$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json) Hash identifier: JI1rXXi0ohuWCMTggW74Ikjl+poOhegKTtQMUnlgom4= Subject key identifier: B2:0F:26:3E:0C:B7:B0:E9:DB:64:03:EF:C1:D1:84:D6:64:CE:6D:4C Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Certificate serial: 0274 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft Manifest number: 0274 Signing time: Sat 23 Nov 2024 01:11:22 +0000 Manifest this update: Sat 23 Nov 2024 01:11:22 +0000 Manifest next update: Sat 30 Nov 2024 01:11:22 +0000 Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: n0S7nb+mdlJv180Pm6xQQO5vuA0YxCY39TJkdOkWySA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 628 (0x274) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Validity Not Before: Nov 23 01:11:22 2024 GMT Not After : Nov 30 01:11:22 2024 GMT Subject: CN=67412bba-10c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b1:87:16:49:eb:60:8e:51:98:8f:a8:cc:69: b1:da:59:a8:30:f0:ff:47:41:69:d7:9a:4d:00:5b: 19:4c:f9:e8:ca:b3:01:fd:2a:0a:92:90:e6:a7:25: 83:b5:28:8e:b7:be:60:c5:04:00:33:62:f3:7e:36: 4c:6c:9a:31:33:cc:eb:03:b8:4e:74:0c:fc:6d:c8: a5:6f:ab:19:d1:94:ba:ce:48:ea:b5:3e:38:54:2f: e9:80:66:7c:17:a6:bc:b0:86:83:a9:42:63:ac:8e: cc:6e:f2:e4:ca:93:7b:3b:f5:72:5f:cf:69:d7:33: 94:23:54:b3:8d:d6:a3:41:9e:5d:ad:ec:5f:1d:cb: e9:27:7a:c8:32:45:b4:78:9a:c2:85:e1:66:a0:e6: 64:3a:c5:1d:7a:25:ff:90:10:fc:c4:40:1a:a2:39: d9:7b:ba:92:2a:5d:ec:cf:4a:9f:f2:a4:14:70:e0: 18:54:01:44:90:7e:f7:bf:37:2a:18:bc:b5:0d:db: f3:1b:85:ce:9b:42:5f:5c:9d:b1:83:df:a6:43:2d: 75:28:16:f6:78:aa:b1:17:d7:c9:16:87:d9:ea:3c: 86:8b:09:8f:ce:5e:8f:13:0b:76:5d:78:fa:6c:9f: 86:8e:3c:f3:ae:77:10:95:fa:31:e9:dc:cd:a5:49: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0F:26:3E:0C:B7:B0:E9:DB:64:03:EF:C1:D1:84:D6:64:CE:6D:4C X509v3 Authority Key Identifier: keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:6e:97:4d:68:f9:cb:8f:b5:c1:5d:25:ca:5a:b7:4b:f0:4f: dd:c5:c4:fe:5f:93:e3:88:2a:ed:fa:81:9b:57:28:9c:93:ca: ec:25:9d:93:08:0c:ae:9e:61:54:cc:fa:e7:e9:1c:b1:50:42: b6:26:6b:cf:e0:c8:17:21:17:80:3b:83:b2:9e:bb:b2:52:f9: 83:a5:2f:a3:aa:c9:76:88:46:44:34:4e:8c:04:26:9d:88:d3: 98:1a:1b:86:dd:3e:98:96:62:50:c8:0a:c5:bc:70:e5:44:67: b7:35:84:7e:88:ba:4c:49:63:45:41:9c:0f:80:ca:53:78:97: 67:65:2f:3f:ee:46:86:4e:e7:8a:16:2e:20:ae:af:54:a1:4a: 5c:a5:3b:41:31:62:ec:e8:6e:b2:be:f3:25:82:8e:b3:af:7b: 94:cf:f5:54:37:1d:b6:6f:39:e7:cb:cb:cc:46:eb:08:94:0d: 27:d6:5b:89:db:e3:d4:5a:1f:ea:d2:08:12:78:89:e0:00:ce: f9:67:9f:3f:2b:ec:f6:dc:ac:0d:d1:f4:90:f9:04:94:0e:bc: 4b:7d:7d:cc:9a:ea:aa:59:f0:1b:fe:ee:c5:a8:1d:3b:fd:47: 91:d9:c9:d5:4d:0d:fe:2f:58:b7:05:a2:81:c2:c6:ef:30:0b: 6c:ed:a3:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0 N0IzNzJCMDMwHhcNMjQxMTIzMDExMTIyWhcNMjQxMTMwMDExMTIyWjAYMRYwFAYD VQQDEw02NzQxMmJiYS0xMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bGHFknrYI5RmI+ozGmx2lmoMPD/R0Fp15pNAFsZTPnoyrMB/SoKkpDmpyWD tSiOt75gxQQAM2LzfjZMbJoxM8zrA7hOdAz8bcilb6sZ0ZS6zkjqtT44VC/pgGZ8 F6a8sIaDqUJjrI7MbvLkypN7O/VyX89p1zOUI1SzjdajQZ5drexfHcvpJ3rIMkW0 eJrCheFmoOZkOsUdeiX/kBD8xEAaojnZe7qSKl3sz0qf8qQUcOAYVAFEkH73vzcq GLy1DdvzG4XOm0JfXJ2xg9+mQy11KBb2eKqxF9fJFofZ6jyGiwmPzl6PEwt2XXj6 bJ+GjjzzrncQlfox6dzNpUncRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIPJj4M t7Dp22QD78HRhNZkzm1MMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3 QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJbpdNaPnLj7XBXSXKWrdL8E/dxcT+X5PjiCrt+oGbVyick8rsJZ2T CAyunmFUzPrn6RyxUEK2JmvP4MgXIReAO4OynruyUvmDpS+jqsl2iEZENE6MBCad iNOYGhuG3T6YlmJQyArFvHDlRGe3NYR+iLpMSWNFQZwPgMpTeJdnZS8/7kaGTueK Fi4grq9UoUpcpTtBMWLs6G6yvvMlgo6zr3uUz/VUNx22bznny8vMRusIlA0n1luJ 2+PUWh/q0ggSeIngAM75Z58/K+z23KwN0fSQ+QSUDrxLfX3MmuqqWfAb/u7FqB07 /UeR2cnVTQ3+L1i3BaKBwsbvMAts7aNa -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:49 2024 by rpki-client on console-ams.rpki-client.org