$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: SLLhJFo9NJ+ldoRfGk7F+rQpVTpxHUwQVARpyxI/kBc= Subject key identifier: 0A:FF:5C:3C:D4:D6:E2:38:D8:AB:48:68:EB:88:82:81:C6:73:1A:2C Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 08B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 0821 Signing time: Fri 22 Nov 2024 20:57:11 +0000 Manifest this update: Fri 22 Nov 2024 20:57:11 +0000 Manifest next update: Fri 29 Nov 2024 20:57:11 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: 34PGvi70+FpwuUXwdBPM1c5NlUoj+1MXnfI/G8/8WGg=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: rGSaf9r5NHWNkGd2dlgWyn72IpJZOpkzcKbp3O1O8bg=) 3: 287F42E4018011EF92ADDC7FC4F9AE02.roa (hash: FEK8EzXCQ/8MiufhcQyCAnkfxapHFXjscSrsdrF8TfA=) 4: D6A3090012C411EFAA7E5571C4F9AE02.roa (hash: YhMHAZFNsSZE7k3x+/GlQGMfcWxDJQ6tAPNz/tg+MMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Nov 22 20:57:11 2024 GMT Not After : Nov 29 20:57:11 2024 GMT Subject: CN=6740f027-8327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:b5:ae:a2:38:82:a4:98:67:14:b7:87:9a: 6d:22:99:42:01:bb:5b:8b:f7:30:a7:50:42:b8:64: 5e:b5:bc:d6:c8:ae:6a:bb:f7:33:98:39:f9:5e:0b: a6:ae:7c:ea:de:b5:9e:14:02:28:5b:97:fc:69:d3: 4f:65:65:89:8a:44:11:8c:f0:cb:54:63:ec:89:84: 0e:80:82:11:1c:ff:18:b6:46:fb:24:09:13:8c:41: 05:30:1c:fd:72:b9:0c:ec:4a:19:c7:20:ff:26:b0: f5:c2:2e:0e:f8:16:bf:d8:b9:10:87:61:41:af:d1: 90:73:6d:3b:a4:39:04:a9:fe:40:79:33:2b:dd:f8: 3a:a8:33:cd:fb:f2:cc:6d:cf:53:b2:40:c5:1f:1a: 83:c7:b7:7d:28:6b:d5:5e:fe:25:da:c0:ef:7e:0c: e7:67:79:66:1c:8c:8b:99:26:46:b9:18:7f:34:52: 1a:5f:20:03:24:65:81:47:0c:7b:2e:50:df:03:27: 77:6d:80:d7:a2:ca:21:b6:78:cf:7a:5b:18:88:c6: 77:44:61:bf:a7:39:f9:4e:b2:a8:10:7d:2d:db:35: 87:8a:ac:93:a1:c4:51:14:61:8a:73:4e:e7:2a:fd: 46:f1:86:bb:ce:73:4d:64:05:30:58:0d:8d:17:cc: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FF:5C:3C:D4:D6:E2:38:D8:AB:48:68:EB:88:82:81:C6:73:1A:2C X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1c:d5:42:f7:70:2b:a4:d4:60:84:61:ce:43:c6:72:a2:a9: 2b:ae:24:87:95:24:d1:08:38:ae:6f:43:a9:cc:29:76:5b:62: 6a:72:ac:9d:83:1e:c8:48:63:ff:09:5c:1a:dc:6f:67:d4:a6: ee:f9:03:df:39:c0:47:a5:14:48:6c:cd:c2:14:8c:90:9c:d5: a8:e7:0a:be:52:8c:a3:db:b1:b3:b3:53:bf:d4:21:d2:ee:6b: b2:23:4d:3e:f1:88:45:d7:f9:d7:aa:1a:25:5b:46:f7:40:5e: 6b:0b:5f:a7:75:31:a1:aa:cb:29:56:d8:97:f8:8c:1f:98:ce: 57:cd:59:04:6e:c8:fe:8c:41:4a:82:24:df:17:15:c9:37:ec: d9:e3:82:6c:94:c4:42:4c:26:6e:c9:12:cd:25:6c:e9:fb:7a: 40:08:30:05:3b:b0:92:a9:43:6b:9a:23:22:4d:dd:d4:e4:3d: b9:46:53:81:b3:6b:1a:f2:c0:4d:40:5f:e0:27:11:8f:bf:4a: 0e:c9:9e:57:49:b2:6b:80:10:ac:a4:fe:78:e8:68:0b:c2:5f: ed:e8:2b:7b:d6:41:63:c7:36:48:4e:93:28:8c:eb:15:9e:c4: 06:40:88:57:b3:88:b8:e9:56:58:df:df:bc:81:d3:67:be:3f: 6b:ee:cf:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjQxMTIyMjA1NzExWhcNMjQxMTI5MjA1NzExWjAYMRYwFAYD VQQDEw02NzQwZjAyNy04MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6q1rqI4gqSYZxS3h5ptIplCAbtbi/cwp1BCuGRetbzWyK5qu/czmDn5Xgum rnzq3rWeFAIoW5f8adNPZWWJikQRjPDLVGPsiYQOgIIRHP8Ytkb7JAkTjEEFMBz9 crkM7EoZxyD/JrD1wi4O+Ba/2LkQh2FBr9GQc207pDkEqf5AeTMr3fg6qDPN+/LM bc9TskDFHxqDx7d9KGvVXv4l2sDvfgznZ3lmHIyLmSZGuRh/NFIaXyADJGWBRwx7 LlDfAyd3bYDXosohtnjPelsYiMZ3RGG/pzn5TrKoEH0t2zWHiqyTocRRFGGKc07n Kv1G8Ya7znNNZAUwWA2NF8zuEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAr/XDzU 1uI42KtIaOuIgoHGcxosMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiHNVC93ArpNRghGHOQ8ZyoqkrriSHlSTRCDiub0OpzCl2W2Jqcqyd gx7ISGP/CVwa3G9n1Kbu+QPfOcBHpRRIbM3CFIyQnNWo5wq+Uoyj27Gzs1O/1CHS 7muyI00+8YhF1/nXqholW0b3QF5rC1+ndTGhqsspVtiX+IwfmM5XzVkEbsj+jEFK giTfFxXJN+zZ44JslMRCTCZuyRLNJWzp+3pACDAFO7CSqUNrmiMiTd3U5D25RlOB s2sa8sBNQF/gJxGPv0oOyZ5XSbJrgBCspP546GgLwl/t6Ct71kFjxzZITpMojOsV nsQGQIhXs4i46VZY39+8gdNnvj9r7s+Q -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org