$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json) Hash identifier: ee194CWxcHnSdbo3ztU7FGAiIBfUJcij2tSY6UyTZ70= Subject key identifier: 84:AE:3D:F1:BF:08:DB:0B:61:B2:5E:18:C2:F8:E0:37:F8:3A:DA:E3 Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft Manifest number: 3465 Signing time: Sun 24 Nov 2024 14:17:29 +0000 Manifest this update: Sun 24 Nov 2024 14:17:29 +0000 Manifest next update: Sun 01 Dec 2024 14:17:29 +0000 Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: 6WnT+HOTBt61Jq59H+I0+5NNScv49FUNwnHWNwVyzVc=) 2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: 02bT8CJits/dRAWQSl3SIwLvUODi5bkhKG1y3uNprTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Nov 24 14:17:29 2024 GMT Not After : Dec 1 14:17:29 2024 GMT Subject: CN=67433579-ebba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:15:ec:92:2f:5f:48:2a:5b:10:6c:7f:14: e5:8d:46:82:14:4d:b1:d3:f2:45:00:2f:4c:cf:de: ef:c5:af:f5:51:d9:e8:04:8e:99:20:08:4c:0a:01: 63:45:75:15:d1:66:8e:c8:51:05:fe:dd:cf:17:2b: 3c:46:0f:19:63:0d:c0:c9:29:06:a9:d9:52:ed:39: a2:ac:4a:49:3d:bc:75:90:c3:7c:bc:31:89:02:50: 68:52:95:b7:e9:27:0b:c8:82:d1:34:1b:d2:5d:8d: 07:e1:59:25:33:55:a6:71:76:71:5f:0c:e6:6f:5d: 53:bc:c9:51:bf:16:54:69:d3:f3:26:a9:52:a2:f9: 13:c4:0c:42:9e:2c:9b:2d:66:8c:59:17:4d:c8:a1: 44:b6:21:ca:81:8f:6d:20:c4:2c:b4:0d:6f:24:13: 31:5f:01:a9:aa:13:ae:6a:6c:1f:14:b9:1e:52:28: b4:e2:e5:61:50:ac:b0:9d:90:27:62:ee:d8:22:f9: f7:31:62:c6:ef:b3:3f:bd:7f:28:e6:f1:62:84:c3: 2a:13:52:34:fc:9a:31:df:9f:27:3f:23:38:b2:48: fb:58:c4:b4:f7:c0:bd:77:3c:b5:55:b3:90:c6:44: 40:8e:b1:71:a1:d0:32:86:b7:03:f7:d0:00:b6:ff: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:3D:F1:BF:08:DB:0B:61:B2:5E:18:C2:F8:E0:37:F8:3A:DA:E3 X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:dd:a6:ac:bb:8c:a9:e0:16:df:8b:c9:38:bc:de:e2:a2:52: 93:a7:69:af:50:4e:f7:e8:a8:69:fb:d8:48:b5:ba:66:e8:c7: b3:42:b5:ea:67:91:a7:e2:11:8f:96:70:6b:82:f2:86:e4:74: df:93:39:15:b0:77:ca:78:b4:3f:90:69:24:55:25:1e:6b:5a: 1c:53:bc:9c:b8:a2:7a:71:69:99:1c:69:eb:75:7a:60:1b:b9: bd:ff:35:3a:ef:18:6a:bc:37:fd:77:4e:e7:f1:9d:78:e5:7e: f6:74:47:73:ec:54:70:47:31:10:86:be:81:21:32:fb:7f:c6: e8:ef:21:53:07:b1:a1:a3:cd:43:fb:f4:f4:c9:2b:52:c3:f6: bd:49:e2:f4:37:c4:95:f8:0a:7f:44:c4:ab:7c:0f:b6:54:ab: 14:43:13:c7:f6:88:60:ad:49:6d:40:3e:4e:cb:48:56:e4:d0: 1c:51:d3:30:7a:bc:f7:7f:b2:f1:7b:b2:80:1c:ad:f3:4b:77: 51:a3:51:3a:47:57:f3:fc:d6:b2:eb:0d:12:8f:9c:0e:dc:87: 9a:88:b4:32:de:de:22:1e:72:ab:27:f7:5d:8e:6b:ce:90:18: 7b:a5:3f:ae:f8:3b:2a:ed:47:d7:df:23:7d:ae:2a:11:12:12: 13:18:8c:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjQxMTI0MTQxNzI5WhcNMjQxMjAxMTQxNzI5WjAYMRYwFAYD VQQDEw02NzQzMzU3OS1lYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NAV7JIvX0gqWxBsfxTljUaCFE2x0/JFAC9Mz97vxa/1UdnoBI6ZIAhMCgFj RXUV0WaOyFEF/t3PFys8Rg8ZYw3AySkGqdlS7TmirEpJPbx1kMN8vDGJAlBoUpW3 6ScLyILRNBvSXY0H4VklM1WmcXZxXwzmb11TvMlRvxZUadPzJqlSovkTxAxCniyb LWaMWRdNyKFEtiHKgY9tIMQstA1vJBMxXwGpqhOuamwfFLkeUii04uVhUKywnZAn Yu7YIvn3MWLG77M/vX8o5vFihMMqE1I0/Jox358nPyM4skj7WMS098C9dzy1VbOQ xkRAjrFxodAyhrcD99AAtv8n6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISuPfG/ CNsLYbJeGML44Df4OtrjMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0 OTJfdk1YYnR1Znh2VlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw3aasu4yp4Bbfi8k4vN7iolKTp2mvUE736Khp+9hItbpm6MezQrXq Z5Gn4hGPlnBrgvKG5HTfkzkVsHfKeLQ/kGkkVSUea1ocU7ycuKJ6cWmZHGnrdXpg G7m9/zU67xhqvDf9d07n8Z145X72dEdz7FRwRzEQhr6BITL7f8bo7yFTB7Gho81D +/T0yStSw/a9SeL0N8SV+Ap/RMSrfA+2VKsUQxPH9ohgrUltQD5Oy0hW5NAcUdMw erz3f7Lxe7KAHK3zS3dRo1E6R1fz/Nay6w0Sj5wO3IeaiLQy3t4iHnKrJ/ddjmvO kBh7pT+u+Dsq7UfX3yN9rioREhITGIzX -----END CERTIFICATE-----Generated at Sun Nov 24 14:56:38 2024 by rpki-client on console-fra.rpki-client.org