$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft File: nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json) Hash identifier: OC9qmXVwboqy8LGqejbA5ybUxCAOmeXG+iTZA8FmoCM= Subject key identifier: 11:F6:69:8E:64:25:48:B0:96:17:CD:88:B0:32:D7:EF:63:E4:37:82 Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft Manifest number: 03C8 Signing time: Sat 23 Nov 2024 00:13:31 +0000 Manifest this update: Sat 23 Nov 2024 00:13:30 +0000 Manifest next update: Sat 30 Nov 2024 00:13:30 +0000 Files and hashes: 1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: X/Jj1kcvoAi0iUul1f2tg49UcZAx0gmdasKQEfmpJpo=) 2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: hiz8orQvD2O6/cswN3b9tybf+/qTphdbwHRPLrZEniY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Validity Not Before: Nov 23 00:13:30 2024 GMT Not After : Nov 30 00:13:30 2024 GMT Subject: CN=67411e2b-57b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:b5:5b:ba:9f:b7:2f:3b:2f:35:a2:08:5d: 93:1f:65:99:dc:a2:39:ff:76:b3:b7:3c:b3:6d:4a: 06:2b:8a:a7:9d:37:eb:8e:97:19:86:cc:7a:f8:da: cd:3d:e1:5e:a9:81:7a:3f:8f:41:e6:47:4f:d5:c8: 73:8a:f9:a2:90:fd:ae:a1:27:6f:80:6f:65:07:33: 66:79:a5:4c:98:ca:25:be:86:b5:5b:48:2e:d5:aa: 00:b8:c0:50:a5:72:01:7f:44:ec:c2:4a:c6:e9:46: 78:61:e3:12:cc:64:64:60:b6:ab:c1:fb:81:37:47: 2a:80:02:85:9f:34:34:87:53:a2:6f:7b:87:49:d6: 30:95:38:4a:1a:3d:15:84:0f:36:ef:48:d7:df:ed: b3:38:65:0b:31:79:63:01:23:26:58:6e:e2:02:72: 4d:52:bc:36:e0:cf:15:f4:84:ea:11:7d:5a:df:07: 62:f0:cb:0b:a5:dc:06:cf:43:61:21:1e:2d:7f:9c: 99:b3:5e:b3:aa:d8:c6:c2:66:68:27:8d:db:73:12: c0:62:5d:0b:fd:b6:70:0d:b4:00:39:d0:da:99:76: ae:54:4d:2f:aa:ee:f2:d7:f8:61:16:08:9c:a5:a5: 5a:04:a0:59:76:2a:19:bc:0a:41:11:e8:a4:69:7e: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F6:69:8E:64:25:48:B0:96:17:CD:88:B0:32:D7:EF:63:E4:37:82 X509v3 Authority Key Identifier: keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:41:b9:24:b3:cf:48:af:d5:5f:93:f2:42:88:6c:ab:59:f4: a3:22:1f:48:9a:b6:94:1f:b0:64:af:81:49:10:b5:ee:13:63: 7d:43:c8:a0:45:10:7e:8e:03:41:74:34:25:f4:7a:98:d4:11: 80:9a:08:74:f3:b1:a8:84:65:b1:1c:79:b0:47:0c:f6:51:7d: 02:9b:e7:fb:10:13:0a:4a:24:4e:cd:05:3f:15:3e:2c:68:c7: d7:3f:c9:ec:b0:73:2a:40:7d:89:b1:3f:a8:07:f8:a6:b8:04: a9:dd:6c:50:a3:fb:11:4e:70:c9:a9:0c:04:32:fd:42:60:7f: b3:f0:ff:42:bf:16:34:59:ca:0a:cb:9c:1d:6d:18:16:29:aa: 16:56:21:31:47:04:9b:9a:14:ee:57:e0:20:a7:fe:b1:ba:75: 78:64:49:c8:64:82:61:3c:c3:cf:19:c2:08:c8:8c:46:6f:01: 08:fe:ee:76:24:ab:00:e2:fb:26:37:52:e5:19:63:b8:7a:d7: f7:88:a7:f2:e9:90:e4:df:48:fc:af:c0:90:6e:d8:31:2e:9c: 2f:6d:03:82:d1:b0:87:3d:e6:49:aa:ec:14:9b:3a:d6:5f:da: 5c:f9:9a:7f:2b:8f:8a:99:30:8e:0a:e7:4b:02:47:98:4e:3c: e5:50:54:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwM0IxMTAvBgNVBAUTKDlGMzU2NjA5NUMwQjBDMDIzMUQwQkI5NjkyNUUwMzg5 RDFDMjZDNTcwHhcNMjQxMTIzMDAxMzMwWhcNMjQxMTMwMDAxMzMwWjAYMRYwFAYD VQQDEw02NzQxMWUyYi01N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsI+1W7qfty87LzWiCF2TH2WZ3KI5/3aztzyzbUoGK4qnnTfrjpcZhsx6+NrN PeFeqYF6P49B5kdP1chzivmikP2uoSdvgG9lBzNmeaVMmMolvoa1W0gu1aoAuMBQ pXIBf0TswkrG6UZ4YeMSzGRkYLarwfuBN0cqgAKFnzQ0h1Oib3uHSdYwlThKGj0V hA8270jX3+2zOGULMXljASMmWG7iAnJNUrw24M8V9ITqEX1a3wdi8MsLpdwGz0Nh IR4tf5yZs16zqtjGwmZoJ43bcxLAYl0L/bZwDbQAOdDamXauVE0vqu7y1/hhFgic paVaBKBZdioZvApBEeikaX5pjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH2aY5k JUiwlhfNiLAy1+9j5DeCMB8GA1UdIwQYMBaAFJ81ZglcCwwCMdC7lpJeA4nRwmxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDAzQi80QUE3NEI3NDYy REExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERBSXgwTHVXa2w0RGlkSENi RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL256Vm1DVndMREFJeDBMdVdrbDREaWRIQ2JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDAzQi80QUE3NEI3NDYyREExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERB SXgwTHVXa2w0RGlkSENiRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOQbkks89Ir9Vfk/JCiGyrWfSjIh9ImraUH7Bkr4FJELXuE2N9Q8ig RRB+jgNBdDQl9HqY1BGAmgh087GohGWxHHmwRwz2UX0Cm+f7EBMKSiROzQU/FT4s aMfXP8nssHMqQH2JsT+oB/imuASp3WxQo/sRTnDJqQwEMv1CYH+z8P9CvxY0WcoK y5wdbRgWKaoWViExRwSbmhTuV+Agp/6xunV4ZEnIZIJhPMPPGcIIyIxGbwEI/u52 JKsA4vsmN1LlGWO4etf3iKfy6ZDk30j8r8CQbtgxLpwvbQOC0bCHPeZJquwUmzrW X9pc+Zp/K4+KmTCOCudLAkeYTjzlUFSB -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org