$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json) Hash identifier: obWP6Vq7g9HjX9JgGZLD+GwtChH+azha7IaA0TOo/TA= Subject key identifier: 54:84:4A:DD:DD:86:C5:00:29:2E:2D:A3:36:DD:A1:C7:B3:B1:4D:12 Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft Manifest number: 07A1 Signing time: Fri 22 Nov 2024 20:51:11 +0000 Manifest this update: Fri 22 Nov 2024 20:51:11 +0000 Manifest next update: Fri 29 Nov 2024 20:51:11 +0000 Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: BXdXm+dQjiJFIyNJGWBXrCSkbm832XjWjQdIqTIt2oo=) 2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: vN/dANQFbTJxxRHMI9ZludqJZ1NmcGlANCvolM21fwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Validity Not Before: Nov 22 20:51:11 2024 GMT Not After : Nov 29 20:51:11 2024 GMT Subject: CN=6740eebf-d2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:0a:f2:f9:27:d4:93:cf:b3:7b:4c:c5:1c: 93:12:c1:7e:44:e0:2d:ea:19:90:68:82:db:f8:47: 6d:5b:7d:39:82:16:1d:b9:e6:12:24:f0:da:f9:ca: d5:41:51:d6:c5:38:93:90:fa:50:e4:64:c3:09:40: 5e:b6:f0:8c:6d:d6:64:a5:6a:bb:22:7b:86:29:ca: 9a:2f:f7:f2:39:28:ba:63:9b:50:ce:af:bc:dc:b8: 63:d9:bc:a2:c0:87:93:31:9f:54:c3:5d:49:e5:a9: ba:e3:78:a8:66:ba:cb:5f:d4:9f:30:46:f5:46:82: 13:d3:f0:6e:82:95:73:a7:8e:00:01:ca:27:38:c9: f9:48:7f:ca:bf:5e:fe:af:b2:c3:5a:b0:b7:94:db: 3a:c2:f3:4b:82:10:09:d7:20:f7:51:62:3b:32:af: 26:b4:2e:7b:31:0c:da:18:f0:05:ef:13:bf:20:8d: e0:01:8c:9a:7f:05:42:f0:27:a5:62:7b:f8:56:cf: a9:25:bc:53:9c:5f:e4:1c:92:f9:cb:bb:d9:8d:a6: 45:fb:3c:ab:a5:2e:f5:6b:61:b8:58:c1:92:b9:91: 78:a4:26:15:5c:07:83:b9:17:0c:22:de:3d:2a:31: 3c:2a:ac:58:cc:14:6f:4a:a0:9b:cd:c4:11:f7:8a: 90:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:84:4A:DD:DD:86:C5:00:29:2E:2D:A3:36:DD:A1:C7:B3:B1:4D:12 X509v3 Authority Key Identifier: keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:51:a4:ef:7c:73:86:ce:e4:61:91:a8:8e:ee:a6:af:b8:f5: 2a:88:c2:9d:e7:c9:3c:22:ed:a9:5b:88:9e:6b:26:c6:ed:e7: 89:ec:59:91:d3:1a:3a:d0:f5:02:9a:ea:25:c4:5f:75:98:2a: 3b:a9:0f:88:3f:9a:8c:b1:ef:31:e6:ec:d1:eb:1f:ea:9b:84: 83:53:1e:e5:f3:fa:b2:84:8c:55:9e:7a:0b:66:bc:3c:9a:0b: b3:a6:ed:bb:2a:e7:82:43:23:14:d2:b1:87:4c:38:ae:ec:a4: f9:6d:3a:6a:42:c6:72:b6:ac:38:cd:d5:1f:1a:b7:bc:3c:fd: 16:f6:5a:76:52:ae:9e:e0:20:95:08:25:1a:ae:54:b3:14:ee: 8e:49:f5:02:cc:7d:7f:dc:7b:85:9b:a7:35:ba:de:9e:31:61: e6:01:ef:a9:72:ee:3c:7c:65:fb:09:00:60:59:35:4f:e8:4f: a0:c3:cd:07:7b:7e:d6:f7:4c:c6:1a:11:a1:64:1d:a7:dc:86: 78:6a:43:24:7a:d9:ba:42:8f:d9:14:31:5a:f7:de:74:ae:a9: ef:64:b9:06:f3:85:be:c0:ae:d4:2c:98:d8:a8:6e:d6:15:bf: e0:8d:1f:f1:41:a5:5a:79:d3:25:f6:7b:81:2d:39:a3:85:cd: b8:d3:25:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVEMzQxMTAvBgNVBAUTKDlFQzEyMTZEMjU2NDE2NDAzQ0I1QzUzRTczNDU1MzBG ODMyNzJDREQwHhcNMjQxMTIyMjA1MTExWhcNMjQxMTI5MjA1MTExWjAYMRYwFAYD VQQDEw02NzQwZWViZi1kMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7kK8vkn1JPPs3tMxRyTEsF+ROAt6hmQaILb+EdtW305ghYdueYSJPDa+crV QVHWxTiTkPpQ5GTDCUBetvCMbdZkpWq7InuGKcqaL/fyOSi6Y5tQzq+83Lhj2byi wIeTMZ9Uw11J5am643ioZrrLX9SfMEb1RoIT0/BugpVzp44AAconOMn5SH/Kv17+ r7LDWrC3lNs6wvNLghAJ1yD3UWI7Mq8mtC57MQzaGPAF7xO/II3gAYyafwVC8Cel Ynv4Vs+pJbxTnF/kHJL5y7vZjaZF+zyrpS71a2G4WMGSuZF4pCYVXAeDuRcMIt49 KjE8KqxYzBRvSqCbzcQR94qQNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSESt3d hsUAKS4tozbdocezsU0SMB8GA1UdIwQYMBaAFJ7BIW0lZBZAPLXFPnNFUw+DJyzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQzNC9EQkE4Nzg1OEU2 QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0ZrQTh0Y1UtYzBWVEQ0TW5M TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zRWhiU1ZrRmtBOHRjVS1jMFZURDRNbkxOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQzNC9EQkE4Nzg1OEU2QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0Zr QTh0Y1UtYzBWVEQ0TW5MTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+UaTvfHOGzuRhkaiO7qavuPUqiMKd58k8Iu2pW4ieaybG7eeJ7FmR 0xo60PUCmuolxF91mCo7qQ+IP5qMse8x5uzR6x/qm4SDUx7l8/qyhIxVnnoLZrw8 mguzpu27KueCQyMU0rGHTDiu7KT5bTpqQsZytqw4zdUfGre8PP0W9lp2Uq6e4CCV CCUarlSzFO6OSfUCzH1/3HuFm6c1ut6eMWHmAe+pcu48fGX7CQBgWTVP6E+gw80H e37W90zGGhGhZB2n3IZ4akMketm6Qo/ZFDFa9950rqnvZLkG84W+wK7ULJjYqG7W Fb/gjR/xQaVaedMl9nuBLTmjhc240yUv -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org