$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json) Hash identifier: OAr+MaQAlMHDkxgBUCMM2Gpvbky+TZ7EIoFGsv702fU= Subject key identifier: 3A:B8:9D:F9:E7:1F:00:DB:FB:2D:6B:93:17:5F:11:BC:57:90:F1:B8 Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Certificate serial: 1DC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft Manifest number: 1DAA Signing time: Fri 22 Nov 2024 16:07:15 +0000 Manifest this update: Fri 22 Nov 2024 16:07:15 +0000 Manifest next update: Fri 29 Nov 2024 16:07:15 +0000 Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: HnH6Pjv/td8/zt6VgxrD6o7CIVNNcOSIKNagI24ZoIM=) 2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: uuU+2b4TABJg99J2eIGANwe1poRJarA5qOxzJJ2GkQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7617 (0x1dc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Validity Not Before: Nov 22 16:07:15 2024 GMT Not After : Nov 29 16:07:15 2024 GMT Subject: CN=6740ac33-0cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:5a:5b:f0:d0:7c:74:e8:ca:f1:01:cc:4d: 20:4f:4d:61:3e:50:e2:9b:25:11:f7:3d:4a:5a:9c: 93:0b:2b:84:3d:2f:46:4b:86:f3:1b:4b:d0:d7:8a: 63:ec:d5:79:48:4a:e0:40:d4:f3:ca:34:b9:e2:b0: 8b:56:f6:5e:33:16:f1:9e:b8:73:4e:3f:b2:97:e6: 73:78:e3:5a:e1:e7:8c:f2:f1:1e:e1:c4:7d:e0:23: 4a:68:a1:5c:02:4c:32:66:db:36:65:64:93:fa:b0: 3d:65:99:ce:49:83:db:09:a7:23:fb:25:52:ae:cf: 38:59:85:5e:04:69:b5:6e:36:c0:7d:50:91:67:90: 4f:96:c0:7d:3c:d3:5f:24:64:bb:c5:e0:e0:51:ce: 16:27:fd:ac:66:8e:a6:db:77:a2:cb:be:c2:32:09: 6b:92:ab:0a:3b:98:41:c1:4f:e4:00:6e:84:9d:ec: 64:30:7e:57:71:27:fe:4d:d8:66:c7:f7:10:4d:0c: 30:c8:cf:04:7b:9e:91:0d:45:7c:5a:b6:1d:cc:8d: 71:0b:b2:01:a7:57:6c:78:6b:62:4b:26:58:ff:90: 78:f1:22:6b:e6:f9:78:7d:6b:6e:f3:cf:cd:2f:b5: c3:58:aa:1f:49:14:1c:fa:3a:fd:83:0d:a4:f4:ea: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B8:9D:F9:E7:1F:00:DB:FB:2D:6B:93:17:5F:11:BC:57:90:F1:B8 X509v3 Authority Key Identifier: keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e0:b8:dd:3e:56:ea:dd:f7:ca:80:f5:f9:2e:81:f0:fa:bf: 85:98:f4:7f:43:e6:8c:70:8c:47:35:43:52:b8:c1:5f:eb:1a: 81:f8:22:33:16:72:27:c8:2e:bf:35:3e:31:0f:18:de:bc:3e: 72:2c:58:23:11:42:dc:ed:fa:f8:3f:ac:66:00:a8:4a:f2:14: f9:02:f7:3d:03:41:da:e8:01:19:01:c6:bf:65:f0:48:cc:63: e6:80:b1:53:bc:0b:9f:e2:1e:73:22:7d:11:36:bb:a5:1f:10: dd:c0:79:38:20:a2:f5:fd:30:0b:1a:2c:ec:58:0d:60:d7:e6: 37:c5:85:d2:c0:21:d6:a7:81:2b:82:8e:02:7f:6e:3a:24:1e: e1:3f:bc:ea:94:58:0b:db:5c:68:47:7e:6f:97:0c:33:ba:d5: 86:30:4b:fc:44:55:94:40:d1:45:ff:ae:03:d8:ad:53:86:c8: 76:11:61:4c:e4:47:58:fd:7c:26:8d:64:24:ac:4e:30:05:97: b9:d1:ec:01:ea:fb:3d:07:df:8b:5e:f9:d1:10:d8:a3:93:2f: f1:7e:ac:51:54:9c:d6:7b:cc:6e:0d:9e:39:c9:7e:5c:42:b8: 51:ee:7e:14:30:22:4d:3e:a0:14:86:79:b5:ad:1c:d4:e9:85: 66:cf:23:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NjIxMTAvBgNVBAUTKDlDMEUxQkZDQjgxRjE5MkQyRkNDQUNFNzk5RTE1REYx QURCQzQxMkQwHhcNMjQxMTIyMTYwNzE1WhcNMjQxMTI5MTYwNzE1WjAYMRYwFAYD VQQDEw02NzQwYWMzMy0wY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5JaW/DQfHToyvEBzE0gT01hPlDimyUR9z1KWpyTCyuEPS9GS4bzG0vQ14pj 7NV5SErgQNTzyjS54rCLVvZeMxbxnrhzTj+yl+ZzeONa4eeM8vEe4cR94CNKaKFc AkwyZts2ZWST+rA9ZZnOSYPbCacj+yVSrs84WYVeBGm1bjbAfVCRZ5BPlsB9PNNf JGS7xeDgUc4WJ/2sZo6m23eiy77CMglrkqsKO5hBwU/kAG6EnexkMH5XcSf+Tdhm x/cQTQwwyM8Ee56RDUV8WrYdzI1xC7IBp1dseGtiSyZY/5B48SJr5vl4fWtu88/N L7XDWKofSRQc+jr9gw2k9OqtDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDq4nfnn HwDb+y1rkxdfEbxXkPG4MB8GA1UdIwQYMBaAFJwOG/y4HxktL8ys55nhXfGtvEEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU2Mi9DNjE0Rjk1ODhC OEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdTMHZ6S3pubWVGZDhhMjhR UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNGJfTGdmR1MwdnpLem5tZUZkOGEyOFFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU2Mi9DNjE0Rjk1ODhCOEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdT MHZ6S3pubWVGZDhhMjhRUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp4LjdPlbq3ffKgPX5LoHw+r+FmPR/Q+aMcIxHNUNSuMFf6xqB+CIz FnInyC6/NT4xDxjevD5yLFgjEULc7fr4P6xmAKhK8hT5Avc9A0Ha6AEZAca/ZfBI zGPmgLFTvAuf4h5zIn0RNrulHxDdwHk4IKL1/TALGizsWA1g1+Y3xYXSwCHWp4Er go4Cf246JB7hP7zqlFgL21xoR35vlwwzutWGMEv8RFWUQNFF/64D2K1Thsh2EWFM 5EdY/XwmjWQkrE4wBZe50ewB6vs9B9+LXvnRENijky/xfqxRVJzWe8xuDZ45yX5c QrhR7n4UMCJNPqAUhnm1rRzU6YVmzyOZ -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org