$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft File: nflMM9P2R649kTYeHxcsIGhvWYk.mft (raw, json) Hash identifier: aK/hxnca4Whchcaf5Oydv3glJhrQHBa+N6nxLIDNqy4= Subject key identifier: 51:9A:E0:20:25:BA:95:07:41:DF:1E:1F:B5:B3:68:E7:AD:F1:88:36 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0D94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft Manifest number: 0D71 Signing time: Fri 22 Nov 2024 17:55:19 +0000 Manifest this update: Fri 22 Nov 2024 17:55:18 +0000 Manifest next update: Fri 29 Nov 2024 17:55:18 +0000 Files and hashes: 1: nflMM9P2R649kTYeHxcsIGhvWYk.crl (hash: tBQ8WHL0Hspt1tcXuN/8ewmJ97IO3/5rk7UpbfAdpzM=) 2: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (hash: 8a6WJtEg8FJ5eHnpvgMwqod0UL5e0zTS0SwjCaK0jd4=) 3: 9E78AEC4C78E11EBB4983F5BC4F9AE02.roa (hash: kN9kZZVIv74yYHGXDsanuB3xPPBPu4OVgy2TpSGU+PU=) 4: 47E67066B82A11E9843DEE0AC4F9AE02.roa (hash: YggXfy20kvjf1iFOsIwuuVFkMi74/bpO/23VT4jrnTE=) 5: 9F8B79C2C78E11EBB4983F5BC4F9AE02.roa (hash: n/ZkcBxXbOU1wyzDS48DMJkcfdrM8k6k+BibFqk5ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3476 (0xd94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Nov 22 17:55:18 2024 GMT Not After : Nov 29 17:55:18 2024 GMT Subject: CN=6740c586-82e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:3f:a4:41:f0:bc:07:c5:a7:59:a4:4a:6c: 2a:26:c4:75:9e:eb:e3:cb:ac:a4:53:4b:00:46:9a: 8a:29:68:78:aa:5e:88:b6:9c:b8:25:9f:29:6f:60: f8:ec:a4:bb:5a:e2:e4:60:f4:73:3b:ab:d6:13:bc: 76:b6:ac:a4:17:67:57:a2:f9:62:30:9e:3c:20:51: be:b8:10:4e:ba:4d:0a:9b:ab:23:cc:ee:b7:40:b6: a9:63:b8:3c:ec:08:f5:c8:30:a5:e5:15:55:e0:51: b2:ca:a7:f0:70:1c:10:8b:49:df:23:9f:84:c0:31: 9a:66:48:1b:89:72:05:de:c4:c7:95:aa:cb:be:92: 87:d2:31:28:bf:3d:84:49:fd:7f:cc:f0:df:0b:b2: 68:37:fe:19:76:0f:e7:af:ec:1f:a5:69:a9:00:97: a0:85:89:08:3b:7a:05:16:40:d0:a4:f4:15:44:a0: 7d:27:2a:a4:75:17:c5:f4:2e:0e:3e:c4:80:84:48: 6b:c7:13:1d:23:cb:10:92:84:b3:93:dc:72:cb:7c: 3f:e6:44:dc:3d:6a:a4:34:93:01:f9:b8:d5:6c:15: 73:8d:4b:9a:9c:1f:71:d5:ab:ae:90:7f:25:68:62: 41:84:a6:c4:73:03:42:c9:ca:27:f7:bb:40:51:55: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9A:E0:20:25:BA:95:07:41:DF:1E:1F:B5:B3:68:E7:AD:F1:88:36 X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:89:00:5b:68:78:4d:cb:a7:a4:fb:29:65:43:83:6c:b6:69: f7:e3:5a:71:91:62:55:73:d0:20:ee:26:ea:80:0d:11:d7:6f: c3:43:2c:2b:59:1d:de:de:94:f9:1f:8f:b5:ca:02:30:fb:5f: de:38:f4:f9:43:9c:e1:ee:ac:40:0b:f8:36:cb:58:30:2a:eb: f2:22:4e:7e:6c:93:20:11:6b:ad:83:50:14:34:2e:f0:10:1c: cc:a0:74:7e:3f:5e:8e:9e:48:61:a5:29:fc:c7:68:4c:5d:df: 61:b3:43:1a:bc:89:a7:bc:eb:49:86:a4:44:d4:8e:de:18:2a: ab:9f:c7:0e:ec:23:f6:bc:4c:f7:fc:e6:74:b8:06:c4:f4:a6: bf:df:bb:da:f1:4f:c5:e3:96:2b:ed:c0:a5:65:6a:ff:17:bd: fe:e1:bc:87:bb:b3:5e:e4:04:96:f4:80:c4:29:4d:91:35:84: 62:81:2c:fd:0f:e5:67:14:c1:f2:2c:ba:8f:17:22:a6:3b:5a: d9:6b:3d:28:6a:e9:1d:b7:7d:a9:f3:ba:24:d9:9d:31:c3:b5: 1d:b9:1e:30:83:d4:c1:73:23:93:f5:fc:01:ac:f8:92:3b:57: 2c:68:ba:2b:ea:0f:14:7f:1a:52:9f:07:0d:f4:d0:a8:74:47: ba:6a:c9:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjQxMTIyMTc1NTE4WhcNMjQxMTI5MTc1NTE4WjAYMRYwFAYD VQQDEw02NzQwYzU4Ni04MmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4k/pEHwvAfFp1mkSmwqJsR1nuvjy6ykU0sARpqKKWh4ql6Itpy4JZ8pb2D4 7KS7WuLkYPRzO6vWE7x2tqykF2dXovliMJ48IFG+uBBOuk0Km6sjzO63QLapY7g8 7Aj1yDCl5RVV4FGyyqfwcBwQi0nfI5+EwDGaZkgbiXIF3sTHlarLvpKH0jEovz2E Sf1/zPDfC7JoN/4Zdg/nr+wfpWmpAJeghYkIO3oFFkDQpPQVRKB9JyqkdRfF9C4O PsSAhEhrxxMdI8sQkoSzk9xyy3w/5kTcPWqkNJMB+bjVbBVzjUuanB9x1auukH8l aGJBhKbEcwNCycon97tAUVVqcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGa4CAl upUHQd8eH7WzaOet8Yg2MB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCNC83MDlGN0EyNkI4MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2 NDlrVFllSHhjc0lHaHZXWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1iQBbaHhNy6ek+yllQ4Nstmn341pxkWJVc9Ag7ibqgA0R12/DQywr WR3e3pT5H4+1ygIw+1/eOPT5Q5zh7qxAC/g2y1gwKuvyIk5+bJMgEWutg1AUNC7w EBzMoHR+P16OnkhhpSn8x2hMXd9hs0MavImnvOtJhqRE1I7eGCqrn8cO7CP2vEz3 /OZ0uAbE9Ka/37va8U/F45Yr7cClZWr/F73+4byHu7Ne5ASW9IDEKU2RNYRigSz9 D+VnFMHyLLqPFyKmO1rZaz0oaukdt32p87ok2Z0xw7UduR4wg9TBcyOT9fwBrPiS O1csaLor6g8UfxpSnwcN9NCodEe6aslE -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org