$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: EoWXk59frR5RQm+hxEJVVyvkYZDbxBtv2YM5TM8lvFs= Subject key identifier: 83:20:56:35:B3:E6:F7:09:A8:B0:22:70:C8:B5:9E:86:BF:D6:EA:A1 Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1D72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1D65 Signing time: Sun 24 Nov 2024 16:02:15 +0000 Manifest this update: Sun 24 Nov 2024 16:02:15 +0000 Manifest next update: Sun 01 Dec 2024 16:02:15 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: XP8Uc3cR/HJaXMYWOyuh+9A0vT7Gk5F5AzBxIo7vRX0=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: oZxIGF3tZxpF5yy16W7DfVBV9Qm+nbX1ntFwqXaNbaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7538 (0x1d72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Nov 24 16:02:15 2024 GMT Not After : Dec 1 16:02:15 2024 GMT Subject: CN=67434e07-3f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:4d:4a:10:21:54:d6:c1:97:18:db:98:7d: 97:1e:7b:4e:f7:6e:f9:df:f7:01:b8:a1:e5:fb:59: 32:da:7b:07:1c:c5:63:5e:fe:9a:5d:21:ef:e5:68: 62:87:22:3e:8b:0c:57:1d:da:2c:9e:97:46:4f:e9: 25:17:90:4b:31:a0:97:48:3e:b6:35:34:32:bd:ed: 86:a0:a2:66:70:a0:91:ac:67:24:99:18:99:01:86: ca:bf:55:f7:0a:85:41:24:53:1e:61:5f:4b:db:4a: 65:54:f7:d3:a8:96:a8:1c:75:9d:88:fb:02:db:ab: 9b:e2:48:0d:05:b1:e2:1c:f0:74:70:5b:27:e9:4a: a3:1c:35:20:4a:d2:8e:d0:9e:b3:60:8b:32:f2:10: 95:1d:05:b3:48:37:e9:e8:a6:2d:42:45:0a:af:83: 74:94:23:43:de:54:91:ba:06:32:70:2c:9e:0d:54: af:34:9d:2a:d4:41:17:c3:43:13:b8:87:fd:43:1c: cc:d4:bb:8b:52:cd:b3:ff:c4:c8:7f:5e:a9:ca:d9: 98:c0:45:f4:58:01:b8:c6:d7:e3:ef:e8:86:50:60: 03:f6:f8:a9:f2:ab:49:d2:71:ac:1d:38:c5:f7:67: da:bc:59:fe:57:02:29:dd:39:e5:69:26:54:57:8d: 07:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:20:56:35:B3:E6:F7:09:A8:B0:22:70:C8:B5:9E:86:BF:D6:EA:A1 X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:96:9b:c6:9c:6f:d9:7c:31:78:a5:1d:1c:65:2c:f6:8b:fb: 15:53:6a:4a:97:dd:13:ef:8b:12:3c:9c:53:5d:56:a3:19:f0: a3:70:77:5d:f5:84:ba:d4:5c:04:f2:1d:a7:ee:c0:5a:5b:9d: 6b:4a:28:ed:fe:52:a2:46:a0:8b:a1:36:99:ea:33:29:ed:6a: ce:07:1d:16:4b:40:f4:36:e2:9d:5e:45:c7:33:e2:4d:8c:b8: e3:a0:79:b0:4f:2a:f5:2e:cd:2b:71:56:7f:84:03:c9:57:2b: c5:45:4c:6f:3e:d3:79:41:01:bc:24:cf:b0:96:ab:34:7c:54: 1b:94:6d:9f:97:8e:4a:fe:39:22:2a:de:cd:f4:36:1c:30:84: 70:68:88:6f:05:f0:60:06:07:50:34:13:9f:3a:13:4c:1f:3a: f0:bf:2c:67:46:dc:d3:26:b1:51:dd:7a:d0:38:d5:e1:4d:b6: dc:cb:3b:27:3e:0e:ac:44:a9:f7:f4:92:eb:04:f7:10:97:c1: 59:b0:f4:72:37:48:ca:1b:e6:41:e4:3a:68:a6:ea:30:49:8e: 47:87:d8:89:ea:e4:4c:b6:f3:07:5f:9d:0f:5e:82:ca:a8:fa: a7:c3:37:9d:4e:12:a1:7a:b9:11:74:d3:94:93:08:52:5e:5a: e6:91:88:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjQxMTI0MTYwMjE1WhcNMjQxMjAxMTYwMjE1WjAYMRYwFAYD VQQDEw02NzQzNGUwNy0zZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriZNShAhVNbBlxjbmH2XHntO92753/cBuKHl+1ky2nsHHMVjXv6aXSHv5Whi hyI+iwxXHdosnpdGT+klF5BLMaCXSD62NTQyve2GoKJmcKCRrGckmRiZAYbKv1X3 CoVBJFMeYV9L20plVPfTqJaoHHWdiPsC26ub4kgNBbHiHPB0cFsn6UqjHDUgStKO 0J6zYIsy8hCVHQWzSDfp6KYtQkUKr4N0lCND3lSRugYycCyeDVSvNJ0q1EEXw0MT uIf9QxzM1LuLUs2z/8TIf16pytmYwEX0WAG4xtfj7+iGUGAD9vip8qtJ0nGsHTjF 92favFn+VwIp3TnlaSZUV40HgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMgVjWz 5vcJqLAicMi1noa/1uqhMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANlpvGnG/ZfDF4pR0cZSz2i/sVU2pKl90T74sSPJxTXVajGfCjcHdd 9YS61FwE8h2n7sBaW51rSijt/lKiRqCLoTaZ6jMp7WrOBx0WS0D0NuKdXkXHM+JN jLjjoHmwTyr1Ls0rcVZ/hAPJVyvFRUxvPtN5QQG8JM+wlqs0fFQblG2fl45K/jki Kt7N9DYcMIRwaIhvBfBgBgdQNBOfOhNMHzrwvyxnRtzTJrFR3XrQONXhTbbcyzsn Pg6sRKn39JLrBPcQl8FZsPRyN0jKG+ZB5DpopuowSY5Hh9iJ6uRMtvMHX50PXoLK qPqnwzedThKherkRdNOUkwhSXlrmkYgn -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:59 2024 by rpki-client on console-fra.rpki-client.org