$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json) Hash identifier: 576mc/xNTymMpCV4QaofuXJAn88ChCddfHtPG0V3WzQ= Subject key identifier: 38:C3:8D:D1:95:71:42:1C:DA:EE:CD:77:70:79:26:92:37:A3:62:B6 Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft Manifest number: 06C5 Signing time: Fri 22 Nov 2024 21:39:44 +0000 Manifest this update: Fri 22 Nov 2024 21:39:44 +0000 Manifest next update: Fri 29 Nov 2024 21:39:44 +0000 Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: eBUn/v9fh5hPQ7LfT2W5JfXJcSyXxNwTKKAvSmFSiU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC Validity Not Before: Nov 22 21:39:44 2024 GMT Not After : Nov 29 21:39:44 2024 GMT Subject: CN=6740fa20-d4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:16:47:2c:b6:c2:cd:fb:70:70:ec:9b:ff: 33:f7:ed:cc:15:56:cc:2f:4b:b3:f1:a4:84:56:2d: 07:17:4a:9c:ed:52:5a:b6:b7:7b:f4:05:85:f3:98: 19:36:c4:50:9f:89:35:49:4f:9c:ab:bb:13:01:47: 84:7f:2c:65:3c:d2:92:8d:2f:90:b1:46:c8:1e:ee: c9:8a:11:2f:6b:52:03:59:67:74:89:d2:01:e6:3d: 77:6a:91:e2:7c:ac:a1:1b:90:bd:06:14:3b:1c:7c: 0e:ee:0d:05:84:20:cc:e9:11:bf:f2:db:33:0f:d8: 40:15:74:93:87:67:7f:c7:8d:5f:2e:20:2b:58:77: a5:77:16:39:03:9c:c9:f8:35:96:6b:19:4e:46:27: af:47:cb:17:4d:13:80:dc:6e:cb:11:1b:1e:2b:85: ae:62:19:e7:c4:21:bb:69:9c:22:db:92:6d:f5:fa: f4:95:3f:58:70:a7:86:e3:03:d8:b2:80:2a:76:67: a2:b8:f4:8a:d3:aa:0e:40:d3:b4:65:9d:a9:e4:c1: 0f:7d:00:3d:45:8e:69:07:79:61:35:89:4a:dd:3d: 3e:1e:7e:e8:42:67:38:65:c0:5f:8b:7e:5b:3b:74: 45:11:cd:32:b6:26:0f:8b:99:23:33:2c:5d:28:de: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C3:8D:D1:95:71:42:1C:DA:EE:CD:77:70:79:26:92:37:A3:62:B6 X509v3 Authority Key Identifier: keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ac:6c:9b:95:cb:6c:3d:e0:da:3b:0f:7f:31:8e:ed:0f:63: bf:ce:3c:b6:7b:19:7c:2c:42:ee:13:4e:ed:1a:9b:54:27:d6: 4e:96:04:b3:cc:e4:9f:25:6a:37:b8:b7:af:33:67:b4:9d:63: 42:5b:32:3d:ef:86:4e:2d:26:07:23:0a:c2:61:4f:f3:a7:48: ab:48:e3:b2:d7:a5:f0:c5:f9:17:cc:6e:5f:a6:40:c3:26:d1: e1:5c:0c:01:b9:d8:32:59:7d:e8:c7:91:86:65:13:ce:ad:59: f5:2b:f8:72:a6:0e:5b:ed:d0:66:45:cb:61:d9:35:fb:ec:33: a3:16:01:3d:aa:cc:1f:34:f7:7d:83:c6:99:0c:14:8b:c8:0d: f6:57:8a:17:54:e6:61:73:ee:54:cf:ab:11:64:56:a7:56:ef: b3:53:d1:4d:a4:57:01:4d:e0:ed:33:31:da:95:1b:6d:16:cd: 51:47:9d:65:e7:fd:21:a8:ed:7d:23:52:15:f5:fe:20:dd:90: a1:99:c0:1b:a6:18:08:7a:c9:f1:cb:bb:dd:d8:10:a6:7c:a2: 31:bb:0a:53:67:91:e1:81:f4:63:48:8e:d9:30:d6:55:26:69: f3:6f:9f:7c:24:71:23:db:55:1f:bb:27:a5:4e:22:5d:09:b0: 4a:ba:81:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwNkExMTAvBgNVBAUTKDRGMjQ5RjNENEY1MjI5NTVEQTc0RTg1M0UwMDVFNzc0 MDY3QTM5QUMwHhcNMjQxMTIyMjEzOTQ0WhcNMjQxMTI5MjEzOTQ0WjAYMRYwFAYD VQQDEw02NzQwZmEyMC1kNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnQWRyy2ws37cHDsm/8z9+3MFVbML0uz8aSEVi0HF0qc7VJatrd79AWF85gZ NsRQn4k1SU+cq7sTAUeEfyxlPNKSjS+QsUbIHu7JihEva1IDWWd0idIB5j13apHi fKyhG5C9BhQ7HHwO7g0FhCDM6RG/8tszD9hAFXSTh2d/x41fLiArWHeldxY5A5zJ +DWWaxlORievR8sXTROA3G7LERseK4WuYhnnxCG7aZwi25Jt9fr0lT9YcKeG4wPY soAqdmeiuPSK06oOQNO0ZZ2p5MEPfQA9RY5pB3lhNYlK3T0+Hn7oQmc4ZcBfi35b O3RFEc0ytiYPi5kjMyxdKN7qbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjDjdGV cUIc2u7Nd3B5JpI3o2K2MB8GA1UdIwQYMBaAFE8knz1PUilV2nToU+AF53QGejms MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjA2QS9GQ0YyN0FDNjMz QTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tWWGFkT2hUNEFYbmRBWjZP YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5U2ZQVTlTS1ZYYWRPaFQ0QVhuZEFaNk9hdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjA2QS9GQ0YyN0FDNjMzQTQxMUVCQUM1NDg1MkVDNEY5QUUwMi9UeVNmUFU5U0tW WGFkT2hUNEFYbmRBWjZPYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOrGyblctsPeDaOw9/MY7tD2O/zjy2exl8LELuE07tGptUJ9ZOlgSz zOSfJWo3uLevM2e0nWNCWzI974ZOLSYHIwrCYU/zp0irSOOy16XwxfkXzG5fpkDD JtHhXAwBudgyWX3ox5GGZRPOrVn1K/hypg5b7dBmRcth2TX77DOjFgE9qswfNPd9 g8aZDBSLyA32V4oXVOZhc+5Uz6sRZFanVu+zU9FNpFcBTeDtMzHalRttFs1RR51l 5/0hqO19I1IV9f4g3ZChmcAbphgIesnxy7vd2BCmfKIxuwpTZ5HhgfRjSI7ZMNZV Jmnzb598JHEj21UfuyelTiJdCbBKuoEZ -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org