$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft File: tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json) Hash identifier: tTmkzxhtOAkpOHS5wj3CIjSELSC6zWn/JRZhg3cuqSI= Subject key identifier: 06:FA:65:43:A4:0B:BA:4E:62:25:98:03:67:56:40:77:8A:27:98:37 Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft Manifest number: 0166 Signing time: Thu 21 Nov 2024 02:19:18 +0000 Manifest this update: Thu 21 Nov 2024 02:19:17 +0000 Manifest next update: Thu 28 Nov 2024 02:19:17 +0000 Files and hashes: 1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: +o0/uvxf0yR2Z+3aeNOb8y4xX5bw+JWmlCVQK9MPRn0=) 2: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: fJiJkFH5wVwTi+YHoChFVsFzC/LJllEP9qaHCiiaMmo=) 3: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: vBTWWs/HDLuUlL1EANZ3kt4ReA1cKzDHlwrxujdLsaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C Validity Not Before: Nov 21 02:19:17 2024 GMT Not After : Nov 28 02:19:17 2024 GMT Subject: CN=673e98a5-3244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:57:6f:97:84:41:d6:43:35:04:86:cf:b7: e9:b8:57:ea:bb:d4:5b:10:bf:50:18:1d:fd:38:98: ac:4e:f1:e8:90:4f:9b:7c:36:a4:ed:9b:a5:76:fc: 02:cf:f5:ac:69:7a:9c:9b:ff:8b:8c:e0:de:8c:50: 73:4b:90:69:67:2d:ca:ed:6f:c6:95:4e:ff:7c:fe: 73:5a:5c:a2:f8:58:2f:13:24:86:d0:32:17:bd:b6: 2c:92:81:f5:13:4c:a9:f6:e8:da:88:63:cf:d0:33: db:06:7b:8c:38:e0:1a:be:d9:c6:db:6c:7d:b3:9e: 79:9b:89:c5:0d:23:98:f7:ff:19:fc:88:d8:d3:18: 5a:55:93:ed:0a:57:b9:9b:02:8a:76:d7:02:51:72: 3f:f4:84:70:87:b6:ca:2d:72:81:14:a9:38:8c:53: e8:77:2d:6c:3b:0a:b8:df:b4:49:7a:c9:2f:0e:2b: d6:b6:ea:89:01:9e:98:eb:dd:56:16:d5:c8:9c:74: 37:03:81:9c:81:c4:2e:a1:6e:a9:5f:27:7b:38:4b: 3a:b1:5d:f9:b3:a5:45:52:db:bc:04:8e:9b:87:74: 9e:c8:05:a6:67:9e:15:38:da:87:4f:67:f8:15:65: 86:ec:ad:b6:fb:03:63:60:2e:8a:2f:85:03:d8:16: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FA:65:43:A4:0B:BA:4E:62:25:98:03:67:56:40:77:8A:27:98:37 X509v3 Authority Key Identifier: keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e7:0c:32:60:cc:80:eb:08:82:34:44:92:7b:4c:c6:4b:73: 19:9b:fe:17:2f:96:df:63:f3:f1:12:c0:82:f0:6e:25:6b:9f: aa:84:52:67:f6:3b:5d:f5:7b:28:3d:60:fd:ce:a3:b7:12:79: a1:36:66:9c:4f:c4:99:04:4a:4a:2e:30:08:c9:41:e6:0b:4d: c6:3c:e2:0d:aa:f5:18:d4:1f:c5:cc:fa:17:5a:40:f1:8f:cd: 48:7d:87:04:c8:ef:53:f9:cd:8a:3b:6d:52:dd:7e:12:d4:22: 82:ae:2b:ad:82:73:39:49:47:28:16:7f:37:d7:34:4b:4f:14: 47:88:4b:4e:d8:8f:cf:7d:ce:ca:81:32:53:3b:ca:e9:48:ef: 29:b3:7e:3d:e5:5a:e5:47:12:06:c9:5d:e0:87:77:e0:72:e7: f6:b8:ba:68:5d:89:2b:e5:f5:08:9e:1a:02:06:9c:a1:b6:a0: d2:95:85:13:ad:52:41:d8:f0:ef:17:75:f8:5e:ba:69:6f:c2: 44:f3:63:26:3c:db:b0:0e:45:33:c7:3a:ad:8b:c7:4d:ff:87: 29:e8:2d:66:7f:01:18:1e:9d:73:07:b0:4b:89:b7:b2:f3:5f: cf:f5:15:94:2d:2e:09:89:67:31:67:15:78:2a:c6:2f:27:7b: 6c:07:5b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5 OEYyNjJCOEMwHhcNMjQxMTIxMDIxOTE3WhcNMjQxMTI4MDIxOTE3WjAYMRYwFAYD VQQDEw02NzNlOThhNS0zMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqM1Xb5eEQdZDNQSGz7fpuFfqu9RbEL9QGB39OJisTvHokE+bfDak7ZuldvwC z/WsaXqcm/+LjODejFBzS5BpZy3K7W/GlU7/fP5zWlyi+FgvEySG0DIXvbYskoH1 E0yp9ujaiGPP0DPbBnuMOOAavtnG22x9s555m4nFDSOY9/8Z/IjY0xhaVZPtCle5 mwKKdtcCUXI/9IRwh7bKLXKBFKk4jFPody1sOwq437RJeskvDivWtuqJAZ6Y691W FtXInHQ3A4GcgcQuoW6pXyd7OEs6sV35s6VFUtu8BI6bh3SeyAWmZ54VONqHT2f4 FWWG7K22+wNjYC6KL4UD2BY2UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAb6ZUOk C7pOYiWYA2dWQHeKJ5g3MB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU5wwyYMyA6wiCNESSe0zGS3MZm/4XL5bfY/PxEsCC8G4la5+qhFJn 9jtd9XsoPWD9zqO3EnmhNmacT8SZBEpKLjAIyUHmC03GPOINqvUY1B/FzPoXWkDx j81IfYcEyO9T+c2KO21S3X4S1CKCriutgnM5SUcoFn831zRLTxRHiEtO2I/Pfc7K gTJTO8rpSO8ps3495VrlRxIGyV3gh3fgcuf2uLpoXYkr5fUInhoCBpyhtqDSlYUT rVJB2PDvF3X4Xrppb8JE82MmPNuwDkUzxzqti8dN/4cp6C1mfwEYHp1zB7BLibey 81/P9RWULS4JiWcxZxV4KsYvJ3tsB1s8 -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:02 2024 by rpki-client on console-fra.rpki-client.org