$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json) Hash identifier: fq5dRgyUeebhxFUXjV0XWhYXRg3oImyWFyzITWsX4Nc= Subject key identifier: 85:17:77:EA:DB:4C:AD:8A:33:D8:73:A3:A1:C1:2D:B7:88:52:02:32 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1EF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft Manifest number: 1ECC Signing time: Wed 20 Nov 2024 16:01:08 +0000 Manifest this update: Wed 20 Nov 2024 16:01:08 +0000 Manifest next update: Wed 27 Nov 2024 16:01:08 +0000 Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: 1owaCV2C/QYDcwXwinY1GHv6EWtq2eB7dZ83Io1VqZU=) 2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: RIwHYJzTiAWJxrJm6ZlI9pwCw54A8DHzjwyPnvWV7go=) 3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dCOIN/2nmGcz+3ww4TNjjrCMZCl/2EWyMlSqG1WrmiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7922 (0x1ef2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Nov 20 16:01:08 2024 GMT Not After : Nov 27 16:01:08 2024 GMT Subject: CN=673e07c4-9218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:57:34:6d:c2:02:c4:79:b7:4a:b6:04:1f:1b: 78:f5:a1:e2:d4:d8:f4:eb:30:0b:23:f1:88:ab:62: cb:ad:c1:86:ff:3d:2c:08:16:d8:9c:0b:f6:97:31: de:5d:3b:88:0b:85:9b:97:b1:31:7e:2e:24:8d:e7: 42:ab:ac:b8:ce:de:e1:78:27:ba:ac:b6:ce:e4:08: e1:a2:2a:2d:24:0a:23:9b:5c:81:16:03:c2:7b:d5: b9:eb:24:cb:40:73:80:c3:dc:ae:28:ee:b7:83:b5: 82:c5:e3:45:6c:55:e3:06:b7:fa:6e:1a:0b:26:4f: 40:22:58:ef:01:40:22:ea:c0:1c:13:8e:b3:dc:a3: dd:72:91:c1:33:82:23:6a:36:b7:d3:17:49:f1:e9: 75:e6:c1:51:98:fb:98:96:6b:ce:d2:d4:4e:33:95: d8:5c:8b:17:03:cd:dc:27:ad:56:51:19:ce:ee:4c: 2e:09:70:62:61:48:03:25:fe:8a:a5:98:7c:cf:a8: 0f:48:a8:e8:8c:bb:41:86:f3:02:89:de:0c:79:25: c9:e9:2a:ee:ad:9b:10:c6:c0:5f:37:4f:65:05:c2: 3e:40:98:3e:c0:ac:3f:9c:2f:99:03:f5:f1:ed:80: 53:c6:7d:57:9b:a0:4d:23:22:e8:af:ee:d5:87:47: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:17:77:EA:DB:4C:AD:8A:33:D8:73:A3:A1:C1:2D:B7:88:52:02:32 X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c7:e6:e9:3d:5f:1c:15:d5:22:f8:8b:a8:4d:48:8e:1f:19: 54:90:73:3d:26:38:c8:99:ad:b7:11:f2:9e:ef:47:2c:1f:eb: 84:c5:66:4c:09:c6:8a:54:23:ae:0d:db:79:2d:a6:45:b5:35: b8:17:d1:e8:56:13:73:8b:09:85:34:8d:a1:6a:2c:19:fb:21: b6:61:ed:31:54:9e:c7:88:60:b4:44:1e:f5:b8:cf:71:8e:18: a2:02:40:68:66:7a:b2:4c:f4:f5:41:c8:6f:6c:fc:fb:dd:45: d6:8f:44:36:d8:49:cd:55:46:f9:1a:2b:d7:85:d8:2c:8e:06: 5d:f1:e8:3a:78:74:2e:96:94:c2:27:c3:77:15:1a:49:bf:51: 3c:36:a5:f6:ac:f0:39:ec:c0:e1:2d:ad:f8:d2:71:c6:86:94: bd:24:8a:b0:bf:19:3c:68:31:81:e4:42:28:45:10:36:d8:e0: ff:a6:60:9f:27:29:5b:a4:7e:09:13:56:8d:58:d0:ec:d5:d4: d8:b7:18:fc:41:53:69:ee:94:41:d0:61:8c:80:35:69:ef:ee: a6:4c:e5:39:05:30:bd:d4:d8:8d:0d:a2:6d:18:0b:aa:c9:15: 21:8d:18:43:31:8a:dc:aa:a0:d4:53:5b:41:2a:36:aa:9c:d7: 33:d0:18:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjQxMTIwMTYwMTA4WhcNMjQxMTI3MTYwMTA4WjAYMRYwFAYD VQQDEw02NzNlMDdjNC05MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAklc0bcICxHm3SrYEHxt49aHi1Nj06zALI/GIq2LLrcGG/z0sCBbYnAv2lzHe XTuIC4Wbl7Exfi4kjedCq6y4zt7heCe6rLbO5AjhoiotJAojm1yBFgPCe9W56yTL QHOAw9yuKO63g7WCxeNFbFXjBrf6bhoLJk9AIljvAUAi6sAcE46z3KPdcpHBM4Ij aja30xdJ8el15sFRmPuYlmvO0tROM5XYXIsXA83cJ61WURnO7kwuCXBiYUgDJf6K pZh8z6gPSKjojLtBhvMCid4MeSXJ6SrurZsQxsBfN09lBcI+QJg+wKw/nC+ZA/Xx 7YBTxn1Xm6BNIyLor+7Vh0ciBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUXd+rb TK2KM9hzo6HBLbeIUgIyMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx dTd2eXdoTU50RlZFNXRNcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAux+bpPV8cFdUi+IuoTUiOHxlUkHM9JjjIma23EfKe70csH+uExWZM CcaKVCOuDdt5LaZFtTW4F9HoVhNziwmFNI2haiwZ+yG2Ye0xVJ7HiGC0RB71uM9x jhiiAkBoZnqyTPT1QchvbPz73UXWj0Q22EnNVUb5GivXhdgsjgZd8eg6eHQulpTC J8N3FRpJv1E8NqX2rPA57MDhLa340nHGhpS9JIqwvxk8aDGB5EIoRRA22OD/pmCf JylbpH4JE1aNWNDs1dTYtxj8QVNp7pRB0GGMgDVp7+6mTOU5BTC91NiNDaJtGAuq yRUhjRhDMYrcqqDUU1tBKjaqnNcz0Bgq -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:21 2024 by rpki-client on console-ams.rpki-client.org