$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: JKl6VScvdjF2qvGdVO3G+8HJ2uS/YY9nU6ZlSEx67wU= Subject key identifier: E8:D2:98:89:AF:10:6A:D7:C5:F9:3B:90:F5:92:E5:5D:63:80:38:E8 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: BF Signing time: Sat 23 Nov 2024 03:58:14 +0000 Manifest this update: Sat 23 Nov 2024 03:58:14 +0000 Manifest next update: Sat 30 Nov 2024 03:58:14 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: pHQJ/63xuOu76UX6nim9ntZtH0kTNe4bnYrF+a+4jDg=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: G380Ha8QJtSqiTvn7fBNSb9egYZP9g7joO+n3Qn27+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: Nov 23 03:58:14 2024 GMT Not After : Nov 30 03:58:14 2024 GMT Subject: CN=674152d6-a0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:f2:44:8b:ff:77:ff:c8:b6:93:73:12:ff: e4:60:d8:74:8c:c1:7d:c9:b2:6a:57:16:8b:80:dd: 38:54:90:45:3c:a6:d1:c7:48:7a:a2:8a:6b:43:eb: 7b:08:6c:c4:4f:95:ae:a8:bf:d5:69:9c:03:40:0e: 45:9a:8f:dc:63:b0:29:d4:f7:b0:e9:31:6a:1f:10: 98:6b:9a:5e:86:92:57:f0:73:5c:da:a6:ce:84:2f: d8:8c:5a:5c:c2:43:54:51:85:d6:9c:e9:4b:c3:94: 8d:6c:20:b8:46:c9:97:2b:2f:3b:93:82:45:41:84: 95:95:3d:14:8b:35:3a:5d:d0:77:d5:22:53:10:fe: 17:63:cf:6c:9d:c7:ff:eb:09:0d:21:b6:5a:16:5d: 26:af:e5:44:78:9f:b0:35:04:11:d9:09:47:cd:ce: 5a:81:d3:a1:43:14:17:5b:fe:dc:b2:53:f2:9f:76: ca:9b:20:6f:3b:2b:37:71:04:31:13:92:93:e1:e3: 26:b4:fb:f3:46:23:78:46:77:61:00:ae:69:13:00: a5:73:04:f2:c9:94:1c:b1:45:53:fd:28:8d:3f:fd: a1:c7:90:83:70:08:ae:40:ee:3f:e5:87:39:d6:da: e2:91:a0:d1:69:d9:5d:30:9d:5f:7f:2a:fb:1f:24: 99:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D2:98:89:AF:10:6A:D7:C5:F9:3B:90:F5:92:E5:5D:63:80:38:E8 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:63:85:2a:51:d0:bb:c9:2c:ab:26:28:cc:38:11:d8:22:66: 0e:12:4a:ec:cd:63:b9:4f:d3:03:36:4d:6d:ed:5a:de:62:b0: 9e:25:9e:5f:56:4a:80:61:14:03:1e:51:ca:16:43:98:33:9c: 2d:dd:61:9c:38:0b:76:af:78:27:a9:d3:e9:10:92:93:89:32: dd:3f:b7:d9:41:c2:0b:a2:72:61:58:4a:f8:5f:e9:0c:0f:8c: 68:8f:62:30:db:73:ae:f6:22:2b:e0:2e:99:3c:db:93:54:02: 38:30:5e:c5:25:42:a6:7f:11:3a:d0:a8:49:b6:67:87:5f:3f: a6:f6:1c:64:be:80:2d:86:ac:d0:ad:ed:52:4e:52:9e:a8:e8: 79:fa:ee:c3:77:29:a3:49:d9:a7:b2:10:31:ed:e4:d6:27:0e: d6:fe:2f:cd:81:f6:8a:8d:2d:fc:2b:e8:a7:94:a0:f8:a3:17: 99:1f:c8:71:23:f5:5c:4e:ba:b2:63:39:a5:cf:71:27:9f:99: c4:6e:55:8f:61:ba:f3:67:52:72:c2:a3:b1:23:97:78:d0:90: c2:8f:4a:1e:83:85:eb:02:f4:55:95:6d:cb:8b:d2:62:39:31: 05:71:01:e9:4a:7c:75:df:8c:0f:85:ff:d1:2f:97:e2:3e:04: 9c:24:42:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDREQxMTAvBgNVBAUTKDlFNDJCMUY2OTE0NjBFMjg0NkZBNzFGMDZEQzg5QkYy Qzc0MURCOUEwHhcNMjQxMTIzMDM1ODE0WhcNMjQxMTMwMDM1ODE0WjAYMRYwFAYD VQQDEw02NzQxNTJkNi1hMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXTyRIv/d//ItpNzEv/kYNh0jMF9ybJqVxaLgN04VJBFPKbRx0h6ooprQ+t7 CGzET5WuqL/VaZwDQA5Fmo/cY7Ap1Pew6TFqHxCYa5pehpJX8HNc2qbOhC/YjFpc wkNUUYXWnOlLw5SNbCC4RsmXKy87k4JFQYSVlT0UizU6XdB31SJTEP4XY89sncf/ 6wkNIbZaFl0mr+VEeJ+wNQQR2QlHzc5agdOhQxQXW/7cslPyn3bKmyBvOys3cQQx E5KT4eMmtPvzRiN4RndhAK5pEwClcwTyyZQcsUVT/SiNP/2hx5CDcAiuQO4/5Yc5 1trikaDRadldMJ1ffyr7HySZawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjSmImv EGrXxfk7kPWS5V1jgDjoMB8GA1UdIwQYMBaAFJ5CsfaRRg4oRvpx8G3Im/LHQdua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNERC8zNDhBRDhBQzg2 MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0RpaEctbkh3YmNpYjhzZEIy NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNERC8zNDhBRDhBQzg2MTMxMUVFQThDOTUwNDJDNEY5QUUwMi9ua0t4OXBGR0Rp aEctbkh3YmNpYjhzZEIyNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDY4UqUdC7ySyrJijMOBHYImYOEkrszWO5T9MDNk1t7VreYrCeJZ5f VkqAYRQDHlHKFkOYM5wt3WGcOAt2r3gnqdPpEJKTiTLdP7fZQcILonJhWEr4X+kM D4xoj2Iw23Ou9iIr4C6ZPNuTVAI4MF7FJUKmfxE60KhJtmeHXz+m9hxkvoAthqzQ re1STlKeqOh5+u7DdymjSdmnshAx7eTWJw7W/i/NgfaKjS38K+inlKD4oxeZH8hx I/VcTrqyYzmlz3Enn5nEblWPYbrzZ1JywqOxI5d40JDCj0oeg4XrAvRVlW3Li9Ji OTEFcQHpSnx134wPhf/RL5fiPgScJEKi -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org