$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: dazLlty7uQS3OvWyODD+LX58MbJ+4pjtT8mKpbarNto= Subject key identifier: FC:31:FB:2D:DE:94:53:92:7B:56:C5:96:22:75:DA:0B:2F:8A:B6:51 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: E3 Signing time: Sat 23 Nov 2024 03:34:29 +0000 Manifest this update: Sat 23 Nov 2024 03:34:28 +0000 Manifest next update: Sat 30 Nov 2024 03:34:28 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: uUHDRBov3G22jRJZcT+VZPcAZxrK8isadiW8keC7VY8=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: DsVxbJQBFvHguy7znDHJZ9CR2UmTMow8V9P9QuFVJ9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Nov 23 03:34:28 2024 GMT Not After : Nov 30 03:34:28 2024 GMT Subject: CN=67414d44-8ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:86:30:ce:a4:4f:d3:e7:e1:da:82:9d:dc: 48:02:a8:e5:f9:c5:d1:02:13:88:c7:69:6f:d8:e2: 03:1d:5e:9a:1c:78:f9:0b:be:cf:2d:aa:f0:3a:69: 27:fe:11:6f:20:4c:f3:e5:ff:43:c0:b3:4e:9d:2b: 98:e8:44:be:ff:dc:52:c7:66:5b:79:79:86:45:37: d5:6a:7a:45:47:b3:c5:c9:6c:51:0a:62:39:2c:8c: 13:a9:70:27:76:77:1f:bf:23:70:e2:27:6c:9c:35: 86:75:bb:da:88:e8:ab:a1:3e:22:1f:3d:87:72:52: 96:d6:79:db:8b:96:20:3d:3a:03:8d:a6:ce:d3:18: 9c:b4:09:ef:7a:0c:fc:66:46:3b:b4:c9:1a:43:53: f0:06:cc:3d:0f:eb:11:5f:99:79:ed:2c:49:e7:b2: dc:0c:f0:58:3b:9a:f7:a1:76:f2:f5:e9:1d:4a:31: 32:69:84:c3:b9:20:d8:09:b9:84:d4:f2:08:cc:b6: 15:e3:91:0c:72:ee:a8:21:32:cf:5c:76:3c:8a:2a: 68:39:2b:6a:20:f2:03:9d:b4:84:ca:fc:f5:57:29: 6f:b5:56:95:5d:c0:b1:6b:50:27:34:7e:49:1e:a5: 17:43:70:8d:fc:66:99:be:66:e3:08:cc:66:f1:38: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:31:FB:2D:DE:94:53:92:7B:56:C5:96:22:75:DA:0B:2F:8A:B6:51 X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c8:3f:66:a5:f7:89:22:21:b9:ae:05:dc:20:41:f1:56:a6: 70:71:bb:e9:06:a2:d7:ed:fc:42:07:32:32:eb:c7:f8:ad:30: 49:a3:f4:21:3f:28:9b:95:6d:70:cf:ec:f4:8c:29:95:80:f8: 61:6d:c2:14:40:d3:55:d9:cc:f2:66:47:aa:03:85:c8:de:ea: 43:df:d3:4f:1d:01:e3:02:e0:05:ed:db:19:06:c8:c8:d5:ea: 9e:7e:9f:28:f0:4b:9f:61:eb:b8:07:91:25:88:e3:c0:c3:cc: d1:c9:36:e8:f5:40:3c:73:58:1d:12:6e:69:89:0e:51:4e:ca: 12:84:d0:d7:c7:62:b7:01:90:24:a1:92:f1:41:dd:42:87:b7: a5:d9:1b:70:5d:e2:e8:4c:23:a2:b4:9f:27:3c:dd:ea:c1:bc: 07:ac:f3:9c:13:bb:f4:9a:dd:d6:6a:b6:54:e8:de:b2:d2:77: 66:f2:da:1b:f7:24:c0:70:13:40:6c:63:5e:2a:ee:69:c5:41: e0:cc:80:2b:8e:f8:cb:5d:ef:fe:1e:f2:f4:b7:e4:9c:10:38: 90:1a:be:57:dd:1c:01:f8:9c:57:e6:92:35:df:a8:2e:fe:74: 56:3c:f8:e9:4b:74:b4:90:8f:f7:33:69:89:01:a7:a5:98:3f: 4a:10:bb:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjQxMTIzMDMzNDI4WhcNMjQxMTMwMDMzNDI4WjAYMRYwFAYD VQQDEw02NzQxNGQ0NC04ZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLeGMM6kT9Pn4dqCndxIAqjl+cXRAhOIx2lv2OIDHV6aHHj5C77PLarwOmkn /hFvIEzz5f9DwLNOnSuY6ES+/9xSx2ZbeXmGRTfVanpFR7PFyWxRCmI5LIwTqXAn dncfvyNw4idsnDWGdbvaiOiroT4iHz2HclKW1nnbi5YgPToDjabO0xictAnvegz8 ZkY7tMkaQ1PwBsw9D+sRX5l57SxJ57LcDPBYO5r3oXby9ekdSjEyaYTDuSDYCbmE 1PIIzLYV45EMcu6oITLPXHY8iipoOStqIPIDnbSEyvz1VylvtVaVXcCxa1AnNH5J HqUXQ3CN/GaZvmbjCMxm8TgAawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwx+y3e lFOSe1bFliJ12gsvirZRMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxyD9mpfeJIiG5rgXcIEHxVqZwcbvpBqLX7fxCBzIy68f4rTBJo/Qh PyiblW1wz+z0jCmVgPhhbcIUQNNV2czyZkeqA4XI3upD39NPHQHjAuAF7dsZBsjI 1eqefp8o8EufYeu4B5EliOPAw8zRyTbo9UA8c1gdEm5piQ5RTsoShNDXx2K3AZAk oZLxQd1Ch7el2RtwXeLoTCOitJ8nPN3qwbwHrPOcE7v0mt3WarZU6N6y0ndm8tob 9yTAcBNAbGNeKu5pxUHgzIArjvjLXe/+HvL0t+ScEDiQGr5X3RwB+JxX5pI136gu /nRWPPjpS3S0kI/3M2mJAaelmD9KELvV -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org