$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft File: NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft (raw, json) Hash identifier: Lx8k2xAflPcRlTrHFCG+lEAvOenb/vB2JPk96tL38m8= Subject key identifier: A3:A4:E0:A6:B6:60:BC:7D:A4:65:2C:A0:B0:94:EA:E2:38:D5:26:D0 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0BA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft Manifest number: 0B9F Signing time: Fri 22 Nov 2024 18:42:06 +0000 Manifest this update: Fri 22 Nov 2024 18:42:06 +0000 Manifest next update: Fri 29 Nov 2024 18:42:06 +0000 Files and hashes: 1: NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl (hash: mCzbHh51Rc6U5ZhMJGHtvl6jEmLqa6wAiVGnSgcuWnk=) 2: 2157C3E011C211EA93417583C4F9AE02.roa (hash: 85Scolzp9wypOjOnR9zpu7pztxFge5H6WD9ZJw41pbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Nov 22 18:42:06 2024 GMT Not After : Nov 29 18:42:06 2024 GMT Subject: CN=6740d07e-9466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:13:06:ce:96:74:05:13:98:13:7d:09:39: 2f:a1:6c:0a:0b:1a:b9:36:e6:a0:9d:64:2b:77:20: 0b:82:84:df:49:48:7d:62:55:fd:f1:95:2f:25:0b: b2:97:cb:48:75:15:ba:1d:c3:fb:3d:21:b5:67:16: 71:16:37:d4:29:e8:80:d1:78:92:93:22:ed:82:e6: 9d:36:84:fb:1f:b4:d8:ea:96:a1:d0:78:1f:1d:87: e9:d6:53:6d:de:8e:3b:6c:ba:80:17:82:d6:a1:2e: 47:1e:01:7a:06:5c:08:12:b1:fc:83:ad:9b:ce:34: 14:21:4d:cf:7c:bd:18:d3:aa:74:a2:dc:dc:fb:cc: b6:f6:60:7c:5a:f5:0c:be:f9:ad:1d:58:c0:70:52: 78:9f:58:25:0a:b9:ba:9f:3b:e7:42:4d:76:6c:b8: 14:ae:fe:ee:b9:d3:05:c0:61:a4:98:69:98:c9:2a: 6f:15:6b:99:0e:c1:aa:41:e0:11:23:1c:ed:f8:88: 47:b2:1e:97:35:64:30:96:97:81:96:2e:0c:9d:3f: 9d:52:dd:83:ae:6b:35:38:de:9b:62:42:f5:b7:c8: 2e:0d:ed:c4:cc:9b:b6:73:a9:6c:fe:12:1d:16:5b: 19:24:19:4c:c8:52:2b:16:e8:84:5f:48:43:5a:cb: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A4:E0:A6:B6:60:BC:7D:A4:65:2C:A0:B0:94:EA:E2:38:D5:26:D0 X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:02:93:3a:4c:fc:27:ad:80:b4:27:93:df:2f:ab:02:b2:d2: 45:c7:cf:6b:2b:16:59:97:ac:57:04:0d:22:fb:66:85:3e:0e: f4:43:d4:2d:36:4f:89:1d:26:c0:f2:bb:b1:45:56:ad:b3:ad: 10:af:33:22:42:26:ab:a7:56:de:51:71:73:17:4f:35:69:56: e6:2b:85:03:30:31:1c:f2:9f:60:0b:1f:34:6b:a1:2f:83:b3: 96:37:ac:f3:5e:d8:0b:fd:72:9d:c8:c8:42:e1:c0:29:3a:bd: c1:07:4c:c2:48:cf:57:5c:20:67:6b:2b:62:5b:78:b8:03:9b: 63:67:02:39:08:be:24:09:4c:53:0e:62:a1:a0:d3:d2:d1:f3: 3e:58:c4:e7:64:7e:04:9c:01:d3:6f:90:45:f9:9a:f1:1d:d8: 93:3b:0d:ff:56:24:2f:92:7e:99:30:94:53:47:c4:9d:8d:b8: 2e:6a:7e:44:b9:1a:41:d7:29:bd:8a:72:84:15:73:2f:97:45: 81:ae:52:da:2a:8e:f5:3a:3f:d4:b1:32:da:f9:32:41:13:02: 77:e2:d7:dc:64:f5:b8:06:f8:4c:46:af:9e:8b:ac:6d:9b:2d: ed:36:1c:04:9d:a1:50:91:32:73:08:cd:67:16:e1:0a:98:a9: 3e:15:51:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjQxMTIyMTg0MjA2WhcNMjQxMTI5MTg0MjA2WjAYMRYwFAYD VQQDEw02NzQwZDA3ZS05NDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx60TBs6WdAUTmBN9CTkvoWwKCxq5NuagnWQrdyALgoTfSUh9YlX98ZUvJQuy l8tIdRW6HcP7PSG1ZxZxFjfUKeiA0XiSkyLtguadNoT7H7TY6pah0HgfHYfp1lNt 3o47bLqAF4LWoS5HHgF6BlwIErH8g62bzjQUIU3PfL0Y06p0otzc+8y29mB8WvUM vvmtHVjAcFJ4n1glCrm6nzvnQk12bLgUrv7uudMFwGGkmGmYySpvFWuZDsGqQeAR Ixzt+IhHsh6XNWQwlpeBli4MnT+dUt2Drms1ON6bYkL1t8guDe3EzJu2c6ls/hId FlsZJBlMyFIrFuiEX0hDWssHNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOk4Ka2 YLx9pGUsoLCU6uI41SbQMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTZFNy83ODYwRjhCQTExQzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1D U0NheHZQbHZQSGR0Z1M5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmApM6TPwnrYC0J5PfL6sCstJFx89rKxZZl6xXBA0i+2aFPg70Q9Qt Nk+JHSbA8ruxRVats60QrzMiQiarp1beUXFzF081aVbmK4UDMDEc8p9gCx80a6Ev g7OWN6zzXtgL/XKdyMhC4cApOr3BB0zCSM9XXCBnaytiW3i4A5tjZwI5CL4kCUxT DmKhoNPS0fM+WMTnZH4EnAHTb5BF+ZrxHdiTOw3/ViQvkn6ZMJRTR8Sdjbguan5E uRpB1ym9inKEFXMvl0WBrlLaKo71Oj/UsTLa+TJBEwJ34tfcZPW4BvhMRq+ei6xt my3tNhwEnaFQkTJzCM1nFuEKmKk+FVFC -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org