$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft File: tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json) Hash identifier: HrJ7y8kh1VyX1bu6RjvMxIZooLlsvPySF+KOVi1mrHM= Subject key identifier: C7:27:54:B3:AC:55:E9:AE:37:26:A6:48:1C:43:D5:DE:85:24:83:36 Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB Certificate issuer: /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft Manifest number: 02B4 Signing time: Thu 21 Nov 2024 01:02:30 +0000 Manifest this update: Thu 21 Nov 2024 01:02:30 +0000 Manifest next update: Thu 28 Nov 2024 01:02:30 +0000 Files and hashes: 1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: 1QbSRPqxVWs7HbXwuB0bxeSTfrS8aRMRjWWsmcV6NH8=) 2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: hj6HENiICkARpuosawtZoxcS59kBh8qchU0LK6i41Kw=) 3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: qi/f7a1lAHX2y6pi+09PuaKJSyxYj7DhpTy80V71vEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB Validity Not Before: Nov 21 01:02:30 2024 GMT Not After : Nov 28 01:02:30 2024 GMT Subject: CN=673e86a6-77a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:c9:17:14:6b:31:78:f6:b0:9c:0e:73:b4: c0:e0:61:8d:57:c8:77:8e:d7:31:6a:5d:27:bf:1f: 33:5a:09:5b:00:ed:5d:ef:3a:14:2d:e0:a1:0d:f2: ca:5b:a5:97:3a:7e:fe:0c:63:35:fb:73:82:b1:e1: 78:55:d2:1c:3a:6b:57:74:8a:36:21:e9:bb:1b:5a: 2a:1e:51:6c:74:35:be:ee:e9:9c:9a:6a:25:ff:a8: 01:16:be:ca:1d:31:bc:db:0a:54:18:ad:34:9f:97: 29:96:31:eb:8a:48:62:fa:cd:08:a1:93:ae:e0:de: a4:69:e8:49:45:a0:df:e8:8a:ca:1d:a9:1e:d0:ac: b8:d0:12:98:36:46:e1:e5:a8:9d:76:e9:0b:d3:56: 8c:fe:96:61:d4:3c:3a:d3:2a:0f:93:ac:c7:b8:82: fc:b5:d5:b7:ae:8a:8e:9b:73:db:c3:33:11:94:05: 9f:7f:d4:4c:b8:4a:4b:68:d2:e9:a4:b3:eb:40:14: 74:d3:38:55:d1:8c:0c:7b:c1:53:38:9f:dc:ba:dd: 4b:c9:4d:3a:6b:9f:b9:f1:83:3c:29:b5:d4:88:5d: ea:9c:5f:4d:d6:93:c7:f3:06:8b:a9:2e:63:61:81: 95:1e:72:89:3f:15:ec:e9:3d:87:43:33:5f:37:3e: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:27:54:B3:AC:55:E9:AE:37:26:A6:48:1C:43:D5:DE:85:24:83:36 X509v3 Authority Key Identifier: keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:04:4a:5a:e6:a1:a9:a0:25:4d:26:e4:1e:93:d3:1b:fe:c6: 85:02:b2:cf:a6:98:63:2d:26:40:71:09:02:51:e6:f8:3a:27: 4c:79:55:e3:b2:e1:2f:b5:44:2b:95:f7:ba:2a:37:e9:20:07: 99:5b:95:69:e1:49:d4:91:b1:8a:f6:a9:50:4d:90:a8:c0:c3: a6:b1:63:36:8a:4e:c0:7c:6f:6f:5b:92:79:f1:df:eb:96:30: 53:19:c4:f9:9f:47:6e:8f:5e:08:ac:6b:4c:4d:45:8b:a5:fc: 59:5b:0a:4c:9c:f1:be:c9:29:f1:b7:12:c6:21:b0:bb:eb:8e: c9:e5:8b:12:70:fe:32:84:ac:70:f5:aa:ae:c9:80:5f:01:d1: f1:2e:b8:04:0e:4c:e8:ac:fa:c0:ea:e3:6f:29:96:b8:1a:72: f7:12:73:d8:c2:0c:75:09:61:a9:9a:fa:be:bc:d1:a8:0e:20: 0e:59:8f:bf:71:3b:8e:3c:98:d6:76:a3:b8:ed:d9:c9:34:bc: c7:bf:d3:ff:c1:32:26:7a:29:52:87:60:9a:73:b1:04:a9:1b: 01:82:54:93:15:cc:fc:bf:3a:c9:97:e5:25:bf:c3:6c:63:07: 9f:75:52:39:c6:fc:8d:2b:db:34:a2:9d:ed:d2:56:d7:c2:f4: a5:4f:fe:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBREQxMTAvBgNVBAUTKEI0RjI2MkY5OTg1N0UxMjBDQzlDQkM0QkZDMTdFRDU0 QUJBQkUyQkIwHhcNMjQxMTIxMDEwMjMwWhcNMjQxMTI4MDEwMjMwWjAYMRYwFAYD VQQDEw02NzNlODZhNi03N2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa/JFxRrMXj2sJwOc7TA4GGNV8h3jtcxal0nvx8zWglbAO1d7zoULeChDfLK W6WXOn7+DGM1+3OCseF4VdIcOmtXdIo2Iem7G1oqHlFsdDW+7umcmmol/6gBFr7K HTG82wpUGK00n5cpljHrikhi+s0IoZOu4N6kaehJRaDf6IrKHake0Ky40BKYNkbh 5aiddukL01aM/pZh1Dw60yoPk6zHuIL8tdW3roqOm3PbwzMRlAWff9RMuEpLaNLp pLPrQBR00zhV0YwMe8FTOJ/cut1LyU06a5+58YM8KbXUiF3qnF9N1pPH8waLqS5j YYGVHnKJPxXs6T2HQzNfNz4FRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcnVLOs VemuNyamSBxD1d6FJIM2MB8GA1UdIwQYMBaAFLTyYvmYV+EgzJy8S/wX7VSrq+K7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkFERC9FREM2NzYxNEQw RDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRTRE1uTHhMX0JmdFZLdXI0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQSmktWmhYNFNETW5MeExfQmZ0Vkt1cjRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkFERC9FREM2NzYxNEQwRDQxMUVDQTI0OTRBNzdDNEY5QUUwMi90UEppLVpoWDRT RE1uTHhMX0JmdFZLdXI0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACBEpa5qGpoCVNJuQek9Mb/saFArLPpphjLSZAcQkCUeb4OidMeVXj suEvtUQrlfe6KjfpIAeZW5Vp4UnUkbGK9qlQTZCowMOmsWM2ik7AfG9vW5J58d/r ljBTGcT5n0duj14IrGtMTUWLpfxZWwpMnPG+ySnxtxLGIbC7647J5YsScP4yhKxw 9aquyYBfAdHxLrgEDkzorPrA6uNvKZa4GnL3EnPYwgx1CWGpmvq+vNGoDiAOWY+/ cTuOPJjWdqO47dnJNLzHv9P/wTImeilSh2Cac7EEqRsBglSTFcz8vzrJl+Ulv8Ns YwefdVI5xvyNK9s0op3t0lbXwvSlT/6L -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:05 2024 by rpki-client on console-fra.rpki-client.org