL3tX -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org