$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft File: _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json) Hash identifier: aeEcHi91Zum1gY9dqYWQW7J/Pwml0IjjUOgf0iGWXZQ= Subject key identifier: 70:75:5E:CF:EC:B9:12:CE:33:0A:47:7D:F2:06:46:E1:5A:B9:2B:4C Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 Certificate issuer: /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Certificate serial: 0D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft Manifest number: 0C7C Signing time: Wed 20 Nov 2024 19:01:27 +0000 Manifest this update: Wed 20 Nov 2024 19:01:26 +0000 Manifest next update: Wed 27 Nov 2024 19:01:26 +0000 Files and hashes: 1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: LEgL+FzC56Ep3NTVr6LcK0bpTKsian1rJ5FeI8tj2cg=) 2: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: uZ5YDui1RCbBQkk1AIcjpTZBu16nBKp9g9WFb9I9UmQ=) 3: 6CFA8FCA2B0811EBB691DC29C4F9AE02.roa (hash: Bpk91urqHERfjUqp6cWbES4hEGNXpjLujxmwt1eMCvs=) 4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: P8PLziuil4U42Nnqve/PHmI7Y1+H0hWzEptlameEesM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880 Validity Not Before: Nov 20 19:01:26 2024 GMT Not After : Nov 27 19:01:26 2024 GMT Subject: CN=673e3207-f2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:e6:3c:24:eb:50:7e:af:21:f4:38:0c:43: 77:04:b8:a6:09:4a:f3:3b:ec:c4:67:23:a2:df:5e: 3e:e5:ea:cd:95:26:a7:f9:0b:f3:c0:4c:c6:67:37: d0:34:7a:4f:6b:dd:29:8e:b6:c1:e7:36:ce:98:4d: 84:a6:2b:79:ce:0a:f0:a9:5f:32:a5:e6:55:12:b5: bb:fa:4e:e2:a4:9d:66:63:af:11:24:03:53:d9:eb: 12:e8:7c:99:ea:73:d8:7e:71:f5:de:3c:96:24:11: 36:56:d7:ec:6b:65:3a:df:80:27:96:8f:0a:88:9a: c3:24:66:d3:51:22:23:1c:af:7e:92:73:02:c3:34: 66:95:a9:d4:19:fe:06:20:a6:95:03:11:a4:64:c7: 6a:97:43:d3:84:a0:6f:c0:19:ee:9b:8a:c3:7d:35: 65:5e:9c:e6:33:14:10:9d:90:11:51:fd:49:81:c8: a3:4f:c9:74:fb:42:3e:cf:d1:ec:5e:7c:0a:37:d3: 60:b3:dc:c6:ab:a9:db:5e:b1:43:36:00:e0:a9:71: a0:b7:0c:89:90:cf:72:44:28:a0:72:bc:d6:fd:b8: 01:cf:64:44:f6:19:ec:fb:de:7b:23:79:cd:e2:45: d8:2d:76:bb:58:85:b9:f3:c0:44:ff:a6:a8:b5:2d: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:75:5E:CF:EC:B9:12:CE:33:0A:47:7D:F2:06:46:E1:5A:B9:2B:4C X509v3 Authority Key Identifier: keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:57:c7:df:30:05:c1:ec:e9:78:43:ff:8f:d0:52:c5:6d:33: 27:46:20:37:ee:d4:f8:08:7b:d1:c8:4f:71:ba:a9:a0:0b:34: 3e:ff:b0:e8:4a:0c:78:a8:e2:53:fa:c6:e4:75:1a:3f:ad:34: 0e:7e:e7:70:a1:c0:a4:b9:6c:40:00:b3:1e:2c:f7:50:f5:d8: 2f:a0:a2:e4:64:89:32:6b:d8:0a:65:80:35:92:6a:92:44:a5: 55:95:0e:57:a4:29:e8:64:60:f1:4a:48:71:7d:ea:f2:4f:d4: df:bb:17:78:76:42:c6:01:79:74:ff:04:8a:09:78:61:f2:5f: 27:d5:f1:f2:a1:31:81:17:c0:16:16:37:f8:7a:0b:9b:9c:62: de:6a:14:32:08:ad:d9:94:48:01:6e:00:7d:d4:bc:f0:1e:c5: ff:d8:61:26:35:a7:47:28:59:7e:d5:23:6e:eb:f9:b1:35:cb: 42:5b:c4:5f:5c:49:6b:1c:b1:37:d5:82:7a:c7:8f:91:96:66: d3:0e:91:5f:5a:51:be:22:ed:19:9b:1b:c7:a0:e4:ca:3a:f8: 77:48:21:5b:be:7b:06:9d:a3:d0:c2:cc:95:f2:4e:b0:bc:90: 6d:36:9a:4f:4c:af:5b:2e:be:06:40:b3:e7:15:91:4c:6f:9a: 0a:6d:4a:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4 MUIyMkU4ODAwHhcNMjQxMTIwMTkwMTI2WhcNMjQxMTI3MTkwMTI2WjAYMRYwFAYD VQQDEw02NzNlMzIwNy1mMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqTmPCTrUH6vIfQ4DEN3BLimCUrzO+zEZyOi314+5erNlSan+QvzwEzGZzfQ NHpPa90pjrbB5zbOmE2Epit5zgrwqV8ypeZVErW7+k7ipJ1mY68RJANT2esS6HyZ 6nPYfnH13jyWJBE2Vtfsa2U634Anlo8KiJrDJGbTUSIjHK9+knMCwzRmlanUGf4G IKaVAxGkZMdql0PThKBvwBnum4rDfTVlXpzmMxQQnZARUf1JgcijT8l0+0I+z9Hs XnwKN9Ngs9zGq6nbXrFDNgDgqXGgtwyJkM9yRCigcrzW/bgBz2RE9hns+957I3nN 4kXYLXa7WIW588BE/6aotS1GLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB1Xs/s uRLOMwpHffIGRuFauStMMB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1 RW41eDVMYkJocDJCc2k2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDV8ffMAXB7Ol4Q/+P0FLFbTMnRiA37tT4CHvRyE9xuqmgCzQ+/7Do Sgx4qOJT+sbkdRo/rTQOfudwocCkuWxAALMeLPdQ9dgvoKLkZIkya9gKZYA1kmqS RKVVlQ5XpCnoZGDxSkhxferyT9Tfuxd4dkLGAXl0/wSKCXhh8l8n1fHyoTGBF8AW Fjf4egubnGLeahQyCK3ZlEgBbgB91LzwHsX/2GEmNadHKFl+1SNu6/mxNctCW8Rf XElrHLE31YJ6x4+RlmbTDpFfWlG+Iu0ZmxvHoOTKOvh3SCFbvnsGnaPQwsyV8k6w vJBtNppPTK9bLr4GQLPnFZFMb5oKbUpl -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:49 2024 by rpki-client on console-ams.rpki-client.org