$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: n1kMTj9AIHagVUdRtjWBTjpmgmtZG/Q5Ls4xySOCjHY= Subject key identifier: 67:AF:FF:20:A4:36:45:15:6D:8F:2E:CA:1A:17:66:94:AB:06:21:D3 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 0251 Signing time: Sat 23 Nov 2024 01:18:57 +0000 Manifest this update: Sat 23 Nov 2024 01:18:57 +0000 Manifest next update: Sat 30 Nov 2024 01:18:57 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: PWNYLQ8AsDuVeH46UheWpUu/EPyE4tEqZxylV4/Ok5o=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: ohpq6w4FsQ6m2qtbeIH2kHfbJGiR8GKYHoRy8L7uggA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: Nov 23 01:18:57 2024 GMT Not After : Nov 30 01:18:57 2024 GMT Subject: CN=67412d81-c797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:40:b4:73:23:14:c2:01:65:94:39:f4:2a: 18:d3:db:2b:76:4f:a0:5e:ee:e7:80:be:bd:d5:85: a0:7f:03:b3:2c:1e:28:a3:01:1e:0e:46:7c:fa:76: ea:e0:ef:a5:25:4e:e0:71:1d:82:c7:65:50:9f:66: fc:3f:9a:aa:75:72:6f:d8:45:ba:b0:ed:79:0e:97: fe:d7:7e:84:7a:c4:6d:8d:c7:d2:3b:0e:3f:a6:3d: 22:24:46:8c:08:ba:7b:ea:ed:2b:2e:b5:ef:2d:e9: 35:cb:af:ac:2c:d8:fb:31:6f:a5:ee:da:7a:30:28: 58:cb:23:2b:da:cd:81:e4:b2:72:7f:01:05:29:ae: 29:42:c0:bc:20:ff:39:1d:c5:b3:f9:6b:bd:81:f6: 26:21:48:92:54:6e:d8:18:22:4a:87:e0:dd:49:21: 01:4d:19:01:3c:aa:5c:1f:a3:e8:10:39:65:9e:1d: 49:0b:0a:6e:e5:b8:4e:06:03:c5:72:f9:39:1e:73: 07:9d:5e:c6:b8:f9:82:af:df:8a:0d:87:3d:80:9c: 8e:44:79:ad:aa:0f:7b:f1:49:86:7b:32:5f:74:20: 88:ad:41:e7:29:2c:47:c6:24:44:e2:36:38:23:d7: 4e:64:bb:70:06:85:61:7f:82:83:a9:fa:c5:64:17: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AF:FF:20:A4:36:45:15:6D:8F:2E:CA:1A:17:66:94:AB:06:21:D3 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:00:27:70:32:9b:b8:66:c5:dd:3e:d5:f0:67:38:6b:dc:15: e1:e9:7b:c6:40:b8:a7:89:f3:9f:b3:1e:43:b4:fc:75:05:42: b6:5c:42:09:75:0d:a5:c0:97:a1:b0:d6:52:7c:27:8f:92:0f: 81:53:3f:11:38:d8:d6:96:cd:33:04:fc:69:f9:00:31:d1:1c: 9f:3f:e0:2d:65:b5:dd:eb:e3:e7:a7:5e:23:72:c4:66:a4:96: 8c:bd:9c:d0:66:e4:09:46:1c:02:6f:ff:0b:e5:da:1b:f9:48: 4b:17:17:4e:1d:84:75:72:e5:01:63:0a:c5:c5:cf:d4:4c:df: 27:17:92:5d:1b:c9:d5:80:a7:88:c8:06:d8:24:0c:18:6c:e3: 37:44:4d:10:b6:42:f4:3f:60:89:80:86:44:6b:d7:c2:d1:f8: b5:8f:0f:19:40:67:ab:6a:22:0b:de:3c:b8:5b:93:8f:27:cd: 7e:d0:fa:e7:e2:70:6e:ec:29:98:f1:72:3e:46:4c:04:a4:e4: db:a5:3a:f4:75:e2:a9:ae:cf:88:0a:a2:61:e0:b8:7f:d8:5a: 4f:93:d2:ff:3f:04:db:9b:bd:1f:6b:a3:34:19:8e:98:c4:0e: 85:cb:2f:78:9d:f1:ab:fd:18:58:6b:ab:53:55:fb:26:ae:57: 77:25:92:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjQxMTIzMDExODU3WhcNMjQxMTMwMDExODU3WjAYMRYwFAYD VQQDEw02NzQxMmQ4MS1jNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEdAtHMjFMIBZZQ59CoY09srdk+gXu7ngL691YWgfwOzLB4oowEeDkZ8+nbq 4O+lJU7gcR2Cx2VQn2b8P5qqdXJv2EW6sO15Dpf+136EesRtjcfSOw4/pj0iJEaM CLp76u0rLrXvLek1y6+sLNj7MW+l7tp6MChYyyMr2s2B5LJyfwEFKa4pQsC8IP85 HcWz+Wu9gfYmIUiSVG7YGCJKh+DdSSEBTRkBPKpcH6PoEDllnh1JCwpu5bhOBgPF cvk5HnMHnV7GuPmCr9+KDYc9gJyORHmtqg978UmGezJfdCCIrUHnKSxHxiRE4jY4 I9dOZLtwBoVhf4KDqfrFZBdJVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGev/yCk NkUVbY8uyhoXZpSrBiHTMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjACdwMpu4ZsXdPtXwZzhr3BXh6XvGQLinifOfsx5DtPx1BUK2XEIJ dQ2lwJehsNZSfCePkg+BUz8RONjWls0zBPxp+QAx0RyfP+AtZbXd6+Pnp14jcsRm pJaMvZzQZuQJRhwCb/8L5dob+UhLFxdOHYR1cuUBYwrFxc/UTN8nF5JdG8nVgKeI yAbYJAwYbOM3RE0QtkL0P2CJgIZEa9fC0fi1jw8ZQGeraiIL3jy4W5OPJ81+0Prn 4nBu7CmY8XI+RkwEpOTbpTr0deKprs+ICqJh4Lh/2FpPk9L/PwTbm70fa6M0GY6Y xA6Fyy94nfGr/RhYa6tTVfsmrld3JZJ2 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org