$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft File: Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json) Hash identifier: jf+MCc+OExbNL5zhHh7MHVt73tj3IZFieGC6RzKhLFw= Subject key identifier: 32:FB:84:11:C6:43:CE:7E:F0:FF:19:68:E6:F9:24:1E:5C:8B:07:F4 Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft Manifest number: 011D Signing time: Thu 21 Nov 2024 03:06:30 +0000 Manifest this update: Thu 21 Nov 2024 03:06:29 +0000 Manifest next update: Thu 28 Nov 2024 03:06:29 +0000 Files and hashes: 1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: Oly+0uKdA48CkKklMjWYIpnHJArLgH9Z3znjxWp1FKo=) 2: 4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa (hash: Nnq2nSrzZVVFW1WeAqLhZAthl6arj6cpbPo8gyxuIuE=) 3: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: aBVN2JXXEh8Q6gT/6fY3ErLQwRzmiGLd4BoBMHyur8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: Nov 21 03:06:29 2024 GMT Not After : Nov 28 03:06:29 2024 GMT Subject: CN=673ea3b6-ab66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f3:13:2c:75:05:b1:e6:00:e4:a6:4f:91:ab: 0b:62:06:37:b6:ca:bb:a2:3f:0b:07:a7:4c:2e:42: 58:69:56:d9:2f:a5:da:98:86:70:07:f7:04:87:80: 3f:76:42:2a:c3:7e:7c:73:73:d1:fa:e2:87:2f:90: 67:87:9a:62:c1:e2:a1:a3:93:d0:48:be:69:a0:d1: 79:13:5b:79:92:77:91:5d:df:38:69:13:63:20:a2: cc:a4:79:f5:9e:c9:d8:a1:1f:19:6c:ae:20:05:9f: f6:04:7f:99:45:b7:1a:24:f7:76:05:7c:f0:25:22: 53:9c:ba:7f:88:3d:72:57:41:8d:b2:80:ca:85:d0: 0a:fd:ed:78:7e:e6:fd:8f:75:5f:57:54:70:97:1c: 57:01:2a:1a:ab:da:16:e3:f7:e5:3a:60:77:01:3f: 28:6f:aa:32:6f:f7:f1:5f:48:33:c7:cb:ea:8a:a7: 1e:e7:8e:9a:1e:04:de:e0:ca:a0:c2:8c:fb:18:08: ba:32:55:67:31:71:96:6f:65:9a:bb:4f:1a:ee:40: 52:83:72:59:4e:ba:f0:75:89:df:c4:34:0a:23:3c: f1:03:c4:7d:4b:68:16:e6:cc:ce:11:b3:b2:46:b4: e1:3c:23:53:ef:64:cb:04:3b:4e:80:60:5b:6e:42: 0d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FB:84:11:C6:43:CE:7E:F0:FF:19:68:E6:F9:24:1E:5C:8B:07:F4 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:cb:69:d3:42:40:ac:55:bc:27:59:43:82:93:2e:a2:59:17: 78:b6:4a:8a:0b:2a:d5:66:bf:3e:67:bd:b9:49:d7:80:f4:a6: 29:c6:ff:be:99:2d:66:43:20:a4:bf:ba:f7:3c:15:93:f1:12: 25:5b:c6:25:15:70:69:96:9c:9d:f7:ed:df:c6:88:07:4d:fd: 38:00:00:c8:b9:31:42:8a:9c:53:bd:62:f6:8b:6d:f5:d2:d4: ef:7e:a3:9b:91:8d:44:b9:ec:31:d2:3c:15:0b:1c:be:5e:1b: 22:21:fd:d9:e0:f0:a4:04:69:c2:bc:0b:0c:e0:00:7e:20:cb: 96:4e:f2:30:b3:12:23:a8:4d:45:8e:bf:dc:28:17:da:6d:63: fa:2a:0e:69:c5:cb:6b:b3:b3:ea:0d:a0:a8:5b:2a:6e:d2:59: 5a:90:d2:b7:56:50:a0:7f:28:e1:af:7d:d1:0d:e8:3c:a2:a6: 97:33:29:fa:98:d0:89:86:61:d0:e2:b5:fa:39:bb:e8:82:71: c4:76:de:de:69:7d:92:44:3e:fc:81:97:26:a9:5d:e8:dd:da: 4b:7c:67:3c:15:6b:62:23:64:81:af:6a:07:72:4d:33:f3:69: fa:11:6a:f2:04:92:c7:18:4d:51:a7:17:90:bf:f4:ab:dc:97: 22:85:9e:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjQxMTIxMDMwNjI5WhcNMjQxMTI4MDMwNjI5WjAYMRYwFAYD VQQDEw02NzNlYTNiNi1hYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vMTLHUFseYA5KZPkasLYgY3tsq7oj8LB6dMLkJYaVbZL6XamIZwB/cEh4A/ dkIqw358c3PR+uKHL5Bnh5piweKho5PQSL5poNF5E1t5kneRXd84aRNjIKLMpHn1 nsnYoR8ZbK4gBZ/2BH+ZRbcaJPd2BXzwJSJTnLp/iD1yV0GNsoDKhdAK/e14fub9 j3VfV1RwlxxXASoaq9oW4/flOmB3AT8ob6oyb/fxX0gzx8vqiqce546aHgTe4Mqg woz7GAi6MlVnMXGWb2Wau08a7kBSg3JZTrrwdYnfxDQKIzzxA8R9S2gW5szOEbOy RrThPCNT72TLBDtOgGBbbkINtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL7hBHG Q85+8P8ZaOb5JB5ciwf0MB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1 a3NMbXBzR1lBVzNvejR2eFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/y2nTQkCsVbwnWUOCky6iWRd4tkqKCyrVZr8+Z725SdeA9KYpxv++ mS1mQyCkv7r3PBWT8RIlW8YlFXBplpyd9+3fxogHTf04AADIuTFCipxTvWL2i231 0tTvfqObkY1Euewx0jwVCxy+XhsiIf3Z4PCkBGnCvAsM4AB+IMuWTvIwsxIjqE1F jr/cKBfabWP6Kg5pxctrs7PqDaCoWypu0llakNK3VlCgfyjhr33RDeg8oqaXMyn6 mNCJhmHQ4rX6ObvognHEdt7eaX2SRD78gZcmqV3o3dpLfGc8FWtiI2SBr2oHck0z 82n6EWryBJLHGE1RpxeQv/Sr3JcihZ64 -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:58 2024 by rpki-client on console-fra.rpki-client.org