$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: ttyPTS4Jyoyxi30/1C9tsmp/0jkwWuzSLaO9x7nZE1E= Subject key identifier: 31:68:2B:F5:59:93:46:DD:12:24:4F:5D:EA:55:99:0D:73:2F:6B:EE Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0B23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0AEE Signing time: Wed 20 Nov 2024 19:08:34 +0000 Manifest this update: Wed 20 Nov 2024 19:08:34 +0000 Manifest next update: Wed 27 Nov 2024 19:08:34 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: m9XpRWL0Oz2N3QiqT2W5YtMprlEh02el/j49jln4Ds8=) 2: 22DFD272A22A11EFA6B4231FC4F9AE02.roa (hash: KKJ/M5Tb28behlPI8MOiLU4CrWD58mjmTLM4SF/Ror0=) 3: E7DE70DC3D9A11EA9606E13AC4F9AE02.roa (hash: NGLxGe92pXm1WIqG6ZqVRdYnLr6c1sj672KDCyUAMoQ=) 4: B9A66D88A22A11EFBF21F71FC4F9AE02.roa (hash: sJ9rownef2CuWKRi/w4mxoVdH5UibFjmiR4ta9WSY3s=) 5: 445C86F2A22A11EF9B03581FC4F9AE02.roa (hash: VD3shqzpML1FHEAtbcPpyNkzrAHnJ5PcCN8ypJp43TU=) 6: 9584CC888FD611ECB5BAF00AC4F9AE02.roa (hash: v7D11uFZh04llDHZqrd6SYkr8JZCdq90Vl4D6sHdAWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2851 (0xb23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Nov 20 19:08:34 2024 GMT Not After : Nov 27 19:08:34 2024 GMT Subject: CN=673e33b2-ffd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:fd:36:f2:91:3d:e5:bb:7d:57:fa:01:40: d4:04:9e:36:60:71:e4:a8:2d:ab:5f:b7:47:ea:fe: c1:b6:c2:e9:ba:65:34:66:56:8c:3f:f6:b3:52:cd: 57:c3:ba:ba:24:d4:20:36:78:7c:4c:10:4a:7f:e0: bd:11:ab:af:0b:69:2c:b0:03:b6:d4:e1:f6:50:29: 9f:76:55:34:f7:6e:aa:41:d2:5a:2f:5c:2e:a0:bd: 1a:ee:52:8d:f8:70:2b:d2:6f:3c:a3:91:d5:5e:e6: 14:7e:b9:17:bb:4b:c7:cc:d7:61:23:27:72:7d:47: f0:3d:0c:59:c3:61:ac:da:9b:4e:0a:72:09:05:dc: af:29:24:49:5a:95:d3:3f:a9:0f:c9:32:82:00:fa: 9e:67:b6:94:3d:b7:38:ba:2f:2b:8b:e2:fb:24:0b: d1:7c:7a:65:b2:44:f0:f2:3e:56:d3:42:ea:de:46: 7f:23:69:50:51:5e:39:f1:87:ce:2d:69:1a:2d:0d: d8:78:5e:0c:57:0c:a0:c4:87:e6:40:66:05:96:c5: 1d:da:3e:f2:80:e7:2a:ce:c5:ea:32:80:d3:3f:b3: 9b:1d:27:37:46:e1:3f:81:e1:b9:bf:27:23:e8:d2: 52:89:f0:d6:96:bb:92:67:5f:cf:88:e1:1b:d3:80: 92:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:68:2B:F5:59:93:46:DD:12:24:4F:5D:EA:55:99:0D:73:2F:6B:EE X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:36:cb:2a:b7:7f:d7:d4:a6:50:36:36:f9:f0:86:f9:e5:99: 50:49:7c:dc:1c:3b:c0:f0:21:63:71:e2:83:33:67:ce:43:75: 65:c0:54:37:5b:9f:81:04:4f:31:ca:21:39:d9:8e:e9:c0:c2: 0c:97:d8:f0:c3:7a:62:ac:04:b1:3f:ae:6c:d8:54:65:c2:1f: c0:27:33:22:4a:2e:5b:60:b8:09:b1:e5:c1:f1:68:c9:f4:18: 91:6f:67:bf:e1:3d:52:53:0a:35:73:2e:02:07:96:09:14:aa: bd:90:da:06:27:14:cb:8b:81:9e:39:d5:2d:77:8e:98:ac:46: 9d:a4:ff:25:d9:90:4d:64:b7:61:65:8d:22:92:c7:2f:20:21: c7:53:a4:96:1a:ce:f8:51:87:ff:36:52:55:41:bc:4b:ef:ec: 78:46:ad:49:21:3c:bb:44:ba:b2:35:4a:14:df:7b:e4:20:1f: 01:23:86:13:8c:2c:e2:00:ae:a3:e0:bd:fc:b2:e9:39:1e:85: bf:5e:15:45:d4:c8:8e:0a:a9:da:0d:8b:3e:58:9b:25:fe:46: ac:18:0e:36:23:28:1e:a4:12:82:7a:ca:30:54:83:ed:3e:c7: b8:76:a7:70:59:57:c3:c5:96:1a:4f:3c:b3:34:cc:d6:ff:4f: 70:ab:b0:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjQxMTIwMTkwODM0WhcNMjQxMTI3MTkwODM0WjAYMRYwFAYD VQQDEw02NzNlMzNiMi1mZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygr9NvKRPeW7fVf6AUDUBJ42YHHkqC2rX7dH6v7BtsLpumU0ZlaMP/azUs1X w7q6JNQgNnh8TBBKf+C9EauvC2kssAO21OH2UCmfdlU0926qQdJaL1wuoL0a7lKN +HAr0m88o5HVXuYUfrkXu0vHzNdhIydyfUfwPQxZw2Gs2ptOCnIJBdyvKSRJWpXT P6kPyTKCAPqeZ7aUPbc4ui8ri+L7JAvRfHplskTw8j5W00Lq3kZ/I2lQUV458YfO LWkaLQ3YeF4MVwygxIfmQGYFlsUd2j7ygOcqzsXqMoDTP7ObHSc3RuE/geG5vycj 6NJSifDWlruSZ1/PiOEb04CSkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFoK/VZ k0bdEiRPXepVmQ1zL2vuMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNNssqt3/X1KZQNjb58Ib55ZlQSXzcHDvA8CFjceKDM2fOQ3VlwFQ3 W5+BBE8xyiE52Y7pwMIMl9jww3pirASxP65s2FRlwh/AJzMiSi5bYLgJseXB8WjJ 9BiRb2e/4T1SUwo1cy4CB5YJFKq9kNoGJxTLi4GeOdUtd46YrEadpP8l2ZBNZLdh ZY0ikscvICHHU6SWGs74UYf/NlJVQbxL7+x4Rq1JITy7RLqyNUoU33vkIB8BI4YT jCziAK6j4L38suk5HoW/XhVF1MiOCqnaDYs+WJsl/kasGA42IygepBKCesowVIPt Pse4dqdwWVfDxZYaTzyzNMzW/09wq7CW -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:56 2024 by rpki-client on console-ams.rpki-client.org