$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft File: TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json) Hash identifier: alSIseSRPeDzAEsWauVbXr8S18y67YP1HPzWYf/EzF8= Subject key identifier: 36:FD:56:F1:B0:D7:5C:1E:9D:1F:66:74:D4:15:97:68:63:AE:89:2E Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E Certificate issuer: /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft Manifest number: 0950 Signing time: Wed 20 Nov 2024 19:56:28 +0000 Manifest this update: Wed 20 Nov 2024 19:56:28 +0000 Manifest next update: Wed 27 Nov 2024 19:56:28 +0000 Files and hashes: 1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: BEheVZK+itKnS6CP08AKMtpsBpDCJBp/DZePlTvpA4Y=) 2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: uCKaTzHSq8roKOND3QIAWtaboT0I2xNDmaN9cosgyvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E Validity Not Before: Nov 20 19:56:28 2024 GMT Not After : Nov 27 19:56:28 2024 GMT Subject: CN=673e3eec-7c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:ed:4c:d6:d8:93:ae:67:03:0c:dc:64:aa: e6:4c:03:aa:d6:24:87:87:1d:58:0b:c6:8a:bd:17: ab:f2:eb:5b:1e:ce:43:7e:88:e5:4c:5c:36:91:89: de:7e:39:01:8b:a0:e9:d1:4d:1a:a3:e4:a3:bf:69: 4c:44:02:e3:b9:04:90:3e:63:0e:fa:0a:06:10:b5: 32:39:14:a9:7e:18:23:54:5e:f3:c5:87:78:e0:95: 03:96:55:69:2d:70:34:fb:ec:31:4b:56:76:a7:be: 72:4e:f0:9d:e3:90:b7:e9:94:b9:57:6f:37:96:9d: c8:50:f1:cf:d3:ec:63:a6:ac:3a:11:e6:c4:c2:2c: 33:36:5f:17:1a:98:8b:d5:5e:15:d6:cd:95:8b:2e: a3:c0:1d:f9:3e:99:ef:10:dc:f1:96:f8:a3:33:f6: e8:14:40:67:b5:b3:28:90:0a:d3:3a:fc:52:9f:68: 46:d1:74:5c:37:c9:15:be:53:3e:6d:93:73:cc:da: de:12:61:0f:f0:24:d7:91:3a:34:a0:01:15:ec:3d: 22:7f:b1:85:6e:e1:c8:42:b2:b9:18:67:9c:94:95: 4f:4e:eb:a5:91:03:a4:f0:63:11:4b:81:e0:4f:3e: e2:53:ad:2a:4c:61:28:71:d1:81:c8:c1:60:0a:76: 1f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FD:56:F1:B0:D7:5C:1E:9D:1F:66:74:D4:15:97:68:63:AE:89:2E X509v3 Authority Key Identifier: keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:4e:de:0d:1e:fd:8b:31:24:03:2a:08:f9:b9:3d:be:d3:ca: b8:ce:62:79:36:a6:c0:a4:3f:7c:92:13:bd:42:8b:13:67:d9: 0e:2e:f1:fc:9f:9c:cb:94:24:96:8d:ff:96:6e:74:2e:0f:4a: b8:d1:64:d8:c4:e2:6c:33:17:43:45:5d:45:67:80:14:20:1f: 54:ae:42:34:24:7e:88:4b:c3:b6:92:e1:c1:0c:96:78:06:3b: a1:6d:1e:3a:24:95:f1:03:88:3c:fc:ef:cb:2c:19:aa:b3:7e: 11:44:1c:25:27:af:86:27:1b:a9:42:3b:25:7d:df:06:a2:f4: 1a:05:6c:62:7e:7d:d9:f2:b5:7e:16:71:c4:57:4c:b9:8d:42: bf:3f:22:c8:44:69:c4:d0:64:67:03:fe:dd:d1:a9:eb:d0:b3: 27:d9:78:63:04:38:25:58:e9:96:7d:d3:5b:30:97:b4:a5:87: a4:76:c1:6d:5a:ef:3d:ab:06:36:be:9f:72:1d:72:6b:a5:b6: cb:cb:0e:50:72:6f:9b:a6:a3:c1:c3:d0:d0:26:49:6c:b3:06: 27:29:56:7a:79:91:a2:b7:fc:01:4c:63:6a:0b:97:3c:34:7b: 33:37:9f:35:92:bd:d0:03:86:2c:be:c1:df:72:c8:ff:cf:40: b5:78:7f:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE5RjcxMTAvBgNVBAUTKDRGMjE2MUIwMEZDMkIzNkRFMEE4MjQ0RjBBRjI4MTQy NzkwMjg2MEUwHhcNMjQxMTIwMTk1NjI4WhcNMjQxMTI3MTk1NjI4WjAYMRYwFAYD VQQDEw02NzNlM2VlYy03YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAPtTNbYk65nAwzcZKrmTAOq1iSHhx1YC8aKvRer8utbHs5DfojlTFw2kYne fjkBi6Dp0U0ao+Sjv2lMRALjuQSQPmMO+goGELUyORSpfhgjVF7zxYd44JUDllVp LXA0++wxS1Z2p75yTvCd45C36ZS5V283lp3IUPHP0+xjpqw6EebEwiwzNl8XGpiL 1V4V1s2Viy6jwB35PpnvENzxlvijM/boFEBntbMokArTOvxSn2hG0XRcN8kVvlM+ bZNzzNreEmEP8CTXkTo0oAEV7D0if7GFbuHIQrK5GGeclJVPTuulkQOk8GMRS4Hg Tz7iU60qTGEocdGByMFgCnYfhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDb9VvGw 11wenR9mdNQVl2hjrokuMB8GA1UdIwQYMBaAFE8hYbAPwrNt4KgkTwrygUJ5AoYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTlGNy82MUQ5RjVCMjg1 RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3MyM2dxQ1JQQ3ZLQlFua0No ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5RmhzQV9DczIzZ3FDUlBDdktCUW5rQ2hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTlGNy82MUQ5RjVCMjg1RkYxMUVBQkZDNzE1MENDNEY5QUUwMi9UeUZoc0FfQ3My M2dxQ1JQQ3ZLQlFua0NoZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDTt4NHv2LMSQDKgj5uT2+08q4zmJ5NqbApD98khO9QosTZ9kOLvH8 n5zLlCSWjf+WbnQuD0q40WTYxOJsMxdDRV1FZ4AUIB9UrkI0JH6IS8O2kuHBDJZ4 BjuhbR46JJXxA4g8/O/LLBmqs34RRBwlJ6+GJxupQjslfd8GovQaBWxifn3Z8rV+ FnHEV0y5jUK/PyLIRGnE0GRnA/7d0anr0LMn2XhjBDglWOmWfdNbMJe0pYekdsFt Wu89qwY2vp9yHXJrpbbLyw5Qcm+bpqPBw9DQJklsswYnKVZ6eZGit/wBTGNqC5c8 NHszN581kr3QA4YsvsHfcsj/z0C1eH/A -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:58 2024 by rpki-client on console-ams.rpki-client.org