$ rpki-client -vvf rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.mft File: NLH5jq_8ZuNBzHCYT87YI3iDSck.mft (raw, json) Hash identifier: fHKD5wrgLlahQCIeIqiG6lWBvs/nMnXgwlgMwOyF6kQ= Subject key identifier: BF:AA:CE:D5:C5:92:46:38:F5:BE:A2:F2:31:CF:AA:B7:73:99:3C:87 Authority key identifier: 34:B1:F9:8E:AF:FC:66:E3:41:CC:70:98:4F:CE:D8:23:78:83:49:C9 Certificate issuer: /CN=A91D21E3/serialNumber=34B1F98EAFFC66E341CC70984FCED823788349C9 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NLH5jq_8ZuNBzHCYT87YI3iDSck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.mft Manifest number: 0117 Signing time: Sat 23 Nov 2024 03:00:33 +0000 Manifest this update: Sat 23 Nov 2024 03:00:32 +0000 Manifest next update: Sat 30 Nov 2024 03:00:32 +0000 Files and hashes: 1: NLH5jq_8ZuNBzHCYT87YI3iDSck.crl (hash: FxHaw0zUt9vj105ZgBLcnwpVXkGgDufrc6wIekXGy4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.crl rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NLH5jq_8ZuNBzHCYT87YI3iDSck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D21E3/serialNumber=34B1F98EAFFC66E341CC70984FCED823788349C9 Validity Not Before: Nov 23 03:00:32 2024 GMT Not After : Nov 30 03:00:32 2024 GMT Subject: CN=67414550-b7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:3a:4c:b1:9f:1b:46:15:fe:02:60:99:d9: bd:7d:bc:c2:d2:65:9b:bf:15:c3:6f:af:84:a7:8b: 50:65:91:94:6b:87:32:65:76:be:da:4a:79:33:23: e2:f4:a8:4f:5c:e6:81:95:97:22:9e:75:63:0c:85: 8d:bf:18:85:53:ea:f8:1d:65:4e:bf:eb:db:55:06: e5:dd:7f:57:1f:ba:87:39:9b:4f:33:6b:4e:09:28: cb:de:a8:0e:27:72:1e:c8:b8:7e:d8:c0:eb:8e:db: 03:49:5e:e7:b7:05:0d:69:ee:ba:aa:fe:1b:69:7a: ee:b3:49:66:bd:33:f5:27:ee:fc:70:5b:ac:78:0c: 2f:9b:c8:38:4b:6d:35:20:06:2b:6a:77:20:80:d5: 95:d6:83:bc:c7:05:78:c9:dd:59:eb:2d:a3:7b:b1: 4a:66:3c:eb:84:46:c1:77:97:86:0b:0d:e7:10:a1: b3:bc:ea:4b:96:bc:b8:ce:13:81:4c:61:e6:21:aa: 87:bf:9d:31:0f:46:53:d3:b9:8d:d0:2c:d4:52:50: 2f:79:7d:ef:69:d9:00:92:b7:80:64:5d:c5:d5:de: 2b:42:03:a2:f0:74:4a:df:8e:6b:b3:8e:de:66:4d: eb:b0:1a:e6:ba:3b:6a:c3:4f:a3:8e:9e:0a:fe:d0: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AA:CE:D5:C5:92:46:38:F5:BE:A2:F2:31:CF:AA:B7:73:99:3C:87 X509v3 Authority Key Identifier: keyid:34:B1:F9:8E:AF:FC:66:E3:41:CC:70:98:4F:CE:D8:23:78:83:49:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NLH5jq_8ZuNBzHCYT87YI3iDSck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D21E3/EC3B1DA4FB2B11EDA8299B4DC4F9AE02/NLH5jq_8ZuNBzHCYT87YI3iDSck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:4b:e8:9e:2b:a2:06:9f:32:a0:37:77:1c:ed:9f:ef:65:a6: c3:2b:aa:c8:d6:65:20:80:7a:78:b4:21:4c:9a:10:f2:2c:a1: 7e:af:7c:7b:25:a9:cb:58:3f:b0:f8:a4:45:ce:ee:3f:13:53: 99:40:c3:3c:b2:2e:c4:c6:ae:dc:68:58:31:ec:dd:9b:1c:dd: 55:4e:ca:de:02:4d:b1:d7:74:03:eb:5a:54:fc:cd:87:f2:5b: 87:54:bf:1e:11:e8:d0:b4:c9:11:40:74:aa:92:26:b2:47:8f: 1e:52:f2:8f:39:4a:a9:8b:58:52:96:72:7c:79:90:44:0e:fc: 6b:51:0f:4d:c6:be:52:a9:3b:22:2b:3b:3b:97:1e:74:17:42: b8:77:26:ef:5f:7f:e3:42:c4:35:c3:44:ca:d8:76:3a:a1:eb: 16:12:dc:fa:25:38:3b:b9:23:3b:5e:99:e3:fb:94:2e:d5:8d: ae:9d:3c:68:5b:6f:02:bd:de:c4:0c:49:31:9a:c1:b3:dc:8a: e5:9b:18:b2:41:f8:48:bf:15:3f:4c:71:cf:c5:03:02:5e:83: f0:f1:eb:ca:77:e1:3c:2f:90:b4:7c:3b:2e:aa:bd:12:83:97: 5c:05:e9:4d:21:5e:65:bf:71:b1:69:db:3a:22:77:a6:f6:ce: 33:b9:50:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIxRTMxMTAvBgNVBAUTKDM0QjFGOThFQUZGQzY2RTM0MUNDNzA5ODRGQ0VEODIz Nzg4MzQ5QzkwHhcNMjQxMTIzMDMwMDMyWhcNMjQxMTMwMDMwMDMyWjAYMRYwFAYD VQQDEw02NzQxNDU1MC1iN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjU6TLGfG0YV/gJgmdm9fbzC0mWbvxXDb6+Ep4tQZZGUa4cyZXa+2kp5MyPi 9KhPXOaBlZcinnVjDIWNvxiFU+r4HWVOv+vbVQbl3X9XH7qHOZtPM2tOCSjL3qgO J3IeyLh+2MDrjtsDSV7ntwUNae66qv4baXrus0lmvTP1J+78cFuseAwvm8g4S201 IAYrancggNWV1oO8xwV4yd1Z6y2je7FKZjzrhEbBd5eGCw3nEKGzvOpLlry4zhOB TGHmIaqHv50xD0ZT07mN0CzUUlAveX3vadkAkreAZF3F1d4rQgOi8HRK345rs47e Zk3rsBrmujtqw0+jjp4K/tDEJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+qztXF kkY49b6i8jHPqrdzmTyHMB8GA1UdIwQYMBaAFDSx+Y6v/GbjQcxwmE/O2CN4g0nJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjFFMy9FQzNCMURBNEZC MkIxMUVEQTgyOTlCNERDNEY5QUUwMi9OTEg1anFfOFp1TkJ6SENZVDg3WUkzaURT Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05MSDVqcV84WnVOQnpIQ1lUODdZSTNpRFNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjFFMy9FQzNCMURBNEZCMkIxMUVEQTgyOTlCNERDNEY5QUUwMi9OTEg1anFfOFp1 TkJ6SENZVDg3WUkzaURTY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRS+ieK6IGnzKgN3cc7Z/vZabDK6rI1mUggHp4tCFMmhDyLKF+r3x7 JanLWD+w+KRFzu4/E1OZQMM8si7Exq7caFgx7N2bHN1VTsreAk2x13QD61pU/M2H 8luHVL8eEejQtMkRQHSqkiayR48eUvKPOUqpi1hSlnJ8eZBEDvxrUQ9Nxr5SqTsi Kzs7lx50F0K4dybvX3/jQsQ1w0TK2HY6oesWEtz6JTg7uSM7Xpnj+5Qu1Y2unTxo W28Cvd7EDEkxmsGz3IrlmxiyQfhIvxU/THHPxQMCXoPw8evKd+E8L5C0fDsuqr0S g5dcBelNIV5lv3Gxads6Inem9s4zuVBb -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org