$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json) Hash identifier: BDoI2Vz73OVYnkwW3sqyheTQyieIuKcnXb/FzX+eyFY= Subject key identifier: E4:08:F3:6C:40:34:E0:9C:F9:17:4E:3A:A4:0B:05:7D:DF:20:3D:34 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 03A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft Manifest number: 0395 Signing time: Thu 21 Nov 2024 00:23:57 +0000 Manifest this update: Thu 21 Nov 2024 00:23:56 +0000 Manifest next update: Thu 28 Nov 2024 00:23:56 +0000 Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: Tg0DPTmDZznwQdRVYL5BNvxbWHnHORJtgapLc5X5hHE=) 2: 5FEAFF2082EB11EEB854FA63C4F9AE02.roa (hash: fwD/D4w981v9C46e6Nzw5iG3uYBN5ATHjRuKjYF4jO4=) 3: 03B667B2853911EE86CB377CC4F9AE02.roa (hash: Nt7ZeaJxcaF8JBryxsq86WPMWWz1bMn8hJbR3D7+nN8=) 4: 7E4872CC507E11ED92705949C4F9AE02.roa (hash: zfYVy5hvFb9iNgoQ6kEzPojQ/uq5MxFePtWyjJxsOCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Nov 21 00:23:56 2024 GMT Not After : Nov 28 00:23:56 2024 GMT Subject: CN=673e7d9d-0c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:71:3b:b2:7f:61:42:fe:9d:82:83:79:38: 0f:86:dd:6b:77:33:33:c9:2d:88:92:95:ee:74:4b: 37:eb:22:0f:3b:04:3a:16:37:c8:c0:9f:b3:d2:3a: 86:21:b0:8e:b5:36:15:af:66:79:f0:71:5d:cd:60: 12:31:40:15:fc:6a:c3:95:7e:85:cf:65:aa:4a:92: d1:8a:db:5b:c3:bc:55:8e:f3:41:2b:4a:a1:e6:e7: 70:91:92:e5:fe:29:0f:47:2a:84:72:44:04:fc:3e: de:93:3d:7b:dc:b2:5f:1b:95:84:97:0d:d8:ae:fa: 6e:76:65:0c:aa:25:fb:df:fb:eb:52:63:86:19:c4: bd:36:8b:b4:09:de:e5:d7:1c:fa:be:28:48:02:bc: 6e:5e:8b:ef:0c:b8:0f:8a:5b:b5:dc:18:03:4e:53: 07:ea:19:e8:b2:e1:68:5e:06:86:c6:31:7d:55:10: ae:d2:74:c1:a0:4a:de:b3:a9:a3:3f:fb:eb:c2:f6: 6e:0e:11:aa:7f:09:08:d9:6c:f6:06:a2:4a:53:3d: a6:57:a3:55:8c:14:41:95:a9:10:91:db:bc:fc:44: ed:9f:8f:83:33:97:83:de:21:2b:1c:50:ff:6d:73: ad:d0:8b:1e:06:f4:2c:05:ea:f1:7f:be:98:82:a1: 94:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:08:F3:6C:40:34:E0:9C:F9:17:4E:3A:A4:0B:05:7D:DF:20:3D:34 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:76:7d:ef:77:42:1b:35:0d:e6:ae:00:e0:a7:ab:78:d9:0c: 84:a8:ca:d1:24:58:0c:c9:15:a9:0e:3d:81:a4:0e:dd:b9:d4: a3:b9:cd:78:7e:e4:bd:7e:17:66:05:8c:05:c7:3e:d5:78:53: e5:91:a7:7f:60:cd:54:c5:3a:14:d6:3d:01:63:88:a6:be:b9: 9c:e5:83:0c:45:78:fc:16:31:91:d7:24:d1:18:9b:6c:82:10: 61:6d:4a:54:44:53:4e:3d:7f:94:74:8f:c6:05:54:bd:57:04: bf:2e:8e:c3:56:d6:92:bd:f2:12:41:23:fc:42:36:b2:3a:9a: 55:2c:82:d5:35:6c:78:a4:24:be:dd:b1:bc:42:99:73:c7:a3: ca:ed:b0:9e:16:36:d9:7f:49:bb:84:42:ea:11:52:be:ee:ea: 07:aa:24:ac:30:a1:11:24:5b:52:cb:26:ea:bf:48:aa:a5:a0: fb:76:46:fe:46:c0:54:ed:45:a9:53:ce:79:e6:56:f2:32:ea: 1c:1a:26:af:82:f1:5a:cd:97:44:98:5e:fd:18:49:e4:8c:10: cc:ea:9c:dd:9f:7c:4d:dd:66:5d:82:97:2e:98:33:12:47:c0: 8a:11:4f:e5:8b:2e:af:e1:d5:64:0c:99:78:f7:5b:88:28:7f: 14:0b:d3:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjQxMTIxMDAyMzU2WhcNMjQxMTI4MDAyMzU2WjAYMRYwFAYD VQQDEw02NzNlN2Q5ZC0wYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtulxO7J/YUL+nYKDeTgPht1rdzMzyS2IkpXudEs36yIPOwQ6FjfIwJ+z0jqG IbCOtTYVr2Z58HFdzWASMUAV/GrDlX6Fz2WqSpLRittbw7xVjvNBK0qh5udwkZLl /ikPRyqEckQE/D7ekz173LJfG5WElw3YrvpudmUMqiX73/vrUmOGGcS9Nou0Cd7l 1xz6vihIArxuXovvDLgPilu13BgDTlMH6hnosuFoXgaGxjF9VRCu0nTBoEres6mj P/vrwvZuDhGqfwkI2Wz2BqJKUz2mV6NVjBRBlakQkdu8/ETtn4+DM5eD3iErHFD/ bXOt0IseBvQsBerxf76YgqGUGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQI82xA NOCc+RdOOqQLBX3fID00MB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0I5NS9CNTRBM0MzNDgwMzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJP c2dWcENkYkdGSEZlTEZFejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxdn3vd0IbNQ3mrgDgp6t42QyEqMrRJFgMyRWpDj2BpA7dudSjuc14 fuS9fhdmBYwFxz7VeFPlkad/YM1UxToU1j0BY4imvrmc5YMMRXj8FjGR1yTRGJts ghBhbUpURFNOPX+UdI/GBVS9VwS/Lo7DVtaSvfISQSP8QjayOppVLILVNWx4pCS+ 3bG8Qplzx6PK7bCeFjbZf0m7hELqEVK+7uoHqiSsMKERJFtSyybqv0iqpaD7dkb+ RsBU7UWpU8555lbyMuocGiavgvFazZdEmF79GEnkjBDM6pzdn3xN3WZdgpcumDMS R8CKEU/liy6v4dVkDJl491uIKH8UC9OZ -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:56 2024 by rpki-client on console-fra.rpki-client.org