$ rpki-client -vvf rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft File: rNBOSci3K74B41N1Wc9MlHMO1d8.mft (raw, json) Hash identifier: RmlaqMTxa7QxbhrHr10dioxMOhejpE+ZZQMJLIUsmQs= Subject key identifier: F5:39:DA:B6:DB:88:D0:19:09:39:83:BE:81:0F:4F:2C:CC:EF:4C:42 Authority key identifier: AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF Certificate issuer: /CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF Certificate serial: 0BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft Manifest number: 0B9A Signing time: Fri 22 Nov 2024 18:46:52 +0000 Manifest this update: Fri 22 Nov 2024 18:46:51 +0000 Manifest next update: Fri 29 Nov 2024 18:46:51 +0000 Files and hashes: 1: rNBOSci3K74B41N1Wc9MlHMO1d8.crl (hash: 5sfWPsHRKEQpwAk8d0ow3X9cfEn0jka2yGTSsfTWmyE=) 2: 4FE2CBA0F74C11EEA9368831C4F9AE02.roa (hash: wUtWWtOblDmN2oZ3l5tp2ZFVmOtLMYWVgUpV6mOP4KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2994 (0xbb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF Validity Not Before: Nov 22 18:46:51 2024 GMT Not After : Nov 29 18:46:51 2024 GMT Subject: CN=6740d19c-a019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:de:27:8c:cf:99:52:bf:2b:ac:96:78:b0: ba:b4:c7:1d:f3:a5:d1:01:a6:b7:7e:c1:ef:37:fc: f8:a3:6e:28:31:34:46:4f:5f:e1:cf:fe:6e:7e:8d: 3e:c4:61:c7:98:43:80:99:d1:6d:6e:36:ed:3f:04: 28:08:da:87:0a:98:42:34:05:ad:46:d0:f7:f6:21: 4f:02:62:b0:25:0e:e3:1c:e6:d1:6f:a1:c9:0e:fc: be:e0:dc:09:5d:47:0c:e0:40:9c:3f:51:81:65:00: 17:97:ee:6f:93:30:b2:01:38:4e:71:8f:6a:0b:ed: 1b:4e:33:43:64:31:ab:14:91:a3:75:91:ef:1c:c8: 98:99:34:21:94:8f:e7:10:ca:a6:1f:7e:d6:4b:74: 04:57:8f:29:75:96:40:37:f2:6e:b6:58:0d:1f:f1: b7:a1:5a:4f:1d:65:df:a6:40:5f:e9:43:10:b5:b6: dc:fd:98:5e:4c:1c:e1:79:0c:cd:e6:7a:3f:1e:6d: e3:3d:3b:06:33:9d:e2:23:f8:01:26:a2:ff:be:e4: d9:a1:f9:76:03:de:8a:d5:fd:7f:80:bd:1f:6c:1d: 8b:e2:8a:af:ba:bf:91:4b:d2:98:02:7b:ed:fd:2c: 1d:67:89:78:9a:e5:82:d7:26:4b:a5:b0:0d:76:fd: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:39:DA:B6:DB:88:D0:19:09:39:83:BE:81:0F:4F:2C:CC:EF:4C:42 X509v3 Authority Key Identifier: keyid:AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:7d:8b:19:00:c4:a8:12:ab:ba:fb:d2:07:56:75:8d:41:5e: 89:19:3c:6d:b4:cc:2b:9a:79:db:7a:bf:40:ba:45:52:c9:05: ef:fe:52:18:16:63:2d:fa:f6:f5:62:fe:31:ab:c3:0c:da:be: 8d:ad:f9:92:11:3f:e1:20:27:dd:df:db:25:a1:55:40:cf:2e: cc:95:94:16:ce:7c:5e:c0:db:a5:c3:c8:20:5b:55:8a:ac:69: ff:0a:92:a2:01:a8:65:7b:08:44:cf:c0:0b:ce:59:dc:80:92: e6:60:d2:81:c8:c4:12:bf:1a:71:64:f3:9a:26:83:ec:56:42: f9:e7:85:3b:bc:c9:0b:ab:5a:bd:6e:d1:c9:a5:0a:9f:46:29: db:c9:dd:16:70:7c:ee:be:1d:46:4a:68:d9:f6:cd:01:65:76: 99:57:14:ca:43:02:3c:7d:a0:0f:42:0a:92:13:d4:60:82:9b: c1:4c:11:4e:6c:4f:c9:8e:51:a7:29:ab:81:8e:f9:34:18:17: ff:eb:9b:7a:6a:47:e7:ca:89:87:22:64:81:9e:10:d6:f1:44: f8:ef:c1:9c:11:eb:cd:19:b2:d3:d3:f9:b6:08:87:41:69:42: c8:f1:34:94:dd:35:71:85:5f:aa:80:99:37:00:96:d6:e8:1b: 3f:0e:c3:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQjMxMTAvBgNVBAUTKEFDRDA0RTQ5QzhCNzJCQkUwMUUzNTM3NTU5Q0Y0Qzk0 NzMwRUQ1REYwHhcNMjQxMTIyMTg0NjUxWhcNMjQxMTI5MTg0NjUxWjAYMRYwFAYD VQQDEw02NzQwZDE5Yy1hMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3jeJ4zPmVK/K6yWeLC6tMcd86XRAaa3fsHvN/z4o24oMTRGT1/hz/5ufo0+ xGHHmEOAmdFtbjbtPwQoCNqHCphCNAWtRtD39iFPAmKwJQ7jHObRb6HJDvy+4NwJ XUcM4ECcP1GBZQAXl+5vkzCyAThOcY9qC+0bTjNDZDGrFJGjdZHvHMiYmTQhlI/n EMqmH37WS3QEV48pdZZAN/JutlgNH/G3oVpPHWXfpkBf6UMQtbbc/ZheTBzheQzN 5no/Hm3jPTsGM53iI/gBJqL/vuTZofl2A96K1f1/gL0fbB2L4oqvur+RS9KYAnvt /SwdZ4l4muWC1yZLpbANdv2A0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPU52rbb iNAZCTmDvoEPTyzM70xCMB8GA1UdIwQYMBaAFKzQTknItyu+AeNTdVnPTJRzDtXf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFCMy9DNkRBMjkyQzE4 NDYxMUVBOUI4NDJGMjdDNEY5QUUwMi9yTkJPU2NpM0s3NEI0MU4xV2M5TWxITU8x ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQk9TY2kzSzc0QjQxTjFXYzlNbEhNTzFkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFCMy9DNkRBMjkyQzE4NDYxMUVBOUI4NDJGMjdDNEY5QUUwMi9yTkJPU2NpM0s3 NEI0MU4xV2M5TWxITU8xZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0fYsZAMSoEqu6+9IHVnWNQV6JGTxttMwrmnnber9AukVSyQXv/lIY FmMt+vb1Yv4xq8MM2r6NrfmSET/hICfd39sloVVAzy7MlZQWznxewNulw8ggW1WK rGn/CpKiAahlewhEz8ALzlncgJLmYNKByMQSvxpxZPOaJoPsVkL554U7vMkLq1q9 btHJpQqfRinbyd0WcHzuvh1GSmjZ9s0BZXaZVxTKQwI8faAPQgqSE9RggpvBTBFO bE/JjlGnKauBjvk0GBf/65t6akfnyomHImSBnhDW8UT478GcEevNGbLT0/m2CIdB aULI8TSU3TVxhV+qgJk3AJbW6Bs/DsM6 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org