$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft File: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json) Hash identifier: BZhtaXSamBhI6PF3PTpQ8AQRh84+XedKtdRjgKDRZr8= Subject key identifier: BB:AE:F7:55:FF:10:32:9C:C9:EF:5D:49:32:FB:3A:93:63:76:E9:21 Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC Certificate issuer: /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Certificate serial: 0B05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft Manifest number: 0AFF Signing time: Fri 22 Nov 2024 19:03:07 +0000 Manifest this update: Fri 22 Nov 2024 19:03:07 +0000 Manifest next update: Fri 29 Nov 2024 19:03:07 +0000 Files and hashes: 1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: rxsyCOQDeoMfZagqzZj1RLPSEtop9JgwtWiSbmE7BiY=) 2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: XDeDVN+pHUEVt+DCqatZGjQaIovu0vNRnw8eGH3pRAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC Validity Not Before: Nov 22 19:03:07 2024 GMT Not After : Nov 29 19:03:07 2024 GMT Subject: CN=6740d56b-9352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:93:ef:8e:8c:35:1f:b0:91:3d:21:35:81:b9: 7d:b0:cf:07:5c:0a:3b:26:34:3d:23:e3:a9:a2:09: 40:91:cd:ca:69:ae:bc:ef:a8:0f:96:d7:b0:8f:88: b8:c8:60:bf:8f:d4:72:5d:b0:35:81:88:d2:b8:84: 51:ee:1e:2f:ba:30:5b:b0:a1:65:60:fb:4b:09:3a: 1c:c0:d6:af:ba:4c:0f:2a:5d:99:dd:c3:5c:09:2e: 8b:fa:b7:00:03:22:62:4e:ad:ce:5f:f4:a9:7b:09: 8e:aa:a9:da:8d:7e:c5:61:a3:6b:60:39:85:07:50: bb:05:2e:89:99:55:12:c1:f3:84:d6:ef:c4:4c:db: 5f:f3:d6:6f:25:5e:5c:c1:0b:46:e4:bb:0f:52:d2: 9c:29:3a:5b:03:d9:73:27:1b:bb:fa:a0:18:2c:00: 6e:08:b3:07:53:8d:3b:ca:7d:a9:fd:4e:75:c1:f5: d5:12:7a:80:e5:df:d0:33:cb:ff:89:aa:06:51:6b: 0d:5e:40:c0:e1:29:18:b7:db:d2:be:94:2e:8d:9a: bc:41:14:a8:b9:fe:29:0a:94:26:d1:83:cd:36:53: 2c:81:74:b7:d0:70:51:2a:13:97:59:7d:ee:f3:11: 62:0e:64:dc:c2:7c:c7:49:21:99:de:1e:2a:6f:c6: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AE:F7:55:FF:10:32:9C:C9:EF:5D:49:32:FB:3A:93:63:76:E9:21 X509v3 Authority Key Identifier: keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:20:0e:df:64:69:ec:d3:18:e3:5f:e7:01:fa:a9:c7:81:25: 9c:e1:61:e6:8c:9e:31:87:30:13:c3:b7:f1:57:7e:60:70:a7: 3a:24:67:b8:94:da:03:ff:48:1e:44:ba:ce:db:2e:f8:02:1d: fc:6a:62:75:13:50:7f:d4:26:ea:67:3b:12:19:30:b8:8c:08: 3c:9f:88:aa:44:16:3d:8e:60:d9:07:7b:5d:fe:a2:e6:7e:1f: d4:45:27:c5:f3:04:0e:7c:1d:b2:ec:84:ad:11:1e:b3:aa:23: f2:c0:43:9f:b4:51:57:00:54:66:cf:9f:d9:45:f1:07:2d:73: d9:8c:77:f0:71:99:88:04:55:27:19:ac:55:bd:c2:62:04:f5: b6:c8:93:54:d6:e2:89:71:43:14:95:1e:bd:7d:f2:ea:ae:8d: 23:8c:a9:cd:ad:9d:ae:9f:4c:4a:1d:f7:32:ea:df:3a:2a:b1: 7c:5c:9e:83:1f:fb:87:b5:e6:a8:59:e3:68:50:cf:34:7f:e8: 21:b1:27:04:36:c2:ca:48:f3:23:44:f5:14:5f:00:d4:28:4d: 9d:c1:3f:a6:9c:44:41:5e:63:b3:02:30:ab:7a:e8:a6:27:62: 69:8e:47:fb:b4:7c:11:d7:e3:49:a2:f1:bd:ed:f1:c9:17:07: 5e:11:85:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTMxMTAvBgNVBAUTKDRDQTI3NzIyN0I2MUM1Q0RERjBCNUJGRkM5MzA3NjBE MDYyNjQzRkMwHhcNMjQxMTIyMTkwMzA3WhcNMjQxMTI5MTkwMzA3WjAYMRYwFAYD VQQDEw02NzQwZDU2Yi05MzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JPvjow1H7CRPSE1gbl9sM8HXAo7JjQ9I+OpoglAkc3Kaa6876gPltewj4i4 yGC/j9RyXbA1gYjSuIRR7h4vujBbsKFlYPtLCTocwNavukwPKl2Z3cNcCS6L+rcA AyJiTq3OX/SpewmOqqnajX7FYaNrYDmFB1C7BS6JmVUSwfOE1u/ETNtf89ZvJV5c wQtG5LsPUtKcKTpbA9lzJxu7+qAYLABuCLMHU407yn2p/U51wfXVEnqA5d/QM8v/ iaoGUWsNXkDA4SkYt9vSvpQujZq8QRSouf4pCpQm0YPNNlMsgXS30HBRKhOXWX3u 8xFiDmTcwnzHSSGZ3h4qb8aKrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuu91X/ EDKcye9dSTL7OpNjdukhMB8GA1UdIwQYMBaAFEyidyJ7YcXN3wtb/8kwdg0GJkP8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxMy8xNTAxOERBNjMx MEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhjM2ZDMXZfeVRCMkRRWW1R X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLSjNJbnRoeGMzZkMxdl95VEIyRFFZbVFfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxMy8xNTAxOERBNjMxMEMxMUVBQjhDOEZFMjhDNEY5QUUwMi9US0ozSW50aHhj M2ZDMXZfeVRCMkRRWW1RX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUIA7fZGns0xjjX+cB+qnHgSWc4WHmjJ4xhzATw7fxV35gcKc6JGe4 lNoD/0geRLrO2y74Ah38amJ1E1B/1CbqZzsSGTC4jAg8n4iqRBY9jmDZB3td/qLm fh/URSfF8wQOfB2y7IStER6zqiPywEOftFFXAFRmz5/ZRfEHLXPZjHfwcZmIBFUn GaxVvcJiBPW2yJNU1uKJcUMUlR69ffLqro0jjKnNrZ2un0xKHfcy6t86KrF8XJ6D H/uHteaoWeNoUM80f+ghsScENsLKSPMjRPUUXwDUKE2dwT+mnERBXmOzAjCreuim J2Jpjkf7tHwR1+NJovG97fHJFwdeEYU4 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org