$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: K+CaEpzp6HbELvWt54FAUA2Ai1VDvRp1LhkFdwmvprc= Subject key identifier: EC:A8:60:F8:B4:0C:55:FA:E3:E9:F0:F0:65:12:77:78:90:ED:CE:74 Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 0191 Signing time: Sat 23 Nov 2024 01:53:21 +0000 Manifest this update: Sat 23 Nov 2024 01:53:20 +0000 Manifest next update: Sat 30 Nov 2024 01:53:20 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: VdczCS0EXEj44/TI5x6cFz0OTGq2XG9hgANLCJe3c8Q=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Nov 23 01:53:20 2024 GMT Not After : Nov 30 01:53:20 2024 GMT Subject: CN=67413591-2f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:a0:9a:7e:57:5e:a8:f0:66:50:14:43:3e: a5:07:7e:41:fe:c1:da:d8:d5:8c:8a:11:91:cd:54: ff:36:a4:6e:60:b1:d9:12:a4:f7:9c:19:5c:02:f6: 33:e3:83:43:f0:87:2c:48:e2:97:86:45:3d:65:b3: 7f:e2:78:35:b2:7c:4b:d4:28:f1:09:8d:0a:24:28: 16:f8:09:24:c3:fd:10:82:3d:e2:65:1a:36:1a:d9: bf:71:66:51:82:3f:04:64:3e:48:cb:b8:69:6b:89: 47:61:03:2c:1b:33:57:8b:a4:31:3e:52:dc:d9:37: 2f:06:8e:4e:8c:c3:95:c1:91:3e:9c:75:cc:b1:c0: 32:ff:1d:36:06:71:0d:a2:1f:24:2f:56:37:05:ba: c7:03:d8:8c:ed:82:81:56:33:21:9c:45:b4:80:de: d7:71:db:48:5b:d0:6b:e1:a1:d5:ff:61:38:18:c9: b8:ea:ec:78:3e:50:23:24:bc:70:fc:68:c6:9c:b4: 07:10:61:e3:c9:bf:7b:6e:33:6c:db:d2:73:80:58: 34:63:a1:7f:6f:aa:08:32:2b:11:51:c7:30:af:fb: f6:0c:87:6b:5f:59:ea:f8:19:09:d2:c6:4c:26:ee: 09:b7:a8:82:3d:ba:84:d6:45:ca:92:a6:fa:e5:4a: 8f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A8:60:F8:B4:0C:55:FA:E3:E9:F0:F0:65:12:77:78:90:ED:CE:74 X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:83:0c:29:45:4b:92:8a:5b:1e:66:dd:c5:66:66:05:da:d6: 34:9d:de:1b:fe:15:82:3b:55:3b:ac:8d:ea:54:b7:1b:be:55: b3:0b:4c:ee:98:4b:dd:9b:3a:fb:26:4c:cc:65:eb:3c:7b:ca: 11:e4:89:10:75:c8:ca:d5:75:10:fa:b0:de:d8:14:4d:f3:4e: 4c:c0:07:db:0a:28:97:da:f5:d5:de:e6:43:d1:71:7d:e4:17: cf:ee:dc:88:20:e2:e4:ed:a4:87:a8:d6:f2:de:4c:e7:5e:dd: 54:be:e9:87:1e:8a:09:e5:56:68:0c:5a:cf:5d:f5:77:f2:db: 6c:2e:b5:9e:d2:34:33:34:fa:91:f7:3e:03:4a:29:17:bd:5e: 71:8c:c4:bd:55:95:e8:9b:fe:f3:28:91:2f:49:e5:e9:fa:c7: b6:04:e6:1e:5f:16:05:d2:46:91:c9:16:cd:71:00:17:96:d3: 92:ea:b9:19:91:ae:35:89:af:68:01:63:a0:07:c5:6d:ff:09: 3d:a8:cc:79:3a:28:9c:db:7c:f8:e8:eb:8c:b0:ff:32:1b:b0: d0:62:1e:b1:6b:fd:6a:e5:0c:79:89:2d:67:b8:1e:ea:8e:fb: 11:27:ef:59:c8:64:4b:44:51:43:0f:a9:c0:8f:60:eb:b5:a3: 51:cf:c0:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjQxMTIzMDE1MzIwWhcNMjQxMTMwMDE1MzIwWjAYMRYwFAYD VQQDEw02NzQxMzU5MS0yZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro2gmn5XXqjwZlAUQz6lB35B/sHa2NWMihGRzVT/NqRuYLHZEqT3nBlcAvYz 44ND8IcsSOKXhkU9ZbN/4ng1snxL1CjxCY0KJCgW+Akkw/0Qgj3iZRo2Gtm/cWZR gj8EZD5Iy7hpa4lHYQMsGzNXi6QxPlLc2TcvBo5OjMOVwZE+nHXMscAy/x02BnEN oh8kL1Y3BbrHA9iM7YKBVjMhnEW0gN7XcdtIW9Br4aHV/2E4GMm46ux4PlAjJLxw /GjGnLQHEGHjyb97bjNs29JzgFg0Y6F/b6oIMisRUccwr/v2DIdrX1nq+BkJ0sZM Ju4Jt6iCPbqE1kXKkqb65UqPPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyoYPi0 DFX64+nw8GUSd3iQ7c50MB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9gwwpRUuSilseZt3FZmYF2tY0nd4b/hWCO1U7rI3qVLcbvlWzC0zu mEvdmzr7JkzMZes8e8oR5IkQdcjK1XUQ+rDe2BRN805MwAfbCiiX2vXV3uZD0XF9 5BfP7tyIIOLk7aSHqNby3kznXt1UvumHHooJ5VZoDFrPXfV38ttsLrWe0jQzNPqR 9z4DSikXvV5xjMS9VZXom/7zKJEvSeXp+se2BOYeXxYF0kaRyRbNcQAXltOS6rkZ ka41ia9oAWOgB8Vt/wk9qMx5Oiic23z46OuMsP8yG7DQYh6xa/1q5Qx5iS1nuB7q jvsRJ+9ZyGRLRFFDD6nAj2DrtaNRz8Bu -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org