$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json) Hash identifier: hMLtV+se8A9Jf9fUKGwb/g5bTWllcsWv8wM/MLLN7qw= Subject key identifier: 16:6C:2D:C3:D3:5F:C2:11:74:11:9E:24:0E:81:C8:72:F6:47:20:89 Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Certificate serial: 1BF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft Manifest number: 1BE3 Signing time: Fri 22 Nov 2024 16:13:27 +0000 Manifest this update: Fri 22 Nov 2024 16:13:27 +0000 Manifest next update: Fri 29 Nov 2024 16:13:27 +0000 Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: RclJN+YbvZqPtF8HwuKXInyY+xtgifEgbOnbzLgYnYc=) 2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: Y0EM4nVx89ALOhivHGftrwgrUhr1wVTyBxxxQkHeseM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7160 (0x1bf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Validity Not Before: Nov 22 16:13:27 2024 GMT Not After : Nov 29 16:13:27 2024 GMT Subject: CN=6740ada7-eefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:a0:ce:57:cc:a8:49:5e:73:10:af:56:89: 53:96:40:47:3a:5e:b9:ed:af:49:6c:8a:48:f6:9b: 40:04:b8:92:83:72:76:f5:c7:23:13:c1:b6:3b:4e: 08:b6:b3:b1:5f:96:08:f6:18:30:11:61:7f:d3:28: fd:b0:30:46:20:9f:86:68:bf:9a:ac:51:63:59:a0: b1:8a:56:a0:d5:c6:1b:dc:1a:a4:1c:e2:6c:a3:9e: 39:be:fc:5f:0d:15:49:3e:41:60:85:20:01:91:52: 26:a6:58:b5:2c:d2:9e:79:3d:6a:02:bb:ec:87:7f: 74:55:af:b6:1b:24:70:dd:8a:e0:69:b6:4e:c0:73: 71:a2:95:0c:3e:03:c1:2d:fc:6e:e4:58:3c:82:0e: 4b:31:79:07:82:8c:e7:5f:64:ee:56:af:ef:fc:ff: 17:2c:08:d0:86:e6:d0:b0:3b:29:de:04:3d:55:84: ac:5e:91:c3:10:b1:1b:ea:c3:5f:1b:9b:50:4f:86: 2e:dd:e9:57:af:e8:a6:1c:6d:3e:4d:48:27:42:06: 02:ad:38:b2:1d:c3:ca:1b:26:c7:ad:ea:4a:35:f2: 94:57:14:d5:f7:ac:7a:95:3b:d7:fc:d7:2a:d6:b2: 7f:4d:51:30:59:81:c8:68:bd:0e:2a:48:af:c6:c9: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6C:2D:C3:D3:5F:C2:11:74:11:9E:24:0E:81:C8:72:F6:47:20:89 X509v3 Authority Key Identifier: keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:4b:77:dd:af:c3:9e:fb:6a:bf:85:42:45:3e:b8:96:72:f9: 18:42:20:6f:96:b9:74:4d:14:c8:3f:58:a5:fa:7b:aa:9e:97: 23:3d:15:7a:e7:76:60:b9:fa:d7:d7:7f:e7:ff:0e:c4:0b:e1: 62:9d:4b:a2:ab:dc:8c:ed:72:25:06:f0:a6:66:87:2b:8a:0b: 93:9c:ab:9c:96:77:eb:89:6d:37:b8:53:01:ea:b7:88:7b:18: b1:d0:50:dd:d1:07:78:f2:fa:e6:f5:06:a5:7d:86:b0:63:e0: 0c:ef:51:ce:9c:38:dc:fd:f2:fd:c9:6d:b2:74:d9:70:01:f6: 95:6c:2f:9a:58:76:f7:56:be:0c:31:71:a3:f2:9b:93:f4:4a: c6:a2:a7:a3:3d:14:de:15:f8:8e:a9:be:d8:a5:00:4d:05:07: af:02:da:78:72:e5:e2:56:dd:72:43:00:0e:8b:1c:38:e2:46: 1a:5c:2a:30:65:04:06:8d:7b:63:f2:39:6d:2c:d0:5d:96:a9: a7:4e:33:52:10:45:66:06:3e:d6:90:c4:ac:48:ea:67:cf:e7: a9:05:e2:93:e7:f3:2f:91:8b:29:72:22:69:5a:6b:8b:02:63: bc:f2:fd:b0:c9:a8:4a:7c:1f:4a:6e:73:bc:52:3d:f4:3a:48: 5f:83:e3:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcwRkExMTAvBgNVBAUTKDM2Mzk1MkI3RjQxNzgyMDYwOTMwMEFFODkxNDgxMjE4 NEI4RkMzREMwHhcNMjQxMTIyMTYxMzI3WhcNMjQxMTI5MTYxMzI3WjAYMRYwFAYD VQQDEw02NzQwYWRhNy1lZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7GgzlfMqElecxCvVolTlkBHOl657a9JbIpI9ptABLiSg3J29ccjE8G2O04I trOxX5YI9hgwEWF/0yj9sDBGIJ+GaL+arFFjWaCxilag1cYb3BqkHOJso545vvxf DRVJPkFghSABkVImpli1LNKeeT1qArvsh390Va+2GyRw3YrgabZOwHNxopUMPgPB Lfxu5Fg8gg5LMXkHgoznX2TuVq/v/P8XLAjQhubQsDsp3gQ9VYSsXpHDELEb6sNf G5tQT4Yu3elXr+imHG0+TUgnQgYCrTiyHcPKGybHrepKNfKUVxTV96x6lTvX/Ncq 1rJ/TVEwWYHIaL0OKkivxskwvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZsLcPT X8IRdBGeJA6ByHL2RyCJMB8GA1UdIwQYMBaAFDY5Urf0F4IGCTAK6JFIEhhLj8Pc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzBGQS82NEZCN0UxQ0Uz QTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdnWUpNQXJva1VnU0dFdVB3 OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05qbFN0X1FYZ2dZSk1Bcm9rVWdTR0V1UHc5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzBGQS82NEZCN0UxQ0UzQTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdn WUpNQXJva1VnU0dFdVB3OXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCES3fdr8Oe+2q/hUJFPriWcvkYQiBvlrl0TRTIP1il+nuqnpcjPRV6 53ZgufrX13/n/w7EC+FinUuiq9yM7XIlBvCmZocriguTnKuclnfriW03uFMB6reI exix0FDd0Qd48vrm9QalfYawY+AM71HOnDjc/fL9yW2ydNlwAfaVbC+aWHb3Vr4M MXGj8puT9ErGoqejPRTeFfiOqb7YpQBNBQevAtp4cuXiVt1yQwAOixw44kYaXCow ZQQGjXtj8jltLNBdlqmnTjNSEEVmBj7WkMSsSOpnz+epBeKT5/MvkYspciJpWmuL AmO88v2wyahKfB9KbnO8Uj30Okhfg+Oz -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org