$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft File: TjxBSRoYtEm7EK5gcQF04-4-sWE.mft (raw, json) Hash identifier: Kxzy0JNy9NUeSx9K4/R/FJ6PSA6tU+++vNzEW7YZkkc= Subject key identifier: 80:3B:94:73:10:EB:C7:B7:25:6C:EF:A4:B4:A2:68:F6:DA:C4:A1:A3 Authority key identifier: 4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 Certificate issuer: /CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Certificate serial: 3420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft Manifest number: 9DB7 Signing time: Fri 22 Nov 2024 14:29:35 +0000 Manifest this update: Fri 22 Nov 2024 14:29:35 +0000 Manifest next update: Fri 29 Nov 2024 14:29:35 +0000 Files and hashes: 1: TjxBSRoYtEm7EK5gcQF04-4-sWE.crl (hash: X6hzAbRF/7KSbfuIKYbPhrxoiguNgtrkSoKlzmbkf/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13344 (0x3420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=4E3C41491A18B449BB10AE60710174E3EE3EB161 Validity Not Before: Nov 22 14:29:35 2024 GMT Not After : Nov 29 14:29:35 2024 GMT Subject: CN=6740954f-dc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:56:31:c0:28:eb:4d:d4:ac:76:2b:78:a1:29: 1c:76:50:61:1a:50:69:00:e8:61:cf:91:c8:43:51: 4e:4f:c5:eb:42:ed:d8:b9:de:ea:4c:33:78:7b:15: 7d:f4:76:e2:cb:2d:06:de:d7:b1:85:07:0b:40:b6: 8e:9c:33:98:4e:b7:8c:ee:7a:f8:5d:20:e0:65:42: 4e:e3:a8:b2:a2:01:71:ef:08:f5:64:ad:95:32:e8: 18:93:9c:d8:0a:83:60:36:99:8b:5b:fa:08:f3:16: d3:c4:8c:8e:19:ce:72:fb:10:4b:ad:23:52:ec:8f: 47:72:7c:94:6d:a8:83:d8:de:59:23:e9:08:e8:d9: 88:70:98:e7:40:58:d4:93:77:dc:8d:c1:90:b9:28: 6b:9b:b1:44:be:3f:59:a6:d5:2a:e1:81:a8:47:6a: 60:19:b3:dc:d4:25:99:37:24:33:97:e7:90:e5:95: 0a:d8:07:ad:b7:eb:5e:0d:07:17:9c:38:fe:ef:11: 03:62:a8:52:2b:84:4a:9c:27:83:90:e1:4c:1d:1d: 7c:7a:7c:98:19:af:07:86:e7:bb:56:a1:fd:cf:25: d3:a2:96:1c:bb:04:0a:44:91:9d:d1:ea:9d:69:c2: 2e:0a:6a:62:00:c5:1b:ed:06:da:35:81:6b:a4:d2: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3B:94:73:10:EB:C7:B7:25:6C:EF:A4:B4:A2:68:F6:DA:C4:A1:A3 X509v3 Authority Key Identifier: keyid:4E:3C:41:49:1A:18:B4:49:BB:10:AE:60:71:01:74:E3:EE:3E:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TjxBSRoYtEm7EK5gcQF04-4-sWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/TjxBSRoYtEm7EK5gcQF04-4-sWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:80:3c:12:10:b4:bd:11:26:4a:90:96:6c:0d:18:58:0f:34: b0:83:24:8c:26:7d:c3:51:d6:8f:18:0c:06:68:b1:7e:32:f6: 73:ec:68:a6:ee:e3:72:3f:39:eb:1d:f3:fc:d0:66:7a:5d:75: f2:df:a5:22:73:41:81:48:f1:85:05:b6:f3:0e:28:ca:2b:2b: a7:72:ef:da:b1:83:dc:c8:e1:da:a3:cf:25:f7:7a:4b:0b:60: 34:eb:54:9d:29:f9:36:a5:63:f4:e5:9b:29:97:d7:c2:5a:5b: e1:b5:d7:e1:2d:e9:b9:18:4d:6b:80:6e:6c:e8:5e:de:93:3b: 6d:78:43:1d:60:51:f0:09:0a:9a:ec:98:f8:05:df:99:5b:be: 1f:4a:b9:a7:13:57:a8:a1:45:3d:0f:3b:f5:81:55:cb:2d:be: d9:e7:7f:5e:3a:8f:5d:f0:a8:a4:a2:e2:88:91:5a:2d:45:6f: 6f:15:98:1a:2f:a5:b2:8a:d1:6e:30:da:e1:c3:1a:e4:a4:cb: 13:ea:3f:3a:d7:42:2b:af:16:27:c3:10:89:ac:2c:15:f8:96: 3b:22:b3:fe:24:2a:58:ad:0d:2f:6d:93:03:f2:82:38:c6:18: db:fd:4d:78:95:cb:38:7a:d9:44:d5:50:06:74:d5:5e:92:76: f5:b5:d1:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDRFM0M0MTQ5MUExOEI0NDlCQjEwQUU2MDcxMDE3NEUz RUUzRUIxNjEwHhcNMjQxMTIyMTQyOTM1WhcNMjQxMTI5MTQyOTM1WjAYMRYwFAYD VQQDEw02NzQwOTU0Zi1kYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FYxwCjrTdSsdit4oSkcdlBhGlBpAOhhz5HIQ1FOT8XrQu3Yud7qTDN4exV9 9Hbiyy0G3texhQcLQLaOnDOYTreM7nr4XSDgZUJO46iyogFx7wj1ZK2VMugYk5zY CoNgNpmLW/oI8xbTxIyOGc5y+xBLrSNS7I9HcnyUbaiD2N5ZI+kI6NmIcJjnQFjU k3fcjcGQuShrm7FEvj9ZptUq4YGoR2pgGbPc1CWZNyQzl+eQ5ZUK2Aett+teDQcX nDj+7xEDYqhSK4RKnCeDkOFMHR18enyYGa8Hhue7VqH9zyXTopYcuwQKRJGd0eqd acIuCmpiAMUb7QbaNYFrpNI4nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIA7lHMQ 68e3JWzvpLSiaPbaxKGjMB8GA1UdIwQYMBaAFE48QUkaGLRJuxCuYHEBdOPuPrFh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRFbTdFSzVnY1FGMDQtNC1z V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RqeEJTUm9ZdEVtN0VLNWdjUUYwNC00LXNXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9UanhCU1JvWXRF bTdFSzVnY1FGMDQtNC1zV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFgDwSELS9ESZKkJZsDRhYDzSwgySMJn3DUdaPGAwGaLF+MvZz7Gim 7uNyPznrHfP80GZ6XXXy36Uic0GBSPGFBbbzDijKKyuncu/asYPcyOHao88l93pL C2A061SdKfk2pWP05Zspl9fCWlvhtdfhLem5GE1rgG5s6F7ekztteEMdYFHwCQqa 7Jj4Bd+ZW74fSrmnE1eooUU9Dzv1gVXLLb7Z539eOo9d8KikouKIkVotRW9vFZga L6WyitFuMNrhwxrkpMsT6j8610IrrxYnwxCJrCwV+JY7IrP+JCpYrQ0vbZMD8oI4 xhjb/U14lcs4etlE1VAGdNVeknb1tdGX -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org