$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: VTo3KkXpCQMsjhZz3Q8n+Jk09PHfSjTIQ3UmwWqxYdw= Subject key identifier: E4:E5:A2:56:F4:60:D1:DF:F5:AB:88:C1:5C:FA:07:56:D2:E5:60:50 Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 45 Signing time: Mon 25 Nov 2024 05:19:06 +0000 Manifest this update: Mon 25 Nov 2024 05:19:06 +0000 Manifest next update: Mon 02 Dec 2024 05:19:06 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: 3PuG9Lid7fOGt+S7kIm6j8HlCua2Dud2i3e8MwRFj/Y=) 2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: 3HXgfR2xDybCR9JbXAm4K9BmBrTeyB6NLob5uNWXRyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Nov 25 05:19:06 2024 GMT Not After : Dec 2 05:19:06 2024 GMT Subject: CN=674408ca-b3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:5b:57:83:6a:19:a5:d7:64:67:ce:a9:dd: e3:0f:dd:aa:05:9e:51:3c:25:3c:19:0b:de:64:18: 40:fc:48:38:53:75:6d:cc:82:cc:cd:25:6d:d2:6a: ac:cb:0e:e1:61:07:00:4d:cf:9a:fa:90:c8:12:09: 7f:32:b5:01:94:5e:ee:2d:5f:8e:3e:8d:15:a6:1e: b3:f5:e2:a7:59:f1:02:08:2c:51:d0:67:38:f6:03: 96:dc:5e:d4:99:62:cd:50:cf:57:46:b1:3a:30:28: 93:e7:65:29:f1:16:1e:ad:e5:d0:3f:3b:34:a5:a2: 5f:bc:93:5c:d5:bf:43:69:46:83:02:9c:7a:d0:2f: b9:51:d1:13:95:d8:f2:c7:eb:a3:d0:96:7e:71:a1: 8f:82:d1:5b:c9:d7:19:2b:80:35:7c:7d:ce:9d:d7: de:09:e2:ee:6f:37:28:3e:50:7a:11:ee:ad:d4:1f: ce:a1:85:eb:1a:98:ad:cf:13:86:03:26:77:c1:58: 8f:7e:cd:2b:50:55:f0:fb:59:08:f1:90:14:1e:c0: 36:39:e0:87:01:bb:2b:99:56:8d:ed:80:ce:be:1e: 7e:20:76:5e:c7:da:9b:90:96:51:17:b9:5e:ae:19: bf:6f:1b:ca:76:e2:20:6a:f2:18:b7:97:aa:e0:aa: 44:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E5:A2:56:F4:60:D1:DF:F5:AB:88:C1:5C:FA:07:56:D2:E5:60:50 X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d9:90:7c:88:ea:e0:cb:81:38:27:57:56:0a:47:bb:96:17: f3:20:03:dd:06:89:42:bb:af:48:58:ef:27:80:bd:2e:3d:16: 91:9c:a5:1f:ba:7a:81:3b:94:99:2b:f4:4b:ad:ba:7d:e6:79: c8:d6:70:29:40:b1:e3:f5:07:7d:60:5f:ec:e6:a2:8a:01:bb: d8:75:0c:c7:58:94:fd:60:a3:3e:4a:e5:f9:4c:fd:2f:77:29: 74:0e:de:90:0f:bc:e8:ed:19:80:4b:02:cb:65:91:ec:96:dc: f9:3a:ef:7d:2b:27:1b:ad:3c:82:47:ff:6e:37:ac:02:58:7e: 81:70:50:26:68:f6:e1:72:33:c6:05:e8:7b:91:2c:8d:6c:ff: 87:12:1a:77:7b:52:ef:fb:3c:c2:1c:63:ef:ca:41:b2:7a:98: 95:b2:7a:a9:31:ac:f3:67:03:e3:23:c4:92:e9:a4:d1:5d:fd: 16:22:86:98:60:c5:08:71:e5:b3:fd:45:22:58:c9:1a:6e:6a: 7a:7b:90:a2:e8:28:02:c3:d6:4b:9e:7b:c5:dc:14:69:38:58: 26:30:73:18:85:f2:78:24:17:4e:f7:67:5d:0d:a6:aa:a1:4b: 33:2d:0a:5e:c1:4d:3f:69:ff:52:b0:90:8b:96:9c:70:0e:cb: c0:6e:9a:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkRBOTExMC8GA1UEBRMoQjRFN0UzNDRBRENFMzZEODRGMUYzQUJDQ0QxNEIyNEMx NTEyQkJBQTAeFw0yNDExMjUwNTE5MDZaFw0yNDEyMDIwNTE5MDZaMBgxFjAUBgNV BAMTDTY3NDQwOGNhLWIzYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5mltXg2oZpddkZ86p3eMP3aoFnlE8JTwZC95kGED8SDhTdW3MgszNJW3SaqzL DuFhBwBNz5r6kMgSCX8ytQGUXu4tX44+jRWmHrP14qdZ8QIILFHQZzj2A5bcXtSZ Ys1Qz1dGsTowKJPnZSnxFh6t5dA/OzSlol+8k1zVv0NpRoMCnHrQL7lR0ROV2PLH 66PQln5xoY+C0VvJ1xkrgDV8fc6d194J4u5vNyg+UHoR7q3UH86hhesamK3PE4YD JnfBWI9+zStQVfD7WQjxkBQewDY54IcBuyuZVo3tgM6+Hn4gdl7H2puQllEXuV6u Gb9vG8p24iBq8hi3l6rgqkTDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5OWiVvRg 0d/1q4jBXPoHVtLlYFAwHwYDVR0jBBgwFoAUtOfjRK3ONthPHzq8zRSyTBUSu6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCREE5LzM2QTUzMEY2NDRC RDExRUZCNzNEQjc3QkM0RjlBRTAyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdE9malJLM09OdGhQSHpxOHpSU3lUQlVTdTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC REE5LzM2QTUzMEY2NDRCRDExRUZCNzNEQjc3QkM0RjlBRTAyL3RPZmpSSzNPTnRo UEh6cTh6UlN5VEJVU3U2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAbZkHyI6uDLgTgnV1YKR7uWF/MgA90GiUK7r0hY7yeAvS49FpGcpR+6 eoE7lJkr9Eutun3mecjWcClAseP1B31gX+zmoooBu9h1DMdYlP1goz5K5flM/S93 KXQO3pAPvOjtGYBLAstlkeyW3Pk6730rJxutPIJH/243rAJYfoFwUCZo9uFyM8YF 6HuRLI1s/4cSGnd7Uu/7PMIcY+/KQbJ6mJWyeqkxrPNnA+MjxJLppNFd/RYihphg xQhx5bP9RSJYyRpuanp7kKLoKALD1kuee8XcFGk4WCYwcxiF8ngkF073Z10Npqqh SzMtCl7BTT9p/1KwkIuWnHAOy8Bumvw= -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:09 2024 by rpki-client on console-ams.rpki-client.org