$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft File: TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json) Hash identifier: 4bbb05ZdFUMTa1p7Id8E9fwDmXHn+yyceTvUIlJgTvk= Subject key identifier: C7:0C:55:A4:0F:45:43:75:69:BC:63:6A:99:0E:8F:00:2A:DE:DC:F4 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft Manifest number: 1866 Signing time: Fri 22 Nov 2024 17:38:58 +0000 Manifest this update: Fri 22 Nov 2024 17:38:58 +0000 Manifest next update: Fri 29 Nov 2024 17:38:58 +0000 Files and hashes: 1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: JeyuERyUbxL5kPzioaFfreDev4cx8fgLLlnCMq7lZuE=) 2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: VZ310XHqz7E6kV4iYMzKDA4mHeyDyg0Ah9OXuNqLvJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Nov 22 17:38:58 2024 GMT Not After : Nov 29 17:38:58 2024 GMT Subject: CN=6740c1b2-6c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e7:d1:7c:75:ab:12:97:6a:9f:59:ec:da:3a: 1c:f5:67:92:f8:db:ad:5f:c9:e4:e3:9f:19:e3:f9: 58:0b:fe:22:b9:4b:69:a7:91:93:ea:6e:da:51:e6: ef:1b:0d:84:bd:ed:a0:ea:48:ec:75:71:bb:47:b8: db:3d:eb:b9:29:73:ff:72:81:fa:02:38:3d:37:b1: d8:86:18:22:03:f1:3b:ff:66:c1:9b:c2:c8:6b:4a: 82:dc:9e:8f:c5:60:15:66:cb:38:f0:ca:be:f2:70: db:7a:a7:4d:07:4d:89:94:7c:ba:15:6b:d6:7c:d4: 91:7b:9d:a7:43:9e:38:76:f2:75:e7:43:76:6c:75: f3:55:e4:69:c9:39:8e:57:bd:cb:ce:40:9b:c8:43: b5:77:9b:8b:e2:d8:e9:d5:88:18:8b:45:94:56:eb: bc:99:9b:ef:09:0a:b9:53:57:c3:92:03:0f:bc:20: fb:f8:a2:c3:be:5f:8f:70:d0:1c:43:35:21:fa:4a: 58:77:7f:49:7d:2e:d4:a6:ee:24:47:20:fc:48:9c: 84:5a:87:22:19:84:e7:cb:79:0c:47:9c:ba:91:2a: 3d:39:e0:1a:5c:66:be:bd:0f:21:54:2f:3a:49:ab: 2f:3a:97:f9:e3:03:37:b0:4d:f5:d5:22:0a:59:55: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0C:55:A4:0F:45:43:75:69:BC:63:6A:99:0E:8F:00:2A:DE:DC:F4 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:50:7b:82:b0:6b:a5:07:56:5e:f2:9f:fa:a9:5f:8a:81:ab: 2b:11:d3:98:34:d2:61:1f:32:ee:a9:50:5f:b4:2c:c7:8f:59: 8d:64:52:df:9a:ad:e0:f8:88:89:5e:3e:ea:51:eb:5a:0e:89: 2f:4b:ca:ee:42:91:95:49:41:1f:fc:99:1c:98:19:ed:16:0b: 22:17:b9:03:15:59:b4:b9:7d:3d:b0:0f:07:ce:8e:77:03:22: 55:93:d4:ab:35:6d:94:d6:de:15:b3:fa:fa:88:96:31:d4:71: a6:84:3a:5b:63:64:52:22:c1:f5:bc:a1:e9:6c:f4:de:0b:7e: 1f:43:26:6d:22:15:bc:f5:b1:01:9e:e7:d5:c0:d5:ff:29:53: ba:2f:40:e0:f6:d0:48:68:e0:fa:e2:87:de:ff:6d:1b:3e:31: da:af:b7:4a:cc:d4:90:70:f9:ad:49:ec:cb:fe:1c:4d:82:b5: 04:e7:96:f1:36:53:84:27:cf:9a:96:f7:00:db:6e:09:88:cb: c0:12:74:b4:22:e9:0b:5b:e3:0a:01:f3:44:62:f2:a8:75:ab: 20:e6:5f:e9:6a:e8:b5:98:00:d5:c7:17:c5:97:b9:1c:2b:f3: 86:b5:45:15:42:18:e5:4c:af:d5:c4:1d:ee:56:95:fe:45:af: 57:48:73:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjQxMTIyMTczODU4WhcNMjQxMTI5MTczODU4WjAYMRYwFAYD VQQDEw02NzQwYzFiMi02YzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+fRfHWrEpdqn1ns2joc9WeS+NutX8nk458Z4/lYC/4iuUtpp5GT6m7aUebv Gw2Eve2g6kjsdXG7R7jbPeu5KXP/coH6Ajg9N7HYhhgiA/E7/2bBm8LIa0qC3J6P xWAVZss48Mq+8nDbeqdNB02JlHy6FWvWfNSRe52nQ544dvJ150N2bHXzVeRpyTmO V73LzkCbyEO1d5uL4tjp1YgYi0WUVuu8mZvvCQq5U1fDkgMPvCD7+KLDvl+PcNAc QzUh+kpYd39JfS7Upu4kRyD8SJyEWociGYTny3kMR5y6kSo9OeAaXGa+vQ8hVC86 SasvOpf54wM3sE311SIKWVWFtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcMVaQP RUN1abxjapkOjwAq3tz0MB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYx aVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbUHuCsGulB1Ze8p/6qV+KgasrEdOYNNJhHzLuqVBftCzHj1mNZFLf mq3g+IiJXj7qUetaDokvS8ruQpGVSUEf/JkcmBntFgsiF7kDFVm0uX09sA8Hzo53 AyJVk9SrNW2U1t4Vs/r6iJYx1HGmhDpbY2RSIsH1vKHpbPTeC34fQyZtIhW89bEB nufVwNX/KVO6L0Dg9tBIaOD64ofe/20bPjHar7dKzNSQcPmtSezL/hxNgrUE55bx NlOEJ8+alvcA224JiMvAEnS0IukLW+MKAfNEYvKodasg5l/paui1mADVxxfFl7kc K/OGtUUVQhjlTK/VxB3uVpX+Ra9XSHN2 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org