$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft File: TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json) Hash identifier: yRbaLmzEZdaSbLt6gn7iN1qk3jMiWQbdfoQL2JDeeUo= Subject key identifier: 14:6E:C4:A7:FA:F2:81:4F:0F:67:FE:EC:8E:28:19:52:BC:6E:E3:F0 Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 Certificate issuer: /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft Manifest number: 32 Signing time: Thu 21 Nov 2024 05:40:16 +0000 Manifest this update: Thu 21 Nov 2024 05:40:16 +0000 Manifest next update: Thu 28 Nov 2024 05:40:16 +0000 Files and hashes: 1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: /Hlw51HR4h0deTd54ky4WrHERjC2Vp/uuKXhx1q8fKo=) 2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: jmXb0sPHquklWucQNPULW9k7ur2PuqaFZnebmPVFmaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7 Validity Not Before: Nov 21 05:40:16 2024 GMT Not After : Nov 28 05:40:16 2024 GMT Subject: CN=673ec7c0-6dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:59:1c:75:9e:0c:a3:41:03:8e:e0:73:90: c7:f8:fe:ef:49:cf:87:9f:55:9d:60:6c:1e:d5:a2: 92:e5:a9:be:6c:ea:3f:f4:f4:9a:0c:f6:b3:03:d2: f8:fd:fd:7c:d1:8e:19:20:92:19:d1:01:df:4d:5c: 0c:77:8b:16:d4:1a:38:90:92:97:5b:e9:36:33:84: de:54:ca:c1:40:84:72:17:09:96:12:0e:52:d1:2c: 72:15:60:2a:44:e0:37:a8:a6:02:45:76:85:99:04: b0:a7:4f:f3:ee:37:f9:e3:42:75:f4:2f:2b:98:b2: d1:01:13:d6:9d:b9:44:8e:8c:d9:d1:7a:1e:22:ce: 63:05:dc:e2:1a:c6:0a:37:a1:d8:6a:6a:2c:38:2f: 06:26:29:b3:87:a2:e0:7b:b1:34:3f:41:c3:2f:e6: e3:4b:65:1e:56:b3:a3:16:b9:5e:b8:8d:5a:30:1c: 80:68:b2:fc:26:02:ae:e4:af:c7:73:77:4d:6e:5e: 42:c0:1f:ef:f6:cf:25:f0:fc:ac:0b:16:49:c6:e2: 45:00:a0:fd:89:76:64:51:94:94:f0:27:6b:62:6c: 4c:71:0b:dd:ab:0b:11:ed:7a:cd:86:03:f3:06:0a: 01:27:1e:36:75:f7:cb:db:94:fb:ed:d1:19:bf:ca: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6E:C4:A7:FA:F2:81:4F:0F:67:FE:EC:8E:28:19:52:BC:6E:E3:F0 X509v3 Authority Key Identifier: keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:18:c3:a0:05:b9:22:92:2e:aa:f3:fb:9c:bb:7a:11:43:9e: 37:dc:d4:63:b7:bf:3a:0b:d2:fe:63:4a:c7:7d:2c:25:c0:cd: 1d:79:c3:4f:00:69:a0:3d:9b:a9:df:5d:75:d6:81:9c:6b:ec: 08:5d:e2:c5:bb:d9:38:26:9e:63:19:c5:4f:a6:51:d9:8f:49: a4:30:6b:e3:6b:27:9d:83:af:e9:6f:46:3b:cc:7e:24:22:fd: dc:f1:32:3e:3d:09:e3:78:6f:93:69:76:06:67:a6:5a:53:97: 87:fb:1a:7e:bb:39:55:ec:32:59:bd:47:11:2b:ea:be:d4:be: 3b:96:97:8a:79:1e:8d:1f:d2:d4:07:b8:1e:2d:fe:a2:31:e7: de:db:17:6b:13:04:60:35:24:6a:28:d7:e5:8d:4b:61:b0:3b: dd:43:d6:06:f9:0f:f3:3a:c3:2a:42:b6:4c:58:e4:4a:5d:b2: a0:54:54:ef:07:32:b5:80:17:5c:f6:05:0d:2b:87:d4:26:ba: 3b:bd:47:03:f9:14:56:de:29:cd:27:d3:07:35:2b:1d:73:9e: cd:b9:30:ed:92:bb:ae:0d:42:37:06:44:d1:07:60:31:d9:74: 18:4e:b3:5b:ca:bf:c8:a1:4f:57:a1:a1:aa:73:f8:74:38:07: 3c:c6:3b:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OEY5QjExMC8GA1UEBRMoNENCMjEzMkE3MjM2QTZFM0I1Qjk2MzBDQTAzMDExNDg2 MzI4NTVGNzAeFw0yNDExMjEwNTQwMTZaFw0yNDExMjgwNTQwMTZaMBgxFjAUBgNV BAMTDTY3M2VjN2MwLTZkYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/p1kcdZ4Mo0EDjuBzkMf4/u9Jz4efVZ1gbB7VopLlqb5s6j/09JoM9rMD0vj9 /XzRjhkgkhnRAd9NXAx3ixbUGjiQkpdb6TYzhN5UysFAhHIXCZYSDlLRLHIVYCpE 4DeopgJFdoWZBLCnT/PuN/njQnX0LyuYstEBE9aduUSOjNnReh4izmMF3OIaxgo3 odhqaiw4LwYmKbOHouB7sTQ/QcMv5uNLZR5Ws6MWuV64jVowHIBosvwmAq7kr8dz d01uXkLAH+/2zyXw/KwLFknG4kUAoP2JdmRRlJTwJ2tibExxC92rCxHtes2GA/MG CgEnHjZ198vblPvt0Rm/yiTzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFG7Ep/ry gU8PZ/7sjigZUrxu4/AwHwYDVR0jBBgwFoAUTLITKnI2puO1uWMMoDARSGMoVfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4RjlCLzAxRURFRjk2NURC RTExRUY4QTA2RUQ0MEM0RjlBRTAyL1RMSVRLbkkycHVPMXVXTU1vREFSU0dNb1Zm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVExJVEtuSTJwdU8xdVdNTW9EQVJTR01vVmZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 RjlCLzAxRURFRjk2NURCRTExRUY4QTA2RUQ0MEM0RjlBRTAyL1RMSVRLbkkycHVP MXVXTU1vREFSU0dNb1ZmYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJgYw6AFuSKSLqrz+5y7ehFDnjfc1GO3vzoL0v5jSsd9LCXAzR15w08A aaA9m6nfXXXWgZxr7Ahd4sW72TgmnmMZxU+mUdmPSaQwa+NrJ52Dr+lvRjvMfiQi /dzxMj49CeN4b5NpdgZnplpTl4f7Gn67OVXsMlm9RxEr6r7UvjuWl4p5Ho0f0tQH uB4t/qIx597bF2sTBGA1JGoo1+WNS2GwO91D1gb5D/M6wypCtkxY5EpdsqBUVO8H MrWAF1z2BQ0rh9Qmuju9RwP5FFbeKc0n0wc1Kx1zns25MO2Su64NQjcGRNEHYDHZ dBhOs1vKv8ihT1ehoapz+HQ4BzzGO8c= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:40 2024 by rpki-client on console-ams.rpki-client.org