$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json) Hash identifier: bLlk7noU+LanMHDe+vmrU1YMPQWQHTQ2r4EckjbwfQY= Subject key identifier: 2E:2C:FF:BE:4D:EC:73:5A:51:EC:FA:4D:FA:DA:12:C6:0F:8C:BF:52 Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft Manifest number: 91 Signing time: Thu 21 Nov 2024 04:39:43 +0000 Manifest this update: Thu 21 Nov 2024 04:39:43 +0000 Manifest next update: Thu 28 Nov 2024 04:39:43 +0000 Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: ETDM1uNi/N1BsI3vWhfww1aaKdsS4s9YalkXUSwklkQ=) 2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: obSLVehoxb5p0D91IN3Q6srICDKIx5uxUoPHPnPGYyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5 Validity Not Before: Nov 21 04:39:43 2024 GMT Not After : Nov 28 04:39:43 2024 GMT Subject: CN=673eb98f-54d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:2a:b4:a1:5a:de:33:07:55:c1:c7:c6:4d: 36:35:d7:dd:b0:a9:53:ad:08:8f:e6:c3:53:8b:e2: 72:ab:c7:60:1e:bc:90:8b:cd:f9:ac:98:31:97:43: 22:fd:da:20:00:79:8d:c3:ac:94:61:62:d5:56:dc: 31:b0:57:78:e1:b1:34:dd:ed:56:eb:6a:72:e4:86: b2:49:d9:f7:fd:1d:1f:3d:c6:2d:cb:86:c6:6f:26: 7e:98:d8:a2:80:ec:17:90:6f:44:a6:f5:b2:79:43: e5:f3:41:6c:f9:71:3c:d5:c7:4d:f3:74:fc:c4:3f: 3a:9b:2b:f3:78:8c:12:d2:f4:6a:b4:bd:df:f1:d7: 81:8b:50:4d:fa:de:d1:86:cc:eb:1c:4f:97:30:12: 61:53:e8:25:9a:c8:10:a6:5d:8b:21:d3:25:21:6a: 85:4e:5a:99:f9:11:bb:77:7a:cf:59:46:f4:3e:89: f4:8e:f3:4e:35:46:84:d4:8b:b0:90:bb:3e:ba:42: eb:cc:3a:5d:2c:2c:69:f0:e3:b6:01:fc:ff:79:55: e8:74:08:79:f0:a7:48:0a:01:e6:7a:65:5e:4a:1d: e3:79:f2:e1:4f:94:cf:c7:54:a6:f2:60:f7:df:92: 20:07:a5:a7:57:2b:bd:e5:cd:94:5a:59:73:5d:ca: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2C:FF:BE:4D:EC:73:5A:51:EC:FA:4D:FA:DA:12:C6:0F:8C:BF:52 X509v3 Authority Key Identifier: keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5b:3e:2f:2b:8f:22:41:69:64:86:dc:2e:c4:2c:7c:a4:0f: 75:80:9a:fc:2c:25:29:01:70:51:48:38:81:97:c6:f2:12:ec: 07:1f:c4:a0:e6:e6:fb:ca:55:9e:06:a6:44:53:f3:3e:6b:04: 21:7a:78:af:64:86:34:38:f3:6a:29:f2:45:a8:86:18:36:33: 63:f8:ef:ae:3f:14:4d:e4:30:8f:e7:cf:4c:dd:8d:29:44:06: 6f:e4:c0:56:50:ff:bb:90:74:1f:42:88:b7:39:7f:bd:c0:60: 56:7d:57:d2:8d:6b:cf:58:bd:5d:dd:ee:56:2b:e6:aa:4e:6e: 2d:46:39:c9:d4:b8:48:7b:02:dc:ff:9f:cf:aa:af:4e:19:0a: 88:d8:02:2d:e8:b6:5a:ea:a5:e4:64:2c:3d:5a:0d:77:bc:ab: f8:33:2b:fe:ec:8a:3e:f2:79:c7:92:25:15:bd:e8:e9:79:af: 89:0b:2e:0a:77:66:dd:d4:71:c4:3a:0e:b5:4a:66:95:3c:1c: be:28:da:1a:ab:3a:cb:f3:11:ce:a7:bc:44:19:a2:39:b3:12: 49:db:02:02:32:95:59:e0:d9:cb:f5:ce:6c:2f:5b:57:dd:c7: 49:ac:f2:4e:a2:c8:64:c6:a3:8e:09:c6:8a:23:05:f8:4b:ad: 18:88:32:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx RjQwMTU4RTUwHhcNMjQxMTIxMDQzOTQzWhcNMjQxMTI4MDQzOTQzWjAYMRYwFAYD VQQDEw02NzNlYjk4Zi01NGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGAqtKFa3jMHVcHHxk02NdfdsKlTrQiP5sNTi+Jyq8dgHryQi835rJgxl0Mi /dogAHmNw6yUYWLVVtwxsFd44bE03e1W62py5IaySdn3/R0fPcYty4bGbyZ+mNii gOwXkG9EpvWyeUPl80Fs+XE81cdN83T8xD86myvzeIwS0vRqtL3f8deBi1BN+t7R hszrHE+XMBJhU+glmsgQpl2LIdMlIWqFTlqZ+RG7d3rPWUb0Pon0jvNONUaE1Iuw kLs+ukLrzDpdLCxp8OO2Afz/eVXodAh58KdICgHmemVeSh3jefLhT5TPx1Sm8mD3 35IgB6WnVyu95c2UWllzXcpdhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4s/75N 7HNaUez6TfraEsYPjL9SMB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjI0OS85ODcyNkQ2RUQxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlw OXgybUNyT1NEZ29mUUJXT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfWz4vK48iQWlkhtwuxCx8pA91gJr8LCUpAXBRSDiBl8byEuwHH8Sg 5ub7ylWeBqZEU/M+awQhenivZIY0OPNqKfJFqIYYNjNj+O+uPxRN5DCP589M3Y0p RAZv5MBWUP+7kHQfQoi3OX+9wGBWfVfSjWvPWL1d3e5WK+aqTm4tRjnJ1LhIewLc /5/Pqq9OGQqI2AIt6LZa6qXkZCw9Wg13vKv4Myv+7Io+8nnHkiUVvejpea+JCy4K d2bd1HHEOg61SmaVPBy+KNoaqzrL8xHOp7xEGaI5sxJJ2wICMpVZ4NnL9c5sL1tX 3cdJrPJOoshkxqOOCcaKIwX4S60YiDIc -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org