$ rpki-client -vvf rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft File: T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft (raw, json) Hash identifier: biRTjoczsWze2jIzOHWW5NYYe1ZfDp4pZj+zTZcos1I= Subject key identifier: 1A:6D:AB:15:98:D6:05:77:84:34:C4:22:3C:00:F5:3C:8F:0B:81:6C Authority key identifier: 4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 Certificate issuer: /CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft Manifest number: 05AF Signing time: Fri 22 Nov 2024 22:42:11 +0000 Manifest this update: Fri 22 Nov 2024 22:42:10 +0000 Manifest next update: Fri 29 Nov 2024 22:42:10 +0000 Files and hashes: 1: T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl (hash: IAOMoomoXIG+F45QbqmxyD/YjRN1T1H7YzSUvwF+al4=) 2: 873D9ADEA1C411EB9F4FE15EC4F9AE02.roa (hash: KzdmZEqJybWPyDEGiwej7P7ZjZ9dGsHz/bpMhD8sTy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194815/serialNumber=4F744C3C0AA7979A85849F56EEB7B987AB23D258 Validity Not Before: Nov 22 22:42:10 2024 GMT Not After : Nov 29 22:42:10 2024 GMT Subject: CN=674108c3-607a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:ae:02:4a:9e:06:f0:b2:5a:ed:34:32:9c: 72:5c:07:b8:8f:a9:8e:6e:dc:cf:fd:79:72:a0:e6: b8:73:bf:a0:8a:8c:2c:38:6c:e2:d2:6d:d5:d2:c8: 92:6a:70:7f:e0:ba:96:de:73:4b:4f:dc:51:12:c5: 05:f6:48:10:7b:88:4b:c2:25:3d:c1:ed:65:a5:b6: 0f:f2:65:1c:a5:84:9f:be:db:d4:f8:d6:21:d4:8e: 6e:78:89:56:d8:6a:e6:d0:60:ce:9c:5a:88:f0:b0: b4:b1:82:82:d9:be:fe:78:fb:4b:9d:c9:64:7d:16: af:3f:1f:a3:e0:12:b6:2b:1d:9a:3e:ff:64:75:ad: e4:87:ff:e9:28:2d:07:b0:fc:4e:ca:ea:c9:ee:27: 7b:1a:50:22:1b:17:23:54:e6:42:64:87:03:18:a2: de:ee:fc:0b:3d:61:00:2e:4a:48:22:16:c6:db:5e: 65:d3:a7:a2:f2:1f:1a:4e:15:e3:f5:22:5f:21:83: 84:4e:36:d0:b4:ba:ef:80:8f:bd:c8:b4:0f:ba:0e: 28:14:8c:13:57:07:00:43:86:0f:ac:94:fe:06:ea: 11:40:0a:4b:7f:71:6d:5b:16:cc:ad:a0:cc:f4:fc: ac:eb:e1:6f:7b:81:3a:b1:2e:9e:bb:9e:3b:88:40: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6D:AB:15:98:D6:05:77:84:34:C4:22:3C:00:F5:3C:8F:0B:81:6C X509v3 Authority Key Identifier: keyid:4F:74:4C:3C:0A:A7:97:9A:85:84:9F:56:EE:B7:B9:87:AB:23:D2:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T3RMPAqnl5qFhJ9W7re5h6sj0lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194815/1B63E7D8A1C311EB9B6C055EC4F9AE02/T3RMPAqnl5qFhJ9W7re5h6sj0lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:5f:c0:95:3b:10:2d:04:f0:5d:96:a2:e8:8b:90:5d:16:ba: 3e:ed:50:7f:b2:2f:48:f2:d2:83:5d:16:a7:93:31:87:2d:a9: ba:cd:c0:e9:05:bd:05:ac:fc:7e:d6:6d:a7:61:6f:fd:50:53: 38:9f:ce:f1:91:f3:d4:de:7f:3d:95:70:53:4e:f7:d5:84:da: 30:06:ba:43:ee:54:0d:b0:aa:82:64:6a:b0:a0:df:bd:7b:d3: d0:ef:44:17:fe:5c:11:1e:e2:c0:d6:31:fb:2e:09:15:13:1e: a6:bc:a0:a8:7f:78:a3:c8:51:b7:43:00:e6:d6:45:9b:a2:53: f2:06:50:22:48:6d:42:bb:01:28:a0:c2:66:89:54:26:0f:64: d0:fa:c9:f0:e8:99:9f:58:11:5a:8a:0b:f1:e2:fb:75:80:4f: 89:a0:56:bc:37:4a:3e:91:78:82:71:ba:0e:88:e9:62:96:62: a9:86:d6:bb:bf:81:bd:69:a9:5d:37:83:a1:d4:d0:1a:1d:66: ec:1d:7e:88:d1:9c:d9:26:42:0b:09:e4:32:c2:c8:f4:23:ac: df:7c:4d:13:78:e7:34:f2:a4:df:26:4b:92:56:78:58:20:f0: b9:ca:fe:5c:30:32:d3:02:0e:0d:ac:8f:a2:6c:c7:98:6e:2a: 0f:f9:a4:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4MTUxMTAvBgNVBAUTKDRGNzQ0QzNDMEFBNzk3OUE4NTg0OUY1NkVFQjdCOTg3 QUIyM0QyNTgwHhcNMjQxMTIyMjI0MjEwWhcNMjQxMTI5MjI0MjEwWjAYMRYwFAYD VQQDEw02NzQxMDhjMy02MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsneuAkqeBvCyWu00MpxyXAe4j6mObtzP/XlyoOa4c7+giowsOGzi0m3V0siS anB/4LqW3nNLT9xREsUF9kgQe4hLwiU9we1lpbYP8mUcpYSfvtvU+NYh1I5ueIlW 2Grm0GDOnFqI8LC0sYKC2b7+ePtLnclkfRavPx+j4BK2Kx2aPv9kda3kh//pKC0H sPxOyurJ7id7GlAiGxcjVOZCZIcDGKLe7vwLPWEALkpIIhbG215l06ei8h8aThXj 9SJfIYOETjbQtLrvgI+9yLQPug4oFIwTVwcAQ4YPrJT+BuoRQApLf3FtWxbMraDM 9Pys6+Fve4E6sS6eu547iEBjXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBptqxWY 1gV3hDTEIjwA9TyPC4FsMB8GA1UdIwQYMBaAFE90TDwKp5eahYSfVu63uYerI9JY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDgxNS8xQjYzRTdEOEEx QzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1cUZoSjlXN3JlNWg2c2ow bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QzUk1QQXFubDVxRmhKOVc3cmU1aDZzajBsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDgxNS8xQjYzRTdEOEExQzMxMUVCOUI2QzA1NUVDNEY5QUUwMi9UM1JNUEFxbmw1 cUZoSjlXN3JlNWg2c2owbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlX8CVOxAtBPBdlqLoi5BdFro+7VB/si9I8tKDXRankzGHLam6zcDp Bb0FrPx+1m2nYW/9UFM4n87xkfPU3n89lXBTTvfVhNowBrpD7lQNsKqCZGqwoN+9 e9PQ70QX/lwRHuLA1jH7LgkVEx6mvKCof3ijyFG3QwDm1kWbolPyBlAiSG1CuwEo oMJmiVQmD2TQ+snw6JmfWBFaigvx4vt1gE+JoFa8N0o+kXiCcboOiOlilmKphta7 v4G9aaldN4Oh1NAaHWbsHX6I0ZzZJkILCeQywsj0I6zffE0TeOc08qTfJkuSVnhY IPC5yv5cMDLTAg4NrI+ibMeYbioP+aSI -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org