$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: ytnKK6+sMl8JYVubivZPFRCzCo5HHxe5zkD09mx9BeY= Subject key identifier: F1:63:8B:CB:17:82:8E:7D:78:A8:5A:A6:33:B0:3D:DF:03:26:7B:48 Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 0267 Signing time: Sat 23 Nov 2024 01:15:08 +0000 Manifest this update: Sat 23 Nov 2024 01:15:07 +0000 Manifest next update: Sat 30 Nov 2024 01:15:07 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: Uq4cK/NiTt3WG+eVQfAkKPTlZbJ1dGSL/jznRlBAzr0=) 2: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: Pd8L7s4R6wRwdLV9+7BZMCdFVQ0DCoXNeo8OuEc6g0M=) 3: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: R6LgYLeeG431V+MNRMFG0A1SQaUDq0hWnr4R0asmc6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: Nov 23 01:15:07 2024 GMT Not After : Nov 30 01:15:07 2024 GMT Subject: CN=67412c9c-f3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:dc:ac:11:71:0d:e4:e5:1a:24:b4:d0:0d: d6:c7:b7:cd:af:61:fb:4a:69:4d:48:bb:7c:bb:61: 3b:7b:f5:80:d8:19:4c:00:0b:8e:5a:2a:ef:03:3b: 5c:38:f3:2c:24:d7:1c:21:4f:bf:27:cd:dc:4f:6e: 10:36:ee:b8:8a:34:fb:16:bf:58:85:41:19:26:f9: 94:96:7d:95:a1:c0:b8:ab:5f:30:7c:3a:89:24:9e: 80:81:6a:44:3f:cb:7e:46:ec:7e:70:56:80:2e:dc: 72:f7:17:3e:67:50:62:00:be:29:f8:b0:a0:f2:a0: f0:20:1c:76:f8:02:05:2b:a9:a8:c1:99:f3:66:c5: 4e:aa:87:bc:43:db:7a:42:af:57:54:d4:b6:bf:70: 3a:3a:22:eb:54:52:dc:25:08:2f:79:2d:44:f9:e3: 8d:cd:02:ee:67:07:d1:8c:a7:36:9c:32:46:44:4f: 8c:7f:25:98:d2:5d:b1:8c:6c:9a:6c:7f:6e:3e:89: b5:36:10:2c:42:41:3d:70:f5:0d:c2:42:6c:ed:9e: 49:f1:3a:61:23:aa:3c:e6:fd:b6:19:3b:be:71:6d: a4:fe:8a:1a:4f:98:be:89:b4:6b:fd:d6:d0:b3:de: d6:c5:33:e9:99:b8:b6:9a:79:c4:0c:ae:4c:53:e2: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:63:8B:CB:17:82:8E:7D:78:A8:5A:A6:33:B0:3D:DF:03:26:7B:48 X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e3:24:33:fb:9e:08:81:35:5e:47:c2:e0:77:e5:fc:df:72: 02:68:1d:94:ce:ab:cd:06:e7:7e:ec:e6:dd:cb:9a:86:4f:29: 17:59:32:91:07:0a:98:37:3b:0b:b8:62:36:d4:c8:7e:09:4d: ce:12:45:c6:43:01:7f:33:bb:92:c4:38:19:49:3a:d7:3a:2d: ed:b0:cd:8a:23:a5:36:e8:7e:0f:8e:d3:2d:07:37:55:6c:5a: ac:19:6f:54:f2:8a:23:bd:9e:4e:ca:56:70:7a:13:79:01:e5: 3b:55:d2:be:84:5e:18:dd:ea:cc:52:89:1e:e1:f0:bf:8c:90: a0:32:88:3c:ad:77:3f:25:13:b3:f0:38:73:dd:26:56:3b:ae: 37:8d:8b:10:5d:cd:b1:d7:44:fa:fa:d3:d7:65:8f:04:d6:0f: 6c:a4:4a:23:b4:9c:e5:59:45:b0:7f:4c:c4:f3:ec:58:a0:b4: 81:b0:08:45:8c:61:3e:b0:39:05:56:65:9a:73:f5:36:cf:91: e6:f8:d8:a0:1c:9b:64:98:9d:91:85:5b:0a:11:1d:30:71:c2: a5:c5:5e:ab:08:6e:f8:44:17:e0:d6:8c:16:fd:f0:86:b3:0e: 16:de:c5:85:69:27:8d:d7:3c:71:be:a0:49:c9:07:2a:db:7b: 52:b0:23:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjQxMTIzMDExNTA3WhcNMjQxMTMwMDExNTA3WjAYMRYwFAYD VQQDEw02NzQxMmM5Yy1mM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRDcrBFxDeTlGiS00A3Wx7fNr2H7SmlNSLt8u2E7e/WA2BlMAAuOWirvAztc OPMsJNccIU+/J83cT24QNu64ijT7Fr9YhUEZJvmUln2VocC4q18wfDqJJJ6AgWpE P8t+Rux+cFaALtxy9xc+Z1BiAL4p+LCg8qDwIBx2+AIFK6mowZnzZsVOqoe8Q9t6 Qq9XVNS2v3A6OiLrVFLcJQgveS1E+eONzQLuZwfRjKc2nDJGRE+MfyWY0l2xjGya bH9uPom1NhAsQkE9cPUNwkJs7Z5J8TphI6o85v22GTu+cW2k/ooaT5i+ibRr/dbQ s97WxTPpmbi2mnnEDK5MU+K58wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFji8sX go59eKhapjOwPd8DJntIMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+4yQz+54IgTVeR8Lgd+X833ICaB2UzqvNBud+7Obdy5qGTykXWTKR BwqYNzsLuGI21Mh+CU3OEkXGQwF/M7uSxDgZSTrXOi3tsM2KI6U26H4PjtMtBzdV bFqsGW9U8oojvZ5OylZwehN5AeU7VdK+hF4Y3erMUoke4fC/jJCgMog8rXc/JROz 8Dhz3SZWO643jYsQXc2x10T6+tPXZY8E1g9spEojtJzlWUWwf0zE8+xYoLSBsAhF jGE+sDkFVmWac/U2z5Hm+NigHJtkmJ2RhVsKER0wccKlxV6rCG74RBfg1owW/fCG sw4W3sWFaSeN1zxxvqBJyQcq23tSsCN5 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org