$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json) Hash identifier: kkH4gBbWb3rLiX07WNKZ0yXqNP9qbzFeuldfLeMbOmk= Subject key identifier: 5F:0E:C2:4E:01:7C:47:50:CD:2D:03:42:5E:2D:47:75:34:CB:9B:82 Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft Manifest number: 0647 Signing time: Fri 22 Nov 2024 22:01:54 +0000 Manifest this update: Fri 22 Nov 2024 22:01:53 +0000 Manifest next update: Fri 29 Nov 2024 22:01:53 +0000 Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: 0kZCMS9dLNHRB+EbJgSJZ855k6JmqcoPr1FiwFxaNu8=) 2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: iVNlEEUpkQ4pO3sAlYnoK5SGYjCiJx3jecw+Vffe23I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Validity Not Before: Nov 22 22:01:53 2024 GMT Not After : Nov 29 22:01:53 2024 GMT Subject: CN=6740ff51-7c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:94:da:e7:da:42:40:79:b1:ee:7c:39:a6: 7f:bb:6d:3a:ef:b2:24:df:71:dd:04:16:a6:21:10: d1:c3:db:9e:f9:87:17:4a:87:1d:f2:0e:94:19:7a: 90:f6:d3:58:1d:ee:bf:f5:e5:ef:fc:33:80:52:73: 72:d1:f2:82:57:7c:c5:ed:c0:51:4a:76:be:48:62: 13:4d:bb:59:40:ea:08:5c:fb:79:a1:74:76:2e:1b: 8e:98:d6:83:25:45:cd:9f:ca:f8:bf:f7:cd:5f:c8: ff:53:58:c5:c5:5a:26:36:58:91:7a:29:2f:7f:4e: e3:fe:2a:24:4a:b1:08:26:d3:0b:f6:1e:3b:e6:28: 4e:b1:c3:5e:25:e5:f6:de:da:51:ad:99:38:90:8e: 4e:a0:79:d4:6c:3e:5c:15:a7:e4:d6:3c:ff:ef:7d: 16:a7:e1:84:98:dc:85:4e:2e:84:06:4d:ce:e7:2a: 8f:ff:58:93:ec:f7:f8:33:2d:d8:fd:ee:a3:1f:f2: 26:42:49:d0:dd:81:47:c2:3a:50:8e:35:58:ed:e6: 2f:41:e9:f7:1d:2f:70:8c:be:cb:25:29:06:60:2d: d9:05:fc:7f:c1:a4:a2:ad:5e:64:72:81:2a:bf:57: ea:5c:83:66:8d:2c:ea:47:86:99:b4:0e:b4:c2:c5: 11:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0E:C2:4E:01:7C:47:50:CD:2D:03:42:5E:2D:47:75:34:CB:9B:82 X509v3 Authority Key Identifier: keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bb:16:55:0a:c4:07:ad:67:5c:9d:ab:6d:50:45:1a:a7:fa: 83:77:40:e0:5a:66:68:b0:1c:13:8f:c7:80:1b:22:2f:58:ec: 71:17:57:3f:5a:5c:65:04:91:de:c0:e1:32:de:45:a3:94:d2: 51:10:a8:38:8e:f2:4c:70:3c:d3:8e:7c:5e:51:0e:cf:d2:1e: f4:19:d3:54:25:25:00:d8:15:91:80:bd:67:e2:b0:1b:87:69: 91:f3:33:d3:8f:dd:ff:04:3a:a4:de:76:b3:9a:92:9f:3d:27: 71:65:ad:32:de:8a:05:ad:fb:6c:31:14:4d:9a:3b:97:e9:94: d1:a0:2d:e0:62:d5:37:ae:6a:b2:a6:b6:18:82:75:60:6e:a5: aa:3f:3c:42:dc:1a:9e:19:4b:ab:72:d0:59:61:4a:55:38:e6: 4f:29:8f:3e:a1:be:1f:ef:de:f2:33:7f:ff:eb:d4:70:39:03: 7d:12:59:d1:d3:e4:e3:1b:a6:2a:5e:ab:48:7e:56:6c:27:d6: 16:42:28:ef:c5:6b:99:ce:bb:38:d1:86:28:92:9a:c8:b3:92: 3e:09:18:f5:66:83:97:52:44:6e:72:a2:b9:42:f3:bd:88:4a: 5e:c5:d0:93:8d:a5:9a:57:65:e5:ef:ca:76:b5:21:44:8d:82: d9:13:0f:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF OTA5Rjk1NDQwHhcNMjQxMTIyMjIwMTUzWhcNMjQxMTI5MjIwMTUzWjAYMRYwFAYD VQQDEw02NzQwZmY1MS03YzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreKU2ufaQkB5se58OaZ/u20677Ik33HdBBamIRDRw9ue+YcXSocd8g6UGXqQ 9tNYHe6/9eXv/DOAUnNy0fKCV3zF7cBRSna+SGITTbtZQOoIXPt5oXR2LhuOmNaD JUXNn8r4v/fNX8j/U1jFxVomNliReikvf07j/iokSrEIJtML9h475ihOscNeJeX2 3tpRrZk4kI5OoHnUbD5cFafk1jz/730Wp+GEmNyFTi6EBk3O5yqP/1iT7Pf4My3Y /e6jH/ImQknQ3YFHwjpQjjVY7eYvQen3HS9wjL7LJSkGYC3ZBfx/waSirV5kcoEq v1fqXINmjSzqR4aZtA60wsUReQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8Owk4B fEdQzS0DQl4tR3U0y5uCMB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2 MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLuxZVCsQHrWdcnattUEUap/qDd0DgWmZosBwTj8eAGyIvWOxxF1c/ WlxlBJHewOEy3kWjlNJREKg4jvJMcDzTjnxeUQ7P0h70GdNUJSUA2BWRgL1n4rAb h2mR8zPTj93/BDqk3nazmpKfPSdxZa0y3ooFrftsMRRNmjuX6ZTRoC3gYtU3rmqy prYYgnVgbqWqPzxC3BqeGUurctBZYUpVOOZPKY8+ob4f797yM3//69RwOQN9ElnR 0+TjG6YqXqtIflZsJ9YWQijvxWuZzrs40YYokprIs5I+CRj1ZoOXUkRucqK5QvO9 iEpexdCTjaWaV2Xl78p2tSFEjYLZEw+u -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:37 2024 by rpki-client on console-ams.rpki-client.org