$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft File: nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft (raw, json) Hash identifier: gMk5UGbKE2r0tz0DSg4NHZPePshsX/Ls9u2AeUyD7JU= Subject key identifier: 97:7E:74:65:5E:7F:1D:7E:C6:53:8D:65:D5:8B:E3:10:CF:80:4D:8F Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft Manifest number: 0A Signing time: Sat 23 Nov 2024 06:05:18 +0000 Manifest this update: Sat 23 Nov 2024 06:05:18 +0000 Manifest next update: Sat 30 Nov 2024 06:05:18 +0000 Files and hashes: 1: nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl (hash: kqO9IR+nGpgPXEV8KTKbgbXczLZFvvVND6lqugA0/NY=) 2: 9950A304A55011EFA7FFA969C4F9AE02.roa (hash: 7w0AxBMbVoZTjF5sqspQh7z8UimR5szml+niNPnLbps=) 3: 98D7330CA55011EFA7FFA969C4F9AE02.roa (hash: 5T5IW/urFKGSR1rD4ZpAxg1/U5kVp7QebPXagPruk4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Validity Not Before: Nov 23 06:05:18 2024 GMT Not After : Nov 30 06:05:18 2024 GMT Subject: CN=6741709e-1131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:cb:dd:28:d0:2e:00:08:14:68:1b:73:c5: ab:0b:f2:75:38:09:17:de:e3:08:0e:d1:c7:31:c0: 30:7b:50:20:3f:43:23:2e:4b:fa:0a:72:df:bd:ff: 24:15:5c:b8:ef:f9:b5:07:4e:30:fb:fe:53:4a:b8: d1:dd:af:d2:62:27:7d:f6:f0:66:df:6f:78:fe:9e: 50:c2:e3:ab:ff:ae:e6:33:c0:69:8a:8b:4f:55:97: 7a:3d:b3:e0:a7:95:d5:8d:db:1d:a7:7e:54:49:db: 5f:65:fe:2a:c1:1e:6a:53:4c:96:a8:12:dd:2e:b1: 62:f2:47:61:6c:75:d0:1b:b6:25:19:9c:5f:e7:ae: 6d:4d:19:e9:95:8d:21:f8:2d:6e:df:e8:3a:1b:96: ca:cd:90:95:83:da:c9:25:5c:66:55:d3:a3:f1:45: 63:14:e3:38:b3:93:b7:de:2c:a8:9f:fd:cc:d8:e9: c8:82:cc:77:05:1e:9c:e5:b9:51:61:eb:53:5c:41: 8a:0c:c5:20:d1:7f:33:11:38:31:45:08:4b:34:0e: 28:72:26:9b:38:ce:b0:b9:dd:29:25:50:23:94:46: b3:ee:0b:75:75:de:7d:25:a9:91:00:bf:55:52:c5: 3a:c3:c5:8a:b4:44:b0:51:de:ba:33:75:dc:51:61: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7E:74:65:5E:7F:1D:7E:C6:53:8D:65:D5:8B:E3:10:CF:80:4D:8F X509v3 Authority Key Identifier: keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bf:d3:7e:97:5f:3a:6d:0a:10:c3:9e:ea:c2:95:6c:85:16: bd:36:b2:87:9d:fc:b3:ea:5f:db:93:41:b7:41:91:b9:c5:b0: 59:61:1d:ef:ce:a0:e9:9a:37:e6:63:aa:ff:2d:ff:76:8a:e0: a2:f9:71:fa:70:0e:59:9e:70:8f:0e:22:61:33:9c:35:57:91: 78:11:b7:86:67:31:d6:e7:ff:a7:90:b1:f8:5c:97:bb:5f:d3: 17:41:a5:90:94:46:b3:ff:87:2b:b2:f1:7b:45:02:27:10:7d: db:68:cf:b6:4b:5d:80:74:5b:5d:b0:b6:5c:db:b2:08:5d:45: a6:c6:a1:14:f8:27:64:38:9c:5d:33:27:50:d2:63:8c:db:d5: 9d:7d:70:6a:3b:4f:e5:cc:8f:0c:ae:0c:6b:ba:5a:29:c3:73: cd:fd:37:2c:2b:f9:1e:4e:35:ec:a8:55:30:3c:d6:ff:f1:2a: c7:8f:ea:18:78:75:b2:b8:9f:38:9c:4b:44:fc:d5:a2:b7:4a: 64:cc:e8:d3:78:05:de:aa:f8:ac:50:af:cb:5e:78:c4:bf:f3: 11:53:03:72:89:8a:10:3a:79:36:da:93:cc:ee:bd:1a:9f:7c: 3a:c6:b2:bc:07:30:77:10:4b:ea:53:a9:1a:ab:78:b3:cd:99: 99:a4:10:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDg0MDExMC8GA1UEBRMoOUNGNzE0NzhCRjU5QjAwOEIxQjU0MkZBOTNBN0MxMEVG QjdGNEQ2MjAeFw0yNDExMjMwNjA1MThaFw0yNDExMzAwNjA1MThaMBgxFjAUBgNV BAMTDTY3NDE3MDllLTExMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDabMvdKNAuAAgUaBtzxasL8nU4CRfe4wgO0ccxwDB7UCA/QyMuS/oKct+9/yQV XLjv+bUHTjD7/lNKuNHdr9JiJ3328Gbfb3j+nlDC46v/ruYzwGmKi09Vl3o9s+Cn ldWN2x2nflRJ219l/irBHmpTTJaoEt0usWLyR2FsddAbtiUZnF/nrm1NGemVjSH4 LW7f6DoblsrNkJWD2sklXGZV06PxRWMU4zizk7feLKif/czY6ciCzHcFHpzluVFh 61NcQYoMxSDRfzMRODFFCEs0DihyJps4zrC53SklUCOURrPuC3V13n0lqZEAv1VS xTrDxYq0RLBR3rozddxRYcV7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl350ZV5/ HX7GU41l1YvjEM+ATY8wHwYDVR0jBBgwFoAUnPcUeL9ZsAixtUL6k6fBDvt/TWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0ODQwLzM0MkY4MEQwOUZD NDExRUY5NjMxRjgzNkM0RjlBRTAyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvblBjVWVMOVpzQWl4dFVMNms2ZkJEdnRfVFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 ODQwLzM0MkY4MEQwOUZDNDExRUY5NjMxRjgzNkM0RjlBRTAyL25QY1VlTDlac0Fp eHRVTDZrNmZCRHZ0X1RXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABq/036XXzptChDDnurClWyFFr02soed/LPqX9uTQbdBkbnFsFlhHe/O oOmaN+Zjqv8t/3aK4KL5cfpwDlmecI8OImEznDVXkXgRt4ZnMdbn/6eQsfhcl7tf 0xdBpZCURrP/hyuy8XtFAicQfdtoz7ZLXYB0W12wtlzbsghdRabGoRT4J2Q4nF0z J1DSY4zb1Z19cGo7T+XMjwyuDGu6WinDc839Nywr+R5ONeyoVTA81v/xKseP6hh4 dbK4nzicS0T81aK3SmTM6NN4Bd6q+KxQr8teeMS/8xFTA3KJihA6eTbak8zuvRqf fDrGsrwHMHcQS+pTqRqreLPNmZmkELI= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org