$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json) Hash identifier: HqyrRxKFf2utLmW7s2ca2sR8qR8DPyJ+xI8pzQTIMQc= Subject key identifier: C1:38:F1:B4:23:B9:2D:8C:8D:FC:7D:3F:16:AA:38:30:43:5B:9D:97 Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft Manifest number: 50 Signing time: Sat 23 Nov 2024 05:10:17 +0000 Manifest this update: Sat 23 Nov 2024 05:10:16 +0000 Manifest next update: Sat 30 Nov 2024 05:10:16 +0000 Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: 44+TK/ayC5QHcojBz1UPqtMgDgWUDvbw4PsEkLLY/9k=) 2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: qL2lFwzQsNJvHM1X7F1IcBH5Nn+NnL8ACspFUTuHDlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Validity Not Before: Nov 23 05:10:16 2024 GMT Not After : Nov 30 05:10:16 2024 GMT Subject: CN=674163b8-fc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:40:5a:6b:e7:5a:50:d5:0e:44:30:a2:8e: c5:0a:da:f1:0f:81:ee:a6:69:61:0e:16:90:24:6f: b3:a9:21:e1:7c:1f:f8:4d:07:87:1b:31:ff:9c:9e: 62:f6:f6:b4:69:97:90:8a:ff:bc:17:11:5f:ce:07: df:34:22:01:a3:a1:55:80:7a:4b:8a:d9:3e:56:33: 76:fd:f8:48:c2:ee:d5:31:01:cf:74:d2:13:3a:e8: cc:85:47:26:a9:22:d8:29:cd:33:2e:71:84:d0:92: 6b:f6:91:a8:93:e4:8e:5c:9b:e9:7f:99:68:aa:15: f9:21:30:7d:0e:23:a0:67:56:d0:46:04:c2:c7:b4: 30:75:aa:06:ed:06:4d:a5:ca:94:81:81:7f:39:43: 8c:d3:d1:45:7b:1d:88:4d:eb:e3:92:51:ed:42:da: 4d:a6:b9:40:47:de:8f:ce:62:da:93:a9:b6:7f:37: ca:b1:48:25:67:30:3e:d7:eb:27:7a:ef:eb:e3:a3: e2:89:43:2d:8b:99:31:61:2e:01:1f:4b:68:d4:61: c5:3d:d7:60:07:15:24:ff:c9:b9:0c:cb:af:48:b0: 09:94:68:c1:80:ba:4f:6a:3a:14:f9:f2:a7:5f:79: 14:70:41:c0:56:b3:69:ef:f3:61:10:9c:4c:6f:e9: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:38:F1:B4:23:B9:2D:8C:8D:FC:7D:3F:16:AA:38:30:43:5B:9D:97 X509v3 Authority Key Identifier: keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e1:b1:65:03:51:99:94:f4:40:91:53:4e:b7:71:a4:d1:06: 84:ea:1f:6f:db:1b:4b:58:fa:19:47:3c:a3:bf:04:9f:b9:1f: 56:77:c1:37:2f:9f:4c:f8:29:24:5d:56:b6:c6:5b:fa:f8:d1: db:06:95:a9:01:2b:8c:e2:6f:3f:55:29:55:83:61:d2:1a:bc: 51:29:54:7a:f2:07:87:d8:bc:38:54:fa:ed:f6:57:16:b3:d7: 72:ef:53:04:fa:bb:a2:6b:88:f9:d9:69:f8:2a:54:22:0c:01: fc:d4:55:ce:90:db:13:ac:9f:15:25:98:8a:89:e4:a9:a1:51: f3:73:e9:57:f5:9a:c1:85:24:fe:12:79:3e:12:bd:92:15:4b: b0:72:59:31:63:c6:85:c8:47:ec:7a:0b:9b:a1:98:5c:ff:0c: 69:26:eb:d6:a8:34:6c:1e:c3:41:98:75:6b:f3:bb:24:fd:c2: 27:8b:d6:79:24:a4:1d:8b:17:f6:00:b3:c1:c8:95:11:e8:7f: b6:c8:e8:3e:9a:cc:89:b3:61:d0:d2:1b:4b:66:4d:88:42:d3: cd:26:c9:0e:48:13:28:6a:b9:4d:e0:0f:0f:1c:86:0c:60:8d: 8e:54:fd:02:bc:87:d5:1f:b0:8b:bd:f2:69:c9:28:44:92:84: 35:c8:0a:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTNFNzExMC8GA1UEBRMoOUQ2Qzc1MENFMDM5M0MyMDBBQkY4QTY3MUMxRjJDMjA2 QTBDQjQ3MTAeFw0yNDExMjMwNTEwMTZaFw0yNDExMzAwNTEwMTZaMBgxFjAUBgNV BAMTDTY3NDE2M2I4LWZjNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQr0Baa+daUNUORDCijsUK2vEPge6maWEOFpAkb7OpIeF8H/hNB4cbMf+cnmL2 9rRpl5CK/7wXEV/OB980IgGjoVWAekuK2T5WM3b9+EjC7tUxAc900hM66MyFRyap ItgpzTMucYTQkmv2kaiT5I5cm+l/mWiqFfkhMH0OI6BnVtBGBMLHtDB1qgbtBk2l ypSBgX85Q4zT0UV7HYhN6+OSUe1C2k2muUBH3o/OYtqTqbZ/N8qxSCVnMD7X6yd6 7+vjo+KJQy2LmTFhLgEfS2jUYcU912AHFST/ybkMy69IsAmUaMGAuk9qOhT58qdf eRRwQcBWs2nv82EQnExv6aWfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwTjxtCO5 LYyN/H0/Fqo4MENbnZcwHwYDVR0jBBgwFoAUnWx1DOA5PCAKv4pnHB8sIGoMtHEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExM0U3LzlEM0EyMDAwMkY1 NjExRUZBMjNFNUEyM0M0RjlBRTAyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRI RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbld4MURPQTVQQ0FLdjRwbkhCOHNJR29NdEhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx M0U3LzlEM0EyMDAwMkY1NjExRUZBMjNFNUEyM0M0RjlBRTAyL25XeDFET0E1UENB S3Y0cG5IQjhzSUdvTXRIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHXhsWUDUZmU9ECRU063caTRBoTqH2/bG0tY+hlHPKO/BJ+5H1Z3wTcv n0z4KSRdVrbGW/r40dsGlakBK4zibz9VKVWDYdIavFEpVHryB4fYvDhU+u32Vxaz 13LvUwT6u6JriPnZafgqVCIMAfzUVc6Q2xOsnxUlmIqJ5KmhUfNz6Vf1msGFJP4S eT4SvZIVS7ByWTFjxoXIR+x6C5uhmFz/DGkm69aoNGwew0GYdWvzuyT9wieL1nkk pB2LF/YAs8HIlRHof7bI6D6azImzYdDSG0tmTYhC080myQ5IEyhquU3gDw8chgxg jY5U/QK8h9UfsIu98mnJKESShDXICuc= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:21 2024 by rpki-client on console-fra.rpki-client.org