$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft File: TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json) Hash identifier: Lw78/wfzLiF80JaisTBm0I8XU/KtjXuq4xLPqRjLfxM= Subject key identifier: 0E:E3:85:0C:DF:D9:9A:2F:9F:D2:68:9A:C9:F2:78:5B:F0:57:B0:B3 Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft Manifest number: 64 Signing time: Sat 23 Nov 2024 04:58:09 +0000 Manifest this update: Sat 23 Nov 2024 04:58:08 +0000 Manifest next update: Sat 30 Nov 2024 04:58:08 +0000 Files and hashes: 1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: huSfpRu5tSEVtvt1+5HgQ8/RyG4xeuy24sc71Z5g9do=) 2: EB0C7BBC293D11EFB7D44673C4F9AE02.roa (hash: KJkeZUjeqMxzrhPdJDdsZ7TY/TJfd72TjAx8JA8jobA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3 Validity Not Before: Nov 23 04:58:08 2024 GMT Not After : Nov 30 04:58:08 2024 GMT Subject: CN=674160e0-2174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:38:66:4b:06:e1:ec:dd:c8:4b:8f:e7:14: 10:db:83:c4:56:d4:f1:6b:39:87:45:11:ef:55:9d: f4:9a:16:f5:a8:24:ce:fe:db:48:ae:59:aa:90:46: c1:a0:3a:1f:fb:c7:bc:81:9b:26:85:db:cd:aa:a3: aa:ff:01:79:fd:8d:cf:d6:bb:f3:df:e2:c0:00:7e: 93:2a:fd:22:34:7e:b9:1f:3f:8a:53:93:e5:52:92: 6c:f6:a2:57:f0:1e:b8:fe:d9:10:0f:a9:d5:09:e7: bb:58:d2:61:0a:4d:53:96:22:45:26:74:cb:8e:97: 28:74:f7:37:63:17:cd:cb:47:58:7e:ee:d8:48:1b: 4c:20:1b:26:60:17:33:0a:56:5f:ce:61:73:49:7e: 33:1d:8a:67:2b:e3:f4:7f:b1:42:97:9d:b5:a8:3e: 49:15:59:b4:3b:c2:65:a2:8b:ba:36:27:43:c7:07: 2a:8b:8d:9e:8b:52:7e:39:5d:67:80:11:99:bf:e2: ff:50:7a:47:f7:f4:4f:9a:a6:8b:af:b2:ed:11:fa: 79:a3:b2:17:3e:3c:f2:59:ee:82:5f:0b:2e:14:63: 14:d9:15:81:df:7a:d3:c6:30:89:0e:4c:2b:c3:dd: 49:88:17:08:42:7a:14:9f:fc:1b:00:78:87:e4:99: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E3:85:0C:DF:D9:9A:2F:9F:D2:68:9A:C9:F2:78:5B:F0:57:B0:B3 X509v3 Authority Key Identifier: keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:18:a2:4d:51:cc:4f:30:d4:c9:71:02:e8:8a:dd:cb:6c:bf: 5e:82:64:bd:3c:d6:4c:6f:b1:53:27:d8:55:2a:b4:26:3f:bc: 22:e3:12:ed:b3:a3:9d:45:c0:f6:a9:10:26:0a:45:60:b9:78: 2d:aa:c8:3b:47:ad:27:8f:71:dc:7f:a7:34:b0:27:85:91:fb: 86:18:8b:3c:66:1a:a0:83:0d:4b:e1:ff:b5:35:e5:90:2b:65: 93:78:29:39:6d:b3:15:0d:d1:9f:10:e9:36:19:b1:6b:ff:50: 27:2b:46:3e:03:1c:ff:f1:d8:e6:c3:fa:81:0c:b7:0d:01:63: 1e:34:dd:91:98:d0:f4:9b:bf:ee:fc:3f:57:a0:6d:39:76:5c: 96:a5:3d:27:1e:92:4c:fb:91:89:57:57:6d:0e:67:d2:97:85: e4:ed:ee:0b:95:b7:88:be:30:7d:98:cc:1f:c9:cf:a4:0e:35: eb:77:93:9b:c3:fa:c8:07:3e:c9:34:98:cd:32:73:fe:99:be: 7f:06:db:9b:5b:74:46:01:d8:d3:81:a8:d3:4e:3b:d6:8c:04: bd:b0:cb:fa:c2:c0:c1:61:33:e6:2a:9c:e1:c5:10:be:f0:db: 18:e3:55:a8:10:7f:9d:7e:73:52:a8:f3:93:9e:c6:49:b4:ca: 30:b4:91:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUI0OTExMC8GA1UEBRMoNEMzNjVFMzZBNjQ3OUQ4RUIwQjUwRDkwRjM2RDFEN0Ix OUVGODREMzAeFw0yNDExMjMwNDU4MDhaFw0yNDExMzAwNDU4MDhaMBgxFjAUBgNV BAMTDTY3NDE2MGUwLTIxNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC20jhmSwbh7N3IS4/nFBDbg8RW1PFrOYdFEe9VnfSaFvWoJM7+20iuWaqQRsGg Oh/7x7yBmyaF282qo6r/AXn9jc/Wu/Pf4sAAfpMq/SI0frkfP4pTk+VSkmz2olfw Hrj+2RAPqdUJ57tY0mEKTVOWIkUmdMuOlyh09zdjF83LR1h+7thIG0wgGyZgFzMK Vl/OYXNJfjMdimcr4/R/sUKXnbWoPkkVWbQ7wmWii7o2J0PHByqLjZ6LUn45XWeA EZm/4v9Qekf39E+apouvsu0R+nmjshc+PPJZ7oJfCy4UYxTZFYHfetPGMIkOTCvD 3UmIFwhCehSf/BsAeIfkmcXJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDuOFDN/Z mi+f0miayfJ4W/BXsLMwHwYDVR0jBBgwFoAUTDZeNqZHnY6wtQ2Q820dexnvhNMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1QjQ5LzUzMThBMTA4MTIw MTExRUZBREM4NTM0NUM0RjlBRTAyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhO TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVERaZU5xWkhuWTZ3dFEyUTgyMGRleG52aE5NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 QjQ5LzUzMThBMTA4MTIwMTExRUZBREM4NTM0NUM0RjlBRTAyL1REWmVOcVpIblk2 d3RRMlE4MjBkZXhudmhOTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACwYok1RzE8w1MlxAuiK3ctsv16CZL081kxvsVMn2FUqtCY/vCLjEu2z o51FwPapECYKRWC5eC2qyDtHrSePcdx/pzSwJ4WR+4YYizxmGqCDDUvh/7U15ZAr ZZN4KTltsxUN0Z8Q6TYZsWv/UCcrRj4DHP/x2ObD+oEMtw0BYx403ZGY0PSbv+78 P1egbTl2XJalPScekkz7kYlXV20OZ9KXheTt7guVt4i+MH2YzB/Jz6QONet3k5vD +sgHPsk0mM0yc/6Zvn8G25tbdEYB2NOBqNNOO9aMBL2wy/rCwMFhM+YqnOHFEL7w 2xjjVagQf51+c1Ko85Oexkm0yjC0kWg= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org