$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft File: TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json) Hash identifier: Qy3k4ilG2UEuMp9/wVotoUnGZr7A1pwJD7Jic+x0kw8= Subject key identifier: 34:3B:E5:F6:5B:78:0D:2C:48:12:6E:55:CB:10:6C:D3:18:72:16:3E Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft Manifest number: 06BB Signing time: Fri 22 Nov 2024 21:42:11 +0000 Manifest this update: Fri 22 Nov 2024 21:42:11 +0000 Manifest next update: Fri 29 Nov 2024 21:42:11 +0000 Files and hashes: 1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: 6wQo0i06ATNQmCGjnL7yIZvT6oz/SA/Ln4IGr1qTKVw=) 2: E9573898390E11EBAC72036BC4F9AE02.roa (hash: obihlxRhU0PPosQc2ueIbFqyf53tOUTNgrbX1TDxlFA=) 3: E9E53D64390E11EBAC72036BC4F9AE02.roa (hash: c0U5pKKCCV/RAy6tBF7y0xcEN5d947WhkMFfGLpOrGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Validity Not Before: Nov 22 21:42:11 2024 GMT Not After : Nov 29 21:42:11 2024 GMT Subject: CN=6740fab3-7ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:04:b4:90:f9:39:27:f2:7d:ec:be:d9:58: ba:d6:2c:37:70:33:5c:3a:12:b8:7a:e5:f7:e9:11: 32:95:90:53:64:12:3e:46:09:aa:ff:21:b5:59:d5: d8:18:c0:84:a2:26:82:d8:a3:52:0c:67:0f:ff:25: b3:d8:df:2f:46:1d:c6:65:d6:1f:09:b0:e4:a3:3e: 64:33:69:f7:cf:a2:75:6e:fd:30:e8:9d:bb:8d:ee: b0:93:ce:f8:ba:39:e9:02:02:c4:8a:32:e9:d9:48: 5a:cd:90:2a:f2:e2:69:0c:10:bd:80:4a:e6:dc:5f: 44:5f:bd:cd:fd:f9:80:81:09:87:5a:7e:ce:90:3a: 14:dd:af:15:02:13:6f:ff:c6:81:7d:f1:7c:23:d0: 24:7d:e2:19:f7:74:dc:ea:b6:b3:99:69:2a:81:fc: 97:18:c7:ab:89:ac:56:8c:a5:8c:52:53:f0:ef:67: fd:66:84:74:62:9e:3e:02:2d:9e:83:f8:6e:2a:72: 2c:5e:9e:66:83:09:96:24:a1:c7:6c:61:01:5c:a9: 43:a5:ee:80:b1:a7:c8:ad:f6:51:c0:a8:13:0f:11: 31:56:dd:5b:44:ca:5b:19:16:a4:47:c0:4e:b3:29: cb:b4:3e:cd:5f:07:b0:2a:28:c8:d9:da:fa:88:b7: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3B:E5:F6:5B:78:0D:2C:48:12:6E:55:CB:10:6C:D3:18:72:16:3E X509v3 Authority Key Identifier: keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:54:89:0b:07:d0:73:26:fa:61:a4:93:21:c0:2e:fd:1d:81: b1:e2:97:43:b9:7f:1d:68:d0:a7:01:ac:60:d2:fe:ef:82:71: cd:cf:b7:7d:1a:3a:00:0d:a7:eb:06:11:71:ac:31:7a:78:ab: 17:35:cd:d1:56:de:d7:91:03:bd:38:bf:e3:0a:24:af:2c:34: 4b:cc:d1:ed:a2:01:62:c3:0d:62:41:af:c6:45:ad:b6:41:e0: 2f:6d:09:e5:19:2b:f3:9a:10:82:04:6a:1e:c1:f1:5a:3a:24: ab:55:1c:aa:9c:e8:a1:ea:b3:01:24:53:7d:da:7a:57:a7:0c: f3:9a:bb:55:6c:9d:0f:78:7a:f1:48:4d:27:64:03:b9:bf:76: 4f:99:8f:e7:37:50:a2:07:97:18:67:21:7b:2e:1d:b4:c8:1c: 12:e5:08:05:69:2f:67:1f:2a:e3:46:2c:fd:c9:5f:31:b5:b8: f6:79:8c:47:f6:3b:46:e9:e9:7a:59:c8:c0:c7:d5:75:9a:29: d7:9b:81:76:15:f6:4b:c8:10:a9:f0:8e:fc:95:ab:94:70:fa: 9a:24:16:35:b4:f8:08:1f:e6:20:19:0e:f2:fc:bd:d4:91:da: 97:b1:89:6e:6e:07:0a:b7:3c:37:00:47:f1:1a:97:88:bb:a1: 33:05:7b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC MEZEMjFENUMwHhcNMjQxMTIyMjE0MjExWhcNMjQxMTI5MjE0MjExWjAYMRYwFAYD VQQDEw02NzQwZmFiMy03YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt84EtJD5OSfyfey+2Vi61iw3cDNcOhK4euX36REylZBTZBI+Rgmq/yG1WdXY GMCEoiaC2KNSDGcP/yWz2N8vRh3GZdYfCbDkoz5kM2n3z6J1bv0w6J27je6wk874 ujnpAgLEijLp2UhazZAq8uJpDBC9gErm3F9EX73N/fmAgQmHWn7OkDoU3a8VAhNv /8aBffF8I9AkfeIZ93Tc6razmWkqgfyXGMeriaxWjKWMUlPw72f9ZoR0Yp4+Ai2e g/huKnIsXp5mgwmWJKHHbGEBXKlDpe6AsafIrfZRwKgTDxExVt1bRMpbGRakR8BO synLtD7NXwewKijI2dr6iLcxFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ75fZb eA0sSBJuVcsQbNMYchY+MB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5 MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU5MC8yRjdCMTdDNDM5MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3Jk QkV2Q2p2WGZJWmF3X1NIVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5VIkLB9BzJvphpJMhwC79HYGx4pdDuX8daNCnAaxg0v7vgnHNz7d9 GjoADafrBhFxrDF6eKsXNc3RVt7XkQO9OL/jCiSvLDRLzNHtogFiww1iQa/GRa22 QeAvbQnlGSvzmhCCBGoewfFaOiSrVRyqnOih6rMBJFN92npXpwzzmrtVbJ0PeHrx SE0nZAO5v3ZPmY/nN1CiB5cYZyF7Lh20yBwS5QgFaS9nHyrjRiz9yV8xtbj2eYxH 9jtG6el6WcjAx9V1minXm4F2FfZLyBCp8I78lauUcPqaJBY1tPgIH+YgGQ7y/L3U kdqXsYlubgcKtzw3AEfxGpeIu6EzBXvh -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:14 2024 by rpki-client on console-fra.rpki-client.org