$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json) Hash identifier: VkTAdtnBUeJv40+IyA9Az3LpxfEhjlw2hAIVv5+T7Cs= Subject key identifier: EB:41:9F:5D:C5:8C:96:8B:E8:E2:59:BE:EE:CD:0A:7A:CC:73:82:D3 Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Certificate serial: 34A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft Manifest number: 3465 Signing time: Fri 22 Nov 2024 14:16:47 +0000 Manifest this update: Fri 22 Nov 2024 14:16:46 +0000 Manifest next update: Fri 29 Nov 2024 14:16:46 +0000 Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: t8TZ5PrP2UrPdfJxjFNtOJhzPNOaUzaB+xwcgc9Z6IY=) 2: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: Jx+kBtgC0xgWGjeWkPlQFuu0i2S4wXGYBy/j3os5GWY=) 3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: geXCKkNOBHVSbSaCvK7PvfsBCFg+zCxNd+kygTAhRgQ=) 4: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: ACWwhCc36Yo54BE+udYTmjJtznm+t8mF+fXdNiyCz9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13474 (0x34a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Validity Not Before: Nov 22 14:16:46 2024 GMT Not After : Nov 29 14:16:46 2024 GMT Subject: CN=6740924e-5066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:80:b3:c9:b1:fc:54:c7:3c:9c:4e:f3:64:da: 18:dd:44:75:80:84:ab:c2:31:9d:ef:6d:7a:fe:0a: 4f:f2:60:4a:17:44:ba:c7:3e:e0:12:09:a3:3b:39: f0:d3:d1:34:22:a5:ae:7c:09:96:8c:fe:47:59:84: 0e:0a:02:5e:a7:9f:66:6d:09:2b:3e:eb:43:74:9f: 13:d3:a5:f3:e8:6e:bb:c3:6e:f2:6b:d5:6a:3c:e3: 61:67:85:d2:50:4d:0a:c7:df:b2:22:b3:19:0f:bb: 79:91:e7:9a:2f:b0:b9:f6:3b:c9:a6:54:ed:ec:61: f3:86:1d:05:a1:87:e5:9f:4a:98:c4:27:75:6d:64: 8c:b4:57:54:1d:83:ad:0e:79:0e:2f:c6:4e:0b:31: a5:37:87:12:c4:46:21:1d:0f:95:33:24:63:92:de: 3f:da:36:b5:10:f3:b7:2d:d0:b6:5a:6d:80:cb:6a: 9a:6f:cf:40:fe:87:7d:b3:92:01:a4:e8:22:65:2b: 07:da:63:2f:75:97:61:e4:c7:58:fe:66:4c:e1:a4: f8:ea:cd:00:d8:af:a8:e8:cb:3c:de:82:1d:ed:71: 54:54:c9:6d:c0:b2:c9:09:3b:d9:b2:3e:1d:2d:fc: 2b:6b:99:33:6d:ec:25:1f:40:ad:1a:0a:6c:25:b3: 47:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:41:9F:5D:C5:8C:96:8B:E8:E2:59:BE:EE:CD:0A:7A:CC:73:82:D3 X509v3 Authority Key Identifier: keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d8:08:3f:31:70:29:46:80:30:d0:8d:af:92:aa:4a:d9:ad: 8a:76:ae:53:ef:27:c5:35:8c:32:86:6f:3a:b7:99:58:52:99: 33:ff:99:d4:b9:a6:32:db:77:0c:15:27:b8:11:92:36:a7:13: f8:36:66:aa:73:43:cc:12:f9:0b:ab:6d:b0:20:1e:cd:27:18: 57:28:2f:4c:49:f6:bd:5a:cd:91:9b:8c:a4:f6:28:33:8f:76: a0:c7:bd:d7:f6:7e:a9:9a:60:b8:39:b6:33:29:9c:8f:5f:d3: ba:07:b9:b0:d8:43:37:f8:30:c0:83:a9:63:a7:bf:72:e8:a7: 9e:7d:86:25:b5:2a:ce:fc:50:a4:84:66:39:09:38:3c:87:3a: a5:b7:72:77:94:4b:04:83:77:df:2a:8e:12:5c:2c:a9:f2:84: 50:8b:77:44:0c:3e:7e:49:3c:87:4f:ba:65:cd:7d:31:4b:5a: d1:3c:96:5d:f0:8a:96:5e:8f:86:31:d1:4c:9d:42:a4:db:91: ec:e6:07:53:02:1a:4e:2f:3f:71:52:90:f1:d6:9f:fd:28:c7: 60:34:6b:05:2d:ff:e7:a9:4a:27:1b:d3:34:e4:c3:02:6c:db: e5:9a:12:db:af:e2:f4:27:cc:fa:d4:20:2f:b9:3f:d5:45:30: 87:49:7d:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy MEFDMDM1MjcwHhcNMjQxMTIyMTQxNjQ2WhcNMjQxMTI5MTQxNjQ2WjAYMRYwFAYD VQQDEw02NzQwOTI0ZS01MDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YCzybH8VMc8nE7zZNoY3UR1gISrwjGd7216/gpP8mBKF0S6xz7gEgmjOznw 09E0IqWufAmWjP5HWYQOCgJep59mbQkrPutDdJ8T06Xz6G67w27ya9VqPONhZ4XS UE0Kx9+yIrMZD7t5keeaL7C59jvJplTt7GHzhh0FoYfln0qYxCd1bWSMtFdUHYOt DnkOL8ZOCzGlN4cSxEYhHQ+VMyRjkt4/2ja1EPO3LdC2Wm2Ay2qab89A/od9s5IB pOgiZSsH2mMvdZdh5MdY/mZM4aT46s0A2K+o6Ms83oId7XFUVMltwLLJCTvZsj4d Lfwra5kzbewlH0CtGgpsJbNHHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtBn13F jJaL6OJZvu7NCnrMc4LTMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU U3BxT1BuM2FqWTBnckFOU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp2Ag/MXApRoAw0I2vkqpK2a2Kdq5T7yfFNYwyhm86t5lYUpkz/5nU uaYy23cMFSe4EZI2pxP4Nmaqc0PMEvkLq22wIB7NJxhXKC9MSfa9Ws2Rm4yk9igz j3agx73X9n6pmmC4ObYzKZyPX9O6B7mw2EM3+DDAg6ljp79y6KeefYYltSrO/FCk hGY5CTg8hzqlt3J3lEsEg3ffKo4SXCyp8oRQi3dEDD5+STyHT7plzX0xS1rRPJZd 8IqWXo+GMdFMnUKk25Hs5gdTAhpOLz9xUpDx1p/9KMdgNGsFLf/nqUonG9M05MMC bNvlmhLbr+L0J8z61CAvuT/VRTCHSX1z -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org