$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: iKZ4Acp/iQ++AIMbyF0o2WWl7OD7OnZehW6LOATbAM0= Subject key identifier: 86:AB:91:3F:55:22:85:DC:38:D9:B7:0A:D5:0A:B4:5A:A3:48:9D:CA Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 164D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 1645 Signing time: Wed 20 Nov 2024 16:40:46 +0000 Manifest this update: Wed 20 Nov 2024 16:40:45 +0000 Manifest next update: Wed 27 Nov 2024 16:40:45 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: EZ9H3sH1gvsoGiaImIdaCKINx/fCMDlUE0/Q6FE2plc=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: u8ortcT9MVFR9wLoP95O/siQb9jiYn8AeoW1F/za0m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5709 (0x164d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Nov 20 16:40:45 2024 GMT Not After : Nov 27 16:40:45 2024 GMT Subject: CN=673e110d-6cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:b5:5b:44:af:66:c1:38:64:c9:5c:fe:33: e4:5e:50:2a:f6:6b:88:db:26:0f:30:eb:b5:54:bc: a7:c7:d7:7b:00:e2:b0:23:6a:70:b5:30:25:13:37: c7:45:1f:ac:ad:c1:33:49:9c:32:19:0c:d8:82:a7: 47:48:36:16:d4:3e:8f:88:ef:a7:5b:8d:02:08:cd: 5f:f0:a9:d8:86:26:e2:fe:50:1d:25:a6:f8:e7:ae: 3a:8a:6e:0b:5f:8e:e9:30:ea:bf:b9:47:bd:62:26: e1:3e:3c:6c:8c:3d:da:bc:36:0b:d2:ea:2e:60:3b: 50:92:4a:4c:42:dd:71:7a:6d:00:b0:29:a6:e2:d9: e8:33:2d:08:ee:c8:93:fd:bd:37:62:8b:ca:54:a5: e4:98:66:fb:65:a0:ad:bf:37:26:5d:95:26:74:37: 9d:62:bb:cb:a0:8e:28:51:f5:99:38:64:44:18:72: 3e:7e:e6:77:4f:2a:4e:25:5a:4d:b0:be:09:55:8d: ae:fe:2c:ab:31:e1:c4:9b:bb:ef:d1:f6:ec:76:70: 33:17:0e:5b:e3:ff:be:55:e8:1a:56:70:0b:e1:d8: d3:6a:70:57:6c:cd:31:39:d2:74:9b:6f:67:e6:a8: c1:4b:bd:b7:bf:28:7d:c4:18:c3:bf:86:8c:bf:3a: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AB:91:3F:55:22:85:DC:38:D9:B7:0A:D5:0A:B4:5A:A3:48:9D:CA X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f4:36:a3:3d:ee:a2:d8:d6:6a:ef:a2:f8:f5:2e:88:5a:30: c9:f3:23:29:4e:c6:b5:88:da:a0:44:ff:41:bf:ef:54:12:64: 2a:8d:c8:38:6a:de:24:dd:3c:74:98:38:93:e4:e0:c4:b6:81: 03:bd:ff:c2:d7:79:9f:d2:56:24:13:ba:ba:5a:f1:d5:69:cc: 91:e6:d8:a2:2b:75:c5:db:2b:57:93:c2:e5:d1:92:70:63:b5: 4d:12:9e:5b:01:f5:7a:9a:d7:b3:e3:ec:29:50:b1:40:f5:c4: 48:2e:c5:42:61:cc:c0:b1:e4:d0:93:e7:12:86:ff:f2:21:79: 99:1b:82:48:13:9f:0b:56:04:11:fe:87:8c:68:df:94:d7:55: 43:36:8a:a2:6a:ee:60:b5:b2:24:fb:4e:bd:d1:64:d6:50:06: 71:53:bd:e1:47:9f:41:91:f3:a2:84:8d:84:70:db:83:6d:dc: ac:6c:4b:d4:61:26:54:c2:aa:f0:9b:8f:e7:c7:f1:81:3b:68: d6:81:57:38:00:65:d8:cf:28:18:ef:58:57:71:1d:70:c2:a9: 1f:5a:3f:9e:37:98:88:bc:30:64:47:77:b0:37:74:ca:32:c9: 48:17:36:8a:c1:3d:0e:54:e4:51:cb:9a:da:ca:86:d0:b2:cd: d3:7b:73:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjQxMTIwMTY0MDQ1WhcNMjQxMTI3MTY0MDQ1WjAYMRYwFAYD VQQDEw02NzNlMTEwZC02Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/a1W0SvZsE4ZMlc/jPkXlAq9muI2yYPMOu1VLynx9d7AOKwI2pwtTAlEzfH RR+srcEzSZwyGQzYgqdHSDYW1D6PiO+nW40CCM1f8KnYhibi/lAdJab45646im4L X47pMOq/uUe9YibhPjxsjD3avDYL0uouYDtQkkpMQt1xem0AsCmm4tnoMy0I7siT /b03YovKVKXkmGb7ZaCtvzcmXZUmdDedYrvLoI4oUfWZOGREGHI+fuZ3TypOJVpN sL4JVY2u/iyrMeHEm7vv0fbsdnAzFw5b4/++VegaVnAL4djTanBXbM0xOdJ0m29n 5qjBS723vyh9xBjDv4aMvzqCzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIarkT9V IoXcONm3CtUKtFqjSJ3KMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV9DajPe6i2NZq76L49S6IWjDJ8yMpTsa1iNqgRP9Bv+9UEmQqjcg4 at4k3Tx0mDiT5ODEtoEDvf/C13mf0lYkE7q6WvHVacyR5tiiK3XF2ytXk8Ll0ZJw Y7VNEp5bAfV6mtez4+wpULFA9cRILsVCYczAseTQk+cShv/yIXmZG4JIE58LVgQR /oeMaN+U11VDNoqiau5gtbIk+0690WTWUAZxU73hR59BkfOihI2EcNuDbdysbEvU YSZUwqrwm4/nx/GBO2jWgVc4AGXYzygY71hXcR1wwqkfWj+eN5iIvDBkR3ewN3TK MslIFzaKwT0OVORRy5rayobQss3Te3Mn -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:15 2024 by rpki-client on console-ams.rpki-client.org