$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft File: TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json) Hash identifier: M5lqYE1CbkPiAtd7Ak1x8+GMHp8z8hkHuUE95xHBjJo= Subject key identifier: 0B:E8:98:9E:8F:24:ED:50:6E:FE:EB:5B:DB:C5:80:91:55:C2:4B:EA Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 Certificate issuer: /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Certificate serial: 0B78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft Manifest number: 0B72 Signing time: Fri 22 Nov 2024 18:48:31 +0000 Manifest this update: Fri 22 Nov 2024 18:48:31 +0000 Manifest next update: Fri 29 Nov 2024 18:48:31 +0000 Files and hashes: 1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: Qc+dicUX/Or2cO5hCeIEAT9TgZ+5qK9kz1/JJK+02rw=) 2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: 5JAvfuZxeu8ChYZ2CIrMQKZADiR2blU/2OC6uLVE0qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0 Validity Not Before: Nov 22 18:48:31 2024 GMT Not After : Nov 29 18:48:31 2024 GMT Subject: CN=6740d1ff-2e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:91:a9:6f:2b:ae:9b:2f:f1:ae:c3:a2:dc: 0d:36:ec:55:58:90:60:05:ee:51:67:82:dc:5e:85: 82:bd:e0:d1:f4:75:29:e1:ec:34:11:51:b7:5c:39: 5b:d5:f0:4e:b1:1c:61:49:c2:48:33:81:85:31:26: a2:71:f2:5e:d9:71:b3:b5:65:31:0f:c1:81:fb:f8: fc:6c:06:48:44:3a:6b:de:3e:ce:89:c3:cf:9a:9f: a5:b4:82:ec:2a:e6:53:09:c0:47:7b:b5:10:cb:d8: 72:5e:ed:58:42:12:c0:67:2e:d5:2c:cc:8b:30:10: 8d:11:5a:b5:a9:6a:1d:c7:ab:94:cb:b3:08:38:0f: b4:4f:87:88:94:f1:ed:36:24:32:67:00:58:ce:83: 30:b0:7f:da:36:48:93:a1:9b:1d:5c:13:e6:6d:98: cd:b7:6d:21:8d:e9:b0:7a:39:dd:06:4b:6d:a1:55: c6:3c:07:62:c1:c1:7e:de:03:02:f5:6a:44:8e:08: 5b:b0:2d:b0:b6:82:4f:bf:9b:0d:fa:f3:84:e9:b4: 9b:97:e3:5a:c5:5b:ef:d5:de:3b:59:ca:96:05:a9: 37:99:bf:0a:1d:45:a2:b5:bb:66:a1:91:f2:e9:3e: 25:73:fe:dd:e6:89:d7:16:05:0f:08:fc:6d:69:5f: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E8:98:9E:8F:24:ED:50:6E:FE:EB:5B:DB:C5:80:91:55:C2:4B:EA X509v3 Authority Key Identifier: keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a1:b2:e2:40:a4:f5:26:dd:1f:89:52:f0:53:60:a7:a8:75: e1:7e:2a:47:ff:75:7a:a2:34:18:a1:53:93:59:c8:89:79:fd: fb:3f:ee:c8:f0:e4:f4:29:9f:ed:09:f9:a3:9b:f5:62:a8:97: b8:40:3d:9e:46:8c:1d:5f:2f:03:df:bc:d5:fd:88:ae:13:ba: d1:5d:7b:79:03:61:d4:0c:38:ac:e5:76:88:b6:b1:94:06:be: 24:b4:7b:5f:bb:9e:fe:3c:fd:5b:32:83:5d:ed:22:0c:39:73: 9b:9e:20:fa:4c:94:ea:c1:52:58:ef:a6:b2:a1:34:f1:91:3d: e3:b0:5e:4d:a2:a4:02:95:09:d7:0a:87:95:55:17:83:6d:e4: 3d:a3:6c:b1:3b:8c:92:d8:4a:bc:36:12:4c:0f:b7:a3:d8:79: d5:1c:0f:34:c3:b9:75:ee:42:8a:d2:63:34:be:49:a6:23:35: 56:3c:af:dd:61:c5:d3:31:4f:74:32:7a:ba:b2:d7:1d:e0:f6: 66:e7:38:af:00:cb:b2:3c:8e:f2:77:04:d3:c9:c8:b8:ef:90: c6:e1:06:b5:84:ad:7f:2c:7b:d1:02:a7:93:95:a3:b0:cc:92: 8c:0a:82:68:5c:42:97:a8:77:8e:e4:56:c2:2b:84:f4:d6:f8: 4a:00:34:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1MzMxMTAvBgNVBAUTKDRDODFGMDE5M0ExQzU3MjQ0NTdGNTJFMDRFMTFGMjUy NzNFNkZFRTAwHhcNMjQxMTIyMTg0ODMxWhcNMjQxMTI5MTg0ODMxWjAYMRYwFAYD VQQDEw02NzQwZDFmZi0yZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DiRqW8rrpsv8a7DotwNNuxVWJBgBe5RZ4LcXoWCveDR9HUp4ew0EVG3XDlb 1fBOsRxhScJIM4GFMSaicfJe2XGztWUxD8GB+/j8bAZIRDpr3j7OicPPmp+ltILs KuZTCcBHe7UQy9hyXu1YQhLAZy7VLMyLMBCNEVq1qWodx6uUy7MIOA+0T4eIlPHt NiQyZwBYzoMwsH/aNkiToZsdXBPmbZjNt20hjemwejndBkttoVXGPAdiwcF+3gMC 9WpEjghbsC2wtoJPv5sN+vOE6bSbl+NaxVvv1d47WcqWBak3mb8KHUWitbtmoZHy 6T4lc/7d5onXFgUPCPxtaV9+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvomJ6P JO1Qbv7rW9vFgJFVwkvqMB8GA1UdIwQYMBaAFEyB8Bk6HFckRX9S4E4R8lJz5v7g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTUzMy8wNjExNTFGMjFB NEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5UkZmMUxnVGhIeVVuUG1f dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RJSHdHVG9jVnlSRmYxTGdUaEh5VW5QbV91QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTUzMy8wNjExNTFGMjFBNEUxMUVBOUUwOUNDODJDNEY5QUUwMi9USUh3R1RvY1Z5 UkZmMUxnVGhIeVVuUG1fdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQobLiQKT1Jt0fiVLwU2CnqHXhfipH/3V6ojQYoVOTWciJef37P+7I 8OT0KZ/tCfmjm/ViqJe4QD2eRowdXy8D37zV/YiuE7rRXXt5A2HUDDis5XaItrGU Br4ktHtfu57+PP1bMoNd7SIMOXObniD6TJTqwVJY76ayoTTxkT3jsF5NoqQClQnX CoeVVReDbeQ9o2yxO4yS2Eq8NhJMD7ej2HnVHA80w7l17kKK0mM0vkmmIzVWPK/d YcXTMU90Mnq6stcd4PZm5zivAMuyPI7ydwTTyci475DG4Qa1hK1/LHvRAqeTlaOw zJKMCoJoXEKXqHeO5FbCK4T01vhKADQR -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org