$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: 9c/cqmMS2fSnnwV17MBqL+hIw6ybuYcYpmLrONF6B0k= Subject key identifier: 40:4E:AC:51:DF:9B:03:C3:EA:D4:3B:17:A2:3E:83:B5:6F:0C:AB:9D Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 1E81 Signing time: Fri 22 Nov 2024 16:06:25 +0000 Manifest this update: Fri 22 Nov 2024 16:06:24 +0000 Manifest next update: Fri 29 Nov 2024 16:06:24 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: LNq+fUCwikd4/enVk0krpUQjoWQYqB0lsxJnPYzqdJI=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: PL+MdMpe7QWO0nJJsSHMp4qiIEiznAficRKoTm9IDLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: Nov 22 16:06:24 2024 GMT Not After : Nov 29 16:06:24 2024 GMT Subject: CN=6740ac01-1dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:a3:7f:f6:70:67:dc:d4:3a:37:4d:0d:98: 1e:62:8c:3a:bf:f6:dc:0c:8d:8e:27:72:ce:7a:d8: 17:33:34:d0:d6:8a:48:9f:f7:e8:7a:8c:34:2e:d6: 16:42:7f:f7:0d:86:dd:1e:5c:4b:64:de:a0:81:bd: 4b:21:46:a1:37:85:09:14:8e:68:da:f7:f2:3e:42: fa:a6:50:a0:d0:e3:ad:3e:cd:a0:87:75:42:1c:c0: 51:71:9f:4a:8c:6c:57:14:2c:a7:d1:14:64:9b:c1: 06:67:b5:88:08:84:45:b1:d5:47:77:c9:eb:94:1a: c3:5e:45:c3:6a:b4:dd:1a:97:15:54:8e:e0:a7:94: c4:bd:a1:a7:74:3a:2d:69:d0:0b:9a:fc:3d:5e:f3: 60:31:4c:18:72:ef:9f:57:8c:9e:31:b9:e2:59:b9: f5:5e:4a:45:9b:5e:b3:ee:a3:e1:d5:8d:e8:3a:1b: a1:d1:b6:3e:40:57:1c:9a:c4:89:39:a1:04:cc:f3: 49:f7:f4:55:16:07:7e:35:63:26:72:f8:37:96:84: 6c:dd:19:04:7d:a9:6a:7c:0f:1c:1f:4e:55:fa:88: ad:db:71:7d:d8:a6:f7:18:52:2a:7b:4d:44:25:1b: 7f:47:40:19:d5:49:9f:0e:0e:3b:14:76:cd:a4:ce: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4E:AC:51:DF:9B:03:C3:EA:D4:3B:17:A2:3E:83:B5:6F:0C:AB:9D X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4d:85:e7:f8:73:d7:b6:6c:8e:65:eb:00:52:41:df:8d:b8: c6:fe:59:2c:73:f7:a3:dd:57:9e:64:4f:c8:36:8f:4a:b8:b7: 0f:0b:a0:c7:8e:01:06:bc:6e:5d:73:ad:8d:1a:de:3e:6a:f6: 63:89:5b:89:e1:4c:a3:1f:e6:a8:d9:21:e3:ed:82:99:c9:d3: cb:1c:26:b4:d8:d8:7f:ba:05:7a:d9:e5:da:39:04:d2:ef:e5: c2:ce:9c:b4:e2:55:7f:dc:02:1a:26:57:c1:fe:61:da:13:36: 50:5c:dc:3e:ce:43:68:7d:3e:c0:0d:0a:03:55:86:cc:5f:42: 02:34:66:c9:f1:ed:0d:65:d6:75:3d:fa:57:5f:2d:fd:63:df: ce:3e:f1:13:bf:cf:0c:06:ed:38:1a:5e:b3:f2:cf:92:34:f6: d1:91:a6:e4:da:e3:f6:50:f7:ec:d2:dd:f5:ce:14:4f:40:44: 39:05:50:d4:36:ac:e7:f9:e6:4f:48:74:8e:64:7b:1c:4c:47: 84:4e:a4:b1:36:d3:a1:b7:52:44:92:d3:23:ea:e6:ed:c7:61: 46:2e:ed:e5:19:e7:40:be:96:93:08:b8:2b:c7:37:58:e8:83: 57:8b:5b:1d:6c:e9:e0:12:4b:12:00:0a:b8:3f:41:cf:9d:1c: 54:aa:ad:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjQxMTIyMTYwNjI0WhcNMjQxMTI5MTYwNjI0WjAYMRYwFAYD VQQDEw02NzQwYWMwMS0xZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs46jf/ZwZ9zUOjdNDZgeYow6v/bcDI2OJ3LOetgXMzTQ1opIn/foeow0LtYW Qn/3DYbdHlxLZN6ggb1LIUahN4UJFI5o2vfyPkL6plCg0OOtPs2gh3VCHMBRcZ9K jGxXFCyn0RRkm8EGZ7WICIRFsdVHd8nrlBrDXkXDarTdGpcVVI7gp5TEvaGndDot adALmvw9XvNgMUwYcu+fV4yeMbniWbn1XkpFm16z7qPh1Y3oOhuh0bY+QFccmsSJ OaEEzPNJ9/RVFgd+NWMmcvg3loRs3RkEfalqfA8cH05V+oit23F92Kb3GFIqe01E JRt/R0AZ1UmfDg47FHbNpM4wGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBOrFHf mwPD6tQ7F6I+g7VvDKudMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+TYXn+HPXtmyOZesAUkHfjbjG/lksc/ej3VeeZE/INo9KuLcPC6DH jgEGvG5dc62NGt4+avZjiVuJ4UyjH+ao2SHj7YKZydPLHCa02Nh/ugV62eXaOQTS 7+XCzpy04lV/3AIaJlfB/mHaEzZQXNw+zkNofT7ADQoDVYbMX0ICNGbJ8e0NZdZ1 PfpXXy39Y9/OPvETv88MBu04Gl6z8s+SNPbRkabk2uP2UPfs0t31zhRPQEQ5BVDU Nqzn+eZPSHSOZHscTEeETqSxNtOht1JEktMj6ubtx2FGLu3lGedAvpaTCLgrxzdY 6INXi1sdbOngEksSAAq4P0HPnRxUqq3B -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org