$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json) Hash identifier: hOikKqwEm3sf0axWNxXXVGdj0JSxlRND647YClPA368= Subject key identifier: 66:FC:73:2C:46:5B:5A:A2:CE:49:60:36:F5:34:8E:82:E7:22:53:D9 Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft Manifest number: A1 Signing time: Sat 23 Nov 2024 04:17:39 +0000 Manifest this update: Sat 23 Nov 2024 04:17:38 +0000 Manifest next update: Sat 30 Nov 2024 04:17:38 +0000 Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: /w3p0L62HYvk4gdpQ4GwLtYnZ6SKoS+eLMZMqWtt0aU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Validity Not Before: Nov 23 04:17:38 2024 GMT Not After : Nov 30 04:17:38 2024 GMT Subject: CN=67415763-381b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:c5:d9:a2:08:cf:e6:f7:a2:91:8c:09:51: 21:7f:11:9b:21:2c:3a:a4:f6:0e:53:2c:8e:0a:ac: 49:2e:89:d2:72:45:a8:39:a3:55:de:01:46:15:33: 55:3f:fe:cc:ed:52:a1:de:08:76:9b:1a:cb:c9:1f: 54:b5:6d:31:10:f3:17:9d:54:c1:ad:6d:f4:cc:3e: 92:3f:49:63:2d:fc:ae:43:4c:63:d1:79:56:61:94: a6:91:be:7e:02:22:77:c6:28:79:57:fc:73:3c:e3: f4:d7:02:d2:8d:4a:f5:69:9b:73:bf:40:d5:ee:67: d2:ab:88:8f:a3:d9:c5:b9:e9:10:13:12:bb:78:f1: ea:89:c3:06:ef:ab:bf:35:21:7c:00:59:27:6c:a6: 47:1b:6c:34:1b:52:88:0b:49:02:b0:30:99:c7:a1: a0:e7:0f:30:f7:56:69:64:5f:a5:57:09:10:46:e5: 64:a1:00:e7:8d:d9:f9:ca:58:30:d6:38:d9:18:42: 37:75:90:03:dc:f4:a1:85:c2:d2:3d:ff:14:fd:eb: d2:4e:75:82:37:a7:56:8d:d5:5e:2e:a0:13:a3:08: a2:6f:84:d2:12:06:8b:15:a2:19:ec:1b:f9:d1:49: f2:73:36:c0:50:d2:ed:ae:56:eb:3f:71:0b:c7:aa: 63:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FC:73:2C:46:5B:5A:A2:CE:49:60:36:F5:34:8E:82:E7:22:53:D9 X509v3 Authority Key Identifier: keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ff:bc:37:16:2b:6b:10:72:7b:32:e4:b3:fd:7a:d1:5e:2a: 67:c9:2d:c1:56:69:56:04:f7:cf:a6:00:9a:f8:b7:fc:dd:ec: 0d:ce:19:45:97:a7:a4:89:1e:d8:be:3c:b0:c5:aa:8b:40:12: dc:99:13:c2:71:3c:0a:6e:7c:7e:96:61:cc:65:52:67:e9:e7: 8f:e4:93:6e:61:11:d3:0e:58:87:05:ed:f9:11:45:22:e4:e9: b7:72:b4:af:1f:30:9f:39:ef:90:dc:41:3e:5e:71:0a:ac:e8: a6:77:b6:77:c2:9e:73:81:ea:3b:6f:7d:e9:32:44:93:0b:26: f6:82:4a:dd:2e:bb:9b:ba:64:bc:d8:ce:24:4d:ae:02:c5:87: 27:2c:06:e3:b0:b4:01:b4:67:7c:f1:32:82:76:11:c9:2e:28: 26:87:94:18:12:f5:04:ea:b8:8c:b8:9e:2e:2d:61:09:b9:5f: 53:ea:e3:46:e4:8f:c3:98:cb:61:4d:f1:b5:ed:c1:53:e3:0c: 1a:6f:87:28:2e:5d:d4:1d:0e:4c:24:91:da:3e:89:da:fd:2d: 1c:cc:16:6f:5f:6c:e6:32:22:a0:a3:32:ca:b5:7a:48:d5:70: fa:a5:c4:91:19:cc:43:1b:6b:b2:6b:6f:7f:ab:fd:c8:01:cc: 73:81:bf:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNjgxMTAvBgNVBAUTKDM0RUZEN0M0RDY2Q0ZBMzRCODQ1NjZCMjYyMzlEOTBB OEM5MUVDQjcwHhcNMjQxMTIzMDQxNzM4WhcNMjQxMTMwMDQxNzM4WjAYMRYwFAYD VQQDEw02NzQxNTc2My0zODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKvF2aIIz+b3opGMCVEhfxGbISw6pPYOUyyOCqxJLonSckWoOaNV3gFGFTNV P/7M7VKh3gh2mxrLyR9UtW0xEPMXnVTBrW30zD6SP0ljLfyuQ0xj0XlWYZSmkb5+ AiJ3xih5V/xzPOP01wLSjUr1aZtzv0DV7mfSq4iPo9nFuekQExK7ePHqicMG76u/ NSF8AFknbKZHG2w0G1KIC0kCsDCZx6Gg5w8w91ZpZF+lVwkQRuVkoQDnjdn5ylgw 1jjZGEI3dZAD3PShhcLSPf8U/evSTnWCN6dWjdVeLqATowiib4TSEgaLFaIZ7Bv5 0UnyczbAUNLtrlbrP3ELx6pjUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb8cyxG W1qizklgNvU0joLnIlPZMB8GA1UdIwQYMBaAFDTv18TWbPo0uEVmsmI52QqMkey3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI2OC81NDFGMzg4OEIz NTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1qUzRSV2F5WWpuWkNveVI3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PX1h4TlpzLWpTNFJXYXlZam5aQ295UjdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI2OC81NDFGMzg4OEIzNTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1q UzRSV2F5WWpuWkNveVI3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb/7w3FitrEHJ7MuSz/XrRXipnyS3BVmlWBPfPpgCa+Lf83ewNzhlF l6ekiR7YvjywxaqLQBLcmRPCcTwKbnx+lmHMZVJn6eeP5JNuYRHTDliHBe35EUUi 5Om3crSvHzCfOe+Q3EE+XnEKrOimd7Z3wp5zgeo7b33pMkSTCyb2gkrdLrubumS8 2M4kTa4CxYcnLAbjsLQBtGd88TKCdhHJLigmh5QYEvUE6riMuJ4uLWEJuV9T6uNG 5I/DmMthTfG17cFT4wwab4coLl3UHQ5MJJHaPona/S0czBZvX2zmMiKgozLKtXpI 1XD6pcSRGcxDG2uya29/q/3IAcxzgb+l -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org