$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: 9h+FC+RRsl89fK55jI0wkmMRGXIHmNgtNl4ViAEYX6c= Subject key identifier: 24:B7:C8:9F:A5:B3:72:B3:03:E3:4F:29:05:79:27:83:00:AE:58:25 Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 0520 Signing time: Fri 22 Nov 2024 23:07:14 +0000 Manifest this update: Fri 22 Nov 2024 23:07:14 +0000 Manifest next update: Fri 29 Nov 2024 23:07:14 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: iGYSSqi5bMJuThk+uy7KIr1FBNaaBYFI7Og6C0Igieo=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: FpiXZKAhTjkDCch/pIRU9MHgJD8fPUreDGZSqo9JNCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Nov 22 23:07:14 2024 GMT Not After : Nov 29 23:07:14 2024 GMT Subject: CN=67410ea2-3530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:b1:43:b4:76:f3:e5:84:8f:3c:95:28:5b: 7a:67:3d:41:de:3f:75:de:d2:83:92:a2:89:1e:37: d9:84:0d:26:c6:b7:eb:22:8e:55:75:cd:2d:b1:50: bb:fa:4f:96:02:92:e2:45:b9:49:d1:e4:83:f4:06: 9f:50:cf:6c:dc:17:ae:2c:69:6b:dc:a4:72:d1:ac: ac:42:84:72:35:dc:6b:a8:45:13:51:6c:c5:80:7f: f2:52:44:3e:8a:11:de:db:5b:10:e4:53:a0:7b:cf: 7a:ae:08:14:62:bb:97:09:1f:4b:e6:8e:c3:4f:8b: 31:c1:fb:df:e9:87:2b:35:6c:41:1b:56:6a:e7:34: 53:ed:6f:d1:14:62:77:67:40:5a:d5:73:0c:d5:fd: c5:69:be:06:2a:a9:09:0a:5c:cb:2d:bb:61:12:35: 15:3a:f9:44:8e:22:78:a9:25:77:73:51:02:81:5d: 4b:3d:d3:c9:49:25:8f:28:05:f7:26:7b:98:20:b7: 5c:e3:81:09:d2:37:76:3d:9a:7a:88:aa:5b:4f:45: c3:0f:cd:4a:4c:bc:cb:08:0c:15:a8:08:55:22:2f: eb:73:ab:a2:09:ee:0f:f9:e8:a5:e0:f6:12:47:76: c9:f2:66:d5:da:9a:2e:77:78:3d:d5:8a:1b:8b:3a: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B7:C8:9F:A5:B3:72:B3:03:E3:4F:29:05:79:27:83:00:AE:58:25 X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:de:31:af:8b:c1:51:7a:4e:08:8f:73:a6:9c:fb:06:eb:e2: a6:56:a6:c9:05:a9:90:2d:b1:f0:62:c6:9a:f7:61:2d:72:63: 53:94:86:66:df:27:99:fb:a9:31:76:79:41:ec:1a:8c:07:2a: e7:45:3c:68:1f:e8:12:35:81:28:7d:96:af:af:65:0b:71:2d: 6a:7f:b9:6e:54:c4:61:eb:da:a7:0e:26:2d:da:df:93:06:f7: 46:7b:d6:46:2b:0a:18:36:69:92:ff:01:28:d4:87:ee:78:6c: b9:98:e8:ff:f9:af:e6:1b:d8:c8:07:80:dc:a0:42:13:a5:af: d3:10:d1:e8:b6:f6:1e:65:d5:47:92:6b:da:b9:a6:ca:96:24: 7b:ed:41:29:3e:47:4b:83:94:b8:23:2c:3a:86:cd:62:e6:31: 4b:2a:25:cc:f8:49:c0:50:5c:6d:5f:cf:9f:8d:be:2e:06:e4: 60:10:81:68:91:55:f3:41:bd:38:d1:d5:d3:f3:a8:a0:ed:e5: df:72:30:99:b9:81:79:98:ac:0d:bc:54:cf:f4:e3:3b:ac:a8: 68:3c:8b:8c:27:16:05:9f:bf:07:ea:4d:fa:ed:1d:92:8a:50: 7b:37:e8:2d:87:0d:9a:99:c1:24:17:dd:95:4d:8c:8d:72:a1: 68:d4:ad:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjQxMTIyMjMwNzE0WhcNMjQxMTI5MjMwNzE0WjAYMRYwFAYD VQQDEw02NzQxMGVhMi0zNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XCxQ7R28+WEjzyVKFt6Zz1B3j913tKDkqKJHjfZhA0mxrfrIo5Vdc0tsVC7 +k+WApLiRblJ0eSD9AafUM9s3BeuLGlr3KRy0aysQoRyNdxrqEUTUWzFgH/yUkQ+ ihHe21sQ5FOge896rggUYruXCR9L5o7DT4sxwfvf6YcrNWxBG1Zq5zRT7W/RFGJ3 Z0Ba1XMM1f3Fab4GKqkJClzLLbthEjUVOvlEjiJ4qSV3c1ECgV1LPdPJSSWPKAX3 JnuYILdc44EJ0jd2PZp6iKpbT0XDD81KTLzLCAwVqAhVIi/rc6uiCe4P+eil4PYS R3bJ8mbV2poud3g91YobizrvNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCS3yJ+l s3KzA+NPKQV5J4MArlglMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT3jGvi8FRek4Ij3OmnPsG6+KmVqbJBamQLbHwYsaa92EtcmNTlIZm 3yeZ+6kxdnlB7BqMByrnRTxoH+gSNYEofZavr2ULcS1qf7luVMRh69qnDiYt2t+T BvdGe9ZGKwoYNmmS/wEo1IfueGy5mOj/+a/mG9jIB4DcoEITpa/TENHotvYeZdVH kmvauabKliR77UEpPkdLg5S4Iyw6hs1i5jFLKiXM+EnAUFxtX8+fjb4uBuRgEIFo kVXzQb040dXT86ig7eXfcjCZuYF5mKwNvFTP9OM7rKhoPIuMJxYFn78H6k367R2S ilB7N+gthw2amcEkF92VTYyNcqFo1K0X -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:31 2024 by rpki-client on console-fra.rpki-client.org