$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: 6pyL83G3Ms+1sDlpQJPiU08c3xrXHhRsrv93iUTUiic= Subject key identifier: 9D:57:54:49:95:15:75:DC:CF:6C:A6:D5:F3:1D:34:68:86:A3:C4:0D Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 278D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 2778 Signing time: Sun 24 Nov 2024 15:33:02 +0000 Manifest this update: Sun 24 Nov 2024 15:33:01 +0000 Manifest next update: Sun 01 Dec 2024 15:33:01 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: dJWLJOhQ9g22bsiTteTJ6we+6UMYbM5BTV+gzb6A1J4=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: c1eWaKTgL9+AH+cc5xMKE7jFxnzkuE21gtTwanMOgV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10125 (0x278d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Nov 24 15:33:01 2024 GMT Not After : Dec 1 15:33:01 2024 GMT Subject: CN=6743472d-fad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:d0:2d:5b:42:b0:4a:aa:97:73:1d:dc:4d: 1c:12:47:4a:6d:7a:5d:78:af:92:5d:ae:43:1b:45: c2:df:a9:ca:49:04:0b:e9:e0:78:d8:a1:1a:ba:5c: 5c:9e:af:ae:ba:97:07:d3:9e:f4:d8:aa:69:ea:b0: 10:53:9e:0a:e3:2a:3c:62:0c:5d:95:c9:0e:42:40: 0a:80:07:e1:b9:f4:46:25:03:56:18:eb:9d:88:85: f3:2e:8f:15:26:7c:df:53:f7:2b:7e:7f:97:b4:ec: bc:57:7c:36:2c:8c:03:81:a6:7c:2a:76:80:f7:4d: cf:77:12:31:93:38:53:bf:a6:62:67:4e:b1:51:02: 72:bf:79:6d:07:02:52:af:35:7e:49:28:1d:59:6e: ba:57:80:ce:27:a1:3b:05:6a:71:fd:5e:d1:41:0d: 5c:d3:f4:f5:ac:9e:7b:0f:63:b8:81:c2:77:d1:6b: 27:89:64:ca:56:55:79:d2:a3:24:e2:b3:0a:49:20: 21:30:48:f1:53:57:14:e1:0b:0f:dc:7a:ec:8a:1a: 72:c6:63:80:34:fc:e8:ea:9d:56:ee:72:e1:16:3f: 96:67:dd:4d:96:64:a6:3c:c8:dd:ee:6e:ed:84:10: fd:68:60:04:22:2d:83:f4:e0:ca:3d:41:38:56:19: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:57:54:49:95:15:75:DC:CF:6C:A6:D5:F3:1D:34:68:86:A3:C4:0D X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6f:59:78:84:ed:47:23:0a:c2:eb:b3:4a:c2:2a:e5:3f:67: 60:2b:a2:16:46:36:c9:3d:37:ff:07:47:df:af:7d:f1:40:82: 54:7a:bf:b1:b7:d5:86:77:b2:95:41:dc:d6:a6:47:b1:b3:50: d3:88:b3:5f:65:ff:9f:2b:6a:60:0a:49:a8:05:e3:e2:65:b5: 5e:a8:27:87:4f:c1:45:50:d2:1c:11:e4:6e:b5:63:23:f2:c2: 55:9f:8c:94:ae:ca:0f:12:42:fb:dd:c5:db:df:3d:10:9b:4a: 49:54:ab:72:89:46:5d:b1:fa:4d:e7:29:57:f1:8e:10:6e:c1: 75:16:b0:01:ec:6c:ee:40:12:f0:35:3e:15:92:d2:c4:a1:9f: d1:08:6b:d7:f0:30:a7:b3:55:46:02:12:ee:e0:f5:ba:3d:3d: 5c:ae:11:60:5c:4e:4a:27:ef:1a:ec:fc:50:2f:3f:5e:c3:ab: c7:d6:6b:5f:bb:7e:4e:0b:eb:ab:5f:9c:3d:d2:fa:21:ce:af: eb:c0:82:4d:e6:66:2a:3b:25:a3:81:27:23:f6:8b:b1:2b:29: 1c:0f:3f:01:d9:f6:07:0b:8c:dd:b3:d0:59:d1:90:fa:8f:5c: 76:f1:c8:4a:f4:a4:64:3b:64:bc:92:2f:42:40:4c:15:1c:fe: d5:6e:fb:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjQxMTI0MTUzMzAxWhcNMjQxMjAxMTUzMzAxWjAYMRYwFAYD VQQDEw02NzQzNDcyZC1mYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0PQLVtCsEqql3Md3E0cEkdKbXpdeK+SXa5DG0XC36nKSQQL6eB42KEaulxc nq+uupcH05702Kpp6rAQU54K4yo8YgxdlckOQkAKgAfhufRGJQNWGOudiIXzLo8V JnzfU/crfn+XtOy8V3w2LIwDgaZ8KnaA903PdxIxkzhTv6ZiZ06xUQJyv3ltBwJS rzV+SSgdWW66V4DOJ6E7BWpx/V7RQQ1c0/T1rJ57D2O4gcJ30WsniWTKVlV50qMk 4rMKSSAhMEjxU1cU4QsP3HrsihpyxmOANPzo6p1W7nLhFj+WZ91NlmSmPMjd7m7t hBD9aGAEIi2D9ODKPUE4VhlcGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1XVEmV FXXcz2ym1fMdNGiGo8QNMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7b1l4hO1HIwrC67NKwirlP2dgK6IWRjbJPTf/B0ffr33xQIJUer+x t9WGd7KVQdzWpkexs1DTiLNfZf+fK2pgCkmoBePiZbVeqCeHT8FFUNIcEeRutWMj 8sJVn4yUrsoPEkL73cXb3z0Qm0pJVKtyiUZdsfpN5ylX8Y4QbsF1FrAB7GzuQBLw NT4VktLEoZ/RCGvX8DCns1VGAhLu4PW6PT1crhFgXE5KJ+8a7PxQLz9ew6vH1mtf u35OC+urX5w90vohzq/rwIJN5mYqOyWjgScj9ouxKykcDz8B2fYHC4zds9BZ0ZD6 j1x28chK9KRkO2S8ki9CQEwVHP7Vbvsa -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:59 2024 by rpki-client on console-ams.rpki-client.org