$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft File: nLpHShuO1MGFZBkQLgnuXvUcSaU.mft (raw, json) Hash identifier: iqKGLv92WEDVtZI5BFXNOEoGMZVmr0zKlpgjwomYzeA= Subject key identifier: 65:43:3B:AB:E3:41:FF:E2:46:1C:EB:26:2B:5F:13:4A:A0:69:BF:87 Authority key identifier: 9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 Certificate issuer: /CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft Manifest number: 04E9 Signing time: Fri 22 Nov 2024 23:18:00 +0000 Manifest this update: Fri 22 Nov 2024 23:17:59 +0000 Manifest next update: Fri 29 Nov 2024 23:17:59 +0000 Files and hashes: 1: nLpHShuO1MGFZBkQLgnuXvUcSaU.crl (hash: IWv7aLV+jWOQr+eVzfzLnI/VwCCDhjlDloZ8xX9kZIQ=) 2: F1C60FA653DC11EC90927C4DC4F9AE02.roa (hash: 9qbFBS3HM4vcPosn8OSliCwGfWG2+6sVIf90uwZ9kCk=) 3: 5C5F31B09A2A11ECAEE8C819C4F9AE02.roa (hash: m6M1aJQP4A3gQ02xCkEHxQI8XaXpDculDx+d/2LUfO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B75/serialNumber=9CBA474A1B8ED4C1856419102E09EE5EF51C49A5 Validity Not Before: Nov 22 23:17:59 2024 GMT Not After : Nov 29 23:17:59 2024 GMT Subject: CN=67411127-bd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:d2:63:f9:a2:aa:9c:2c:74:6a:7d:ed:1f: 67:1d:d3:df:bf:ee:e7:ca:20:f8:0f:bf:11:b6:aa: 79:34:50:b4:22:a1:d8:5a:f2:8f:8d:a9:81:8c:ce: fc:6c:8b:c1:a0:40:4e:5d:86:f6:d9:0f:7a:4a:c4: e1:61:60:73:58:10:a9:89:15:e1:0d:a3:96:05:b9: b5:a4:d1:4e:7a:a9:aa:b5:75:a4:8d:3a:ef:be:69: a2:0d:2f:a1:b2:63:ab:b6:f5:5e:a9:5c:6a:f2:2c: df:e9:5a:5a:87:bd:24:75:ae:f8:56:cd:ee:d5:78: b4:b7:c0:4f:18:38:4f:41:0f:80:00:cf:f0:52:64: 62:7b:ee:c2:e1:bd:b8:fd:6a:66:b2:77:21:80:af: 8c:f8:67:15:26:c8:53:07:b4:7a:d7:70:e5:db:da: 29:00:6f:b1:42:ba:d0:d1:21:b0:2e:9c:47:17:c9: 31:ac:f2:6d:02:60:e0:23:71:11:53:f0:6c:64:3b: aa:b9:8d:d3:d7:a4:9a:92:0c:88:73:53:79:c7:3e: 70:21:48:12:fd:f5:f1:60:d2:24:f5:47:5f:fc:df: ac:7f:55:f0:16:34:38:3e:67:64:e7:2b:90:51:9b: aa:a3:e2:c9:86:d0:1f:27:b3:38:61:68:61:6c:8e: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:43:3B:AB:E3:41:FF:E2:46:1C:EB:26:2B:5F:13:4A:A0:69:BF:87 X509v3 Authority Key Identifier: keyid:9C:BA:47:4A:1B:8E:D4:C1:85:64:19:10:2E:09:EE:5E:F5:1C:49:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLpHShuO1MGFZBkQLgnuXvUcSaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B75/9C00202EF48811EBA8DB7D0CC4F9AE02/nLpHShuO1MGFZBkQLgnuXvUcSaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c1:9e:1e:c5:ae:f4:22:ba:e4:07:78:64:20:a9:43:25:d5: 14:c7:e6:f1:80:83:89:b7:97:b9:fa:d4:50:a9:9e:11:e8:82: 2a:94:d9:3d:3e:18:e4:9c:8c:e4:27:0f:7c:34:e9:5f:f5:42: 74:3b:9b:c6:8f:74:30:56:cc:da:d2:35:a5:e3:b6:ea:86:80: 43:0c:b0:7d:05:40:be:0b:f6:49:49:d7:df:11:af:38:30:85: 0c:9c:a7:68:94:db:3b:96:53:a9:5c:2d:9b:de:3a:4d:83:01: a5:f4:6e:92:b7:72:48:70:9b:cf:ec:31:43:ff:8d:69:1a:43: d3:44:f8:d4:ff:c8:45:99:15:67:84:06:36:be:a6:a4:d1:8d: 06:d4:47:a8:56:60:eb:f6:8e:b5:b3:3c:86:34:ff:28:e4:ee: ac:51:39:97:02:68:1c:be:b9:52:b5:e2:dd:d5:79:6a:ca:33: c0:fe:9d:e9:f4:2a:0b:6d:33:a6:82:a4:e1:d4:2b:df:9b:cf: 15:8d:74:15:0f:f3:21:2f:87:7a:a5:e4:22:39:08:bc:19:80: a0:51:0e:7a:83:cb:57:3f:be:37:a9:22:e7:03:1c:5b:4b:53: 48:dc:2b:a0:18:13:5f:0e:cf:a2:ce:29:42:cd:7b:0d:fd:e3: 34:7e:f6:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCNzUxMTAvBgNVBAUTKDlDQkE0NzRBMUI4RUQ0QzE4NTY0MTkxMDJFMDlFRTVF RjUxQzQ5QTUwHhcNMjQxMTIyMjMxNzU5WhcNMjQxMTI5MjMxNzU5WjAYMRYwFAYD VQQDEw02NzQxMTEyNy1iZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WTSY/miqpwsdGp97R9nHdPfv+7nyiD4D78Rtqp5NFC0IqHYWvKPjamBjM78 bIvBoEBOXYb22Q96SsThYWBzWBCpiRXhDaOWBbm1pNFOeqmqtXWkjTrvvmmiDS+h smOrtvVeqVxq8izf6Vpah70kda74Vs3u1Xi0t8BPGDhPQQ+AAM/wUmRie+7C4b24 /WpmsnchgK+M+GcVJshTB7R613Dl29opAG+xQrrQ0SGwLpxHF8kxrPJtAmDgI3ER U/BsZDuquY3T16SakgyIc1N5xz5wIUgS/fXxYNIk9Udf/N+sf1XwFjQ4Pmdk5yuQ UZuqo+LJhtAfJ7M4YWhhbI6YAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVDO6vj Qf/iRhzrJitfE0qgab+HMB8GA1UdIwQYMBaAFJy6R0objtTBhWQZEC4J7l71HEml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUI3NS85QzAwMjAyRUY0 ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFNR0ZaQmtRTGdudVh2VWNT YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25McEhTaHVPMU1HRlpCa1FMZ251WHZVY1NhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUI3NS85QzAwMjAyRUY0ODgxMUVCQThEQjdEMENDNEY5QUUwMi9uTHBIU2h1TzFN R0ZaQmtRTGdudVh2VWNTYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXwZ4exa70IrrkB3hkIKlDJdUUx+bxgIOJt5e5+tRQqZ4R6IIqlNk9 PhjknIzkJw98NOlf9UJ0O5vGj3QwVsza0jWl47bqhoBDDLB9BUC+C/ZJSdffEa84 MIUMnKdolNs7llOpXC2b3jpNgwGl9G6St3JIcJvP7DFD/41pGkPTRPjU/8hFmRVn hAY2vqak0Y0G1EeoVmDr9o61szyGNP8o5O6sUTmXAmgcvrlSteLd1XlqyjPA/p3p 9CoLbTOmgqTh1Cvfm88VjXQVD/MhL4d6peQiOQi8GYCgUQ56g8tXP743qSLnAxxb S1NI3CugGBNfDs+izilCzXsN/eM0fvZV -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org