$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: dN4gkhxEBsBFqgC1B30NApx5Ii+T53oapHNiThpk42Q= Subject key identifier: 9F:B2:0D:C9:60:D9:1B:30:6D:B3:E1:02:B7:90:14:05:18:A8:74:2C Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: CB Signing time: Sat 23 Nov 2024 03:51:40 +0000 Manifest this update: Sat 23 Nov 2024 03:51:40 +0000 Manifest next update: Sat 30 Nov 2024 03:51:39 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: QJ0zGM6q+etoupvLcbrUCKvM6MjYQiljVpBxL6UYPI8=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: N2i2agjUsHeAH/r62Q8YVpeahgIj+1qwNN91iqqJ1uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: Nov 23 03:51:40 2024 GMT Not After : Nov 30 03:51:39 2024 GMT Subject: CN=6741514c-65ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:6a:2e:61:e5:72:f2:e5:0c:85:e3:1c:66: 8a:20:c3:ab:6c:40:f6:6f:da:23:7f:20:69:39:2f: 0c:ad:e1:ee:28:6c:4b:9c:73:8e:97:ac:c8:18:72: 11:2a:a3:b0:10:d6:eb:bd:ef:62:c2:d2:d4:eb:5b: 73:8a:ec:46:b6:84:9d:25:6b:69:2a:bd:92:75:9b: 61:ec:38:fd:d1:76:42:93:20:7c:47:42:19:1b:ae: 77:f7:bc:81:48:80:4a:93:b5:d5:bd:32:28:be:20: 24:76:0a:3a:e4:59:93:8a:1e:b4:59:a0:5b:38:b8: 3d:b7:f6:57:37:e3:b0:01:e0:a3:e6:7b:17:3b:83: 76:ba:58:a6:ac:d2:40:3f:b5:89:e5:c2:c6:c2:fd: 5a:45:8d:eb:33:ce:2e:64:6c:40:32:aa:50:60:7e: ed:e6:c6:75:99:00:a3:67:ea:7d:37:a1:1d:fa:49: e0:1b:a3:13:ae:9f:3f:6d:33:e6:37:99:30:ed:c8: 9b:3e:fd:69:47:b7:37:a3:84:18:e0:06:cc:99:83: 5f:65:24:3a:0d:df:fd:b8:b0:b9:be:8a:d0:52:79: dd:65:2a:57:40:2a:b4:70:8a:00:62:94:e9:94:e7: 58:e8:11:f6:4c:f2:84:9e:01:9b:60:75:56:82:7c: df:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B2:0D:C9:60:D9:1B:30:6D:B3:E1:02:B7:90:14:05:18:A8:74:2C X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:86:64:cd:9f:72:98:c7:f2:4b:b4:17:2b:e7:5e:53:5c:b4: 76:0c:85:22:15:36:13:03:48:93:5b:c8:3f:ce:86:ee:56:48: 1f:41:9f:d8:80:24:14:d8:ab:3a:a2:77:ef:2e:93:4f:08:ac: bf:e4:72:72:42:34:5c:0a:0b:93:21:e1:da:44:14:01:a4:f1: 9d:a0:93:eb:96:53:6f:63:99:62:97:ec:1d:2e:21:38:14:a3: 62:64:bf:5b:0a:9b:5c:81:65:85:b8:21:fb:c3:a0:94:fc:52: 07:68:93:62:ed:ef:7f:cf:8e:ff:88:72:64:84:51:be:0a:59: 73:4c:e4:72:d2:16:49:09:0c:7b:d2:2b:9e:05:68:08:ed:fe: cd:a1:82:ca:54:33:06:07:b9:7f:13:0a:df:8d:01:b3:01:c7: f4:76:4d:35:1c:bf:c3:9c:ac:85:7f:44:16:2a:76:cb:fc:37: f6:dc:bf:1f:84:7e:f4:02:c5:88:e7:ea:f8:9d:b0:f1:67:b5: 9a:cb:40:51:77:23:4d:0e:2d:e2:2e:4a:84:46:9d:cd:10:6c: 25:56:2d:de:f5:4a:32:e4:6c:57:21:52:01:af:c9:f6:9d:50: 8f:77:4d:40:26:48:a5:26:71:f8:8a:22:25:6d:99:6d:f3:a8: d9:2d:56:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4NDcxMTAvBgNVBAUTKDM1NDA4NjlFREYzNjM3RUQ5ODhDMjBCREFCQUYxRjc4 MzJBOTI3OUIwHhcNMjQxMTIzMDM1MTQwWhcNMjQxMTMwMDM1MTM5WjAYMRYwFAYD VQQDEw02NzQxNTE0Yy02NWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5pqLmHlcvLlDIXjHGaKIMOrbED2b9ojfyBpOS8MreHuKGxLnHOOl6zIGHIR KqOwENbrve9iwtLU61tziuxGtoSdJWtpKr2SdZth7Dj90XZCkyB8R0IZG65397yB SIBKk7XVvTIoviAkdgo65FmTih60WaBbOLg9t/ZXN+OwAeCj5nsXO4N2ulimrNJA P7WJ5cLGwv1aRY3rM84uZGxAMqpQYH7t5sZ1mQCjZ+p9N6Ed+kngG6MTrp8/bTPm N5kw7cibPv1pR7c3o4QY4AbMmYNfZSQ6Dd/9uLC5vorQUnndZSpXQCq0cIoAYpTp lOdY6BH2TPKEngGbYHVWgnzfKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+yDclg 2RswbbPhAreQFAUYqHQsMB8GA1UdIwQYMBaAFDVAhp7fNjftmIwgvauvH3gyqSeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTg0Ny9FRDhGMUMyRTcz REUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4tMllqQ0M5cTY4ZmVES3BK NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTg0Ny9FRDhGMUMyRTczREUxMUVFQTc5QUU4NTFDNEY5QUUwMi9OVUNHbnQ4Mk4t MllqQ0M5cTY4ZmVES3BKNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAChmTNn3KYx/JLtBcr515TXLR2DIUiFTYTA0iTW8g/zobuVkgfQZ/Y gCQU2Ks6onfvLpNPCKy/5HJyQjRcCguTIeHaRBQBpPGdoJPrllNvY5lil+wdLiE4 FKNiZL9bCptcgWWFuCH7w6CU/FIHaJNi7e9/z47/iHJkhFG+CllzTORy0hZJCQx7 0iueBWgI7f7NoYLKVDMGB7l/EwrfjQGzAcf0dk01HL/DnKyFf0QWKnbL/Df23L8f hH70AsWI5+r4nbDxZ7Way0BRdyNNDi3iLkqERp3NEGwlVi3e9Uoy5GxXIVIBr8n2 nVCPd01AJkilJnH4iiIlbZlt86jZLVaD -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org