$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: 55Il7FGAEeN4n2duSqGgmoM/VXlymhKERukPXKFmWeY= Subject key identifier: 1C:B2:D1:E1:C8:34:F0:7E:B7:DE:FE:E1:7C:71:D3:9C:60:85:0B:C6 Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: B3 Signing time: Sat 23 Nov 2024 04:08:34 +0000 Manifest this update: Sat 23 Nov 2024 04:08:33 +0000 Manifest next update: Sat 30 Nov 2024 04:08:33 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: c1B3F55b6J3IY9zZNEKhzND2mMLehED0nYgfcH/HuwM=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: B4/k+AmD/CD5R2XokvVTIdBSD+64BjRA2SWX9Rfb1Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: Nov 23 04:08:33 2024 GMT Not After : Nov 30 04:08:33 2024 GMT Subject: CN=67415542-52db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:fc:76:d8:ad:a6:b1:60:2f:f6:ab:64:2f: 82:6e:3d:f6:4b:a6:54:d9:9e:1f:e0:ff:08:81:2c: 0c:f2:83:31:39:d5:ce:60:ef:b4:de:00:de:a6:6e: b6:56:eb:8f:41:75:39:17:c1:d1:02:08:ab:d3:c0: 0f:ed:d8:60:e9:b8:06:f3:07:f8:12:54:f1:95:0a: 7f:92:fb:51:2f:3d:fa:32:a4:9c:44:94:78:ff:aa: b3:6b:e2:5f:32:82:84:8a:db:3d:fc:60:ab:5d:40: ed:06:ca:11:fb:63:a7:54:44:70:94:64:c8:b1:68: 36:c0:e7:fb:ca:28:12:b6:a5:ac:52:24:12:e9:81: 81:fe:dc:77:e7:0c:cb:b3:49:e7:1d:e8:16:78:76: 3b:88:60:47:e8:fa:f0:28:30:a4:16:12:97:86:86: 8e:e1:52:62:7f:08:44:24:3b:7a:18:8c:ac:47:f5: a0:a5:56:c0:5a:75:b0:c5:e7:3a:d4:46:19:75:14: 17:b8:27:29:76:0f:00:35:16:5e:8e:d3:dc:16:15: 52:5d:d1:60:d1:dc:e1:18:60:8e:35:2a:db:eb:ca: b4:fa:bc:0c:36:25:08:d6:c2:52:9c:3c:df:f3:53: 0b:5e:aa:b7:f1:94:5e:fe:63:f4:79:f5:6d:92:04: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B2:D1:E1:C8:34:F0:7E:B7:DE:FE:E1:7C:71:D3:9C:60:85:0B:C6 X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e6:e7:f6:8a:11:11:4b:ec:0c:94:4f:87:16:ee:a8:5a:b5: 9f:2f:eb:58:d5:3c:bd:66:6d:d5:d6:cb:1f:ff:89:44:37:47: 92:f8:5f:a7:38:f7:65:c2:a0:56:de:85:1a:e5:c7:70:ed:87: cb:30:be:ed:ac:99:ad:23:7e:57:dd:cf:19:8c:b2:4b:8d:8c: e6:d8:c5:17:8e:41:e2:4c:a2:f4:1d:d8:33:50:dd:41:95:ba: 71:9c:10:dc:2a:db:91:cc:31:e9:b9:3c:42:0c:9a:64:a7:60: f5:5e:63:99:cf:49:14:d3:0b:ac:66:ef:58:3b:48:b9:07:bc: 94:57:13:14:53:9c:0c:d1:70:df:d7:9b:27:22:23:04:d9:a0: 33:76:fd:6e:83:16:f3:3f:ae:dc:56:be:a9:df:3a:da:ed:57: 5c:4a:be:04:e9:bf:0f:c4:e3:12:46:50:5e:c1:0c:f7:db:63: 02:50:12:a3:be:d4:c3:5a:2d:97:14:6f:66:1c:aa:5a:37:2b: 22:2f:49:e9:72:ce:a5:d8:52:1e:8f:42:3d:55:6c:a3:7b:70: 43:32:7f:72:25:c1:5a:fb:95:1e:3c:b2:7c:92:19:1c:82:d3: cc:19:59:d3:29:94:7a:b3:e8:04:11:6a:cf:c3:b6:a5:fa:a6: 19:be:17:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwREYxMTAvBgNVBAUTKDlEMDhCRjM4QTBEMzhCOENBQjdDRkQ4OEY1RDhDNEVE NjY3NzhDQzEwHhcNMjQxMTIzMDQwODMzWhcNMjQxMTMwMDQwODMzWjAYMRYwFAYD VQQDEw02NzQxNTU0Mi01MmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6v8dtitprFgL/arZC+Cbj32S6ZU2Z4f4P8IgSwM8oMxOdXOYO+03gDepm62 VuuPQXU5F8HRAgir08AP7dhg6bgG8wf4ElTxlQp/kvtRLz36MqScRJR4/6qza+Jf MoKEits9/GCrXUDtBsoR+2OnVERwlGTIsWg2wOf7yigStqWsUiQS6YGB/tx35wzL s0nnHegWeHY7iGBH6PrwKDCkFhKXhoaO4VJifwhEJDt6GIysR/WgpVbAWnWwxec6 1EYZdRQXuCcpdg8ANRZejtPcFhVSXdFg0dzhGGCONSrb68q0+rwMNiUI1sJSnDzf 81MLXqq38ZRe/mP0efVtkgQScQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByy0eHI NPB+t97+4Xxx05xghQvGMB8GA1UdIwQYMBaAFJ0Ivzig04uMq3z9iPXYxO1md4zB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBERi9FNTA4MzY0ODk5 MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0eXJmUDJJOWRqRTdXWjNq TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBERi9FNTA4MzY0ODk5MjgxMUVFQkJDQUU4N0FDNEY5QUUwMi9uUWlfT0tEVGk0 eXJmUDJJOWRqRTdXWjNqTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf5uf2ihERS+wMlE+HFu6oWrWfL+tY1Ty9Zm3V1ssf/4lEN0eS+F+n OPdlwqBW3oUa5cdw7YfLML7trJmtI35X3c8ZjLJLjYzm2MUXjkHiTKL0HdgzUN1B lbpxnBDcKtuRzDHpuTxCDJpkp2D1XmOZz0kU0wusZu9YO0i5B7yUVxMUU5wM0XDf 15snIiME2aAzdv1ugxbzP67cVr6p3zra7VdcSr4E6b8PxOMSRlBewQz322MCUBKj vtTDWi2XFG9mHKpaNysiL0npcs6l2FIej0I9VWyje3BDMn9yJcFa+5UePLJ8khkc gtPMGVnTKZR6s+gEEWrPw7al+qYZvhev -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org