$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json) Hash identifier: TvypqdpCY/XYA6osuOB4SXWGKMMRKL/B0g3xs3n0VqM= Subject key identifier: EE:5F:1C:6D:48:9A:C4:D0:37:87:A1:E8:B3:AD:8C:E7:84:0E:52:D8 Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft Manifest number: 018F Signing time: Sat 23 Nov 2024 01:56:01 +0000 Manifest this update: Sat 23 Nov 2024 01:56:01 +0000 Manifest next update: Sat 30 Nov 2024 01:56:01 +0000 Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: FFJ+EfV3cwlhbE52q4cXB3DYH0A2w1gsAyRCjSdajZ4=) 2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: IA7ndlMtzlimkIY6svrVtb7hYj1DKuX/Dcj54QQRijI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Validity Not Before: Nov 23 01:56:01 2024 GMT Not After : Nov 30 01:56:01 2024 GMT Subject: CN=67413631-85ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:f6:2f:54:5d:cb:74:63:e9:9c:6a:44:3e: b7:e0:df:ac:4e:1f:44:9e:26:f1:60:d9:eb:3d:02: 49:da:a7:e3:8c:2f:11:50:2f:5a:f2:e0:82:23:25: 60:89:8f:a4:57:10:83:f6:35:73:dc:a8:48:7d:a6: 52:ff:3c:ae:4b:5b:02:c5:cd:c9:50:06:15:3c:52: 29:36:a8:71:6a:63:11:aa:44:91:44:72:19:83:a7: 6d:6c:03:fc:0e:83:1c:5f:5a:71:96:e1:ab:9a:0e: 1e:69:97:39:6e:01:2d:fb:52:f3:53:da:65:de:97: fb:f7:9a:60:62:7e:a0:bb:1f:50:7e:75:ac:91:1f: 2f:6d:32:de:19:8b:58:0d:49:33:76:d2:a9:b8:9f: 7a:dd:e8:24:69:66:c6:98:d2:9f:5f:da:0f:19:14: 61:bc:10:ba:2b:36:fd:fa:07:f3:80:1c:20:45:37: 9a:6f:cc:aa:57:c0:7a:ae:b4:b0:0e:8c:23:48:4e: 0d:a4:25:2c:e2:92:99:ba:6e:e6:03:5b:2f:ea:81: 66:b5:d1:8d:a0:7d:69:b1:a6:1e:0f:c1:7d:ee:6e: 26:75:76:0b:0e:56:f5:7e:60:b7:a0:73:38:96:21: a9:62:9b:7e:90:58:7e:b5:d4:09:31:76:66:e9:af: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5F:1C:6D:48:9A:C4:D0:37:87:A1:E8:B3:AD:8C:E7:84:0E:52:D8 X509v3 Authority Key Identifier: keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:17:01:ad:1d:ee:b9:29:c8:b0:2f:9b:61:b6:5d:93:fe:82: 37:bd:81:92:c7:51:2a:4e:3b:84:37:b0:d0:94:1c:d4:d4:86: c6:1b:a4:1a:42:67:3b:5a:e4:61:7f:0f:bf:2c:d0:34:a3:4d: 6b:e0:1d:7d:55:d3:b7:a4:ac:f5:2c:0e:54:7c:46:8a:2d:18: 9a:66:21:47:1c:f5:b4:64:4e:26:62:a5:92:4b:c8:6a:56:f1: 2d:e0:45:1a:71:e4:7d:59:54:c6:6f:54:04:e3:57:1e:19:b0: 8e:1f:b8:09:67:be:8b:f3:99:94:ba:58:19:69:3c:df:0f:b4: 61:d2:b4:75:06:e5:23:a5:05:84:c0:9d:03:91:42:2f:68:6d: 2c:ce:c4:26:13:aa:d2:d9:6c:95:23:32:cd:26:07:19:85:ec: bb:0a:27:fb:8a:74:6b:d5:c8:03:72:6b:0b:eb:3d:2c:33:ce: 3e:97:db:c3:20:22:1b:56:60:cf:a9:07:92:ca:5a:cf:46:fc: 03:8d:49:fe:9b:27:fb:68:10:a7:08:97:b9:e7:b7:a7:f4:e7: 4d:f4:94:63:75:c1:71:1c:8c:98:1e:63:98:58:cd:24:b7:c4: a6:55:6b:72:ba:46:cb:28:f5:bf:b3:0b:33:61:f5:8c:a2:81: bf:c0:9c:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG ODdCNDAxMkQwHhcNMjQxMTIzMDE1NjAxWhcNMjQxMTMwMDE1NjAxWjAYMRYwFAYD VQQDEw02NzQxMzYzMS04NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19H2L1Rdy3Rj6ZxqRD634N+sTh9EnibxYNnrPQJJ2qfjjC8RUC9a8uCCIyVg iY+kVxCD9jVz3KhIfaZS/zyuS1sCxc3JUAYVPFIpNqhxamMRqkSRRHIZg6dtbAP8 DoMcX1pxluGrmg4eaZc5bgEt+1LzU9pl3pf795pgYn6gux9QfnWskR8vbTLeGYtY DUkzdtKpuJ963egkaWbGmNKfX9oPGRRhvBC6Kzb9+gfzgBwgRTeab8yqV8B6rrSw DowjSE4NpCUs4pKZum7mA1sv6oFmtdGNoH1psaYeD8F97m4mdXYLDlb1fmC3oHM4 liGpYpt+kFh+tdQJMXZm6a+gqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5fHG1I msTQN4eh6LOtjOeEDlLYMB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9FwGtHe65KciwL5thtl2T/oI3vYGSx1EqTjuEN7DQlBzU1IbGG6Qa Qmc7WuRhfw+/LNA0o01r4B19VdO3pKz1LA5UfEaKLRiaZiFHHPW0ZE4mYqWSS8hq VvEt4EUaceR9WVTGb1QE41ceGbCOH7gJZ76L85mUulgZaTzfD7Rh0rR1BuUjpQWE wJ0DkUIvaG0szsQmE6rS2WyVIzLNJgcZhey7Cif7inRr1cgDcmsL6z0sM84+l9vD ICIbVmDPqQeSylrPRvwDjUn+myf7aBCnCJe557en9OdN9JRjdcFxHIyYHmOYWM0k t8SmVWtyukbLKPW/swszYfWMooG/wJxX -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org