$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft File: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json) Hash identifier: DSlhOTiHGxVzqY/SvN0dHGXbzSZFUHY6M9KY9MXXK9Y= Subject key identifier: 24:B6:35:E4:14:53:CF:76:C0:9D:41:38:38:46:EF:0F:32:B5:FC:CB Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 347F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft Manifest number: 3447 Signing time: Fri 22 Nov 2024 14:58:52 +0000 Manifest this update: Fri 22 Nov 2024 14:58:51 +0000 Manifest next update: Fri 29 Nov 2024 14:58:51 +0000 Files and hashes: 1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: grE/rnt+b8P1rQh3ki552erJiSI1HzXo9gVBn06rMP0=) 2: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: fjbU4kifknzThOl77MDsj7c6VVBdtScCgb61mfzRheI=) 3: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: Dxxz+0RRzU627PcHaQAquZ9v+JbSol4zXAoOXpPJbsU=) 4: E205744CABA111EAB7C51982C4F9AE02.roa (hash: OxKW8hsqjWscxfPShTM40PQzZKSrlzhnwSut+FEmnlg=) 5: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: M+tGsnWbJZMf38wW2dDWR88TaEadxMXAYwfrmdhBct8=) 6: CBCB218CD86F11E9A6AF7518C4F9AE02.roa (hash: WVohVyvw2E4AK7O1Wwq2KYMAQT38Mu+u1YSlIgQx2Cc=) 7: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: iFCi6WD1Ee2W/w9mVYR65MihhiKOMnJaYvR7pR+MOrA=) 8: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: braMW0NAbwyLaqUHCm7d+knh/mAQhxqCF/Ie867bEqc=) 9: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: 3ao6gZOCB7bWk97kdXE8nPqzCHVbDTqlOEH/CfqGuLA=) 10: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: GEK6jcGIe//8LlsnmmOKojpjhgPgAdo098fH+Bv7usk=) 11: D99C6B9853BE11EF819E6347C4F9AE02.roa (hash: HMObo0lfz4F6N80OBTdLQh6EOPuKBNscLBysUmuHPew=) 12: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: AzDpfRzBUtomgLnjKPD/8OpUvxfEaOLl7f7ZXs6THbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13439 (0x347f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Nov 22 14:58:51 2024 GMT Not After : Nov 29 14:58:51 2024 GMT Subject: CN=67409c2b-88b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:bb:54:8b:47:c2:81:f6:0f:15:62:dd:7b: 1c:5e:79:fb:99:aa:99:36:62:7d:d9:43:87:a6:9f: f2:38:48:6b:70:0d:9e:4e:11:0a:ca:ba:8a:ff:81: 45:8e:59:a4:12:da:27:4a:a0:99:ad:b5:8f:fe:0a: 61:d0:d8:d3:2f:33:e0:11:50:23:5a:3b:81:60:07: d2:1a:85:88:d1:e9:ce:df:dc:44:0d:1c:95:1e:3c: 0b:2f:4d:5c:3c:15:45:27:b2:12:c0:e5:5b:81:53: 68:40:3d:20:69:57:04:07:85:2d:19:0b:8f:06:9a: 36:98:09:ca:97:bc:ca:db:c1:63:1e:da:c7:4a:bd: 74:d3:e2:0c:9e:d7:14:2b:2f:16:2f:09:d0:38:9b: 12:70:f7:9d:b0:1d:40:3c:2f:c7:55:8c:96:e5:81: 24:81:a3:b9:f8:ad:6f:1a:79:36:75:fb:53:b1:d5: 9d:26:47:35:2b:0a:bf:a8:d8:73:d8:5b:7e:b6:81: 81:d9:a8:dd:0d:8d:de:22:a2:b9:01:05:b7:a4:b4: 35:f5:a7:3e:6a:84:dd:e9:93:2c:3d:75:80:98:37: 1d:89:f8:5f:59:2b:12:7b:14:28:f3:63:6f:93:d4: 8c:93:39:61:64:b0:1c:e6:bb:4e:87:3b:f0:bf:94: 3c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B6:35:E4:14:53:CF:76:C0:9D:41:38:38:46:EF:0F:32:B5:FC:CB X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:85:30:26:7d:c1:80:e0:66:76:34:a5:68:e9:ad:93:ed:cf: c6:e6:a9:79:e7:3f:ef:fa:28:0c:e9:ba:87:af:07:b9:e7:f4: 70:56:7f:52:64:04:19:4a:bb:95:b8:2d:55:78:36:fd:63:6a: 2b:b3:d8:c2:c8:bd:da:20:d6:00:6d:21:18:1f:2f:b8:ef:da: 67:13:f2:41:08:06:68:cc:08:ab:12:02:60:84:4a:2c:8b:a9: ac:6d:4f:1e:22:4a:0e:33:db:8c:55:ab:37:a9:ec:9b:1d:93: d4:10:31:d2:32:b3:c1:6f:24:7b:ee:95:8d:88:86:ba:70:b5: d7:6c:34:97:f2:0a:d2:10:0f:04:bd:61:17:ce:3c:fe:75:ba: 1a:67:a2:0e:1c:c3:cd:cd:0e:de:f1:be:e6:f0:00:d0:dc:7c: 2d:26:c1:02:73:35:0b:f2:94:e7:cd:04:61:cb:21:6d:05:85: 5f:77:c9:97:c6:b6:62:3e:3d:e3:b8:de:47:5e:c2:22:a7:59: 1c:a1:aa:9a:9f:45:0a:4a:17:ff:47:d5:88:54:07:60:21:80: d3:af:7e:b9:b0:a7:e8:ff:0f:b6:2e:77:c1:0c:3b:61:5c:b9: 32:3e:06:4a:65:8e:45:1e:a6:99:5a:3a:df:9b:2f:4a:1e:d1: 36:09:42:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjQxMTIyMTQ1ODUxWhcNMjQxMTI5MTQ1ODUxWjAYMRYwFAYD VQQDEw02NzQwOWMyYi04OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQS7VItHwoH2DxVi3XscXnn7maqZNmJ92UOHpp/yOEhrcA2eThEKyrqK/4FF jlmkEtonSqCZrbWP/gph0NjTLzPgEVAjWjuBYAfSGoWI0enO39xEDRyVHjwLL01c PBVFJ7ISwOVbgVNoQD0gaVcEB4UtGQuPBpo2mAnKl7zK28FjHtrHSr100+IMntcU Ky8WLwnQOJsScPedsB1APC/HVYyW5YEkgaO5+K1vGnk2dftTsdWdJkc1Kwq/qNhz 2Ft+toGB2ajdDY3eIqK5AQW3pLQ19ac+aoTd6ZMsPXWAmDcdifhfWSsSexQo82Nv k9SMkzlhZLAc5rtOhzvwv5Q8vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCS2NeQU U892wJ1BODhG7w8ytfzLMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS9ENTIxNDI3MDFEOUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJ MVZKRG12ams0S0NjajJXUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNhTAmfcGA4GZ2NKVo6a2T7c/G5ql55z/v+igM6bqHrwe55/RwVn9S ZAQZSruVuC1VeDb9Y2ors9jCyL3aINYAbSEYHy+479pnE/JBCAZozAirEgJghEos i6msbU8eIkoOM9uMVas3qeybHZPUEDHSMrPBbyR77pWNiIa6cLXXbDSX8grSEA8E vWEXzjz+dboaZ6IOHMPNzQ7e8b7m8ADQ3HwtJsECczUL8pTnzQRhyyFtBYVfd8mX xrZiPj3juN5HXsIip1kcoaqan0UKShf/R9WIVAdgIYDTr365sKfo/w+2LnfBDDth XLkyPgZKZY5FHqaZWjrfmy9KHtE2CUJe -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org