$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: Hr8tA+z+ElrjH7UvvyPye2yXVIwQUY1UMaWLEOsyvPM= Subject key identifier: F2:3B:71:0A:04:DD:E9:EB:47:6B:77:C5:39:E8:20:F4:1E:F8:74:FE Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: 66 Signing time: Thu 21 Nov 2024 05:03:08 +0000 Manifest this update: Thu 21 Nov 2024 05:03:07 +0000 Manifest next update: Thu 28 Nov 2024 05:03:07 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: atabSu3XWwrhBM6Hbx6aijNI5WFvZV9HI+xshiVM8KI=) 2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: Bv5PsAPlsXup053SqORErIKD7VS3IvYR+Xy+2uhjxJk=) 3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: nHcMgveoHAwIifxJIS7PevVsDeef3KJmiIvXrtXar+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Nov 21 05:03:07 2024 GMT Not After : Nov 28 05:03:07 2024 GMT Subject: CN=673ebf0b-a858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:90:56:62:7e:3a:b8:4e:4d:48:4e:4d:66: ef:af:11:8d:1f:36:0a:d8:71:8d:f1:2d:e0:9e:af: 0d:69:10:6b:46:94:03:b0:2e:83:0e:22:9b:96:54: 0d:cc:82:53:ce:68:0d:5f:60:d5:a6:35:5d:cb:99: 7c:e4:13:2c:d6:4a:84:73:b5:1b:b2:6d:16:e6:7b: 2f:79:7f:68:a1:d3:e1:33:7b:0b:7b:c6:7d:11:77: 95:35:04:7a:32:20:59:35:43:55:3c:49:ce:e5:57: 28:e7:35:d3:b3:4d:61:36:9b:33:b3:82:3d:d6:99: 85:61:0f:48:f0:86:e8:e3:69:31:b8:c9:7c:f3:f8: e3:00:b5:34:a3:02:3d:5e:4b:69:5d:e5:16:1e:78: c3:59:a1:68:e4:3a:71:15:1e:3b:7f:94:6e:8c:18: a0:80:1c:f0:0c:45:cc:de:0f:bd:63:10:18:ae:1c: 80:66:71:e8:64:16:f0:8e:ed:75:e4:bb:85:83:14: 17:b1:53:ef:ba:07:0d:49:44:0b:f3:4c:d2:86:fc: 64:4c:56:ff:8e:7b:62:81:37:99:f2:7a:58:14:c6: 06:9b:5c:34:10:f3:f1:1c:a6:2f:4d:ef:75:9d:4b: 88:96:a1:a9:cd:05:7f:ed:a8:75:11:6f:5c:1f:51: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3B:71:0A:04:DD:E9:EB:47:6B:77:C5:39:E8:20:F4:1E:F8:74:FE X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c8:e6:b1:61:8d:55:14:c0:ed:33:0d:6a:c7:23:d4:75:07: 46:86:57:1b:c7:99:04:b3:e2:8c:3f:70:6c:26:5f:1c:b9:c9: 86:69:c4:59:7d:a7:95:3c:b6:33:dc:88:d2:6f:76:d7:f4:6a: af:cf:66:90:e8:ba:50:96:24:07:ab:35:01:54:62:86:d5:83: 4e:be:a8:b8:c3:05:0f:38:03:ab:35:bf:91:58:60:b1:da:7f: 79:d3:c8:ac:c8:a6:4c:8a:8b:0f:ee:66:86:fe:64:48:cd:20: 10:e5:e8:08:67:a0:b1:79:8e:f7:6e:51:e6:73:4f:11:0f:73: c4:aa:96:93:d0:fb:f6:07:3d:af:3e:2c:77:9e:31:3b:a5:19: 7c:88:a0:e0:3a:a1:ce:30:df:8a:85:7b:4a:81:e0:9c:07:85: 9f:c3:e6:79:12:df:0d:9c:1e:e4:c6:ab:f6:e8:51:9a:ad:c0: 36:ce:90:bf:31:c0:11:fd:31:38:93:46:02:9f:81:90:ea:ed: 7f:f0:99:32:40:01:27:75:97:b8:3b:35:2a:b8:47:8a:7b:73: 8c:be:f2:c8:af:b6:31:07:8d:b9:96:7c:94:1a:3a:46:61:ee: d2:d8:88:2f:76:70:04:30:dd:fc:45:d7:27:5b:49:24:14:49: 6d:41:d0:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OEE2OTExMC8GA1UEBRMoMzUwNzMxQjY2MDQ0RDM0QTNEMkRBNzU4OUJEODMzMUQx NDVGRTQ5ODAeFw0yNDExMjEwNTAzMDdaFw0yNDExMjgwNTAzMDdaMBgxFjAUBgNV BAMTDTY3M2ViZjBiLWE4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp2pBWYn46uE5NSE5NZu+vEY0fNgrYcY3xLeCerw1pEGtGlAOwLoMOIpuWVA3M glPOaA1fYNWmNV3LmXzkEyzWSoRztRuybRbmey95f2ih0+Ezewt7xn0Rd5U1BHoy IFk1Q1U8Sc7lVyjnNdOzTWE2mzOzgj3WmYVhD0jwhujjaTG4yXzz+OMAtTSjAj1e S2ld5RYeeMNZoWjkOnEVHjt/lG6MGKCAHPAMRczeD71jEBiuHIBmcehkFvCO7XXk u4WDFBexU++6Bw1JRAvzTNKG/GRMVv+Oe2KBN5nyelgUxgabXDQQ8/Ecpi9N73Wd S4iWoanNBX/tqHURb1wfUeMJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8jtxCgTd 6etHa3fFOegg9B74dP4wHwYDVR0jBBgwFoAUNQcxtmBE00o9LadYm9gzHRRf5Jgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4QTY5L0M2MjAxMUQ2MENF ODExRUY5RUZEQTMxQkM0RjlBRTAyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlFjeHRtQkUwMG85TGFkWW05Z3pIUlJmNUpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 QTY5L0M2MjAxMUQ2MENFODExRUY5RUZEQTMxQkM0RjlBRTAyL05RY3h0bUJFMDBv OUxhZFltOWd6SFJSZjVKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB7I5rFhjVUUwO0zDWrHI9R1B0aGVxvHmQSz4ow/cGwmXxy5yYZpxFl9 p5U8tjPciNJvdtf0aq/PZpDoulCWJAerNQFUYobVg06+qLjDBQ84A6s1v5FYYLHa f3nTyKzIpkyKiw/uZob+ZEjNIBDl6AhnoLF5jvduUeZzTxEPc8SqlpPQ+/YHPa8+ LHeeMTulGXyIoOA6oc4w34qFe0qB4JwHhZ/D5nkS3w2cHuTGq/boUZqtwDbOkL8x wBH9MTiTRgKfgZDq7X/wmTJAASd1l7g7NSq4R4p7c4y+8sivtjEHjbmWfJQaOkZh 7tLYiC92cAQw3fxF1ydbSSQUSW1B0FI= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:00 2024 by rpki-client on console-ams.rpki-client.org