$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: /JzvMwp9KSs/+mY40bYfaBooyRmQm2eb60agYUWfBmA= Subject key identifier: 80:13:C7:5C:83:E1:A2:E4:BD:73:0E:C0:5F:2D:EF:F7:6A:24:8B:94 Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 058A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 0581 Signing time: Fri 22 Nov 2024 22:50:01 +0000 Manifest this update: Fri 22 Nov 2024 22:50:01 +0000 Manifest next update: Fri 29 Nov 2024 22:50:01 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: JIlgCCpqBges/zl9Gx5zSU0JEfwiyMVO9wngaIQjYSI=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: lIjcqd286hVmP0gmWFuL30xCtnneoUBSKf5zlGyFpHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1418 (0x58a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Nov 22 22:50:01 2024 GMT Not After : Nov 29 22:50:01 2024 GMT Subject: CN=67410a99-bb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:4e:4c:fc:03:99:a3:b2:83:72:f4:1d:db: ae:7f:58:fc:9e:4c:21:09:aa:0d:dc:02:50:77:da: 0a:00:09:5b:1e:cf:ae:f8:6c:1b:f1:e8:2d:4e:39: 45:7b:89:f8:ed:57:6a:12:91:49:f2:61:c0:1e:1d: af:a6:33:89:44:7b:6c:a5:05:ae:0c:b8:ba:15:82: f4:eb:a5:4d:74:df:c9:a7:a2:33:4f:8a:e9:b1:a4: 05:16:10:1f:75:2c:b3:f7:77:e1:29:bc:ac:55:c3: 7a:d3:65:dd:b2:87:05:31:6b:56:77:56:d5:74:66: d5:30:d1:32:83:b7:2c:75:1c:44:e1:bd:51:f7:1c: be:cd:09:d8:95:24:74:a6:24:a3:e3:96:18:a5:e7: 12:90:5e:24:79:c9:82:77:0c:e6:a1:a2:39:6b:6a: dd:74:ea:50:7a:94:6b:ec:4f:89:d9:cb:d7:b2:1e: 23:c4:30:f5:d8:ae:34:27:8b:bd:e1:4b:ba:6d:5d: fe:45:bd:e3:91:2a:2f:64:af:92:46:9c:8d:9a:5a: 29:f1:49:92:27:0a:d3:8b:98:3d:0c:3b:53:58:54: 04:86:da:35:9a:a9:ce:9e:57:d7:fb:a2:a0:44:b6: 89:be:fb:37:2d:9f:48:8c:5d:5a:05:62:44:36:2c: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:13:C7:5C:83:E1:A2:E4:BD:73:0E:C0:5F:2D:EF:F7:6A:24:8B:94 X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:6d:34:2a:45:5d:fd:5a:9b:13:99:b2:dd:bf:2c:a8:c3:7d: d6:c0:1a:ba:ea:da:83:29:c5:db:0a:57:fd:3c:3e:b5:a0:7c: 28:63:93:d3:ed:a9:b9:c1:b5:55:ba:11:ce:1a:f0:b6:ce:a1: a7:a5:a9:75:da:0c:6e:e5:dc:ed:cd:f1:f9:c2:d1:74:76:d2: 1c:f3:16:ae:59:7c:82:6e:99:76:23:68:da:85:a3:16:fe:ea: a9:25:39:86:2a:50:aa:5a:57:d5:ca:a5:2d:db:c8:85:be:e1: e7:b8:b7:59:7f:93:4d:ae:ed:af:73:1f:6a:d7:66:f5:1e:e7: a3:4e:14:34:1c:8e:e9:3c:4e:93:1e:40:59:ce:5a:27:6b:20: 75:6d:62:61:52:f0:ca:42:8c:be:db:82:00:f4:fb:bd:49:94: 87:10:d1:9d:6a:e1:7c:bc:8f:4b:9a:5e:13:df:3c:09:ac:b6: 5f:83:77:19:f3:89:ad:1b:a5:4b:39:55:4f:6a:53:f3:d2:15: cd:66:bc:09:ed:ee:23:12:cd:0f:c7:e2:04:00:d2:69:09:30: ce:16:67:89:32:7f:9c:43:fd:6d:d6:29:39:46:4f:bb:89:f8: 90:9a:e8:25:78:3e:77:b3:f0:48:a3:17:e8:9d:42:83:c1:61: eb:13:79:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjQxMTIyMjI1MDAxWhcNMjQxMTI5MjI1MDAxWjAYMRYwFAYD VQQDEw02NzQxMGE5OS1iYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuhOTPwDmaOyg3L0Hduuf1j8nkwhCaoN3AJQd9oKAAlbHs+u+Gwb8egtTjlF e4n47VdqEpFJ8mHAHh2vpjOJRHtspQWuDLi6FYL066VNdN/Jp6IzT4rpsaQFFhAf dSyz93fhKbysVcN602XdsocFMWtWd1bVdGbVMNEyg7csdRxE4b1R9xy+zQnYlSR0 piSj45YYpecSkF4kecmCdwzmoaI5a2rddOpQepRr7E+J2cvXsh4jxDD12K40J4u9 4Uu6bV3+Rb3jkSovZK+SRpyNmlop8UmSJwrTi5g9DDtTWFQEhto1mqnOnlfX+6Kg RLaJvvs3LZ9IjF1aBWJENiwPvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIATx1yD 4aLkvXMOwF8t7/dqJIuUMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFbTQqRV39WpsTmbLdvyyow33WwBq66tqDKcXbClf9PD61oHwoY5PT 7am5wbVVuhHOGvC2zqGnpal12gxu5dztzfH5wtF0dtIc8xauWXyCbpl2I2jahaMW /uqpJTmGKlCqWlfVyqUt28iFvuHnuLdZf5NNru2vcx9q12b1HuejThQ0HI7pPE6T HkBZzlonayB1bWJhUvDKQoy+24IA9Pu9SZSHENGdauF8vI9Lml4T3zwJrLZfg3cZ 84mtG6VLOVVPalPz0hXNZrwJ7e4jEs0Px+IEANJpCTDOFmeJMn+cQ/1t1ik5Rk+7 ifiQmugleD53s/BIoxfonUKDwWHrE3m0 -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org