$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json) Hash identifier: kW+is7TkBPCpG05uIXdhlkmcIwDhcl8vXUymyXdfew8= Subject key identifier: F5:63:60:20:59:61:2A:6E:74:67:71:A4:1E:BD:3C:5C:66:B8:1B:AD Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft Manifest number: 08E5 Signing time: Fri 22 Nov 2024 20:11:26 +0000 Manifest this update: Fri 22 Nov 2024 20:11:25 +0000 Manifest next update: Fri 29 Nov 2024 20:11:25 +0000 Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: 3ALsNy+vigLtz/ZME1SmcV35aREBV7a3iDo+1sU9tmk=) 2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: EalLcrhJ2pf9J6rJzGCAE06JbZRtA/SwMcMPpTqGCFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC Validity Not Before: Nov 22 20:11:25 2024 GMT Not After : Nov 29 20:11:25 2024 GMT Subject: CN=6740e56d-27d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:6e:84:9b:4c:67:02:16:73:6a:3e:3c:fc: 23:af:c8:37:dd:7e:9f:3e:04:83:cd:e8:94:76:4d: 81:00:04:fe:31:c8:c0:23:1b:e7:1e:77:90:e8:cb: 8c:8e:c2:81:ec:0d:de:f3:c1:87:24:65:d7:a8:04: 3f:ba:46:a2:e5:26:b6:4c:9a:e3:9b:e5:07:14:7b: c5:47:39:f0:1e:44:b4:e5:bf:c5:cb:8f:0c:c4:8c: 18:d1:cf:0a:87:a5:14:16:6b:a5:bc:5e:38:56:4a: 3c:75:dc:f7:43:ef:06:e9:b8:b0:a5:64:3d:99:38: a8:2b:39:5e:f0:3f:57:68:2c:b4:35:37:06:ef:f4: 4d:df:9e:db:94:91:95:07:8b:a4:8a:ee:e8:45:f1: 2b:08:7a:e2:75:5f:8b:21:7e:47:d1:33:d9:2f:79: 92:fc:a2:cb:78:02:70:b2:c8:7d:a0:b2:51:3c:54: cd:e2:85:4b:a2:32:03:0d:cf:61:cd:b1:e2:4b:7e: 13:7f:a0:84:f7:5e:36:e9:57:64:0f:64:16:e3:77: 90:a6:33:ff:3c:13:db:bf:7a:81:a7:2e:9c:48:40: 72:ea:66:af:83:1b:b3:33:b3:df:22:ca:9c:34:93: 17:b8:67:8f:ec:88:91:c9:b5:cd:d6:76:13:81:ee: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:63:60:20:59:61:2A:6E:74:67:71:A4:1E:BD:3C:5C:66:B8:1B:AD X509v3 Authority Key Identifier: keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:6e:27:bc:09:f0:c2:57:1e:22:88:d3:aa:35:42:41:bc:c7: b7:f0:ad:81:13:a1:b2:0d:81:d4:b8:40:90:db:64:31:27:d2: 30:7c:16:32:e0:ea:fb:b2:ae:5b:cf:32:c1:44:ff:f6:d3:6d: 6d:91:7f:03:98:46:be:b1:84:b8:dc:09:0e:60:bd:9b:d7:2c: 06:64:a4:fd:94:c4:b1:9f:99:7e:26:0a:79:d8:f8:ac:e1:6f: 0f:fe:6c:50:36:28:63:37:39:23:92:d8:8e:2d:9a:70:c0:e4: 84:a7:da:42:7c:1e:1f:b4:3b:3b:b0:a6:bd:71:7a:42:c0:b8: 9d:a5:5c:5c:f6:2f:90:0a:4c:f8:36:43:78:4a:75:08:5b:9b: 47:14:2c:fd:08:30:ef:f3:2e:e3:53:d3:96:b5:26:30:eb:17: a5:3a:84:b9:d5:c4:e8:4d:c2:94:f2:c4:d3:6e:e1:52:83:59: 23:15:4a:b3:9f:6f:a4:5e:a9:fa:2e:7b:13:5a:6b:ad:81:c8: 07:58:df:45:6e:7f:5b:b6:0a:90:a4:b3:af:fb:9d:c5:e9:7e: ce:a1:d2:b4:7f:15:40:e0:f3:fb:07:1f:4c:ff:81:3b:8b:c1: ee:f8:2f:90:9b:d5:a7:e3:95:b0:23:f8:fa:70:5a:0f:4d:f6: 9d:e2:5a:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCOEIxMTAvBgNVBAUTKEI2QkI2MzY0QkNFNDg1Q0VDMDZEMzM5OTQ5MTU4N0E0 ODI1OTFDQkMwHhcNMjQxMTIyMjAxMTI1WhcNMjQxMTI5MjAxMTI1WjAYMRYwFAYD VQQDEw02NzQwZTU2ZC0yN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmtuhJtMZwIWc2o+PPwjr8g33X6fPgSDzeiUdk2BAAT+McjAIxvnHneQ6MuM jsKB7A3e88GHJGXXqAQ/ukai5Sa2TJrjm+UHFHvFRznwHkS05b/Fy48MxIwY0c8K h6UUFmulvF44Vko8ddz3Q+8G6biwpWQ9mTioKzle8D9XaCy0NTcG7/RN357blJGV B4ukiu7oRfErCHridV+LIX5H0TPZL3mS/KLLeAJwssh9oLJRPFTN4oVLojIDDc9h zbHiS34Tf6CE91426VdkD2QW43eQpjP/PBPbv3qBpy6cSEBy6mavgxuzM7PfIsqc NJMXuGeP7IiRybXN1nYTge7+GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVjYCBZ YSpudGdxpB69PFxmuButMB8GA1UdIwQYMBaAFLa7Y2S85IXOwG0zmUkVh6SCWRy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0I4Qi83QUNDQ0I0MDlD NkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hjN0FiVE9aU1JXSHBJSlpI THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RydGpaTHpraGM3QWJUT1pTUldIcElKWkhMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0I4Qi83QUNDQ0I0MDlDNkYxMUVBOEM2NTlCM0ZDNEY5QUUwMi90cnRqWkx6a2hj N0FiVE9aU1JXSHBJSlpITHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxbie8CfDCVx4iiNOqNUJBvMe38K2BE6GyDYHUuECQ22QxJ9IwfBYy 4Or7sq5bzzLBRP/2021tkX8DmEa+sYS43AkOYL2b1ywGZKT9lMSxn5l+Jgp52Pis 4W8P/mxQNihjNzkjktiOLZpwwOSEp9pCfB4ftDs7sKa9cXpCwLidpVxc9i+QCkz4 NkN4SnUIW5tHFCz9CDDv8y7jU9OWtSYw6xelOoS51cToTcKU8sTTbuFSg1kjFUqz n2+kXqn6LnsTWmutgcgHWN9Fbn9btgqQpLOv+53F6X7OodK0fxVA4PP7Bx9M/4E7 i8Hu+C+Qm9Wn45WwI/j6cFoPTfad4lql -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org