$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: 9rW7qr8RnqKNMnpyZYfoVh14Xw76dBRrNie9964heTU= Subject key identifier: BB:80:2F:ED:E5:B3:60:91:99:A8:ED:1A:9B:93:25:4B:3B:A7:10:E3 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 01ED Signing time: Sat 23 Nov 2024 01:41:18 +0000 Manifest this update: Sat 23 Nov 2024 01:41:18 +0000 Manifest next update: Sat 30 Nov 2024 01:41:18 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: NaQXkDLHu4X7V545CrShOTCcBXR9aMKFwOASGQktVZQ=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: YssH476E2tgxPdw+/0l4VE/a3GZaUyUxDjk4z13BJXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: Nov 23 01:41:18 2024 GMT Not After : Nov 30 01:41:18 2024 GMT Subject: CN=674132be-b3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:f7:bd:b7:7c:64:a7:b2:83:a7:78:07:31: 57:89:4b:a8:76:9d:12:9d:83:fb:68:da:10:de:c1: 08:d3:26:51:b3:d2:b7:6d:3b:47:3d:d4:29:30:46: 1b:6a:ac:ab:28:98:27:88:52:e6:71:5a:38:ed:2c: cb:e7:21:58:dd:21:66:4c:d3:d5:1e:89:8d:a2:6b: 7c:5d:c0:af:35:15:ae:e0:99:b3:b0:63:ee:a3:46: 4b:2d:74:12:a0:35:09:3e:0d:83:ea:50:f4:1c:a6: f7:ef:13:0a:18:39:14:a9:04:e4:c3:9b:85:49:b0: 99:58:e3:ed:7d:cc:d6:a4:46:66:90:0d:2e:f5:9b: 6b:b5:62:fb:4a:c7:9c:1a:97:bd:c7:bc:e2:b9:97: 4b:a5:af:45:a2:99:9b:d9:da:b4:1e:7b:ee:1a:64: b0:e4:17:cd:54:c5:4b:a2:50:7f:73:55:83:55:73: 7e:00:00:b5:04:02:e6:3c:4f:8f:b5:bf:5b:e0:81: a7:4b:5c:42:4f:bf:d7:50:98:1e:72:7c:6e:83:c3: 3b:52:dc:c7:fe:70:8f:46:1e:25:06:fb:c1:ff:aa: 82:79:5f:62:d4:63:06:ca:2a:4e:01:17:50:a4:88: 47:32:d7:4a:45:2f:3d:06:7a:34:bf:31:28:89:56: 7a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:80:2F:ED:E5:B3:60:91:99:A8:ED:1A:9B:93:25:4B:3B:A7:10:E3 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f1:92:78:11:f6:c0:4d:fd:44:e1:d2:17:39:28:70:ab:22: 9a:c1:ad:0c:c4:6b:53:1f:11:73:12:47:f2:f6:f2:c7:f0:a6: ab:f9:37:4e:90:69:be:6a:8c:48:19:e6:fa:50:bb:43:de:30: d8:50:a4:c3:d3:78:b2:b3:57:9e:32:3f:9f:02:c1:91:85:de: 82:99:25:8c:ba:72:18:6c:36:52:d7:97:34:6d:1e:7d:46:16: e9:61:2c:4b:06:14:f6:a0:82:ea:4f:2e:8b:94:3c:a4:b8:87: fd:0b:c7:3b:65:4a:37:26:05:17:6c:67:39:56:ce:db:03:66: 6c:e9:dc:8e:e1:b4:d5:ee:76:c4:b4:59:73:af:0e:eb:8d:6c: 40:29:e1:ae:b5:d7:6e:34:ac:58:e9:1d:ef:9e:21:f9:cd:9f: 7b:b9:1d:7d:93:d9:ef:75:ea:ba:fc:24:04:f7:51:2d:e5:86: 98:c1:5d:7b:71:83:f0:80:9c:cb:a0:a8:bd:d1:c2:93:00:a1: 83:8f:51:29:41:e6:9f:bd:89:85:40:45:ee:1b:2d:86:26:fb: 1d:c8:44:4d:da:cf:bf:17:77:ad:51:d0:bb:41:fa:29:e3:36: 4a:38:e9:78:de:3a:ff:84:3f:1e:52:d5:38:a9:42:8e:ab:e8: 04:46:07:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjQxMTIzMDE0MTE4WhcNMjQxMTMwMDE0MTE4WjAYMRYwFAYD VQQDEw02NzQxMzJiZS1iM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rX3vbd8ZKeyg6d4BzFXiUuodp0SnYP7aNoQ3sEI0yZRs9K3bTtHPdQpMEYb aqyrKJgniFLmcVo47SzL5yFY3SFmTNPVHomNomt8XcCvNRWu4JmzsGPuo0ZLLXQS oDUJPg2D6lD0HKb37xMKGDkUqQTkw5uFSbCZWOPtfczWpEZmkA0u9ZtrtWL7Ssec Gpe9x7ziuZdLpa9Fopmb2dq0HnvuGmSw5BfNVMVLolB/c1WDVXN+AAC1BALmPE+P tb9b4IGnS1xCT7/XUJgecnxug8M7UtzH/nCPRh4lBvvB/6qCeV9i1GMGyipOARdQ pIhHMtdKRS89Bno0vzEoiVZ6aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuAL+3l s2CRmajtGpuTJUs7pxDjMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf8ZJ4EfbATf1E4dIXOShwqyKawa0MxGtTHxFzEkfy9vLH8Kar+TdO kGm+aoxIGeb6ULtD3jDYUKTD03iys1eeMj+fAsGRhd6CmSWMunIYbDZS15c0bR59 RhbpYSxLBhT2oILqTy6LlDykuIf9C8c7ZUo3JgUXbGc5Vs7bA2Zs6dyO4bTV7nbE tFlzrw7rjWxAKeGutdduNKxY6R3vniH5zZ97uR19k9nvdeq6/CQE91Et5YaYwV17 cYPwgJzLoKi90cKTAKGDj1EpQeafvYmFQEXuGy2GJvsdyERN2s+/F3etUdC7Qfop 4zZKOOl43jr/hD8eUtU4qUKOq+gERgdE -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org