$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: wDzklvA5p1zltfUuvJpMAbHxHpyHeaBszybCI2oEHeE= Subject key identifier: 77:86:31:09:9A:B3:87:69:55:19:1F:1C:47:5A:7E:9C:D8:5B:58:05 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 032C Signing time: Sat 23 Nov 2024 00:42:12 +0000 Manifest this update: Sat 23 Nov 2024 00:42:11 +0000 Manifest next update: Sat 30 Nov 2024 00:42:11 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: ZIRDjJCBwkofU3Dx8plob7h9vFaqf6p8xabUGG/fjhs=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: Lg3+SpKwH3XIoG0VtCiPQf1LpTYqMFWp6MKCeL/5ahI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: Nov 23 00:42:11 2024 GMT Not After : Nov 30 00:42:11 2024 GMT Subject: CN=674124e3-62e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:92:d1:fb:1f:9d:7e:cd:d8:dc:38:9e:2f: 39:0f:33:cb:95:fc:34:aa:da:fc:3a:5a:54:b0:8e: dc:57:e3:d9:54:37:42:df:7e:29:77:0c:76:bb:e3: d1:77:b4:6c:49:20:62:aa:b0:73:3a:ad:ef:78:af: ad:54:24:0b:62:e3:60:31:f6:32:ee:5c:f2:ca:f4: ba:29:18:1c:3c:a6:0a:07:62:73:26:dd:83:96:46: 62:81:ed:39:6b:bf:79:57:ef:f0:11:a8:d0:f5:e5: bd:6b:de:03:88:86:c0:d4:03:59:3e:26:d3:82:91: 39:39:da:b5:f5:51:2e:6c:b0:12:17:bd:ba:d9:63: 7b:f4:c0:79:b5:12:d0:f2:3a:4d:ed:74:80:06:db: 9e:ad:ba:ea:5a:5a:79:ff:7e:e0:92:49:c7:ea:c2: 31:ff:eb:bc:22:9c:17:8f:46:eb:7f:3b:c6:d9:1c: f0:f5:f0:b2:67:07:c8:0d:5f:fa:22:d3:fd:c8:21: 75:b5:c9:68:72:4c:43:05:65:30:20:da:46:00:0d: 7d:df:66:f3:db:b5:3d:c0:7f:e6:95:4c:91:cf:4a: 5d:e4:bb:cd:ef:f4:fc:22:9d:b4:20:07:2e:21:e1: e0:db:83:cb:5e:26:b4:0e:59:03:12:73:a0:f3:3a: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:86:31:09:9A:B3:87:69:55:19:1F:1C:47:5A:7E:9C:D8:5B:58:05 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0f:10:e7:b3:a6:46:af:1e:81:8e:71:4e:83:4e:96:93:5e: 71:5e:27:ed:d2:7f:85:e5:1d:6a:37:29:0b:71:ca:f6:83:8f: 7a:eb:9f:95:7c:af:a1:61:7d:1e:d7:4a:28:e9:34:10:79:c5: a5:d5:9a:fd:49:b6:50:22:b1:1a:f4:e6:5b:c1:e4:7e:41:bf: bb:dd:08:1e:77:c1:65:e2:16:b8:5c:1a:1f:9e:24:aa:87:e8: 4f:d4:08:ef:35:78:4f:19:d6:ce:a8:32:9f:32:00:71:ea:a7: 08:57:eb:aa:d8:61:eb:82:dd:f6:72:47:9d:ec:1e:ac:d4:8a: 74:b7:9d:18:50:b7:ef:a5:44:c6:7a:19:40:e8:3b:37:c4:08: 26:1e:9b:24:37:29:90:8b:ba:1b:ff:73:36:14:36:72:a5:99: 94:2f:05:33:9d:73:1d:88:c5:a8:88:e7:5d:f5:82:bf:7f:51: 80:75:ce:47:6b:77:c5:1c:a8:a0:7d:59:96:91:e0:2a:0f:02: bf:41:8d:03:67:90:a3:0d:92:22:6e:1f:5e:f1:9a:15:de:69: 07:0d:6f:91:a6:db:38:0e:ef:a9:b3:fa:cd:e6:83:19:2e:4e: c2:64:3f:c6:66:6f:97:a6:36:ce:22:cf:7c:af:b8:fb:48:50: c2:bf:35:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjQxMTIzMDA0MjExWhcNMjQxMTMwMDA0MjExWjAYMRYwFAYD VQQDEw02NzQxMjRlMy02MmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa6S0fsfnX7N2Nw4ni85DzPLlfw0qtr8OlpUsI7cV+PZVDdC334pdwx2u+PR d7RsSSBiqrBzOq3veK+tVCQLYuNgMfYy7lzyyvS6KRgcPKYKB2JzJt2DlkZige05 a795V+/wEajQ9eW9a94DiIbA1ANZPibTgpE5Odq19VEubLASF7262WN79MB5tRLQ 8jpN7XSABtuerbrqWlp5/37gkknH6sIx/+u8IpwXj0brfzvG2Rzw9fCyZwfIDV/6 ItP9yCF1tclockxDBWUwINpGAA1932bz27U9wH/mlUyRz0pd5LvN7/T8Ip20IAcu IeHg24PLXia0DlkDEnOg8zq/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeGMQma s4dpVRkfHEdafpzYW1gFMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuDxDns6ZGrx6BjnFOg06Wk15xXift0n+F5R1qNykLccr2g49665+V fK+hYX0e10oo6TQQecWl1Zr9SbZQIrEa9OZbweR+Qb+73Qged8Fl4ha4XBofniSq h+hP1AjvNXhPGdbOqDKfMgBx6qcIV+uq2GHrgt32cked7B6s1Ip0t50YULfvpUTG ehlA6Ds3xAgmHpskNymQi7ob/3M2FDZypZmULwUznXMdiMWoiOdd9YK/f1GAdc5H a3fFHKigfVmWkeAqDwK/QY0DZ5CjDZIibh9e8ZoV3mkHDW+Rpts4Du+ps/rN5oMZ Lk7CZD/GZm+XpjbOIs98r7j7SFDCvzU/ -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org