$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: uoFjyxjNuZDAwZc/62nMrYr3fZGUJHZBskLSzSj8S0U= Subject key identifier: 3B:E3:51:D1:AC:94:E4:3F:C2:A1:3B:DC:81:BB:72:30:5D:42:22:D0 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: C1 Signing time: Thu 21 Nov 2024 04:15:39 +0000 Manifest this update: Thu 21 Nov 2024 04:15:39 +0000 Manifest next update: Thu 28 Nov 2024 04:15:39 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: 5qG/mcbGip++bNXoqu06eQcux1KW2yT+IPOwHu5H5kk=) 2: 4990DE3AB79C11EE98F9562DC4F9AE02.roa (hash: udwIL3TemXgN99WsiGZezgc/ERVVheSUhT58Wdtis9o=) 3: C67457E468F211EFB7A6A06EC4F9AE02.roa (hash: hVVeGPtS8d46adSVCrpj8ck2g+Kvke6Iu5YEufUE0+8=) 4: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: ifTfzd38+QI1l1tiVLVAOtkUnypzLDBORjLJyCRJYsc=) 5: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: 5sOO/jQ4O74yVLIuI+2i0LD1Cyn9b+LANWHRpepKL7M=) 6: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: 0e05LN2SDiZX/SSemFkZCiPIBxRNvjcncCXU0klfz00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Nov 21 04:15:39 2024 GMT Not After : Nov 28 04:15:39 2024 GMT Subject: CN=673eb3eb-500b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:50:6b:88:4a:a1:66:d1:c4:d9:3b:03:09:8a: 6d:7e:14:8c:01:9c:6f:35:08:0b:82:6d:c6:ce:3b: b6:36:f6:d6:ce:27:c2:88:3d:f4:3a:7c:6d:16:d9: 3a:99:5c:8c:d3:52:49:86:47:94:c7:1b:72:2e:1d: 95:ca:8c:50:67:02:dc:b0:91:30:90:86:f4:7b:a8: 10:26:89:ce:0b:b4:46:ec:88:78:05:bf:e9:dc:e7: f5:35:4f:ee:b3:c1:81:59:30:75:48:6e:a6:ba:71: 94:5c:6e:cf:8d:bb:e6:86:b1:8f:75:7a:92:12:29: 38:e5:70:dd:4b:1b:de:6f:d3:11:4b:b0:1c:4a:d5: ab:a2:3b:3f:9f:e0:aa:81:db:c2:86:af:68:ea:d5: 0b:e3:21:bc:aa:ee:90:52:2d:39:b8:cf:bf:37:aa: 05:f5:ed:8a:86:1d:31:44:f9:ba:9a:f6:6a:ea:94: 19:c0:a2:81:63:8a:47:82:d2:5d:59:bf:43:4d:c4: fb:b9:d2:7e:2a:90:45:9a:37:88:52:47:71:1a:bc: d0:cb:f7:89:4e:47:af:88:08:44:2d:9e:67:3f:f4: 39:64:8a:b8:86:8b:44:22:b0:32:84:41:01:38:87: 91:01:d5:c9:9b:23:60:d1:3b:b3:f7:5d:90:59:8b: f4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:51:D1:AC:94:E4:3F:C2:A1:3B:DC:81:BB:72:30:5D:42:22:D0 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:2c:8c:2e:30:6b:63:1a:fb:bc:00:f9:c0:21:18:b8:d4:f3: 42:98:df:02:1b:ed:a2:d1:08:90:e5:cb:0b:40:b1:b3:6b:db: f8:b2:c6:10:5f:52:89:9c:a9:f2:65:f1:07:76:17:d6:ce:85: 61:ff:f4:9f:4e:4a:fd:03:02:7a:73:14:8f:9f:d1:bd:bc:ce: 42:b7:73:cf:4b:d7:24:51:38:8c:07:7f:7b:98:88:45:37:fe: 53:6a:20:db:f6:4d:20:ab:6e:dd:78:c4:b5:6b:9e:f1:31:f6: 3a:2d:d2:3a:71:ba:a4:83:cb:34:64:ff:52:9e:55:b1:9a:69: d1:f6:81:73:6e:38:44:dc:53:84:a3:3a:d7:ae:22:c3:06:32: 05:7a:45:4a:96:15:65:9a:bf:f0:af:53:af:64:6c:49:a9:df: a9:e2:e6:06:ca:3f:3b:16:83:ef:e6:16:ab:f5:aa:62:42:b4: 87:b6:25:50:7a:d3:14:2b:85:81:d0:cc:1e:9a:67:8f:45:00: 4e:f0:ae:c2:bd:ed:4c:32:d6:84:21:b8:bf:4f:a2:44:67:f9: d0:96:c3:00:d9:46:16:50:99:ed:5e:92:fb:e6:54:d5:ce:ac: 51:30:7d:45:6f:d1:8f:89:35:04:0b:08:d2:cb:0e:1c:01:2c: d7:d3:b5:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjQxMTIxMDQxNTM5WhcNMjQxMTI4MDQxNTM5WjAYMRYwFAYD VQQDEw02NzNlYjNlYi01MDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FBriEqhZtHE2TsDCYptfhSMAZxvNQgLgm3Gzju2NvbWzifCiD30OnxtFtk6 mVyM01JJhkeUxxtyLh2VyoxQZwLcsJEwkIb0e6gQJonOC7RG7Ih4Bb/p3Of1NU/u s8GBWTB1SG6munGUXG7PjbvmhrGPdXqSEik45XDdSxveb9MRS7AcStWrojs/n+Cq gdvChq9o6tUL4yG8qu6QUi05uM+/N6oF9e2Khh0xRPm6mvZq6pQZwKKBY4pHgtJd Wb9DTcT7udJ+KpBFmjeIUkdxGrzQy/eJTkeviAhELZ5nP/Q5ZIq4hotEIrAyhEEB OIeRAdXJmyNg0Tuz912QWYv0gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvjUdGs lOQ/wqE73IG7cjBdQiLQMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsLIwuMGtjGvu8APnAIRi41PNCmN8CG+2i0QiQ5csLQLGza9v4ssYQ X1KJnKnyZfEHdhfWzoVh//SfTkr9AwJ6cxSPn9G9vM5Ct3PPS9ckUTiMB397mIhF N/5TaiDb9k0gq27deMS1a57xMfY6LdI6cbqkg8s0ZP9SnlWxmmnR9oFzbjhE3FOE ozrXriLDBjIFekVKlhVlmr/wr1OvZGxJqd+p4uYGyj87FoPv5har9apiQrSHtiVQ etMUK4WB0MwemmePRQBO8K7Cve1MMtaEIbi/T6JEZ/nQlsMA2UYWUJntXpL75lTV zqxRMH1Fb9GPiTUECwjSyw4cASzX07Ur -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org