$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: QDOwsMOBoJrXiaQbPlByeFIOGUa6ucLuTGleM5/93Zk= Subject key identifier: 7C:02:F1:B7:45:78:5E:31:3C:DB:3C:CA:03:D1:21:6E:58:25:8A:FC Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 026A Signing time: Thu 21 Nov 2024 01:14:26 +0000 Manifest this update: Thu 21 Nov 2024 01:14:25 +0000 Manifest next update: Thu 28 Nov 2024 01:14:25 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: PmftbUB4hlrmQjczNg6uDYreMpXKev6hRMYDFsQNv/c=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: 9wjcns0ncw/wGTNs74xbVREIvS/DquHOra1YJnzxANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Nov 21 01:14:25 2024 GMT Not After : Nov 28 01:14:25 2024 GMT Subject: CN=673e8972-647e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:da:44:6f:c8:5e:d3:8e:28:1a:48:31:01:f7: be:a9:44:26:8a:2e:9d:6e:a2:22:ad:6d:05:64:3c: 38:37:b4:d5:ba:57:ef:e6:e8:35:f3:1b:07:25:af: ac:ac:aa:db:29:2c:43:1d:47:bc:09:d5:b7:7b:ab: cd:08:9a:5d:4c:a2:fc:d5:c0:0a:8d:40:e3:a3:a3: 63:e1:ea:8c:7b:33:be:a8:32:b1:b8:62:ea:84:8c: 8b:80:a7:24:15:a1:d2:91:3f:cd:fd:a7:bf:83:fc: b7:1e:e0:48:12:db:45:bc:78:4d:6c:8b:8f:17:e3: 13:b3:14:09:b2:97:c5:d2:b0:64:af:3d:3b:ad:a4: b2:f9:a6:3e:5a:bb:79:b0:37:ce:e4:85:e4:f1:1f: bc:41:c0:7d:c3:ea:c9:7d:2d:c8:79:8a:f9:d6:7f: 5d:e4:3f:e5:07:00:f6:47:2d:43:49:6e:8e:8e:f1: 08:d3:a1:11:c7:c6:04:db:9b:82:3e:ff:11:1e:03: 8b:26:bf:3e:13:4f:a3:80:3a:60:0a:95:d4:03:fd: b2:0f:bd:f8:cc:10:da:57:f2:87:dc:42:d1:39:05: 83:9a:1d:5e:1c:aa:9d:45:72:7b:fb:36:c5:e3:6c: 42:5b:69:06:70:fc:fd:cb:49:b2:e1:76:b1:ba:c8: 30:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:02:F1:B7:45:78:5E:31:3C:DB:3C:CA:03:D1:21:6E:58:25:8A:FC X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e8:b6:e9:87:29:e4:e4:64:4c:ab:b0:45:c3:40:ff:32:45: f2:2a:1e:0a:36:42:1a:c1:e2:3d:9f:fb:9e:c4:38:ad:ca:1e: cf:3b:6b:81:5f:e2:82:8b:95:e3:78:44:bf:b8:66:49:80:4a: e8:ef:29:bc:5c:da:30:6c:54:7a:b5:fb:00:7e:a2:a7:8e:99: da:f8:ae:fe:fa:1d:a3:b3:91:f0:06:5b:67:58:56:ab:13:98: 0d:3b:d7:50:93:a9:41:33:5a:4f:97:e1:c0:42:11:97:e5:f7: 09:34:8e:a4:17:2b:36:be:5a:34:78:b5:a7:7c:6a:8b:96:97: bb:52:65:ec:34:6a:c1:4b:cd:1e:1b:a2:9e:5a:5d:85:f4:e1: f6:3d:6c:86:5c:32:fe:11:59:c8:fc:59:4c:00:2f:68:af:99: 4d:06:17:8a:7c:30:a6:77:d0:f3:35:d9:d0:eb:6f:10:a5:88: 06:2c:98:c2:57:19:26:f3:7b:66:0d:da:55:aa:c9:49:f7:38: bf:ae:7f:6b:e4:0c:3b:6c:75:da:f3:56:90:1e:b9:78:1d:e3: c3:94:b8:fc:1a:e6:60:36:8a:7b:bc:5b:08:e4:16:8e:bc:ab: d9:76:53:11:48:44:26:46:f5:0f:92:32:74:19:9a:ce:cd:a5: 3e:4f:7e:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjQxMTIxMDExNDI1WhcNMjQxMTI4MDExNDI1WjAYMRYwFAYD VQQDEw02NzNlODk3Mi02NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dpEb8he044oGkgxAfe+qUQmii6dbqIirW0FZDw4N7TVulfv5ug18xsHJa+s rKrbKSxDHUe8CdW3e6vNCJpdTKL81cAKjUDjo6Nj4eqMezO+qDKxuGLqhIyLgKck FaHSkT/N/ae/g/y3HuBIEttFvHhNbIuPF+MTsxQJspfF0rBkrz07raSy+aY+Wrt5 sDfO5IXk8R+8QcB9w+rJfS3IeYr51n9d5D/lBwD2Ry1DSW6OjvEI06ERx8YE25uC Pv8RHgOLJr8+E0+jgDpgCpXUA/2yD734zBDaV/KH3ELROQWDmh1eHKqdRXJ7+zbF 42xCW2kGcPz9y0my4XaxusgwXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwC8bdF eF4xPNs8ygPRIW5YJYr8MB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY6Lbphynk5GRMq7BFw0D/MkXyKh4KNkIaweI9n/uexDityh7PO2uB X+KCi5XjeES/uGZJgEro7ym8XNowbFR6tfsAfqKnjpna+K7++h2js5HwBltnWFar E5gNO9dQk6lBM1pPl+HAQhGX5fcJNI6kFys2vlo0eLWnfGqLlpe7UmXsNGrBS80e G6KeWl2F9OH2PWyGXDL+EVnI/FlMAC9or5lNBheKfDCmd9DzNdnQ628QpYgGLJjC Vxkm83tmDdpVqslJ9zi/rn9r5Aw7bHXa81aQHrl4HePDlLj8GuZgNop7vFsI5BaO vKvZdlMRSEQmRvUPkjJ0GZrOzaU+T36N -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:53 2024 by rpki-client on console-fra.rpki-client.org