$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft File: TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json) Hash identifier: Al0HSfh9BswDq9r0efswVlG8OBbORZU8qmyn4hStr0c= Subject key identifier: B9:F5:08:3C:C1:1A:1C:F3:76:51:7C:8E:94:3F:56:D0:46:81:42:F8 Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB Certificate issuer: /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Certificate serial: 0F82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft Manifest number: 0F77 Signing time: Fri 22 Nov 2024 17:31:43 +0000 Manifest this update: Fri 22 Nov 2024 17:31:42 +0000 Manifest next update: Fri 29 Nov 2024 17:31:42 +0000 Files and hashes: 1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: wHj0095otKA00X0vLzZVttY2dEb4ookeW+/LldCsBgw=) 2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: sgkWXRSJ1BUZupF4Dk2efL+RNcogul9NMOpS+wB5yj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3970 (0xf82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB Validity Not Before: Nov 22 17:31:42 2024 GMT Not After : Nov 29 17:31:42 2024 GMT Subject: CN=6740bffe-1a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:d1:ef:80:63:5a:ef:f9:e3:88:30:d9:32: 7c:d6:53:be:7f:cd:b8:eb:97:92:86:ce:9c:96:d6: 81:97:0e:4d:1c:f6:67:80:81:a7:ad:1c:66:a3:6e: 83:fd:79:18:d2:96:3f:04:42:48:0e:14:ff:75:c3: 09:90:99:e0:35:d3:41:83:15:29:4d:af:96:06:1d: c0:da:86:93:50:c4:85:f9:56:a8:b7:7f:0d:2e:65: 9c:10:8e:b1:bb:fb:a0:48:76:4a:bd:23:c6:dc:2b: 00:62:09:47:65:6b:df:11:d2:4e:01:7d:ab:79:9b: ef:96:6f:a1:5b:53:89:79:c8:df:3b:94:ee:70:5c: 37:21:74:0e:31:4b:f6:92:a2:5e:15:d1:97:d5:cb: a5:4a:f5:32:ee:13:4d:bb:ec:7e:c6:fa:b1:de:cb: f6:69:27:3f:60:3a:5d:0c:61:a0:33:94:44:67:ab: 44:82:08:6d:86:d9:7e:42:1a:d4:cb:08:1d:63:d1: cf:38:66:07:79:2a:9d:eb:08:82:59:b7:5f:a0:3a: 59:18:44:f6:5c:97:4b:71:99:b8:58:a7:80:c8:ca: d1:f5:2f:f8:06:30:c6:0c:ed:1e:90:61:0e:7e:38: 06:9e:b0:81:ff:6a:0b:bd:3f:29:7c:5c:b5:b3:18: 57:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F5:08:3C:C1:1A:1C:F3:76:51:7C:8E:94:3F:56:D0:46:81:42:F8 X509v3 Authority Key Identifier: keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:56:bf:1b:11:7c:4d:30:3c:b4:d0:df:cb:ea:61:3e:76:5a: 15:5a:c4:02:0a:00:84:a7:18:3a:be:c0:b8:07:24:29:4c:c8: dd:85:5f:1f:d9:e9:ce:83:b0:31:4c:e6:25:58:8f:de:4e:f5: 51:e8:ba:2a:a8:e6:cc:7f:aa:71:cf:17:51:a9:d2:77:a6:32: 76:58:50:e4:44:1b:c6:ce:2f:f5:c1:48:67:54:0d:7a:99:09: f9:24:1e:9d:76:64:f3:b9:58:d0:1c:b4:18:7b:66:ae:1e:5e: fa:54:f6:59:a6:83:d0:8b:24:6b:32:be:3e:1f:ad:ec:3e:73: 30:fd:e3:da:f7:f5:c7:c4:a8:88:bf:86:64:8f:a6:d3:04:98: 88:54:62:2d:08:e7:ae:02:d8:9c:68:56:3a:b3:c4:68:cd:c2: 72:9c:c7:8c:b6:32:dc:6a:0a:5b:8a:8d:91:7a:1c:19:bb:34: 19:c9:f0:33:2c:68:3d:f2:22:73:12:76:64:dc:23:4c:b6:7c: a1:b1:78:d0:5b:b2:dd:8f:6d:5c:bf:77:75:ac:02:63:17:b6: ba:c9:be:7b:1b:49:c0:c5:3d:aa:3d:76:91:a1:51:33:21:0e: af:c5:38:e4:50:33:c6:64:af:5f:d7:ae:9a:58:55:79:63:5b: bf:90:cc:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc5M0ExMTAvBgNVBAUTKDRDNkUyM0FDMDM4RTQzOEZGRkIwN0U2NThCQUM2RjI4 MjE1MzQ0RkIwHhcNMjQxMTIyMTczMTQyWhcNMjQxMTI5MTczMTQyWjAYMRYwFAYD VQQDEw02NzQwYmZmZS0xYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsrR74BjWu/544gw2TJ81lO+f82465eShs6cltaBlw5NHPZngIGnrRxmo26D /XkY0pY/BEJIDhT/dcMJkJngNdNBgxUpTa+WBh3A2oaTUMSF+Vaot38NLmWcEI6x u/ugSHZKvSPG3CsAYglHZWvfEdJOAX2reZvvlm+hW1OJecjfO5TucFw3IXQOMUv2 kqJeFdGX1culSvUy7hNNu+x+xvqx3sv2aSc/YDpdDGGgM5REZ6tEgghthtl+QhrU ywgdY9HPOGYHeSqd6wiCWbdfoDpZGET2XJdLcZm4WKeAyMrR9S/4BjDGDO0ekGEO fjgGnrCB/2oLvT8pfFy1sxhXoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn1CDzB GhzzdlF8jpQ/VtBGgUL4MB8GA1UdIwQYMBaAFExuI6wDjkOP/7B+ZYusbyghU0T7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzkzQS83NkFGMzM0QzUx NjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0X19zSDVsaTZ4dktDRlRS UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHNGpyQU9PUTRfX3NINWxpNnh2S0NGVFJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzkzQS83NkFGMzM0QzUxNjkxMUU5QTc5QzFFODFDNEY5QUUwMi9URzRqckFPT1E0 X19zSDVsaTZ4dktDRlRSUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdVr8bEXxNMDy00N/L6mE+dloVWsQCCgCEpxg6vsC4ByQpTMjdhV8f 2enOg7AxTOYlWI/eTvVR6LoqqObMf6pxzxdRqdJ3pjJ2WFDkRBvGzi/1wUhnVA16 mQn5JB6ddmTzuVjQHLQYe2auHl76VPZZpoPQiyRrMr4+H63sPnMw/ePa9/XHxKiI v4Zkj6bTBJiIVGItCOeuAticaFY6s8RozcJynMeMtjLcagpbio2RehwZuzQZyfAz LGg98iJzEnZk3CNMtnyhsXjQW7Ldj21cv3d1rAJjF7a6yb57G0nAxT2qPXaRoVEz IQ6vxTjkUDPGZK9f166aWFV5Y1u/kMxC -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org