$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: dsjGDJ6Ng/X0d4oKboDF4cibPLjSRSJmsOXcOKtP9y8= Subject key identifier: B9:DD:0C:D5:3E:DB:AF:2B:97:1A:98:9E:4D:35:D9:6E:13:B0:16:B5 Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0C1A Signing time: Fri 22 Nov 2024 18:16:02 +0000 Manifest this update: Fri 22 Nov 2024 18:16:01 +0000 Manifest next update: Fri 29 Nov 2024 18:16:01 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: +7bWlyjpijEAxG216oOR6ySE7KnimC4+rZJxQOfA7l0=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: 6gIjrF99/wAv0IJmO9Ky10oDg62lrui5eFj9go2VtnY=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: nC5w9TCzp4SV3Db1Ys8xIWCRbyZvrHjrm8RrtnxmKcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: Nov 22 18:16:01 2024 GMT Not After : Nov 29 18:16:01 2024 GMT Subject: CN=6740ca62-4562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:34:02:59:25:46:09:6d:74:c5:0d:d3:3c: 66:b2:c3:bf:45:36:ee:54:e7:60:90:dc:32:1d:5e: 80:cc:63:63:fe:49:05:d6:d9:fb:42:1c:56:31:e3: 2c:1f:a8:74:0c:b4:22:51:09:0b:2c:7f:81:b9:24: 7c:ef:92:a4:9a:b4:b7:32:9b:b3:fa:ea:0a:1d:f7: 7e:35:53:d1:40:cd:85:f9:f0:93:28:cb:17:66:0c: 07:e7:3f:4a:14:e1:00:ab:18:c1:2b:0c:61:4a:5b: 10:92:ce:9a:2b:3c:eb:63:9a:c1:3a:7e:30:47:21: 18:df:46:db:c1:f2:39:b9:cf:09:4c:a7:14:9c:a1: 24:b5:54:b6:8d:30:dc:77:e5:18:75:9f:5c:93:67: 54:30:5b:90:bc:92:72:e9:23:07:9d:a0:b5:1d:7f: 74:01:f7:61:31:08:49:62:a3:a9:1e:e6:f0:de:9c: 0a:5a:54:fa:92:6d:86:35:2b:95:ee:9b:37:63:41: 4f:2d:b1:de:d3:18:cf:62:a8:76:1e:27:f7:5f:ef: 37:69:18:5f:ef:a6:91:b3:8e:7b:23:96:f8:7b:76: ec:e2:23:20:b2:c7:0d:d9:ae:34:ff:4b:f1:24:76: 3f:2f:cb:16:77:78:d0:41:65:ea:71:41:a5:08:37: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DD:0C:D5:3E:DB:AF:2B:97:1A:98:9E:4D:35:D9:6E:13:B0:16:B5 X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:43:a1:e8:b0:c8:ea:9e:2f:a0:f8:fc:a1:d9:db:be:8c:10: 64:db:60:44:bd:64:fb:6f:c8:ca:3e:9d:ca:f5:96:a8:ad:db: 7a:ea:fb:d2:77:5f:bf:7b:55:a7:84:fa:f4:7d:4b:a5:60:6a: 14:33:ef:72:92:54:79:44:a5:5e:f3:c6:dc:51:f9:cd:4d:7b: cf:86:79:17:b1:89:02:07:44:d1:7f:06:34:66:b6:b8:52:30: 56:af:ef:9a:9e:4c:b8:88:3a:76:a7:7d:19:17:59:3e:7e:42: e5:35:fb:1c:11:03:70:c5:df:20:91:14:76:5a:b9:36:53:d0: af:f7:58:8d:b2:d5:b9:66:94:03:fd:b1:69:84:c7:ec:38:46: 32:e6:9c:ff:d9:02:99:93:e8:82:63:44:4d:4a:52:04:58:cb: 77:e3:10:88:04:e0:3d:e7:2e:d3:3f:63:41:17:d6:5a:ed:93: 03:85:52:64:28:ab:16:ef:39:0a:c6:2e:fd:0e:ff:21:d2:05: 98:17:79:87:2d:79:0a:09:ff:fe:1f:7c:a0:56:39:e7:81:c6: 7e:49:a7:3e:dc:42:9a:a7:c5:08:7f:7d:43:3c:43:8a:08:eb: 1f:1c:0d:8d:44:d0:21:a7:a5:a1:70:42:72:73:61:df:f8:b2: 6f:59:ec:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjQxMTIyMTgxNjAxWhcNMjQxMTI5MTgxNjAxWjAYMRYwFAYD VQQDEw02NzQwY2E2Mi00NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWc0AlklRgltdMUN0zxmssO/RTbuVOdgkNwyHV6AzGNj/kkF1tn7QhxWMeMs H6h0DLQiUQkLLH+BuSR875KkmrS3Mpuz+uoKHfd+NVPRQM2F+fCTKMsXZgwH5z9K FOEAqxjBKwxhSlsQks6aKzzrY5rBOn4wRyEY30bbwfI5uc8JTKcUnKEktVS2jTDc d+UYdZ9ck2dUMFuQvJJy6SMHnaC1HX90AfdhMQhJYqOpHubw3pwKWlT6km2GNSuV 7ps3Y0FPLbHe0xjPYqh2Hif3X+83aRhf76aRs457I5b4e3bs4iMgsscN2a40/0vx JHY/L8sWd3jQQWXqcUGlCDdTAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLndDNU+ 268rlxqYnk012W4TsBa1MB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaQ6HosMjqni+g+Pyh2du+jBBk22BEvWT7b8jKPp3K9Zaordt66vvS d1+/e1WnhPr0fUulYGoUM+9yklR5RKVe88bcUfnNTXvPhnkXsYkCB0TRfwY0Zra4 UjBWr++anky4iDp2p30ZF1k+fkLlNfscEQNwxd8gkRR2Wrk2U9Cv91iNstW5ZpQD /bFphMfsOEYy5pz/2QKZk+iCY0RNSlIEWMt34xCIBOA95y7TP2NBF9Za7ZMDhVJk KKsW7zkKxi79Dv8h0gWYF3mHLXkKCf/+H3ygVjnngcZ+Sac+3EKap8UIf31DPEOK COsfHA2NRNAhp6WhcEJyc2Hf+LJvWew6 -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org