$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: gPHmIfMNJMXPy4gK/s4NQkluEqEA+xMYdi9qvU5lxbA= Subject key identifier: 87:C8:4C:00:71:44:34:28:99:50:C7:BB:BB:4A:36:02:BC:9A:86:BB Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 0746 Signing time: Fri 22 Nov 2024 21:06:40 +0000 Manifest this update: Fri 22 Nov 2024 21:06:39 +0000 Manifest next update: Fri 29 Nov 2024 21:06:39 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: gQ8qM53oCfZhdBOl9vfWVRsE+R6aqy4FPc5y0Psg+2w=) 2: 5ABF5FB0026911EBB480261FC4F9AE02.roa (hash: f+tqP307alHmtL4Nv8/Sj5RxK8BZomyv0PqPMhlVuTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Nov 22 21:06:39 2024 GMT Not After : Nov 29 21:06:39 2024 GMT Subject: CN=6740f25f-4b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:1f:c3:34:c3:4b:7b:1e:6a:e9:d9:7b:af: 0c:77:0f:e6:2d:49:2f:2e:fb:c9:74:e5:50:c1:cb: 6d:fc:d1:9e:54:5c:ad:f7:d9:af:25:55:87:ef:67: cb:26:4a:29:45:d1:a9:c2:f0:88:ae:61:d4:9a:ca: f4:ab:00:b3:a3:d6:1a:61:5d:70:fb:41:04:64:b2: 3a:32:de:d6:ef:0a:bb:00:3d:c1:70:38:51:a4:5e: 0b:87:41:79:11:99:b6:1d:39:9f:cb:fc:f8:5a:e2: f7:06:c0:78:a6:c3:f2:8d:8e:7d:5c:5f:6a:86:59: 71:f8:fd:7a:23:41:fa:f4:a3:3e:64:76:f1:40:46: 3e:67:0d:79:ac:91:f8:27:de:ef:1d:d8:44:82:cc: 78:30:a1:a0:73:b6:9d:e7:ff:9c:11:56:fc:28:27: f4:e2:14:a4:0b:34:5e:85:de:d7:87:bf:3f:30:7a: b6:f3:90:15:a2:39:0d:a5:ad:51:04:1e:2e:bd:ab: ad:fb:dd:e2:a9:8e:5d:35:61:79:f5:51:a2:36:64: 68:c8:d1:34:24:31:2d:f0:d3:df:08:2c:f0:f8:63: 27:01:65:28:cc:e1:a0:66:9b:de:d1:7b:03:8c:fb: 00:4b:66:45:62:3f:19:b1:2e:cd:6f:34:77:7a:26: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C8:4C:00:71:44:34:28:99:50:C7:BB:BB:4A:36:02:BC:9A:86:BB X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d1:1e:aa:0f:b2:c5:a5:2a:04:23:ea:7c:ab:98:08:50:22: e1:39:00:de:2a:60:07:77:1e:89:86:57:83:91:7a:bd:94:a4: 1d:3c:bf:f3:63:b7:f8:c7:8b:7c:1f:1f:18:9b:b8:43:ce:8d: 83:4e:f1:c8:75:2c:a6:3d:7d:1e:9a:76:c2:7a:d4:41:21:cd: 50:e3:bc:e0:fd:10:e2:2b:73:64:39:43:4e:96:b0:57:df:e7: 19:db:03:b0:c6:b7:49:92:f8:7e:a5:6a:69:21:75:1e:c3:7a: 4e:a7:89:60:51:aa:d6:31:0e:18:de:e4:10:7d:14:1b:59:ce: b6:9b:e3:0d:53:c7:3b:00:83:84:12:76:d9:74:dd:97:4d:15: 4e:47:70:e2:5c:c1:4b:12:64:64:ce:8b:9e:67:d5:4b:12:66: 3a:51:5b:16:2c:f1:91:f0:f0:1e:84:4d:cd:86:d6:c6:3b:ce: bc:97:10:d0:fc:8c:b9:19:d9:d1:90:2b:a8:f1:29:c6:8d:98: 7b:e2:8a:34:e1:6a:05:d1:b2:5c:b1:84:9d:62:c9:91:c0:35: a0:ec:1b:1b:ec:67:34:e0:ca:a0:7d:cd:fc:30:3c:cd:ef:a1: a4:0a:7c:4a:95:41:35:38:5b:42:aa:10:2f:c2:68:a4:a6:a3: e4:fb:09:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjQxMTIyMjEwNjM5WhcNMjQxMTI5MjEwNjM5WjAYMRYwFAYD VQQDEw02NzQwZjI1Zi00YjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAEfwzTDS3seaunZe68Mdw/mLUkvLvvJdOVQwctt/NGeVFyt99mvJVWH72fL JkopRdGpwvCIrmHUmsr0qwCzo9YaYV1w+0EEZLI6Mt7W7wq7AD3BcDhRpF4Lh0F5 EZm2HTmfy/z4WuL3BsB4psPyjY59XF9qhllx+P16I0H69KM+ZHbxQEY+Zw15rJH4 J97vHdhEgsx4MKGgc7ad5/+cEVb8KCf04hSkCzRehd7Xh78/MHq285AVojkNpa1R BB4uvaut+93iqY5dNWF59VGiNmRoyNE0JDEt8NPfCCzw+GMnAWUozOGgZpve0XsD jPsAS2ZFYj8ZsS7NbzR3eiYdlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfITABx RDQomVDHu7tKNgK8moa7MB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU0R6qD7LFpSoEI+p8q5gIUCLhOQDeKmAHdx6JhleDkXq9lKQdPL/z Y7f4x4t8Hx8Ym7hDzo2DTvHIdSymPX0emnbCetRBIc1Q47zg/RDiK3NkOUNOlrBX 3+cZ2wOwxrdJkvh+pWppIXUew3pOp4lgUarWMQ4Y3uQQfRQbWc62m+MNU8c7AIOE EnbZdN2XTRVOR3DiXMFLEmRkzoueZ9VLEmY6UVsWLPGR8PAehE3NhtbGO868lxDQ /Iy5GdnRkCuo8SnGjZh74oo04WoF0bJcsYSdYsmRwDWg7Bsb7Gc04Mqgfc38MDzN 76GkCnxKlUE1OFtCqhAvwmikpqPk+wli -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org