$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft File: mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json) Hash identifier: hRoZxwGpcaqTOUSWQmFZnXonBAWbYa/az5znalbV/HE= Subject key identifier: 3B:5F:9E:7F:99:A5:2C:CB:7F:F9:B7:44:B2:DD:27:41:1B:C4:4E:AB Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 Certificate issuer: /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Certificate serial: 213E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft Manifest number: 2126 Signing time: Fri 22 Nov 2024 15:55:25 +0000 Manifest this update: Fri 22 Nov 2024 15:55:25 +0000 Manifest next update: Fri 29 Nov 2024 15:55:25 +0000 Files and hashes: 1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: 7hQREDJGnp14A7OC7kV/5ffyeLtuCkT/8PWAxxpwJj4=) 2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: O+MHFL5HucSSSkSZxHxmzfF8b/+aFHUTT5vt1LsMrv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8510 (0x213e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9 Validity Not Before: Nov 22 15:55:25 2024 GMT Not After : Nov 29 15:55:25 2024 GMT Subject: CN=6740a96d-dc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:a6:77:e0:3f:5a:98:0f:ef:c6:e6:91:f4: 3b:59:98:a6:2d:2a:f0:77:b9:8f:aa:97:fc:6c:71: b9:23:b4:0d:70:64:1a:46:2c:f3:d7:4c:27:c5:86: d9:c8:98:98:c4:32:3a:7d:e3:49:18:38:ac:f1:a5: 03:62:b3:4d:6d:cc:a9:b6:14:db:dc:cf:3d:68:09: e2:bc:03:f7:61:47:a5:57:1b:a9:f0:03:34:24:57: d4:38:25:3c:41:82:9a:fe:26:bf:b6:6e:fc:40:9c: a9:6b:79:9a:07:b8:7e:ce:d5:29:32:f3:9d:a2:b1: 9a:fa:fd:53:d5:56:76:70:27:e8:c6:04:0a:94:5f: 2f:6d:7d:18:c7:14:dc:9c:59:cc:55:4e:d7:83:a6: d9:b1:97:92:be:12:ef:56:ed:a8:cf:c7:03:c2:6f: 83:ed:c1:18:d8:58:56:4e:86:f6:8f:6c:9c:47:f2: 3d:af:21:20:de:58:a9:70:ec:3f:30:4d:ef:04:35: 29:26:86:4b:e4:ae:eb:25:2f:d3:5d:14:ce:de:62: 37:27:4e:27:e2:dd:fb:1f:2e:25:3e:b0:f4:3e:b5: d4:14:10:94:bc:c2:6c:cb:91:0a:39:00:40:2b:ce: 83:5b:86:58:b6:fd:2a:23:6e:9f:8c:5b:38:c9:7b: a9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5F:9E:7F:99:A5:2C:CB:7F:F9:B7:44:B2:DD:27:41:1B:C4:4E:AB X509v3 Authority Key Identifier: keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f6:c9:fa:46:9e:58:26:0c:b6:f5:6c:08:86:32:a7:5c:c3: 0a:ae:5a:95:de:af:04:57:ee:58:b4:d8:7c:dc:3f:4b:94:5b: d3:93:78:1c:ae:18:15:b0:19:42:9c:aa:33:6b:97:42:35:0a: a3:b0:65:64:c6:45:6e:95:38:0a:cd:1d:d1:8d:ee:9a:38:e1: 0b:48:c9:91:e5:cf:21:ee:79:3d:ce:12:ff:7b:92:de:79:f4: 4c:60:79:6c:26:1d:78:f3:7b:57:7c:7f:a8:a5:0e:c7:dd:54: 02:c2:30:a6:1c:1c:74:18:0e:69:5a:4a:9f:8b:0e:a7:46:26: dc:d0:06:25:d9:5e:65:0c:30:2b:cc:e2:f0:92:7a:15:a3:66: b5:ef:87:23:d3:8a:5e:69:ca:06:77:37:f4:9c:52:9a:25:d7: 37:20:09:c3:d7:b8:21:ae:9c:c1:a9:a1:a1:2f:74:c8:ee:7d: 12:ae:22:ee:e4:c0:58:b7:59:a3:92:b7:c6:c0:a4:19:68:8c: 61:04:b7:3d:4b:6d:a6:6a:03:6d:ec:54:b4:db:0a:0e:91:68: 11:c9:df:f0:e1:61:a5:03:73:67:a9:6a:01:8c:a5:47:ee:a7: 74:f8:b2:1a:25:17:eb:65:a0:62:cf:f3:b3:41:59:e1:8d:b2: 83:d0:3d:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVEOTMxMTAvBgNVBAUTKDk5MzVDNjM5QjNDMzUxREJFRDVCMjkzOTk0RjcyRjgx NENDRjlCQTkwHhcNMjQxMTIyMTU1NTI1WhcNMjQxMTI5MTU1NTI1WjAYMRYwFAYD VQQDEw02NzQwYTk2ZC1kYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAub2md+A/WpgP78bmkfQ7WZimLSrwd7mPqpf8bHG5I7QNcGQaRizz10wnxYbZ yJiYxDI6feNJGDis8aUDYrNNbcypthTb3M89aAnivAP3YUelVxup8AM0JFfUOCU8 QYKa/ia/tm78QJypa3maB7h+ztUpMvOdorGa+v1T1VZ2cCfoxgQKlF8vbX0YxxTc nFnMVU7Xg6bZsZeSvhLvVu2oz8cDwm+D7cEY2FhWTob2j2ycR/I9ryEg3lipcOw/ ME3vBDUpJoZL5K7rJS/TXRTO3mI3J04n4t37Hy4lPrD0PrXUFBCUvMJsy5EKOQBA K86DW4ZYtv0qI26fjFs4yXupqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtfnn+Z pSzLf/m3RLLdJ0EbxE6rMB8GA1UdIwQYMBaAFJk1xjmzw1Hb7VspOZT3L4FMz5up MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUQ5My81QzEwQTgxMERD NUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVkdnRXeWs1bFBjdmdVelBt NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21UWEdPYlBEVWR2dFd5azVsUGN2Z1V6UG02ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUQ5My81QzEwQTgxMERDNUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVk dnRXeWs1bFBjdmdVelBtNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo9sn6Rp5YJgy29WwIhjKnXMMKrlqV3q8EV+5YtNh83D9LlFvTk3gc rhgVsBlCnKoza5dCNQqjsGVkxkVulTgKzR3Rje6aOOELSMmR5c8h7nk9zhL/e5Le efRMYHlsJh1483tXfH+opQ7H3VQCwjCmHBx0GA5pWkqfiw6nRibc0AYl2V5lDDAr zOLwknoVo2a174cj04peacoGdzf0nFKaJdc3IAnD17ghrpzBqaGhL3TI7n0SriLu 5MBYt1mjkrfGwKQZaIxhBLc9S22magNt7FS02woOkWgRyd/w4WGlA3NnqWoBjKVH 7qd0+LIaJRfrZaBiz/OzQVnhjbKD0D11 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org