$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft File: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft (raw, json) Hash identifier: lBiqVhvtEJQ/LQb/pnRy8f/wsfCuLoq6u/ltq1Sr5Lc= Subject key identifier: 84:36:1F:D6:56:29:41:7A:49:BE:69:69:93:05:7D:7D:99:35:A8:1B Authority key identifier: 36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF Certificate issuer: /CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft Manifest number: 0A Signing time: Wed 23 Oct 2024 06:49:12 +0000 Manifest this update: Wed 23 Oct 2024 06:49:12 +0000 Manifest next update: Wed 30 Oct 2024 06:49:12 +0000 Files and hashes: 1: Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl (hash: 8ZN309tUq8FS7tEH5U1LUHg9CYMXD49uUAQGCY6gj3Y=) 2: FD3934BC86E211EF8CF27626C4F9AE02.roa (hash: q92cRpTpYuTn7sZTn7J75VBEAOI5W+lV4dg/tHrggGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913647F/serialNumber=367879A0B85DD8373637883793F55EEB3B221DCF Validity Not Before: Oct 23 06:49:12 2024 GMT Not After : Oct 30 06:49:12 2024 GMT Subject: CN=67189c68-062b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:bc:56:ae:31:8a:cc:3b:9b:41:1d:b6:e3: c8:60:e8:22:c7:05:7e:31:af:80:de:29:5d:61:07: df:ac:ff:01:fe:c6:c6:04:53:b6:69:63:64:88:c4: 15:bc:b7:84:87:4c:35:1e:5c:7d:33:5c:95:8f:a6: a3:ee:96:bc:19:60:3c:c3:cd:02:92:c2:1b:24:81: 5f:57:73:33:e5:a9:e8:36:dc:e5:32:7d:c3:34:35: f1:6e:ed:d3:1e:ab:a4:0e:9e:64:18:bb:8f:bc:76: 21:de:a9:99:71:d6:1f:52:e7:69:29:25:ec:18:7a: ec:13:84:23:ff:d8:0f:f5:92:f2:a6:3a:ee:d6:4a: 44:4a:ff:5c:21:63:98:77:76:2a:8b:25:c5:85:d7: de:01:ee:e0:67:aa:79:c5:09:a5:22:34:13:0b:f0: e4:a0:4c:ad:a3:d7:56:ed:c6:b5:7f:5b:ad:d7:9a: 2d:23:83:04:96:35:10:87:68:12:38:ee:8c:fd:e2: e2:a9:c0:36:f6:04:ed:13:27:a6:01:b8:ae:49:e1: 4a:c7:84:f7:9e:74:4c:f8:89:15:3b:a8:fa:1a:f4: 3f:29:a8:f2:b6:c4:f3:c6:a4:93:34:26:ef:ac:07: 50:8d:db:51:0c:8a:1a:e3:50:20:eb:84:93:4e:80: 04:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:36:1F:D6:56:29:41:7A:49:BE:69:69:93:05:7D:7D:99:35:A8:1B X509v3 Authority Key Identifier: keyid:36:78:79:A0:B8:5D:D8:37:36:37:88:37:93:F5:5E:EB:3B:22:1D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/C21C7CF686DB11EFBA4D5F26C4F9AE02/Nnh5oLhd2Dc2N4g3k_Ve6zsiHc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3b:a9:46:32:ed:a8:c7:34:20:19:33:68:ea:c1:ff:d6:48: 9a:e1:06:f7:60:2b:b6:c6:06:e3:36:cc:a8:4b:54:9c:cf:af: 9e:6b:1e:b7:b8:dd:8e:62:42:03:7a:20:69:89:a0:ff:98:80: 36:bf:fc:63:b5:2f:9a:45:89:0d:cb:36:59:6c:60:b4:c7:32: ff:5d:63:d4:25:3d:8e:45:d9:69:51:c8:fc:37:20:7c:bb:3c: 52:57:93:60:d0:e2:60:33:9f:1d:e2:06:a2:90:3b:78:6c:8a: fb:df:da:63:50:9e:8b:68:a2:88:c3:fe:c7:1d:c9:ce:5a:5b: 26:f2:19:02:18:73:52:98:d5:a7:78:97:a1:96:28:9f:0b:40: e1:f5:db:7b:b9:1b:9d:ec:e6:34:51:3b:f0:0d:b8:67:76:83: ca:1d:48:7e:ce:17:39:6d:9f:a7:23:fb:0c:ee:33:26:66:8b: 52:50:07:fc:94:bb:f9:44:15:ab:ce:db:88:3e:d1:44:5e:a5: a1:af:96:65:1e:d3:4b:f2:47:09:54:91:e5:d6:dc:fe:51:b4: 31:5b:26:fd:4f:3f:c3:50:d6:e8:20:82:2e:d2:59:da:89:53: b7:86:07:56:29:e9:0b:4c:6b:63:64:0b:3a:83:63:84:c7:03: cd:43:05:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjQ3RjExMC8GA1UEBRMoMzY3ODc5QTBCODVERDgzNzM2Mzc4ODM3OTNGNTVFRUIz QjIyMURDRjAeFw0yNDEwMjMwNjQ5MTJaFw0yNDEwMzAwNjQ5MTJaMBgxFjAUBgNV BAMTDTY3MTg5YzY4LTA2MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6WrxWrjGKzDubQR2248hg6CLHBX4xr4DeKV1hB9+s/wH+xsYEU7ZpY2SIxBW8 t4SHTDUeXH0zXJWPpqPulrwZYDzDzQKSwhskgV9XczPlqeg23OUyfcM0NfFu7dMe q6QOnmQYu4+8diHeqZlx1h9S52kpJewYeuwThCP/2A/1kvKmOu7WSkRK/1whY5h3 diqLJcWF194B7uBnqnnFCaUiNBML8OSgTK2j11btxrV/W63Xmi0jgwSWNRCHaBI4 7oz94uKpwDb2BO0TJ6YBuK5J4UrHhPeedEz4iRU7qPoa9D8pqPK2xPPGpJM0Ju+s B1CN21EMihrjUCDrhJNOgAQhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhDYf1lYp QXpJvmlpkwV9fZk1qBswHwYDVR0jBBgwFoAUNnh5oLhd2Dc2N4g3k/Ve6zsiHc8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2NDdGL0MyMUM3Q0Y2ODZE QjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRjMk40ZzNrX1ZlNnpzaUhj OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTm5oNW9MaGQyRGMyTjRnM2tfVmU2enNpSGM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 NDdGL0MyMUM3Q0Y2ODZEQjExRUZCQTRENUYyNkM0RjlBRTAyL05uaDVvTGhkMkRj Mk40ZzNrX1ZlNnpzaUhjOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGo7qUYy7ajHNCAZM2jqwf/WSJrhBvdgK7bGBuM2zKhLVJzPr55rHre4 3Y5iQgN6IGmJoP+YgDa//GO1L5pFiQ3LNllsYLTHMv9dY9QlPY5F2WlRyPw3IHy7 PFJXk2DQ4mAznx3iBqKQO3hsivvf2mNQnotooojD/scdyc5aWybyGQIYc1KY1ad4 l6GWKJ8LQOH123u5G53s5jRRO/ANuGd2g8odSH7OFzltn6cj+wzuMyZmi1JQB/yU u/lEFavO24g+0URepaGvlmUe00vyRwlUkeXW3P5RtDFbJv1PP8NQ1ugggi7SWdqJ U7eGB1Yp6QtMa2NkCzqDY4THA81DBYM= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:19 2024 by rpki-client on console-fra.rpki-client.org