$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: o0s1BRpF48r7L6A7LwHFLJhPmw5kB5RknymBa0+8xkQ= Subject key identifier: F3:CF:6B:52:E1:1A:E4:19:8E:16:5E:63:37:A4:17:96:EF:77:E8:01 Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 09B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 09AD Signing time: Fri 22 Nov 2024 19:45:49 +0000 Manifest this update: Fri 22 Nov 2024 19:45:48 +0000 Manifest next update: Fri 29 Nov 2024 19:45:48 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: oINBiQ0YnTlDOPDB1Ps9O1XtJJfjUmMzLM8BlFrD9/I=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: UG6CbGlTDM7GIgPxWj6kvw3alWh5E5H84Uq83fKZ0u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2483 (0x9b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Nov 22 19:45:48 2024 GMT Not After : Nov 29 19:45:48 2024 GMT Subject: CN=6740df6c-bd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:9a:5b:ad:f0:0d:7a:9c:9b:2b:55:a9:cb: 8c:fb:84:55:c6:cc:00:d7:06:1b:6f:c7:a3:5b:bf: e2:3b:c7:c4:1c:88:92:46:31:e8:ff:e2:90:98:5a: b2:ca:a2:e7:d0:1f:72:ff:e9:8e:ab:bf:0e:d3:7b: f8:05:5b:40:06:ef:d5:2e:34:a3:05:fd:ee:5b:7c: 17:1d:c0:01:2e:fd:d5:96:5f:68:92:9a:06:28:1b: 92:f6:c6:12:51:e0:c4:56:9b:76:fe:97:a0:40:5f: a2:bb:bf:39:1b:49:d3:ca:e2:30:13:0d:0b:1a:d5: ee:d7:a1:a0:58:99:75:3f:ce:63:99:2b:72:34:63: 46:bc:e1:eb:ee:30:a8:20:71:64:12:fc:aa:0d:5b: 62:b0:6d:1a:f6:e0:f9:12:6c:a8:80:fe:90:79:68: a8:32:3c:b0:97:8d:2b:b8:fa:d9:f8:52:94:7f:a9: 87:5f:d1:04:19:1d:3b:01:aa:7e:e9:28:1e:7d:95: 90:fd:23:be:66:7f:74:72:7c:a1:1d:0c:db:4f:33: ec:a6:ec:37:08:e5:a6:57:f3:89:78:82:75:55:bb: 73:04:aa:02:65:23:ac:b2:f5:15:40:2f:21:38:a8: 9e:8b:74:fd:d6:e6:46:8f:54:b6:a1:2b:d3:88:7e: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CF:6B:52:E1:1A:E4:19:8E:16:5E:63:37:A4:17:96:EF:77:E8:01 X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:fc:68:64:cd:a1:67:95:5c:88:54:2d:3e:42:c2:9d:f2:63: c6:f7:eb:38:e1:8f:8b:43:84:ee:e4:8b:86:b4:58:82:06:bf: a6:14:3c:2f:99:88:ff:d1:4a:72:ff:39:2f:0b:26:40:d2:c8: 7f:6b:80:88:59:d3:e4:1f:bd:7c:88:e1:79:de:cb:03:e0:9d: cf:9c:1f:a3:33:88:ee:74:96:21:14:4e:cd:52:c8:de:ff:60: e0:39:b4:86:5d:10:8c:37:24:20:82:b5:b9:88:52:5a:36:e7: 27:52:d2:14:78:fb:fe:20:62:dc:57:1b:91:1b:87:a6:d2:6f: cc:2a:27:a0:56:7a:67:e9:f5:c5:dc:6b:55:24:ab:cb:c7:06: 52:a1:00:02:e5:a1:44:c4:85:30:0d:71:70:15:d8:48:60:e5: af:8e:71:c0:07:26:02:df:9d:f5:94:31:60:25:a3:b6:53:b8: 25:db:a9:78:ea:33:a3:e4:bc:3b:c4:66:c2:8b:15:e9:2a:7d: 96:0a:d8:9c:a5:68:49:33:ff:bf:7c:1e:c9:db:b3:97:42:fc: 3e:e1:a4:a0:a9:d7:ed:1f:cd:5c:c7:69:69:97:94:7d:64:b0: 41:d2:46:0f:60:69:ac:8a:df:6e:10:66:01:48:ac:cb:da:a7: ef:48:04:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjQxMTIyMTk0NTQ4WhcNMjQxMTI5MTk0NTQ4WjAYMRYwFAYD VQQDEw02NzQwZGY2Yy1iZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx+aW63wDXqcmytVqcuM+4RVxswA1wYbb8ejW7/iO8fEHIiSRjHo/+KQmFqy yqLn0B9y/+mOq78O03v4BVtABu/VLjSjBf3uW3wXHcABLv3Vll9okpoGKBuS9sYS UeDEVpt2/pegQF+iu785G0nTyuIwEw0LGtXu16GgWJl1P85jmStyNGNGvOHr7jCo IHFkEvyqDVtisG0a9uD5EmyogP6QeWioMjywl40ruPrZ+FKUf6mHX9EEGR07Aap+ 6SgefZWQ/SO+Zn90cnyhHQzbTzPspuw3COWmV/OJeIJ1VbtzBKoCZSOssvUVQC8h OKiei3T91uZGj1S2oSvTiH7kHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPPa1Lh GuQZjhZeYzekF5bvd+gBMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh/GhkzaFnlVyIVC0+QsKd8mPG9+s44Y+LQ4Tu5IuGtFiCBr+mFDwv mYj/0Upy/zkvCyZA0sh/a4CIWdPkH718iOF53ssD4J3PnB+jM4judJYhFE7NUsje /2DgObSGXRCMNyQggrW5iFJaNucnUtIUePv+IGLcVxuRG4em0m/MKiegVnpn6fXF 3GtVJKvLxwZSoQAC5aFExIUwDXFwFdhIYOWvjnHAByYC3531lDFgJaO2U7gl26l4 6jOj5Lw7xGbCixXpKn2WCticpWhJM/+/fB7J27OXQvw+4aSgqdftH81cx2lpl5R9 ZLBB0kYPYGmsit9uEGYBSKzL2qfvSAR8 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org