$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json) Hash identifier: y6AJTCvuaGjVmUspQQXr/5c14XeNndGef+5kU936Ivg= Subject key identifier: 29:63:EA:E8:C8:CA:E5:DB:4D:FF:0C:C1:4D:18:8E:2A:94:89:14:3F Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft Manifest number: 01DF Signing time: Sat 23 Nov 2024 01:42:29 +0000 Manifest this update: Sat 23 Nov 2024 01:42:28 +0000 Manifest next update: Sat 30 Nov 2024 01:42:28 +0000 Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: rOhqHokRJ7oFPhbvK0vYZJQRI9MxiW/XY3kD0p9WFag=) 2: 36765016252911EDBEF5C985C4F9AE02.roa (hash: 7u41CTQWCdv5Y2YOarI4+9GVGkwOEBxqZSFcU/mcqrI=) 3: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: ZSAm4l7rWYgugHI9K+lTltwUh3Cs8sZTAhaT4+qTchI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Validity Not Before: Nov 23 01:42:28 2024 GMT Not After : Nov 30 01:42:28 2024 GMT Subject: CN=67413305-9d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:55:78:d4:b0:bd:94:6d:b9:41:d2:4f:89: 74:bb:b5:51:2c:a3:ea:49:ac:a9:d1:18:9c:44:85: 95:e1:40:10:08:ef:de:07:db:fc:72:de:b8:de:49: 4c:33:9b:f4:d7:8e:3b:a2:6f:fd:9a:4d:58:2d:5b: 4d:13:11:6b:79:60:c9:69:c6:69:86:be:ba:94:a0: 49:ba:86:f6:fa:bb:a7:41:3d:b0:f2:41:9c:57:6b: 17:07:a2:de:42:c6:16:b5:9f:f7:34:ea:dc:5b:9c: 09:03:f7:ff:5a:b6:63:20:22:e8:e2:4f:ac:e2:a2: b6:1d:c8:eb:c7:7b:07:49:8d:7a:c9:f2:e1:a5:e8: 7d:ff:b4:9f:f9:a5:56:18:97:33:7a:5b:fb:1d:39: 22:62:0b:bd:5d:59:f6:fb:cf:a5:37:14:71:51:b4: 71:ef:56:90:72:1c:cc:36:63:17:29:89:8f:00:d4: 1f:fd:b5:5b:08:91:65:69:a5:ad:31:bd:5d:92:6e: 0d:39:72:cb:90:26:9a:4a:a0:7c:1d:d5:c7:53:a8: d1:eb:21:90:f9:8c:05:08:53:a0:b4:4f:35:98:30: 91:34:1f:2e:b6:a8:20:ec:f7:00:8f:84:0e:f3:25: 98:5f:4e:8c:85:23:12:6e:e5:7b:64:16:b4:a2:e0: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:63:EA:E8:C8:CA:E5:DB:4D:FF:0C:C1:4D:18:8E:2A:94:89:14:3F X509v3 Authority Key Identifier: keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:cd:b2:b3:63:71:10:f5:56:d3:6b:35:22:dc:55:2f:fb:20: 2b:21:32:14:09:59:cf:2f:fe:10:99:0f:0c:60:14:7c:f3:14: e3:c9:c1:a1:4c:98:dc:9e:12:e9:97:aa:a0:af:94:ac:84:52: d3:18:bd:49:1e:4f:f7:cb:3a:c7:4a:e0:85:5c:bc:d3:1d:3f: 22:1b:9e:91:eb:80:bd:54:35:86:9b:ef:23:9d:8d:23:8e:b5: dc:d9:35:c0:81:61:83:e4:84:cd:31:46:36:4d:10:07:01:71: ae:0f:c6:da:63:f9:2d:69:09:1e:8e:e5:29:f6:cb:d8:5f:3a: 77:1b:39:ae:3c:7a:f3:af:31:25:42:cb:52:ad:f2:90:5b:76: 8b:a9:8c:45:d3:1e:28:a1:a2:28:c7:d4:3e:05:31:42:e1:51: 8c:34:fa:05:3f:83:71:e3:ed:73:d1:ab:eb:e8:10:28:40:08: 0f:44:d4:33:84:97:90:7e:1c:1a:fd:28:43:c9:10:c7:f8:29: 53:69:81:e9:2e:ee:28:a2:cd:88:28:b3:3e:f6:a4:a7:08:e8: 6c:5f:91:ec:80:77:a4:8d:7c:89:d8:ed:79:0f:47:23:5b:cb: 0a:8e:6d:cc:98:21:92:ba:64:65:6a:c3:b9:1d:ed:e1:c9:4c: b8:45:de:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1NTAzN0EyMzM0 OTk5QjNDMzQwHhcNMjQxMTIzMDE0MjI4WhcNMjQxMTMwMDE0MjI4WjAYMRYwFAYD VQQDEw02NzQxMzMwNS05ZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xlVeNSwvZRtuUHST4l0u7VRLKPqSayp0RicRIWV4UAQCO/eB9v8ct643klM M5v01447om/9mk1YLVtNExFreWDJacZphr66lKBJuob2+runQT2w8kGcV2sXB6Le QsYWtZ/3NOrcW5wJA/f/WrZjICLo4k+s4qK2Hcjrx3sHSY16yfLhpeh9/7Sf+aVW GJczelv7HTkiYgu9XVn2+8+lNxRxUbRx71aQchzMNmMXKYmPANQf/bVbCJFlaaWt Mb1dkm4NOXLLkCaaSqB8HdXHU6jR6yGQ+YwFCFOgtE81mDCRNB8utqgg7PcAj4QO 8yWYX06MhSMSbuV7ZBa0ouACQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClj6ujI yuXbTf8MwU0YjiqUiRQ/MB8GA1UdIwQYMBaAFE5mdrK/w96mzqFTVQN6IzSZmzw0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREJEMC82RjUwMTc1NjI1 MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNxYk9vVk5WQTNvak5KbWJQ RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtWjJzcl9EM3FiT29WTlZBM29qTkptYlBEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3JfRDNx Yk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRzbKzY3EQ9VbTazUi3FUv+yArITIUCVnPL/4QmQ8MYBR88xTjycGh TJjcnhLpl6qgr5SshFLTGL1JHk/3yzrHSuCFXLzTHT8iG56R64C9VDWGm+8jnY0j jrXc2TXAgWGD5ITNMUY2TRAHAXGuD8baY/ktaQkejuUp9svYXzp3GzmuPHrzrzEl QstSrfKQW3aLqYxF0x4ooaIox9Q+BTFC4VGMNPoFP4Nx4+1z0avr6BAoQAgPRNQz hJeQfhwa/ShDyRDH+ClTaYHpLu4oos2IKLM+9qSnCOhsX5HsgHekjXyJ2O15D0cj W8sKjm3MmCGSumRlasO5He3hyUy4Rd7I -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:49 2024 by rpki-client on console-ams.rpki-client.org