$ rpki-client -vvf rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft File: NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft (raw, json) Hash identifier: h1IEN1UZgBWS8UA6/5QQxoPdAwoIoxTgxp6GiuT4GkQ= Subject key identifier: BF:7F:42:FB:34:0D:B3:FF:22:FC:95:6F:08:EB:A8:88:89:A0:F2:A5 Authority key identifier: 35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B Certificate issuer: /CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft Manifest number: 016F Signing time: Sat 23 Nov 2024 02:13:14 +0000 Manifest this update: Sat 23 Nov 2024 02:13:13 +0000 Manifest next update: Sat 30 Nov 2024 02:13:13 +0000 Files and hashes: 1: NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl (hash: ZZbTc5Rk4RiCB6JpnyoIj+wgg5aFamOx/f0pArMdi4U=) 2: 9FD3C9A876CD11ED8D13115FC4F9AE02.roa (hash: JQ73d6vfSvqidv93F8yaMEYwVmH6Qg0KkHIcHOt8o0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B Validity Not Before: Nov 23 02:13:13 2024 GMT Not After : Nov 30 02:13:13 2024 GMT Subject: CN=67413a3a-ef90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:14:0e:56:10:16:06:8b:1f:94:3a:3a:c9: 60:95:df:fa:c5:36:28:65:78:1a:51:9e:21:0b:9a: a6:22:21:55:a7:88:a0:88:5b:10:84:0a:07:be:4d: 2e:96:20:e4:3b:f6:94:91:1b:da:f9:2c:20:3e:39: 14:55:8a:7c:fc:20:7e:9c:63:66:8a:5f:b8:28:9a: c6:a5:b1:dc:4d:87:23:d4:25:15:31:00:fb:66:f5: cc:ce:37:e6:4f:56:7c:01:e1:19:e9:0a:0c:38:0c: e4:90:d3:39:b5:a9:f6:33:2b:b5:1c:28:b9:61:24: 26:4e:3e:db:ac:c7:05:8d:ee:4d:92:02:b0:7d:fb: 4e:a1:85:a5:b3:6e:b9:61:48:52:67:6e:b4:21:4c: 87:dd:7f:41:2a:c7:1f:62:21:70:50:21:1f:11:c9: 9a:27:8a:97:0c:13:c7:20:67:02:7d:ab:13:d2:47: 27:d3:5f:04:72:30:4f:4c:80:a0:8a:af:1f:b9:6f: b8:cd:39:13:67:48:48:5e:12:33:c1:20:97:db:a8: c0:70:87:5e:7d:a0:7d:b1:ac:d2:af:47:dc:35:d7: b9:22:56:27:23:d5:ed:37:59:67:9e:8f:6e:ce:d1: 9e:4f:f8:1c:04:94:aa:0b:0e:08:7d:da:39:3e:ff: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7F:42:FB:34:0D:B3:FF:22:FC:95:6F:08:EB:A8:88:89:A0:F2:A5 X509v3 Authority Key Identifier: keyid:35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:62:5a:8d:8e:b1:cc:d8:21:cd:f3:1f:3f:fd:77:df:d2:7d: 71:45:60:42:78:07:f1:d1:c4:16:14:0d:82:88:b9:c3:16:17: b1:a5:fd:c7:6c:14:01:34:f7:bc:c1:8f:6a:3f:ee:84:81:76: 8a:8a:50:8a:fb:50:ed:54:ad:a9:80:89:29:fe:c2:aa:1c:ed: 9f:c7:36:10:48:d8:9b:bf:eb:56:ee:86:9f:fc:36:f0:6c:14: 99:e8:c9:40:77:42:de:5e:74:36:65:fa:db:bc:91:23:f3:e8: 53:1d:5b:bb:27:bb:1f:a9:0b:20:6b:78:72:51:02:36:30:ef: 76:25:23:f7:41:ac:5e:dc:5b:64:de:7e:4f:a2:89:9d:8f:f6: ba:44:4b:41:9c:fe:5b:f2:d3:cc:32:f8:b1:fd:ba:6b:c3:b5: a7:a5:4a:e9:13:1b:84:c1:16:47:9e:ae:a4:96:8d:ac:5e:0c: 65:6a:63:d6:28:ae:ad:0d:d0:cd:bf:53:30:27:14:42:b1:32: f9:a5:6d:60:d8:2e:b3:4a:c8:cc:60:32:ee:f7:41:d2:0c:06: 1f:67:87:1b:4d:68:cb:b6:af:ae:a4:2f:c7:52:bf:ab:8e:04: b1:a9:87:f1:a9:2a:d3:db:d1:f2:d9:c5:85:00:73:4f:ca:9a: ef:06:83:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzQTUxMTAvBgNVBAUTKDM1MUNFRURDMzdGODA1NDcyRjFCNjFCQUM2NDNGRTU0 RUUwMTg5NkIwHhcNMjQxMTIzMDIxMzEzWhcNMjQxMTMwMDIxMzEzWjAYMRYwFAYD VQQDEw02NzQxM2EzYS1lZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndoUDlYQFgaLH5Q6Oslgld/6xTYoZXgaUZ4hC5qmIiFVp4igiFsQhAoHvk0u liDkO/aUkRva+SwgPjkUVYp8/CB+nGNmil+4KJrGpbHcTYcj1CUVMQD7ZvXMzjfm T1Z8AeEZ6QoMOAzkkNM5tan2Myu1HCi5YSQmTj7brMcFje5NkgKwfftOoYWls265 YUhSZ260IUyH3X9BKscfYiFwUCEfEcmaJ4qXDBPHIGcCfasT0kcn018EcjBPTICg iq8fuW+4zTkTZ0hIXhIzwSCX26jAcIdefaB9sazSr0fcNde5IlYnI9XtN1lnno9u ztGeT/gcBJSqCw4Ifdo5Pv+KxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9/Qvs0 DbP/IvyVbwjrqIiJoPKlMB8GA1UdIwQYMBaAFDUc7tw3+AVHLxthusZD/lTuAYlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNBNS9DQjU0OUQyQzc2 QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJVY3ZHMkc2eGtQLVZPNEJp V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05SenUzRGY0QlVjdkcyRzZ4a1AtVk80QmlXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNBNS9DQjU0OUQyQzc2QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJV Y3ZHMkc2eGtQLVZPNEJpV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvYlqNjrHM2CHN8x8//Xff0n1xRWBCeAfx0cQWFA2CiLnDFhexpf3H bBQBNPe8wY9qP+6EgXaKilCK+1DtVK2pgIkp/sKqHO2fxzYQSNibv+tW7oaf/Dbw bBSZ6MlAd0LeXnQ2ZfrbvJEj8+hTHVu7J7sfqQsga3hyUQI2MO92JSP3Qaxe3Ftk 3n5Poomdj/a6REtBnP5b8tPMMvix/bprw7WnpUrpExuEwRZHnq6klo2sXgxlamPW KK6tDdDNv1MwJxRCsTL5pW1g2C6zSsjMYDLu90HSDAYfZ4cbTWjLtq+upC/HUr+r jgSxqYfxqSrT29Hy2cWFAHNPyprvBoNQ -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org