$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: Ju8H3qOWy2MbrOhX4F93jh9Fzk2R7YQn0btgZeP3OOw= Subject key identifier: 28:FF:45:BE:B0:CD:56:E2:92:86:55:05:BC:44:1B:67:EE:40:B4:E6 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: DD Signing time: Sat 23 Nov 2024 03:42:21 +0000 Manifest this update: Sat 23 Nov 2024 03:42:21 +0000 Manifest next update: Sat 30 Nov 2024 03:42:21 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: zyVYmnSrakwydt+78cGTbrvrJDcRikCXMPdAXEDqBDU=) 2: 51F4389061F911EE8421531BC4F9AE02.roa (hash: sa3M6eXx6AsBHJQnK8SmfQ3J47el8aUfFn1Bih7D6Ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Nov 23 03:42:21 2024 GMT Not After : Nov 30 03:42:21 2024 GMT Subject: CN=67414f1d-faa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:a8:9c:cb:57:82:f1:78:20:d1:86:07:4e: b8:a6:71:aa:e0:d0:74:da:80:10:35:0c:86:17:09: 6d:45:88:73:b9:4e:4c:ed:89:e0:57:41:b1:7e:0b: 4e:73:90:76:fa:6e:64:6b:ed:f3:00:f9:51:74:63: c8:a4:02:d6:9c:c6:35:56:a9:9d:10:50:97:63:33: f8:90:6a:53:52:82:fc:d6:db:2c:43:c4:7d:33:8e: 87:fe:66:71:41:be:e4:0b:bf:18:ed:42:4a:5e:4d: 9e:31:f0:ff:6a:be:f7:1a:82:82:ae:c3:21:e2:31: 5c:3a:da:09:7c:a3:78:1b:14:3c:87:65:bb:7b:32: 03:08:50:fb:f7:d7:9b:80:7c:29:76:75:14:f3:79: 48:87:17:6d:fc:64:25:24:17:6f:dd:e3:ae:1d:93: d0:c2:40:c8:17:3b:a6:b6:00:3e:f4:42:49:62:44: 08:a0:1a:8c:1e:5e:30:26:5a:42:db:77:fe:14:2f: 49:17:cf:9e:14:4a:47:1d:2b:12:64:e7:83:08:70: 40:03:00:c7:60:6d:29:fd:8f:35:32:97:a5:27:43: 96:22:08:2c:86:99:c5:4e:c8:a4:ab:dc:3b:83:fc: 5d:d5:cc:78:aa:18:83:86:9b:3f:ae:a3:98:27:cc: 1a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FF:45:BE:B0:CD:56:E2:92:86:55:05:BC:44:1B:67:EE:40:B4:E6 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c6:b8:fc:8e:1e:91:a3:58:2b:69:3f:03:b0:c4:fe:99:c8: cf:27:4d:45:6d:70:01:45:16:c9:f7:49:7f:c0:57:a0:3b:14: 7d:a8:98:e9:09:b4:03:7f:c6:ba:3a:55:3d:74:7f:36:2f:60: 8a:cb:a4:74:ec:af:41:07:2e:25:fd:3c:89:0f:6b:7c:75:38: a3:be:30:89:af:b4:6f:3e:f6:c3:be:b0:07:03:a2:48:c4:49: 67:a5:48:cf:e0:58:11:e9:40:98:d9:bb:78:a5:24:d3:22:18: 08:33:f7:51:ad:20:79:33:5a:ca:a8:04:e7:e0:aa:0f:96:9a: b3:ad:26:f5:f0:1d:a9:1e:c8:fb:2f:7f:ad:c6:af:cf:58:70: 85:2e:f4:81:06:ee:43:d3:6a:af:82:ba:a8:cb:2e:25:41:e5: 44:5c:d7:b2:38:85:0b:e2:09:d8:c3:44:81:80:f5:22:b3:d5: 03:ed:54:78:7c:b6:7f:d5:ff:8b:84:57:fa:28:08:d5:31:9d: 55:eb:69:a8:01:e4:f6:a2:80:17:60:9b:56:c5:aa:59:4d:a8: 5c:15:52:2b:d7:5f:5e:1f:48:b5:f3:5f:03:70:76:85:52:dc: ad:75:4c:7e:df:fc:a0:b7:2b:00:ba:7a:87:d6:a0:20:1a:bd: c2:0b:e5:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjQxMTIzMDM0MjIxWhcNMjQxMTMwMDM0MjIxWjAYMRYwFAYD VQQDEw02NzQxNGYxZC1mYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL6onMtXgvF4INGGB064pnGq4NB02oAQNQyGFwltRYhzuU5M7YngV0GxfgtO c5B2+m5ka+3zAPlRdGPIpALWnMY1VqmdEFCXYzP4kGpTUoL81tssQ8R9M46H/mZx Qb7kC78Y7UJKXk2eMfD/ar73GoKCrsMh4jFcOtoJfKN4GxQ8h2W7ezIDCFD799eb gHwpdnUU83lIhxdt/GQlJBdv3eOuHZPQwkDIFzumtgA+9EJJYkQIoBqMHl4wJlpC 23f+FC9JF8+eFEpHHSsSZOeDCHBAAwDHYG0p/Y81MpelJ0OWIggshpnFTsikq9w7 g/xd1cx4qhiDhps/rqOYJ8wa7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCj/Rb6w zVbikoZVBbxEG2fuQLTmMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfxrj8jh6Ro1graT8DsMT+mcjPJ01FbXABRRbJ90l/wFegOxR9qJjp CbQDf8a6OlU9dH82L2CKy6R07K9BBy4l/TyJD2t8dTijvjCJr7RvPvbDvrAHA6JI xElnpUjP4FgR6UCY2bt4pSTTIhgIM/dRrSB5M1rKqATn4KoPlpqzrSb18B2pHsj7 L3+txq/PWHCFLvSBBu5D02qvgrqoyy4lQeVEXNeyOIUL4gnYw0SBgPUis9UD7VR4 fLZ/1f+LhFf6KAjVMZ1V62moAeT2ooAXYJtWxapZTahcFVIr119eH0i1818DcHaF UtytdUx+3/ygtysAunqH1qAgGr3CC+UR -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org