$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json) Hash identifier: FYPYUFu4Pkaj2XuSY1dSZQfIdXDDuLuJsrRcHrlkqPs= Subject key identifier: 23:CF:5D:A6:38:C1:C6:A5:74:68:2D:FC:6E:06:81:9C:8C:81:A9:54 Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft Manifest number: 19 Signing time: Thu 21 Nov 2024 06:00:50 +0000 Manifest this update: Thu 21 Nov 2024 06:00:49 +0000 Manifest next update: Thu 28 Nov 2024 06:00:49 +0000 Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: d0zS429h+A13gfn/TszLgo07uiwkeFuiaWuyqA15nsg=) 2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: q92cRpTpYuTn7sZTn7J75VBEAOI5W+lV4dg/tHrggGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Validity Not Before: Nov 21 06:00:49 2024 GMT Not After : Nov 28 06:00:49 2024 GMT Subject: CN=673ecc91-45ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:df:d1:6d:53:23:dd:10:75:6d:5f:13:0b: 96:cc:cf:19:61:62:06:fe:5a:d2:dd:2f:8e:bb:94: 01:c7:4e:73:66:8d:56:a1:74:da:2a:c1:bc:7e:73: 6f:05:6c:26:3f:80:8b:69:f3:62:20:b8:48:2d:c4: 87:d5:d5:27:57:2b:b9:8e:43:38:81:7f:f8:15:ef: 13:a4:28:c8:5f:70:89:d0:e8:72:a2:e0:1c:be:45: 62:5c:59:42:f6:07:99:a2:ca:49:77:d3:00:08:f7: ab:1b:23:9d:d8:a2:86:7b:55:fd:91:9a:44:07:29: 6a:99:db:bd:5d:c6:59:65:74:f7:ac:a3:99:38:d9: fb:54:62:f5:40:8c:17:18:e8:57:eb:94:26:cc:f4: ae:a5:57:e4:6b:f5:86:30:82:e1:25:7f:89:ae:60: ab:e9:b6:39:ba:92:22:bf:12:18:66:c0:72:f9:41: 88:dd:c9:47:a8:69:df:a9:e8:a5:79:07:da:cb:90: d3:b5:53:e7:77:14:d2:66:94:a2:6d:b7:ab:0e:39: 01:82:27:7f:6b:ca:6b:24:24:8c:45:ff:80:9a:30: 42:5e:d0:97:ee:88:48:8d:6e:be:3f:a4:86:8d:d2: 83:7d:79:ce:86:da:4c:90:1d:70:a6:c7:f3:69:4d: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:5D:A6:38:C1:C6:A5:74:68:2D:FC:6E:06:81:9C:8C:81:A9:54 X509v3 Authority Key Identifier: keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:de:a8:35:1a:d6:3a:cc:53:ac:c1:4c:62:15:22:d3:a8:7c: 27:7f:60:ec:79:43:21:68:ad:71:6e:c5:cc:3a:ba:f1:c5:ad: a4:f6:76:60:47:a5:2c:51:3a:f4:2b:74:84:1c:76:9e:79:5c: 81:97:7a:6b:d5:c9:e0:48:45:14:e0:c9:a0:1b:74:d9:45:4b: 24:04:39:bb:f3:3c:f2:d1:18:29:83:d5:0d:3a:34:bf:78:20: 89:ed:ff:2e:13:80:38:3b:3c:a7:bf:c7:ed:00:94:d2:d0:0d: f9:69:4a:a1:1d:d2:6e:87:ec:0c:5b:db:5c:db:1f:69:4e:b1: de:af:68:b1:8a:61:68:e0:13:3c:25:0d:72:48:d6:59:fc:eb: 18:0a:93:73:bd:80:8c:ec:50:21:e4:6e:e7:84:53:5d:77:2f: be:c0:98:e4:cb:90:ec:f6:2e:36:27:f9:44:c4:4a:6c:d5:7c: 14:4d:ab:a7:96:31:68:92:d5:bd:3a:b0:2a:75:f4:b6:58:39: 2b:aa:e3:d0:6a:8d:c5:5f:11:08:6a:65:a2:88:d1:58:8f:18: 4d:0d:53:70:2b:02:87:10:47:d5:8e:ca:d6:05:e3:58:00:2c: 18:33:1d:d1:a5:2b:92:20:a0:5d:e5:5b:10:95:1f:64:ef:4e: 38:65:ea:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjQ3RjExMC8GA1UEBRMoMzY3ODc5QTBCODVERDgzNzM2Mzc4ODM3OTNGNTVFRUIz QjIyMURDRjAeFw0yNDExMjEwNjAwNDlaFw0yNDExMjgwNjAwNDlaMBgxFjAUBgNV BAMTDTY3M2VjYzkxLTQ1Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtMN/RbVMj3RB1bV8TC5bMzxlhYgb+WtLdL467lAHHTnNmjVahdNoqwbx+c28F bCY/gItp82IguEgtxIfV1SdXK7mOQziBf/gV7xOkKMhfcInQ6HKi4By+RWJcWUL2 B5miykl30wAI96sbI53YooZ7Vf2RmkQHKWqZ271dxllldPeso5k42ftUYvVAjBcY 6FfrlCbM9K6lV+Rr9YYwguElf4muYKvptjm6kiK/EhhmwHL5QYjdyUeoad+p6KV5 B9rLkNO1U+d3FNJmlKJtt6sOOQGCJ39rymskJIxF/4CaMEJe0JfuiEiNbr4/pIaN 0oN9ec6G2kyQHXCmx/NpTTWJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI89dpjjB xqV0aC38bgaBnIyBqVQwHwYDVR0jBBgwFoAUNnh5oLhd2Dc2N4g3k/Ve6zsiHc8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NDdGL0MyMUM3Q0Y2ODZE QjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRjMk40ZzNrX1ZlNnpzaUhj OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTm5oNW9MaGQyRGMyTjRnM2tfVmU2enNpSGM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 NDdGL0MyMUM3Q0Y2ODZEQjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRj Mk40ZzNrX1ZlNnpzaUhjOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGzeqDUa1jrMU6zBTGIVItOofCd/YOx5QyForXFuxcw6uvHFraT2dmBH pSxROvQrdIQcdp55XIGXemvVyeBIRRTgyaAbdNlFSyQEObvzPPLRGCmD1Q06NL94 IInt/y4TgDg7PKe/x+0AlNLQDflpSqEd0m6H7Axb21zbH2lOsd6vaLGKYWjgEzwl DXJI1ln86xgKk3O9gIzsUCHkbueEU113L77AmOTLkOz2LjYn+UTESmzVfBRNq6eW MWiS1b06sCp19LZYOSuq49BqjcVfEQhqZaKI0ViPGE0NU3ArAocQR9WOytYF41gA LBgzHdGlK5IgoF3lWxCVH2TvTjhl6i8= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:14 2024 by rpki-client on console-fra.rpki-client.org