$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: PdBrK1TWIbHFEM7O3B+Jn0EsKcMEQP6l6IhnnfvxwGg= Subject key identifier: E5:EA:DD:98:6A:D5:90:DE:66:47:B8:33:02:C4:F1:B5:6E:00:99:69 Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 3467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 3444 Signing time: Fri 22 Nov 2024 14:28:56 +0000 Manifest this update: Fri 22 Nov 2024 14:28:56 +0000 Manifest next update: Fri 29 Nov 2024 14:28:56 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: fzaXQilH5hi4hsVxtyqiaKwzrtDYUaw+IKIaGh76dfI=) 2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: JhVXDJz63aidEMO/nq+HJlBaaThD9tcKXmuM/gfoTT0=) 3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: KqOdzkW00sNoLJ/OBf5XyYcMrbE8nowEuQW1fHDQD1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13415 (0x3467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: Nov 22 14:28:56 2024 GMT Not After : Nov 29 14:28:56 2024 GMT Subject: CN=67409528-1068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:5a:bc:49:ff:43:c2:00:3c:24:a5:5a:e8: 7d:f5:0b:1b:54:9c:8f:03:a1:7e:b2:47:12:83:83: e0:cf:dc:04:a9:f7:7d:f4:d1:ea:96:ac:53:1b:5d: cb:7a:17:3e:8a:b7:5f:38:34:9a:8c:3f:f7:7d:b0: 94:09:bb:55:c0:6c:d8:ef:00:a0:c2:de:38:d8:a5: 44:21:b8:2c:42:ee:9c:d2:6d:14:e2:76:d1:2e:d7: 16:fa:29:0d:4f:45:3f:77:82:24:64:0f:37:e8:2c: aa:cb:1f:39:0d:14:b1:7d:ac:dd:86:1e:5d:20:e0: cc:2e:be:94:3b:3a:1f:48:a2:8e:f2:69:a1:d5:7a: 6d:53:f6:9b:e0:c7:65:dc:d4:0a:19:6f:10:5b:0c: 31:b8:a2:4e:89:ca:b8:f2:2e:e6:2c:9d:ea:b8:72: 4d:19:f1:7e:34:6f:dd:ed:63:14:4c:a7:e4:d8:2c: e9:a3:cb:da:34:08:bf:57:6f:77:0b:68:cf:cb:c9: 29:24:42:5a:b5:f3:d8:fb:81:3a:cc:48:9e:a6:70: 8d:af:5d:3b:d8:fc:c6:ba:fa:b9:ea:ab:54:0c:9a: 50:fb:7a:f7:da:fa:ba:03:69:82:ab:48:a9:32:1b: bc:6e:21:c6:62:96:8c:1b:7c:36:43:d5:f1:30:f7: 34:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:DD:98:6A:D5:90:DE:66:47:B8:33:02:C4:F1:B5:6E:00:99:69 X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:b9:81:31:28:71:b1:5a:2c:01:aa:9b:d7:28:19:cb:bf:62: 4f:94:fa:18:91:bb:5d:44:22:58:14:f3:45:7b:01:1b:86:d5: 81:e9:73:f6:7f:b5:90:a0:33:81:3e:a9:0c:ea:64:8c:1c:5d: 1e:35:6c:e2:e6:61:b4:3a:f0:a6:d0:1e:d6:12:82:46:f9:9c: 66:01:ac:9a:0c:db:a5:c5:26:5c:6c:3e:f6:b2:05:f0:0a:ad: a8:c2:14:8a:8f:26:8f:5b:9b:65:37:fe:a7:b8:d5:8b:58:cd: ca:51:d8:8a:15:5d:a5:be:a9:ed:ab:9f:21:3e:e0:4c:26:9c: f5:00:f4:47:a3:03:5b:99:0c:17:23:fc:d5:5c:14:f0:20:38: 6b:f9:a3:be:50:6c:bf:32:15:10:a9:79:2d:7e:17:a8:94:9f: bb:bc:04:f8:85:fe:97:5c:5f:af:00:81:62:48:49:ba:6d:ba: 84:12:8f:3e:c5:10:f4:af:67:13:15:46:b8:87:aa:ac:7d:9f: 22:f4:65:d3:47:f2:a8:e6:bf:7d:44:7a:d8:f6:d7:82:68:57: 0e:23:3f:c7:f4:ef:97:1d:93:e5:33:df:86:ad:3a:64:25:51: 4f:df:2d:86:fd:fc:4e:da:f7:ee:25:aa:cd:07:77:7f:de:29: e0:a5:6b:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjQxMTIyMTQyODU2WhcNMjQxMTI5MTQyODU2WjAYMRYwFAYD VQQDEw02NzQwOTUyOC0xMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rtavEn/Q8IAPCSlWuh99QsbVJyPA6F+skcSg4Pgz9wEqfd99NHqlqxTG13L ehc+irdfODSajD/3fbCUCbtVwGzY7wCgwt442KVEIbgsQu6c0m0U4nbRLtcW+ikN T0U/d4IkZA836Cyqyx85DRSxfazdhh5dIODMLr6UOzofSKKO8mmh1XptU/ab4Mdl 3NQKGW8QWwwxuKJOicq48i7mLJ3quHJNGfF+NG/d7WMUTKfk2Czpo8vaNAi/V293 C2jPy8kpJEJatfPY+4E6zEiepnCNr1072PzGuvq56qtUDJpQ+3r32vq6A2mCq0ip Mhu8biHGYpaMG3w2Q9XxMPc05wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXq3Zhq 1ZDeZke4MwLE8bVuAJlpMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAouYExKHGxWiwBqpvXKBnLv2JPlPoYkbtdRCJYFPNFewEbhtWB6XP2 f7WQoDOBPqkM6mSMHF0eNWzi5mG0OvCm0B7WEoJG+ZxmAayaDNulxSZcbD72sgXw Cq2owhSKjyaPW5tlN/6nuNWLWM3KUdiKFV2lvqntq58hPuBMJpz1APRHowNbmQwX I/zVXBTwIDhr+aO+UGy/MhUQqXktfheolJ+7vAT4hf6XXF+vAIFiSEm6bbqEEo8+ xRD0r2cTFUa4h6qsfZ8i9GXTR/Ko5r99RHrY9teCaFcOIz/H9O+XHZPlM9+GrTpk JVFP3y2G/fxO2vfuJarNB3d/3ingpWtC -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org