$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: A7Bo75Y6k5JJY1QGFs44vaOOiMFYP5G/ADpY5a1F+Nw= Subject key identifier: 65:E4:82:92:71:5C:11:CB:13:CA:AD:29:2A:9D:0C:E0:F5:DE:45:2B Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 089A Signing time: Fri 22 Nov 2024 20:17:07 +0000 Manifest this update: Fri 22 Nov 2024 20:17:07 +0000 Manifest next update: Fri 29 Nov 2024 20:17:07 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: EWdtzI/2ZYW3TYRcbAGY3VEqEu8Lj4nwQT5hfBE4IB0=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: uVDqEWvFSoFCutjWZ+pfrsUVRlgkPu0drLynarAKc08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Nov 22 20:17:07 2024 GMT Not After : Nov 29 20:17:07 2024 GMT Subject: CN=6740e6c3-50af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:f6:b1:7a:ec:37:9f:47:8a:f6:fc:ce:0d: f2:98:a9:98:79:7a:2f:5d:f0:c9:9b:8d:85:a4:f2: d9:59:bc:5f:f4:7b:06:74:c3:16:59:ec:e5:74:29: 6d:eb:a3:b9:53:de:3f:a1:e0:78:35:0f:87:a4:29: 1d:d0:8b:d3:e0:f7:9f:5f:9c:b1:ea:b0:d5:bf:96: 62:b9:fd:63:7e:c8:6c:28:83:2c:dd:5f:31:24:ac: ad:20:3e:b5:a3:44:22:5e:d0:1d:75:a7:fd:a1:33: 3d:a1:69:a5:be:0c:f5:47:59:d1:31:0c:82:c1:1b: 27:2e:e1:fa:c2:87:ca:e3:08:3f:a6:a4:ae:92:c1: 35:fb:50:57:72:ba:32:81:66:1c:87:8b:99:27:2f: a1:dd:30:d5:9d:51:b9:00:f2:44:16:62:44:4e:da: db:65:8c:eb:b9:02:b7:da:80:af:9a:6a:74:40:bf: b0:e5:4a:24:b8:a7:5b:05:81:35:ae:fd:73:d3:17: d0:ae:6e:1f:fb:2c:ca:53:bb:28:3e:a0:d6:aa:51: db:0a:36:4b:b0:e2:e7:e0:8f:57:e5:1b:d3:e1:b7: a2:8b:ee:bc:85:d7:e3:d3:d1:c5:10:5a:c2:91:e1: e0:96:ff:23:5c:4a:ef:51:ac:2c:47:65:a9:55:ab: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E4:82:92:71:5C:11:CB:13:CA:AD:29:2A:9D:0C:E0:F5:DE:45:2B X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:48:a5:83:8a:ab:ac:a8:c4:51:4e:f6:3d:27:95:31:38:c6: d9:14:66:98:8f:93:1d:b7:9f:6e:6e:18:af:70:1a:b9:ae:05: 18:68:a4:bb:7f:91:04:0d:ab:2e:6d:19:77:32:5e:5e:a9:81: 55:f7:3d:c4:01:b8:ef:5e:16:e2:b2:fa:71:2e:5f:5c:c2:7a: 8e:8e:73:3c:53:fd:bf:53:a6:01:09:44:59:21:29:6c:11:7b: 88:d7:19:54:41:0d:3b:ea:87:a2:e8:68:a5:d0:5f:a2:d6:83: b9:a0:ee:1d:0e:19:a4:bc:10:60:d2:ac:ca:de:f2:6b:9e:40: cd:de:bd:45:0c:6f:a2:cc:52:e9:0a:25:69:e0:bb:7e:f7:d3: 43:32:a7:12:e4:9d:9a:b8:56:47:be:a7:10:05:df:95:16:2f: ee:3d:41:75:a7:fa:a1:eb:dd:3f:90:7f:69:e6:1a:00:75:d8: 29:67:b7:95:8c:13:4b:76:9e:93:6e:73:7d:99:7b:20:03:2a: 32:ca:c8:9d:06:c0:f1:f8:d3:84:1f:6c:04:a5:8f:fa:bd:71: d0:2a:29:a8:04:ec:d5:7a:a3:af:04:bf:70:53:95:54:db:74: 9b:af:65:34:98:b7:8f:10:10:2e:30:1a:b7:80:cd:26:a5:d6: 62:5f:06:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjQxMTIyMjAxNzA3WhcNMjQxMTI5MjAxNzA3WjAYMRYwFAYD VQQDEw02NzQwZTZjMy01MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SH2sXrsN59Hivb8zg3ymKmYeXovXfDJm42FpPLZWbxf9HsGdMMWWezldClt 66O5U94/oeB4NQ+HpCkd0IvT4PefX5yx6rDVv5Ziuf1jfshsKIMs3V8xJKytID61 o0QiXtAddaf9oTM9oWmlvgz1R1nRMQyCwRsnLuH6wofK4wg/pqSuksE1+1BXcroy gWYch4uZJy+h3TDVnVG5APJEFmJETtrbZYzruQK32oCvmmp0QL+w5UokuKdbBYE1 rv1z0xfQrm4f+yzKU7soPqDWqlHbCjZLsOLn4I9X5RvT4beii+68hdfj09HFEFrC keHglv8jXErvUawsR2WpVavWKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXkgpJx XBHLE8qtKSqdDOD13kUrMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxSKWDiqusqMRRTvY9J5UxOMbZFGaYj5Mdt59ubhivcBq5rgUYaKS7 f5EEDasubRl3Ml5eqYFV9z3EAbjvXhbisvpxLl9cwnqOjnM8U/2/U6YBCURZISls EXuI1xlUQQ076oei6Gil0F+i1oO5oO4dDhmkvBBg0qzK3vJrnkDN3r1FDG+izFLp CiVp4Lt+99NDMqcS5J2auFZHvqcQBd+VFi/uPUF1p/qh690/kH9p5hoAddgpZ7eV jBNLdp6TbnN9mXsgAyoyysidBsDx+NOEH2wEpY/6vXHQKimoBOzVeqOvBL9wU5VU 23Sbr2U0mLePEBAuMBq3gM0mpdZiXwYa -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:40 2024 by rpki-client on console-ams.rpki-client.org