$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: kDabvJPvjNKSFOqdEtjxyP6JhlCM0vEUpvnKfyL6oFI= Subject key identifier: 73:E5:B9:75:20:B6:1B:E4:A2:5F:76:F7:41:A6:DC:87:40:D4:F7:D9 Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 016B Signing time: Sun 24 Nov 2024 16:17:28 +0000 Manifest this update: Sun 24 Nov 2024 16:17:27 +0000 Manifest next update: Sun 01 Dec 2024 16:17:27 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: aMKRgDKKwKkiAcmh45lxbZi0QcFTDZgmh89c4k6sNdI=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: fvbvs2Wqvy4vuNdUjs+4Z/eUaxC5K/4ILoyyJZ0yTFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Nov 24 16:17:27 2024 GMT Not After : Dec 1 16:17:27 2024 GMT Subject: CN=67435197-0412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:42:c6:b9:48:db:d1:99:5e:c3:8e:03:67: b3:40:f7:de:4f:fc:71:52:08:7f:29:33:15:25:5c: 55:c5:c7:77:37:e8:ea:50:91:94:b6:3d:a2:54:20: ce:2c:c0:62:96:8e:2e:e2:1f:74:c2:5e:83:b1:67: 2c:6e:74:2b:09:3e:83:b8:31:11:4c:f3:2a:bc:26: 45:bb:2c:96:be:72:49:53:18:3b:03:03:21:58:63: ca:e4:d9:95:55:ca:68:48:06:eb:31:00:15:47:0c: 59:ad:cb:0f:8e:00:38:a3:33:96:fb:77:36:82:46: 16:3a:44:3a:3a:b7:7e:02:4c:e6:6c:9e:3e:25:76: 81:37:27:8b:b4:b2:fd:17:43:7d:e5:5c:5d:c4:a1: 8a:3b:ea:89:62:bf:8a:9b:21:71:fa:6f:71:65:88: 5d:37:86:0f:5e:78:30:4b:af:78:7f:0c:f4:e7:7c: df:ec:c2:5c:54:1b:6d:2a:53:0e:37:a6:66:80:c3: d4:3c:96:ac:b2:4e:bf:a6:2c:5d:2e:b5:9d:a2:03: 1f:fa:38:e7:3b:86:29:0d:d9:db:74:64:d0:61:4c: 03:58:95:e3:d2:30:60:a5:81:09:0a:53:38:b9:29: 3a:66:13:07:80:fd:9d:b8:85:ed:2a:95:d2:cd:91: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E5:B9:75:20:B6:1B:E4:A2:5F:76:F7:41:A6:DC:87:40:D4:F7:D9 X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e9:4b:50:4f:2d:cf:6b:d2:eb:a0:da:29:a0:7c:97:46:10: 49:93:d6:b1:71:56:74:8a:84:c0:95:ba:44:54:30:c8:40:32: 71:11:68:6f:21:9f:39:64:87:1f:3c:2e:81:3b:fd:2f:52:95: 3d:62:43:be:42:66:dd:b9:84:c8:f3:7c:2e:09:16:c0:cb:de: 60:0e:3a:fa:99:da:82:0c:f6:ea:63:5c:1a:e2:3a:48:a5:c4: 2e:23:23:67:d7:5c:ae:5c:a4:f5:6d:12:27:f9:db:03:22:c2: 46:f4:82:07:e1:0d:f1:67:da:7d:78:79:51:d6:5b:2e:ad:4c: 84:a8:40:97:17:d5:de:ec:01:5b:98:98:84:66:17:9e:f6:58: b9:c1:8b:60:c0:c6:b8:37:b3:70:2b:19:b1:c1:54:08:6f:e8: 2e:74:2f:67:1b:b5:ec:53:9d:10:c2:30:60:f6:0b:73:d4:dc: 9a:e4:d1:1c:5b:3c:b0:10:dc:e6:09:2e:ef:fb:50:99:e3:09: 48:06:54:74:56:40:54:0c:5d:c6:07:1a:03:58:53:f0:75:85: c9:24:d2:c9:6d:d8:fc:3c:fe:bb:70:d0:e8:d8:f7:0c:29:9c: 2f:43:3b:c8:36:33:f8:01:e2:94:f0:e9:8a:1d:5f:fb:3b:4b: cd:2d:69:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjQxMTI0MTYxNzI3WhcNMjQxMjAxMTYxNzI3WjAYMRYwFAYD VQQDEw02NzQzNTE5Ny0wNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsABCxrlI29GZXsOOA2ezQPfeT/xxUgh/KTMVJVxVxcd3N+jqUJGUtj2iVCDO LMBilo4u4h90wl6DsWcsbnQrCT6DuDERTPMqvCZFuyyWvnJJUxg7AwMhWGPK5NmV VcpoSAbrMQAVRwxZrcsPjgA4ozOW+3c2gkYWOkQ6Ord+AkzmbJ4+JXaBNyeLtLL9 F0N95VxdxKGKO+qJYr+KmyFx+m9xZYhdN4YPXngwS694fwz053zf7MJcVBttKlMO N6ZmgMPUPJassk6/pixdLrWdogMf+jjnO4YpDdnbdGTQYUwDWJXj0jBgpYEJClM4 uSk6ZhMHgP2duIXtKpXSzZHqfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPluXUg thvkol9290Gm3IdA1PfZMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT6UtQTy3Pa9LroNopoHyXRhBJk9axcVZ0ioTAlbpEVDDIQDJxEWhv IZ85ZIcfPC6BO/0vUpU9YkO+QmbduYTI83wuCRbAy95gDjr6mdqCDPbqY1wa4jpI pcQuIyNn11yuXKT1bRIn+dsDIsJG9IIH4Q3xZ9p9eHlR1lsurUyEqECXF9Xe7AFb mJiEZhee9li5wYtgwMa4N7NwKxmxwVQIb+gudC9nG7XsU50QwjBg9gtz1Nya5NEc WzywENzmCS7v+1CZ4wlIBlR0VkBUDF3GBxoDWFPwdYXJJNLJbdj8PP67cNDo2PcM KZwvQzvINjP4AeKU8OmKHV/7O0vNLWnG -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:52 2024 by rpki-client on console-fra.rpki-client.org