$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json) Hash identifier: XEUB4sz1O54ibyc9Cd2sKN4O1Kwnbh9Fp/hFGB9uDLQ= Subject key identifier: C5:46:A7:B5:9C:BD:62:D7:3B:7F:5E:02:83:AA:B8:EF:BB:CE:9A:20 Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft Manifest number: 04DD Signing time: Fri 22 Nov 2024 23:17:53 +0000 Manifest this update: Fri 22 Nov 2024 23:17:52 +0000 Manifest next update: Fri 29 Nov 2024 23:17:52 +0000 Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: nAA4SXK4jZsR/025xRaLEZ+Rx2ocFkQPQxm3gc2zY2Y=) 2: 58BB655AF47C11EBB34AB831C4F9AE02.roa (hash: YGvbQnTcIdlfOTH6YnyF9Rzx2xpGEbYHp7xYeN5ch34=) 3: 595C959CF47C11EBB34AB831C4F9AE02.roa (hash: WH1se2Qhy8RI1ONvLaN4qa1WrKYL/nqvZGw9A9exjh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Validity Not Before: Nov 22 23:17:52 2024 GMT Not After : Nov 29 23:17:52 2024 GMT Subject: CN=67411121-02b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:ec:a9:c4:e7:7e:21:44:40:6f:60:29:fc: 2e:f0:dc:69:b8:27:4d:cd:59:4d:f0:2b:1a:0a:e8: c4:78:64:16:ff:bc:d0:57:a9:f7:37:91:ba:28:85: 26:40:d7:a3:24:8f:af:05:15:e9:44:03:1b:f4:4e: 14:50:5b:2b:85:3e:79:02:37:cd:2d:54:82:ef:60: 62:84:33:7c:42:c4:e6:34:13:7a:bb:e8:e2:9a:ed: fc:23:43:46:7c:96:bc:30:81:38:b0:93:68:da:78: 67:ca:ba:64:86:29:a0:19:bf:c2:33:55:fa:e1:ca: 4a:1c:ea:6d:f3:95:e5:c1:02:23:8b:48:c2:d1:77: f5:a3:03:eb:ac:fb:70:89:a0:f8:07:86:c9:2e:ad: a0:f5:a0:81:c6:3e:66:36:5f:fe:7a:a7:82:80:21: da:c5:78:77:fd:9d:9b:74:cf:2d:aa:76:a5:65:70: cd:7b:cf:9c:90:58:1a:50:2b:25:44:12:56:24:2f: d5:65:0e:1f:97:b3:aa:e7:be:c3:8b:aa:b7:82:14: f8:2a:87:ee:0e:21:bf:b2:b5:82:98:5f:8e:fc:32: a6:db:52:f5:b1:f4:d9:d4:a4:c1:ea:85:bc:67:6c: 27:75:a2:09:2e:01:06:cc:04:49:40:ca:c8:01:99: bb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:46:A7:B5:9C:BD:62:D7:3B:7F:5E:02:83:AA:B8:EF:BB:CE:9A:20 X509v3 Authority Key Identifier: keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:59:3c:99:29:de:1c:e7:a9:c9:f5:6f:98:a2:b7:2e:79:bc: 4a:43:c7:f6:b8:fd:5a:af:0c:a0:39:b5:4b:cc:0b:19:b2:37: 8f:05:0c:08:7e:82:1c:4b:7c:ad:13:45:16:fd:06:71:3d:ec: c2:10:a1:86:a1:5e:d9:c1:9d:97:a7:02:50:71:b0:ea:bd:bb: 5f:aa:cf:35:23:f1:21:f9:ab:dc:68:13:01:c5:29:66:76:d6: 5c:bd:98:30:be:8a:4d:87:20:66:08:39:3b:19:ae:9e:b9:55: d9:05:1d:8c:b1:5f:f5:0b:ff:8a:93:dd:f8:50:7d:a7:c8:6f: d7:3d:19:c2:93:39:f6:fd:7c:d9:d9:7c:2a:d7:e0:24:2d:3c: 57:d9:df:8c:cd:53:46:9f:e8:fb:b9:90:13:7a:6a:c6:38:0a: dc:60:1c:7e:26:45:77:fd:94:6c:7d:88:dd:77:fd:d9:74:fd: 9c:ad:a0:01:28:d9:4d:e1:62:f1:99:6f:2e:38:d0:3e:1b:b4: ca:e0:d3:24:4f:0d:ce:01:c3:57:c4:29:d5:ac:c5:4c:74:0d: ae:d4:37:ea:a6:7e:1c:9a:c6:95:6a:1c:5d:ff:b9:e7:00:3a: f3:eb:42:3f:0b:b7:33:44:cb:85:1c:b3:8f:1b:de:91:77:62: f6:6b:48:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw QjVBM0NERDAwHhcNMjQxMTIyMjMxNzUyWhcNMjQxMTI5MjMxNzUyWjAYMRYwFAYD VQQDEw02NzQxMTEyMS0wMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxonsqcTnfiFEQG9gKfwu8NxpuCdNzVlN8CsaCujEeGQW/7zQV6n3N5G6KIUm QNejJI+vBRXpRAMb9E4UUFsrhT55AjfNLVSC72BihDN8QsTmNBN6u+jimu38I0NG fJa8MIE4sJNo2nhnyrpkhimgGb/CM1X64cpKHOpt85XlwQIji0jC0Xf1owPrrPtw iaD4B4bJLq2g9aCBxj5mNl/+eqeCgCHaxXh3/Z2bdM8tqnalZXDNe8+ckFgaUCsl RBJWJC/VZQ4fl7Oq577Di6q3ghT4KofuDiG/srWCmF+O/DKm21L1sfTZ1KTB6oW8 Z2wndaIJLgEGzARJQMrIAZm7hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVGp7Wc vWLXO39eAoOquO+7zpogMB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0 N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6 ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02 OTljaWtEZDY3YzBMV2p6ZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPWTyZKd4c56nJ9W+YorcuebxKQ8f2uP1arwygObVLzAsZsjePBQwI foIcS3ytE0UW/QZxPezCEKGGoV7ZwZ2XpwJQcbDqvbtfqs81I/Eh+avcaBMBxSlm dtZcvZgwvopNhyBmCDk7Ga6euVXZBR2MsV/1C/+Kk934UH2nyG/XPRnCkzn2/XzZ 2Xwq1+AkLTxX2d+MzVNGn+j7uZATemrGOArcYBx+JkV3/ZRsfYjdd/3ZdP2craAB KNlN4WLxmW8uONA+G7TK4NMkTw3OAcNXxCnVrMVMdA2u1Dfqpn4cmsaVahxd/7nn ADrz60I/C7czRMuFHLOPG96Rd2L2a0jv -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org