$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: eu2oXHZ8O90bJ0bIkyE45hkIbSk/SReuq6cinmYsE7w= Subject key identifier: 61:24:79:3C:44:77:56:5D:BC:93:21:57:2C:FE:4A:F8:C8:9D:1D:61 Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 13BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 13B5 Signing time: Fri 22 Nov 2024 16:58:12 +0000 Manifest this update: Fri 22 Nov 2024 16:58:12 +0000 Manifest next update: Fri 29 Nov 2024 16:58:12 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: 5RwReCH/QmqZzKSkV2OCK+Pi9kvlXdvzSvDEbTC7B0c=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: HvY8aLOLbIu6vAeI5+MTO3AgRFsW1gggDw/k0s0xJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5052 (0x13bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Nov 22 16:58:12 2024 GMT Not After : Nov 29 16:58:12 2024 GMT Subject: CN=6740b824-2c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:b1:c7:ff:46:2c:58:01:5f:55:59:7c:e2: cd:a9:a7:89:97:09:38:65:b4:9a:51:f0:64:85:0e: b5:71:b3:ae:44:f6:c7:d8:c6:b5:76:1d:40:cf:9a: a8:d6:0a:e3:8a:78:0b:cc:6c:8a:ee:e0:60:55:d7: f4:bf:5d:09:49:4f:51:4c:f6:2d:3c:10:1d:af:08: a1:75:ef:60:3c:6b:40:41:08:3f:b4:e5:ce:0b:aa: 26:19:08:33:d9:64:ca:ef:c6:3b:36:43:55:60:b2: e5:22:ec:b3:a7:a1:c5:65:89:c6:23:b9:64:02:00: 87:5e:20:97:65:bb:f5:55:85:04:de:1b:db:14:af: a3:36:2c:cf:08:e6:67:e2:57:b2:d2:d4:77:42:89: 0f:07:27:fa:cb:21:85:57:fb:ed:9e:fe:f4:f9:d7: c3:81:c4:48:fb:d1:1d:ce:14:f1:bd:bc:85:e3:16: 95:b7:14:45:20:58:22:61:85:e4:d9:70:3f:5b:b0: 33:3c:c6:88:43:14:f1:aa:b5:9c:bf:97:93:a8:10: 06:71:b0:65:66:64:50:8a:ec:de:84:ed:7e:c1:4a: 64:47:9f:36:62:de:e1:f0:20:f6:9c:9a:9c:20:79: 59:52:b6:7b:2c:c8:55:05:6e:4c:83:d9:fa:11:a1: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:24:79:3C:44:77:56:5D:BC:93:21:57:2C:FE:4A:F8:C8:9D:1D:61 X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1a:4f:ba:9e:b2:8a:4c:f6:c0:d0:e7:52:9e:e6:21:08:c8: 28:08:49:2d:84:20:de:a6:41:e6:c9:2c:53:ec:e5:53:8e:26: 5d:05:0e:14:be:e7:c2:f7:98:b5:74:81:24:b0:d8:60:93:c7: 59:14:65:bc:ab:92:37:3e:fd:95:cf:6f:26:57:ef:0d:bc:b1: ec:83:ed:ae:bb:e5:c0:9e:8b:f7:39:75:d0:02:35:2d:af:64: 54:47:fd:13:d1:c0:72:c1:24:0f:75:b5:52:f5:54:73:ee:db: d2:fd:68:13:25:79:57:9e:6a:52:41:68:dc:8b:8d:4a:95:f4: 5f:00:b6:a4:76:7a:06:6e:5c:2f:b9:35:f3:c1:6e:a8:f9:a9: 0b:85:37:d3:99:fc:d1:9e:a7:62:1d:03:8b:25:06:2f:76:12: 58:a2:7f:ab:ab:f9:7f:bc:4b:9a:a8:83:a7:a8:08:06:f9:4c: be:a1:f7:24:b5:29:91:bf:15:8b:fe:85:65:36:b7:56:00:40: 5a:b1:47:f8:51:af:47:c1:df:89:75:44:03:1f:de:ad:7e:39: a7:18:a1:77:a6:c8:fb:9d:75:e5:f3:ec:5b:36:4c:ce:18:91: 68:ca:85:e6:57:76:f2:ea:98:ca:44:c9:74:f0:fa:18:3f:d3: 53:a1:42:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjQxMTIyMTY1ODEyWhcNMjQxMTI5MTY1ODEyWjAYMRYwFAYD VQQDEw02NzQwYjgyNC0yYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHCxx/9GLFgBX1VZfOLNqaeJlwk4ZbSaUfBkhQ61cbOuRPbH2Ma1dh1Az5qo 1grjingLzGyK7uBgVdf0v10JSU9RTPYtPBAdrwihde9gPGtAQQg/tOXOC6omGQgz 2WTK78Y7NkNVYLLlIuyzp6HFZYnGI7lkAgCHXiCXZbv1VYUE3hvbFK+jNizPCOZn 4ley0tR3QokPByf6yyGFV/vtnv70+dfDgcRI+9EdzhTxvbyF4xaVtxRFIFgiYYXk 2XA/W7AzPMaIQxTxqrWcv5eTqBAGcbBlZmRQiuzehO1+wUpkR582Yt7h8CD2nJqc IHlZUrZ7LMhVBW5Mg9n6EaEXnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEkeTxE d1ZdvJMhVyz+SvjInR1hMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Gk+6nrKKTPbA0OdSnuYhCMgoCEkthCDepkHmySxT7OVTjiZdBQ4U vufC95i1dIEksNhgk8dZFGW8q5I3Pv2Vz28mV+8NvLHsg+2uu+XAnov3OXXQAjUt r2RUR/0T0cBywSQPdbVS9VRz7tvS/WgTJXlXnmpSQWjci41KlfRfALakdnoGblwv uTXzwW6o+akLhTfTmfzRnqdiHQOLJQYvdhJYon+rq/l/vEuaqIOnqAgG+Uy+ofck tSmRvxWL/oVlNrdWAEBasUf4Ua9Hwd+JdUQDH96tfjmnGKF3psj7nXXl8+xbNkzO GJFoyoXmV3by6pjKRMl08PoYP9NToUJd -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org