$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json) Hash identifier: vzEU4XLtB+vFMt+9NLthjGbWogQ/GBIgaABp4Tg57Vo= Subject key identifier: 53:96:22:63:81:AB:8B:9A:53:7F:26:38:0A:47:FA:ED:7E:69:A2:24 Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft Manifest number: 4B Signing time: Wed 23 Oct 2024 05:56:43 +0000 Manifest this update: Wed 23 Oct 2024 05:56:43 +0000 Manifest next update: Wed 30 Oct 2024 05:56:43 +0000 Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: uB4kApp6oXfzXH0661EAH51tA2MfFwy3bjYaYk+kyWo=) 2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: B83vyctz3B0CBY300XtJK40jQxKO2YbqnW1lhv/rnh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E Validity Not Before: Oct 23 05:56:43 2024 GMT Not After : Oct 30 05:56:43 2024 GMT Subject: CN=6718901b-e3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:a9:49:63:71:0a:fb:1d:8f:ec:15:e4:41: 58:18:80:72:39:36:1e:0d:d7:ec:70:b5:9b:7b:d6: 82:f0:a3:8b:75:cf:8e:4d:42:3a:c5:ad:a2:d9:34: b5:6e:4f:7c:70:46:01:b0:85:8f:1a:d6:4a:11:c7: 79:cb:34:4d:5c:6a:33:1b:83:4d:e3:57:29:eb:b5: 29:12:d7:23:dd:83:3c:e0:de:2c:9e:40:6d:82:6f: 3a:37:5b:f5:a0:48:54:79:c4:f7:b6:15:59:a2:95: d6:2a:b8:2d:94:e1:8a:1e:66:d8:f3:02:6c:84:0c: 6a:30:dd:8e:54:37:8f:96:b4:08:74:7b:02:5f:db: ca:8c:57:ce:09:88:01:a1:2a:38:28:36:35:36:4b: 31:e1:38:22:36:6e:ca:60:1c:69:c0:21:3c:fa:fc: e6:26:35:5d:e6:0c:3b:b5:ad:d2:4d:20:41:41:5b: 7f:73:36:50:11:ea:aa:a9:9a:05:be:4b:40:a9:4b: 24:ed:d1:33:ed:f3:15:5a:a1:18:1d:32:51:37:61: 0b:2d:2c:72:8d:4c:e2:60:a4:ea:f8:5e:f6:ca:0b: a3:7b:f3:a9:02:95:90:7f:47:08:2c:5b:d4:f1:ef: fb:df:e5:47:74:21:36:72:18:9c:c1:85:dc:fd:2a: b4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:96:22:63:81:AB:8B:9A:53:7F:26:38:0A:47:FA:ED:7E:69:A2:24 X509v3 Authority Key Identifier: keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ec:7e:1b:91:00:21:b3:34:92:ec:93:3e:a6:e8:63:a6:8a: 23:4c:a8:fa:74:77:41:82:1a:e1:e2:f2:c8:d4:e3:86:f4:f8: 25:08:a2:d7:f8:f4:a1:c3:19:57:a0:eb:ae:19:b8:b0:bc:85: 6f:e6:92:e4:25:5e:b1:a8:44:95:d4:f3:1d:90:10:50:3c:b4: 62:7f:27:9d:06:c8:9f:36:58:53:b2:75:85:5c:d5:71:d5:5f: 09:b9:bf:c2:c9:c6:b8:a1:ce:74:34:84:25:cb:37:e0:7a:6d: a3:25:aa:be:a7:0e:1b:e3:0f:6b:9f:30:c6:bd:d7:ee:00:0d: 02:83:77:49:e1:f1:8e:e6:e8:8c:0d:de:d0:e8:88:f4:8e:a1: bb:73:50:05:91:5b:a6:8c:45:ca:63:79:27:6a:02:7b:80:ec: fd:2c:ed:36:8c:04:a2:ee:fc:df:8b:69:1c:cd:53:10:6a:3c: ba:24:25:c8:f9:04:6d:93:28:ee:5b:e8:5e:10:44:2e:62:da: b6:9e:2a:2b:53:ab:55:b7:b8:af:e4:ef:26:b1:30:a4:0d:60: 62:60:25:6b:69:2c:12:88:8b:07:23:fd:f6:67:ee:6a:84:f6: 17:48:e8:d7:7a:d4:a4:9d:ba:54:d0:00:86:24:d6:69:6a:71: a4:a3:4b:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTdBOTExMC8GA1UEBRMoNEUyNTlCQTg3QTQwQjY2RDg0MkFDOENFMEFFQTc4NEU0 QkQ3MzgyRTAeFw0yNDEwMjMwNTU2NDNaFw0yNDEwMzAwNTU2NDNaMBgxFjAUBgNV BAMTDTY3MTg5MDFiLWUzYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4X6lJY3EK+x2P7BXkQVgYgHI5Nh4N1+xwtZt71oLwo4t1z45NQjrFraLZNLVu T3xwRgGwhY8a1koRx3nLNE1cajMbg03jVynrtSkS1yPdgzzg3iyeQG2Cbzo3W/Wg SFR5xPe2FVmildYquC2U4YoeZtjzAmyEDGow3Y5UN4+WtAh0ewJf28qMV84JiAGh KjgoNjU2SzHhOCI2bspgHGnAITz6/OYmNV3mDDu1rdJNIEFBW39zNlAR6qqpmgW+ S0CpSyTt0TPt8xVaoRgdMlE3YQstLHKNTOJgpOr4XvbKC6N786kClZB/RwgsW9Tx 7/vf5Ud0ITZyGJzBhdz9KrRdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU5YiY4Gr i5pTfyY4Ckf67X5poiQwHwYDVR0jBBgwFoAUTiWbqHpAtm2EKsjOCup4TkvXOC4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1N0E5LzdCQkQxMUFDMUZG MzExRUZBM0ZCMkM4MUM0RjlBRTAyL1RpV2JxSHBBdG0yRUtzak9DdXA0VGt2WE9D NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVGlXYnFIcEF0bTJFS3NqT0N1cDRUa3ZYT0M0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 N0E5LzdCQkQxMUFDMUZGMzExRUZBM0ZCMkM4MUM0RjlBRTAyL1RpV2JxSHBBdG0y RUtzak9DdXA0VGt2WE9DNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnsfhuRACGzNJLskz6m6GOmiiNMqPp0d0GCGuHi8sjU44b0+CUIotf4 9KHDGVeg664ZuLC8hW/mkuQlXrGoRJXU8x2QEFA8tGJ/J50GyJ82WFOydYVc1XHV Xwm5v8LJxrihznQ0hCXLN+B6baMlqr6nDhvjD2ufMMa91+4ADQKDd0nh8Y7m6IwN 3tDoiPSOobtzUAWRW6aMRcpjeSdqAnuA7P0s7TaMBKLu/N+LaRzNUxBqPLokJcj5 BG2TKO5b6F4QRC5i2raeKitTq1W3uK/k7yaxMKQNYGJgJWtpLBKIiwcj/fZn7mqE 9hdI6Nd61KSdulTQAIYk1mlqcaSjS1w= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org