$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json) Hash identifier: wyegKkaM044eatAfuryxeGZbAj+e74FvlNv7MY5tdXI= Subject key identifier: 36:CC:68:20:B6:89:3D:A9:75:66:89:7E:F1:22:76:51:61:A3:7B:D0 Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Certificate serial: 0A51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft Manifest number: 1257 Signing time: Fri 22 Nov 2024 19:26:39 +0000 Manifest this update: Fri 22 Nov 2024 19:26:38 +0000 Manifest next update: Fri 29 Nov 2024 19:26:38 +0000 Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: R0KQP1sZUrtGi2ibGXfNRAqgc4zl8QOAuUucNQQ9St0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2641 (0xa51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Validity Not Before: Nov 22 19:26:38 2024 GMT Not After : Nov 29 19:26:38 2024 GMT Subject: CN=6740daef-64db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:ef:b5:8d:13:cb:66:39:9f:bb:79:84:59: fb:73:66:79:c6:69:87:5c:9c:cf:72:6b:a5:ea:bb: 49:6a:9f:0c:52:76:84:b7:16:01:e6:a5:d8:8b:15: fe:e5:07:69:c4:bf:9a:26:f3:e1:83:d0:cd:fb:06: ab:4e:ab:f8:ba:91:f7:79:e5:96:e6:3b:7e:d1:e3: e0:25:82:2e:5b:5d:02:19:49:07:c0:f9:ef:5a:ad: 0a:42:af:8f:12:c9:56:bc:f0:b9:80:12:06:f7:0c: b4:61:d6:4e:9d:7b:8a:52:7e:78:2e:be:75:e3:13: e8:00:d8:4e:15:db:35:61:9d:b8:5d:87:a4:a7:08: 4f:12:7b:c6:d4:a8:63:88:28:99:22:46:84:fe:dd: fb:1b:b4:eb:79:a9:fd:d3:d0:fa:e0:eb:17:33:a2: 74:c4:8c:b7:8a:ad:ab:7c:6c:e7:71:d4:59:53:ca: 42:d2:f8:0b:f8:6d:85:9b:e2:f1:55:2d:6e:7f:56: dc:63:92:9e:b3:a0:bf:6d:17:aa:fe:10:98:1e:82: cc:17:9f:8f:f7:1e:1f:74:6e:e1:10:d7:f1:2e:e2: 4a:51:e6:c0:86:49:b2:34:13:5f:0f:e2:b8:51:46: fd:75:b0:59:48:9b:3b:d4:88:33:64:a9:cd:56:df: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CC:68:20:B6:89:3D:A9:75:66:89:7E:F1:22:76:51:61:A3:7B:D0 X509v3 Authority Key Identifier: keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:1e:c3:77:ff:41:86:4d:59:85:c8:91:92:d9:1e:e2:2b:19: af:50:1a:2e:e4:4f:3f:0c:08:fa:04:e9:40:63:dd:00:05:5c: 8a:00:a9:ad:7e:27:5a:46:9b:fd:b9:1b:b6:75:90:cf:55:d4: 19:8a:e7:33:bf:96:10:da:a7:8b:de:a2:5a:2a:87:cd:46:47: 2e:5b:19:99:e8:95:d2:ba:6b:39:df:e5:71:60:ad:bf:1d:99: d9:37:77:00:0d:4e:14:dc:27:3b:65:07:70:16:fc:de:bc:33: 47:9c:ec:b1:b2:74:fd:ca:21:16:90:3f:47:d4:40:14:ca:00: f6:1d:f5:f4:8d:9a:fc:2f:72:90:e2:45:df:ed:be:6a:24:98: ff:af:95:54:43:71:b5:81:d5:10:d3:f6:f9:8d:49:cd:b0:b1: 3b:a7:6f:3f:84:ad:dc:4d:1f:5d:c3:79:61:32:fa:23:6b:a5: 46:05:16:b9:49:34:a2:13:69:36:a5:55:3f:fe:79:7c:9f:1c: b2:23:b4:49:ca:8d:86:bb:d2:c8:18:2b:b3:94:16:ec:66:63: bb:0e:f0:93:32:08:8d:1c:8c:4b:a6:14:5e:4d:b2:49:c8:07: a3:7f:bf:39:a5:a6:1c:05:e1:ca:f0:9e:0f:79:82:96:ed:4a: b5:02:d1:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2RDgxMTAvBgNVBAUTKDlEM0UwMjA4Qjg1REYwNDlFMDIzQjM0N0RBOUIxODNG QzU2QkFCMUUwHhcNMjQxMTIyMTkyNjM4WhcNMjQxMTI5MTkyNjM4WjAYMRYwFAYD VQQDEw02NzQwZGFlZi02NGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAjvtY0Ty2Y5n7t5hFn7c2Z5xmmHXJzPcmul6rtJap8MUnaEtxYB5qXYixX+ 5QdpxL+aJvPhg9DN+warTqv4upH3eeWW5jt+0ePgJYIuW10CGUkHwPnvWq0KQq+P EslWvPC5gBIG9wy0YdZOnXuKUn54Lr514xPoANhOFds1YZ24XYekpwhPEnvG1Khj iCiZIkaE/t37G7Trean909D64OsXM6J0xIy3iq2rfGzncdRZU8pC0vgL+G2Fm+Lx VS1uf1bcY5Kes6C/bReq/hCYHoLMF5+P9x4fdG7hENfxLuJKUebAhkmyNBNfD+K4 UUb9dbBZSJs71IgzZKnNVt8HLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbMaCC2 iT2pdWaJfvEidlFho3vQMB8GA1UdIwQYMBaAFJ0+Agi4XfBJ4COzR9qbGD/Fa6se MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhFbmdJN05IMnBzWVA4VnJx eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UNENDTGhkOEVuZ0k3TkgycHNZUDhWcnF4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhF bmdJN05IMnBzWVA4VnJxeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYHsN3/0GGTVmFyJGS2R7iKxmvUBou5E8/DAj6BOlAY90ABVyKAKmt fidaRpv9uRu2dZDPVdQZiuczv5YQ2qeL3qJaKofNRkcuWxmZ6JXSums53+VxYK2/ HZnZN3cADU4U3Cc7ZQdwFvzevDNHnOyxsnT9yiEWkD9H1EAUygD2HfX0jZr8L3KQ 4kXf7b5qJJj/r5VUQ3G1gdUQ0/b5jUnNsLE7p28/hK3cTR9dw3lhMvoja6VGBRa5 STSiE2k2pVU//nl8nxyyI7RJyo2Gu9LIGCuzlBbsZmO7DvCTMgiNHIxLphReTbJJ yAejf785paYcBeHK8J4PeYKW7Uq1AtF0 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org