$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft File: TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft (raw, json) Hash identifier: qUx160T3I90BnEUMCm8+2Kyjn2u4VVO6dYVB0es0fA4= Subject key identifier: 51:C1:0B:69:58:9A:3A:69:79:76:6A:F4:EE:79:F8:80:8D:4C:74:24 Authority key identifier: 4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B Certificate issuer: /CN=A91D0FCB/serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft Manifest number: 1D Signing time: Mon 25 Nov 2024 05:48:45 +0000 Manifest this update: Mon 25 Nov 2024 05:48:45 +0000 Manifest next update: Mon 02 Dec 2024 05:48:45 +0000 Files and hashes: 1: TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl (hash: T7rqCs327j/OUCtmKZxA+hd4udl+jEz8KN+vLoOYUC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0FCB/serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B Validity Not Before: Nov 25 05:48:45 2024 GMT Not After : Dec 2 05:48:45 2024 GMT Subject: CN=67440fbd-764f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:47:60:5a:2d:89:e7:00:03:d7:f7:42:d4: 98:1e:5a:03:f2:1d:be:0f:24:0c:fc:19:cc:0b:f1: d1:77:b5:73:ab:bc:e3:ce:f2:1d:e0:54:06:b2:1e: 38:32:bc:88:26:e4:30:ff:6b:5f:eb:00:df:55:03: c5:04:b7:9b:c9:41:ec:d5:58:c9:74:9f:d5:a1:f0: ec:9e:1c:5e:b3:20:c4:30:5a:16:ce:72:26:b2:b7: c4:8c:5a:ad:be:44:27:d0:31:19:cf:43:3f:f7:cc: d6:e3:b3:4d:7d:13:10:36:90:da:ba:04:22:97:69: a8:52:ee:70:20:f1:96:8b:be:86:d4:06:37:8c:da: 74:a7:91:80:37:b5:ca:17:0f:a0:6e:d9:07:95:a5: 85:22:dd:94:f5:95:96:b4:c2:c1:e0:99:2b:fe:6c: cd:ce:0a:ba:c9:40:39:6d:0f:04:6d:42:10:a9:30: b5:68:9e:bf:d9:02:c2:5b:61:b6:d9:be:ef:f5:25: 66:34:53:0e:96:dc:07:be:c8:bf:3a:3c:85:fb:53: 03:4d:b9:11:b7:06:1c:4f:60:79:2e:18:0e:bb:b5: a6:19:77:f4:59:3f:98:a8:c8:be:66:e4:9a:dc:86: 09:55:e2:4a:60:0a:c6:76:28:4e:d6:25:c1:66:27: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C1:0B:69:58:9A:3A:69:79:76:6A:F4:EE:79:F8:80:8D:4C:74:24 X509v3 Authority Key Identifier: keyid:4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e9:06:64:07:7a:32:ab:2e:cd:fe:4f:1d:24:87:cc:25:2d: 7d:12:9b:88:b0:28:b0:9b:1a:49:dd:31:83:23:39:f6:ac:f5: f4:6f:93:7a:5c:09:1f:5c:87:d5:33:8c:64:d8:21:d4:3a:1c: e3:9f:22:f7:d8:fb:64:86:8f:61:82:c0:e8:1f:3b:7f:38:f0: 4f:b7:16:2d:ba:8a:7f:bf:3b:3a:b5:13:4b:83:65:62:4c:60: 97:bd:a2:75:70:c0:b0:e2:1b:4a:f4:2f:eb:37:65:2e:dc:7a: f2:06:ab:95:a1:5e:bd:a1:c6:56:ff:f1:5f:3f:dd:40:09:55: 42:ff:a7:f0:41:78:c7:c4:97:e0:04:51:6d:44:a0:2f:f0:11: 44:ee:a6:a6:a7:a6:e8:d9:b2:1c:4f:bd:c9:84:96:d5:19:13: 01:90:bc:26:13:d3:9b:42:80:76:42:93:e5:f3:08:81:05:ae: 38:27:5b:2c:b7:de:2c:50:70:7a:53:5f:8c:ac:17:34:7f:7c: 43:9e:bd:07:f9:be:bf:00:10:aa:df:cf:b6:7b:f1:6b:38:a9: 9f:20:21:02:61:e4:a6:de:e6:b5:52:5f:c1:96:53:bc:02:81: 58:58:fd:fd:43:c9:db:06:01:19:0c:a0:44:d2:8f:4f:73:5c: f7:66:dc:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEZDQjExMC8GA1UEBRMoNENCNTFFRTg3QzgyMkU4RTZDQjA1NDI4NENCMDdFNENG MjRGOTIxQjAeFw0yNDExMjUwNTQ4NDVaFw0yNDEyMDIwNTQ4NDVaMBgxFjAUBgNV BAMTDTY3NDQwZmJkLTc2NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIkEdgWi2J5wAD1/dC1JgeWgPyHb4PJAz8GcwL8dF3tXOrvOPO8h3gVAayHjgy vIgm5DD/a1/rAN9VA8UEt5vJQezVWMl0n9Wh8OyeHF6zIMQwWhbOciayt8SMWq2+ RCfQMRnPQz/3zNbjs019ExA2kNq6BCKXaahS7nAg8ZaLvobUBjeM2nSnkYA3tcoX D6Bu2QeVpYUi3ZT1lZa0wsHgmSv+bM3OCrrJQDltDwRtQhCpMLVonr/ZAsJbYbbZ vu/1JWY0Uw6W3Ae+yL86PIX7UwNNuRG3BhxPYHkuGA67taYZd/RZP5ioyL5m5Jrc hglV4kpgCsZ2KE7WJcFmJ7fZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUcELaVia Oml5dmr07nn4gI1MdCQwHwYDVR0jBBgwFoAUTLUe6HyCLo5ssFQoTLB+TPJPkhsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRkNCLzkyREZGQzc4ODE2 OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1RMVWU2SHlDTG81c3NGUW9UTEItVFBKUGto cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVExVZTZIeUNMbzVzc0ZRb1RMQi1UUEpQa2hzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RkNCLzkyREZGQzc4ODE2OTExRUY4MjEzRkIwQ0M0RjlBRTAyL1RMVWU2SHlDTG81 c3NGUW9UTEItVFBKUGtocy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABHpBmQHejKrLs3+Tx0kh8wlLX0Sm4iwKLCbGkndMYMjOfas9fRvk3pc CR9ch9UzjGTYIdQ6HOOfIvfY+2SGj2GCwOgfO3848E+3Fi26in+/Ozq1E0uDZWJM YJe9onVwwLDiG0r0L+s3ZS7cevIGq5WhXr2hxlb/8V8/3UAJVUL/p/BBeMfEl+AE UW1EoC/wEUTupqanpujZshxPvcmEltUZEwGQvCYT05tCgHZCk+XzCIEFrjgnWyy3 3ixQcHpTX4ysFzR/fEOevQf5vr8AEKrfz7Z78Ws4qZ8gIQJh5Kbe5rVSX8GWU7wC gVhY/f1DydsGARkMoETSj09zXPdm3Ko= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:52 2024 by rpki-client on console-ams.rpki-client.org