$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: uLmBdcTQKgMzR8J0KVf4cWi2+aX+w24yP26yTcvnLwg= Subject key identifier: E7:3A:08:08:AA:3C:1B:06:5C:98:B9:01:33:6B:2B:37:92:A2:93:8F Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 151C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 1515 Signing time: Fri 22 Nov 2024 16:50:08 +0000 Manifest this update: Fri 22 Nov 2024 16:50:08 +0000 Manifest next update: Fri 29 Nov 2024 16:50:08 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: txx8xVr83GBfuVZjptPTRwDgNwydXAt+7giu2y1oi6c=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: JDVg5EtOYvgHX+RYsdLp49o/Rnp72J5uVVL6OYjEcqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5404 (0x151c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: Nov 22 16:50:08 2024 GMT Not After : Nov 29 16:50:08 2024 GMT Subject: CN=6740b640-530f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f7:02:07:87:7d:c6:19:49:04:94:8a:30:89: 48:0f:5c:82:11:2a:16:c3:b6:eb:c5:a0:b5:a2:01: 3e:8c:36:90:56:54:29:1b:69:77:13:90:e2:31:d1: 86:97:83:ff:6a:47:bf:d2:41:6a:96:2c:04:cd:e8: d2:ee:16:50:6c:ba:39:be:77:26:9a:bd:a5:d0:5a: 0f:6e:04:ec:84:3f:23:44:f4:69:d9:ac:04:ff:a9: ec:12:7c:1e:cc:44:03:6b:9b:38:c2:79:c2:db:87: 40:0b:bb:41:42:d9:3a:b4:d3:79:0f:f7:8a:29:c0: 0c:8e:3f:54:42:07:9a:e6:a1:41:85:13:b5:72:ab: e8:9e:27:2e:e4:ab:c7:b6:33:a0:f9:dd:38:96:67: f8:0f:a0:ba:9d:15:06:ff:20:4e:8c:05:06:52:90: be:6a:1a:50:65:54:e3:8d:6f:54:c0:3d:8c:cd:4a: 80:9a:e7:8f:2f:17:90:fc:4c:5f:c5:d9:e6:37:b0: 3d:cc:05:ce:2c:48:f2:fa:b2:51:dd:17:b2:77:53: a9:e2:d7:ef:68:6c:ea:ea:ba:3c:9b:38:3e:25:ce: b5:e8:3a:46:98:d7:6e:70:18:78:32:3f:96:d1:f3: 54:f4:1f:58:cb:71:f1:a6:9f:a4:59:ca:2b:fd:65: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3A:08:08:AA:3C:1B:06:5C:98:B9:01:33:6B:2B:37:92:A2:93:8F X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:71:ec:24:70:17:a8:7a:9c:09:8d:a8:8b:0c:3e:6a:b0:7c: 53:ed:31:06:4a:57:93:07:af:a1:29:8a:ad:c6:b5:3b:d7:71: cd:e0:ca:a2:b5:fe:5f:7f:c4:98:f2:1c:a3:10:bb:37:6e:d4: 12:2e:c2:8d:99:53:5e:f4:fc:3d:e4:55:5b:e7:a1:fc:4b:f1: a9:db:e8:fc:90:e8:70:8c:d9:f0:e2:c8:66:fa:28:a4:f0:e6: a3:3a:94:9b:c2:0e:63:82:15:c2:98:62:e7:d5:1d:a9:37:06: c2:cb:c3:67:0e:c0:68:bb:d7:39:bd:eb:32:a3:cf:2b:63:c2: 5a:76:77:40:df:f8:47:03:99:23:97:1d:d6:ff:54:d8:5b:01: de:22:fb:17:29:8a:6a:43:7d:2d:a8:c2:93:6f:07:fd:10:04: e0:bc:b1:f1:4d:68:20:5b:2f:58:a0:8b:28:f0:27:1d:3d:25: 96:94:26:d7:a6:ca:30:e1:04:95:46:9d:ba:c8:f5:08:8b:59: 80:a9:e2:ce:97:95:ae:db:c3:e0:cb:2e:7b:9b:99:b3:ad:7a: 6e:c1:19:9b:f1:22:86:24:f9:97:5b:22:9b:6f:d1:f3:71:0c: c7:3e:ae:45:06:f7:b6:3b:6b:f0:bc:f9:0d:11:3e:f3:0a:cf: 0b:d2:3c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjQxMTIyMTY1MDA4WhcNMjQxMTI5MTY1MDA4WjAYMRYwFAYD VQQDEw02NzQwYjY0MC01MzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vcCB4d9xhlJBJSKMIlID1yCESoWw7brxaC1ogE+jDaQVlQpG2l3E5DiMdGG l4P/ake/0kFqliwEzejS7hZQbLo5vncmmr2l0FoPbgTshD8jRPRp2awE/6nsEnwe zEQDa5s4wnnC24dAC7tBQtk6tNN5D/eKKcAMjj9UQgea5qFBhRO1cqvonicu5KvH tjOg+d04lmf4D6C6nRUG/yBOjAUGUpC+ahpQZVTjjW9UwD2MzUqAmuePLxeQ/Exf xdnmN7A9zAXOLEjy+rJR3Reyd1Op4tfvaGzq6ro8mzg+Jc616DpGmNducBh4Mj+W 0fNU9B9Yy3Hxpp+kWcor/WUt5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOc6CAiq PBsGXJi5ATNrKzeSopOPMB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXcewkcBeoepwJjaiLDD5qsHxT7TEGSleTB6+hKYqtxrU713HN4Mqi tf5ff8SY8hyjELs3btQSLsKNmVNe9Pw95FVb56H8S/Gp2+j8kOhwjNnw4shm+iik 8OajOpSbwg5jghXCmGLn1R2pNwbCy8NnDsBou9c5vesyo88rY8JadndA3/hHA5kj lx3W/1TYWwHeIvsXKYpqQ30tqMKTbwf9EATgvLHxTWggWy9YoIso8CcdPSWWlCbX psow4QSVRp26yPUIi1mAqeLOl5Wu28Pgyy57m5mzrXpuwRmb8SKGJPmXWyKbb9Hz cQzHPq5FBve2O2vwvPkNET7zCs8L0jxF -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org