$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft File: tgPb8Ul9S5NK06WUH-JAt69dpIk.mft (raw, json) Hash identifier: 8gjoGxRefVTnXfy6YmucOaILhjOTxfXdhiN+Zmc1OVY= Subject key identifier: D7:13:AF:DF:72:DB:11:7C:D4:F6:A4:DE:E8:B2:D4:01:08:AF:7C:F0 Authority key identifier: B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 Certificate issuer: /CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft Manifest number: 2D Signing time: Sat 23 Nov 2024 05:38:22 +0000 Manifest this update: Sat 23 Nov 2024 05:38:21 +0000 Manifest next update: Sat 30 Nov 2024 05:38:21 +0000 Files and hashes: 1: tgPb8Ul9S5NK06WUH-JAt69dpIk.crl (hash: oZB8j7S5PKTMOnxqy8Ii084DD+ewY58+uQ38gTUEdUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F90/serialNumber=B603DBF1497D4B934AD3A5941FE240B7AF5DA489 Validity Not Before: Nov 23 05:38:21 2024 GMT Not After : Nov 30 05:38:21 2024 GMT Subject: CN=67416a4e-6d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:99:d1:34:8f:ca:ba:9c:d8:e9:cc:42:5c: 5f:c1:07:44:bf:c2:78:d8:da:42:56:2d:0f:66:17: 6e:1e:3a:36:88:f9:6d:86:86:81:47:ed:5c:34:45: dc:8b:3d:35:71:58:68:db:2a:f7:f6:06:59:09:81: 24:3a:12:1b:aa:77:54:9f:46:c7:cf:90:f9:a5:69: b8:9f:e9:93:82:26:4f:4d:12:46:43:e1:33:6c:33: 4f:d5:07:50:64:ad:cf:c6:88:45:3d:5f:91:4a:6c: d3:52:8c:54:e7:7c:59:6b:38:52:04:b0:42:2b:e3: 5e:d5:22:3d:c1:fb:02:51:23:25:59:cb:ec:41:ba: 2a:5b:20:bb:ac:1b:c5:c5:73:27:cc:68:c5:25:7b: b5:a2:33:08:a7:75:2f:8f:df:74:76:df:d5:98:c5: c6:6a:62:96:e7:9b:cd:7f:03:06:3a:c9:7e:1c:7d: 04:b0:6c:37:fb:bf:ae:02:a9:dc:ae:e9:69:94:23: fb:38:67:ec:34:0f:f2:9f:7d:0f:e4:f6:6a:04:bb: e5:e1:f4:3f:5d:4a:6b:fd:c7:78:18:df:88:a2:40: 6c:34:df:57:9e:88:0a:71:97:bc:02:df:7c:6a:5a: 79:99:6e:0e:9e:48:ee:d7:72:36:08:97:8c:92:93: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:13:AF:DF:72:DB:11:7C:D4:F6:A4:DE:E8:B2:D4:01:08:AF:7C:F0 X509v3 Authority Key Identifier: keyid:B6:03:DB:F1:49:7D:4B:93:4A:D3:A5:94:1F:E2:40:B7:AF:5D:A4:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgPb8Ul9S5NK06WUH-JAt69dpIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F90/BE3BDCCA68E111EF8AC59523C4F9AE02/tgPb8Ul9S5NK06WUH-JAt69dpIk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ee:a1:ad:f7:c6:fb:df:1d:62:0e:fd:81:ba:ff:24:1e:61: bf:a5:da:f5:12:67:bc:57:22:b6:49:89:fa:28:9d:6a:e5:74: ef:84:e3:f0:72:ee:1d:cc:17:e9:97:73:45:76:58:f2:bc:0b: c5:8e:43:cc:76:33:4c:25:94:fd:97:3b:83:d0:23:94:66:dd: 14:ad:cf:1e:e8:d8:ae:bb:5a:9e:e2:7f:41:c1:41:e3:61:1e: e1:f1:15:6e:99:32:5a:63:49:ba:5a:58:48:2f:ec:1f:f9:43: f7:fa:d3:cd:6a:80:5a:e4:4f:66:48:af:2f:bf:b3:ae:c6:b6: 3e:2a:c0:d9:9f:89:2d:e7:3e:d4:c7:88:5a:fa:14:72:33:4c: 2b:17:57:e6:bd:a2:1b:05:3a:a3:d9:11:2f:d5:74:88:45:3a: 45:40:c2:c8:9e:b6:c0:c0:ed:a6:82:3d:0e:b4:21:e0:ee:1c: d8:b8:08:34:71:35:a4:23:7d:85:7b:20:6e:e3:d7:14:8d:a4: b2:fc:ad:51:c3:bb:ed:dd:51:ac:92:5c:f1:57:b3:84:22:c5: 90:48:41:e4:2c:23:0c:7e:14:13:8f:c9:8c:e7:20:56:da:8d: a9:20:9c:d8:12:a8:53:73:55:0d:54:77:1a:cd:15:3f:37:eb: 60:0d:b9:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0Y5MDExMC8GA1UEBRMoQjYwM0RCRjE0OTdENEI5MzRBRDNBNTk0MUZFMjQwQjdB RjVEQTQ4OTAeFw0yNDExMjMwNTM4MjFaFw0yNDExMzAwNTM4MjFaMBgxFjAUBgNV BAMTDTY3NDE2YTRlLTZkMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeB5nRNI/KupzY6cxCXF/BB0S/wnjY2kJWLQ9mF24eOjaI+W2GhoFH7Vw0RdyL PTVxWGjbKvf2BlkJgSQ6Ehuqd1SfRsfPkPmlabif6ZOCJk9NEkZD4TNsM0/VB1Bk rc/GiEU9X5FKbNNSjFTnfFlrOFIEsEIr417VIj3B+wJRIyVZy+xBuipbILusG8XF cyfMaMUle7WiMwindS+P33R239WYxcZqYpbnm81/AwY6yX4cfQSwbDf7v64Cqdyu 6WmUI/s4Z+w0D/KffQ/k9moEu+Xh9D9dSmv9x3gY34iiQGw031eeiApxl7wC33xq WnmZbg6eSO7XcjYIl4ySk4MvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1xOv33Lb EXzU9qTe6LLUAQivfPAwHwYDVR0jBBgwFoAUtgPb8Ul9S5NK06WUH+JAt69dpIkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjkwL0JFM0JEQ0NBNjhF MTExRUY4QUM1OTUyM0M0RjlBRTAyL3RnUGI4VWw5UzVOSzA2V1VILUpBdDY5ZHBJ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGdQYjhVbDlTNU5LMDZXVUgtSkF0NjlkcElrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 RjkwL0JFM0JEQ0NBNjhFMTExRUY4QUM1OTUyM0M0RjlBRTAyL3RnUGI4VWw5UzVO SzA2V1VILUpBdDY5ZHBJay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF3uoa33xvvfHWIO/YG6/yQeYb+l2vUSZ7xXIrZJifoonWrldO+E4/By 7h3MF+mXc0V2WPK8C8WOQ8x2M0wllP2XO4PQI5Rm3RStzx7o2K67Wp7if0HBQeNh HuHxFW6ZMlpjSbpaWEgv7B/5Q/f6081qgFrkT2ZIry+/s67Gtj4qwNmfiS3nPtTH iFr6FHIzTCsXV+a9ohsFOqPZES/VdIhFOkVAwsietsDA7aaCPQ60IeDuHNi4CDRx NaQjfYV7IG7j1xSNpLL8rVHDu+3dUaySXPFXs4QixZBIQeQsIwx+FBOPyYznIFba jakgnNgSqFNzVQ1UdxrNFT8362ANuWw= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org