$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft File: TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json) Hash identifier: vW9RJyKZNJomouanMKFmM34J/ucmxQp3pOkDCMFMpsU= Subject key identifier: 66:85:44:D8:F3:27:AD:C8:43:75:94:43:3D:D0:D1:C7:65:C2:41:A3 Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft Manifest number: 3A Signing time: Sat 23 Nov 2024 05:33:52 +0000 Manifest this update: Sat 23 Nov 2024 05:33:52 +0000 Manifest next update: Sat 30 Nov 2024 05:33:52 +0000 Files and hashes: 1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: 1pJaK5nK+fmTQ/TSjnjTo+xzMOMrn+Q5c+4dYYCjrcE=) 2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: oF3VcsOsG2Zqk+IQ1vtZzq4bbG78CQjAlZHo1HK5yEg=) 3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: ked/GJVZUYOs6O5igLCD6QhAYKlPchUMLyIiNRHSOdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Nov 23 05:33:52 2024 GMT Not After : Nov 30 05:33:52 2024 GMT Subject: CN=67416940-2358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:44:a7:c9:6f:71:69:f5:6b:99:11:7f:33: 68:d1:eb:f5:6f:5e:45:3c:fa:7a:a9:6c:bd:3c:d6: 5a:c2:74:b2:24:8c:0c:9c:4d:53:0c:41:05:db:cd: c2:66:26:a9:94:0f:c9:61:b0:14:b2:b6:fd:94:38: 76:b6:cb:d6:97:b2:24:a2:19:f5:c2:78:3d:ae:08: ac:c9:1a:20:99:e5:95:5c:3d:f1:47:fb:75:54:c2: 49:7b:e3:f5:50:7b:e5:a7:65:6a:79:e4:3a:02:62: 33:f5:a6:eb:d8:84:bd:cd:7c:b8:79:22:47:b6:b8: 9c:6a:fd:37:3d:9c:f7:be:8d:9d:a9:61:bb:f8:f4: cf:d1:15:06:a7:79:ad:57:91:80:f7:b0:11:8c:5e: 9a:5e:9b:95:da:10:32:33:23:5f:d9:a2:df:2c:8f: a6:5f:32:85:6e:dc:10:59:f4:83:a5:19:31:04:c5: c4:6e:d2:35:73:2b:98:93:81:da:b6:d4:dc:32:83: 77:ac:85:c0:95:cc:b8:15:1e:07:8d:d9:f0:76:93: 13:bb:98:36:f6:ab:1a:80:b7:f6:b2:2e:2e:86:89: 7b:e2:b4:c8:6a:00:65:09:dd:ea:32:8d:52:9a:2f: 84:2c:7f:df:51:bf:8c:0e:8d:5a:9f:fb:8b:71:27: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:85:44:D8:F3:27:AD:C8:43:75:94:43:3D:D0:D1:C7:65:C2:41:A3 X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:4b:af:e8:1e:74:af:1a:cb:87:e1:f4:9a:b6:dd:0c:dc:6a: 4e:71:59:ae:62:70:6c:88:b5:03:07:67:48:d6:68:00:b1:1a: 32:c5:2d:df:e9:de:eb:32:59:cb:8b:13:48:17:73:7a:44:e1: 0b:3b:e8:60:12:c6:dc:bb:32:26:50:9f:27:cc:e3:39:b5:52: 41:46:81:da:91:e7:f1:5a:04:ca:49:33:8b:8b:72:33:3d:3b: 57:96:c6:86:28:e9:8c:a8:62:44:58:39:e7:77:e2:18:84:0e: fe:e7:27:a5:45:1a:5b:d7:47:5c:1b:30:35:7c:b4:e1:7e:11: f9:12:59:2c:25:c6:19:59:27:06:3b:63:68:fa:74:cb:4f:3f: d2:51:74:a5:61:49:02:5b:33:c7:d8:38:bd:92:0b:79:54:21: 92:1d:87:b1:3b:7a:be:c6:8e:7a:13:2e:d3:28:e9:64:3f:2f: d6:ff:91:bf:8f:46:71:76:93:cd:cf:16:73:9a:4c:b5:3f:89: 90:b3:d0:cd:4d:cc:38:18:a2:9e:ef:f1:8d:94:2f:15:68:f1: 83:17:30:53:57:c9:7e:7c:e0:e8:df:4d:da:3e:ad:bf:ba:63: 19:8e:6e:dd:ec:77:e7:c2:e7:bf:f6:86:11:f5:29:f9:6f:5f: 28:6b:1f:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzcyQzExMC8GA1UEBRMoNEM2MkYxRTEwQjg4M0Y1RDU3ODRENjM1NzQwRkQyMzAz NENFQkZFMjAeFw0yNDExMjMwNTMzNTJaFw0yNDExMzAwNTMzNTJaMBgxFjAUBgNV BAMTDTY3NDE2OTQwLTIzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU20SnyW9xafVrmRF/M2jR6/VvXkU8+nqpbL081lrCdLIkjAycTVMMQQXbzcJm JqmUD8lhsBSytv2UOHa2y9aXsiSiGfXCeD2uCKzJGiCZ5ZVcPfFH+3VUwkl74/VQ e+WnZWp55DoCYjP1puvYhL3NfLh5Ike2uJxq/Tc9nPe+jZ2pYbv49M/RFQanea1X kYD3sBGMXppem5XaEDIzI1/Zot8sj6ZfMoVu3BBZ9IOlGTEExcRu0jVzK5iTgdq2 1Nwyg3eshcCVzLgVHgeN2fB2kxO7mDb2qxqAt/ayLi6GiXvitMhqAGUJ3eoyjVKa L4Qsf99Rv4wOjVqf+4txJ+5nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZoVE2PMn rchDdZRDPdDRx2XCQaMwHwYDVR0jBBgwFoAUTGLx4QuIP11XhNY1dA/SMDTOv+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzNzJDLzY3OTZEOEUyNUVD RTExRUZBOUE4QjAzRUM0RjlBRTAyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3Yt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVEdMeDRRdUlQMTFYaE5ZMWRBX1NNRFRPdi1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz NzJDLzY3OTZEOEUyNUVDRTExRUZBOUE4QjAzRUM0RjlBRTAyL1RHTHg0UXVJUDEx WGhOWTFkQV9TTURUT3YtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZLr+gedK8ay4fh9Jq23Qzcak5xWa5icGyItQMHZ0jWaACxGjLFLd/p 3usyWcuLE0gXc3pE4Qs76GASxty7MiZQnyfM4zm1UkFGgdqR5/FaBMpJM4uLcjM9 O1eWxoYo6YyoYkRYOed34hiEDv7nJ6VFGlvXR1wbMDV8tOF+EfkSWSwlxhlZJwY7 Y2j6dMtPP9JRdKVhSQJbM8fYOL2SC3lUIZIdh7E7er7GjnoTLtMo6WQ/L9b/kb+P RnF2k83PFnOaTLU/iZCz0M1NzDgYop7v8Y2ULxVo8YMXMFNXyX584OjfTdo+rb+6 YxmObt3sd+fC57/2hhH1KflvXyhrH08= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org