$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft File: n33tfQW4HeZsc1u4VH52BIycP1o.mft (raw, json) Hash identifier: NjMjoaXkuNXTt5AcguBlMjv7ra690Ovm5y1P9aK5DO0= Subject key identifier: 94:7F:77:0F:C3:01:75:21:E1:D2:61:81:C1:98:50:1B:F3:B9:D4:28 Authority key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A Certificate issuer: /CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Certificate serial: 0573 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft Manifest number: 056D Signing time: Fri 22 Nov 2024 22:54:34 +0000 Manifest this update: Fri 22 Nov 2024 22:54:33 +0000 Manifest next update: Fri 29 Nov 2024 22:54:33 +0000 Files and hashes: 1: n33tfQW4HeZsc1u4VH52BIycP1o.crl (hash: E5KZKOGO2aXbj8W9GuDVT+4OETkrb9LO7i0xmD+DV5A=) 2: 6A4E9778632F11EE8F22BC2EC4F9AE02.roa (hash: qlYD7nyaD20cEGlo6vV+I6imXePtGy/Av+l/JmetaZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A Validity Not Before: Nov 22 22:54:33 2024 GMT Not After : Nov 29 22:54:33 2024 GMT Subject: CN=67410ba9-c3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3f:38:41:19:62:21:8a:65:fd:0a:54:ca:a7: 31:2c:7c:ab:77:56:f1:a5:2a:bf:a4:80:dd:03:d7: 32:fe:ef:fa:68:6a:34:09:bc:01:49:28:c4:31:7f: e3:0c:5a:09:8c:ab:95:82:3c:4a:7c:91:f8:c3:aa: a3:fe:df:62:28:23:73:aa:b5:e5:c2:ab:21:d7:35: 41:18:78:46:5f:d4:54:29:05:c6:9a:b1:b0:3a:6f: 33:ca:70:3f:e7:ee:2c:72:67:cd:e8:61:69:40:ae: ab:c0:d1:9f:df:29:e5:4c:74:d8:d9:41:49:79:bd: 23:45:80:9b:20:15:63:87:62:56:21:78:bd:a5:76: 38:e1:1b:7a:73:91:6a:d0:82:c2:9c:eb:bf:20:1f: 00:53:79:57:b1:58:55:3c:4c:73:1d:c5:4c:c3:64: 3d:ae:9c:be:5a:a7:eb:9e:6e:f2:6b:a7:fe:a6:88: c7:41:e4:8f:a0:a8:1f:89:7e:23:39:3f:3e:d1:97: f8:d8:b2:15:56:d7:5e:e8:5b:0b:33:a1:49:16:0a: e8:f3:4c:57:ee:54:cc:38:a4:8c:d3:de:85:68:4a: b3:93:e2:5a:19:d4:ed:d3:a8:7a:43:a7:14:11:3c: ff:ca:05:a8:b0:75:ba:93:b1:41:d6:e1:82:f1:a8: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7F:77:0F:C3:01:75:21:E1:D2:61:81:C1:98:50:1B:F3:B9:D4:28 X509v3 Authority Key Identifier: keyid:9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:97:82:69:23:aa:29:ca:ef:f4:a3:25:34:3b:34:00:38:df: 59:c2:e3:e7:54:5b:5b:c7:8a:57:4e:52:52:b7:5a:fc:7a:6c: d7:25:74:94:70:4b:f5:22:41:55:0e:db:3d:19:71:89:c1:07: 12:24:76:01:82:31:57:ab:e4:7c:ed:bc:b0:7c:5e:91:36:af: 3f:fd:6a:f6:99:fb:2d:9e:bb:53:83:74:88:b8:29:aa:47:6c: 94:a6:f8:ac:91:0b:93:d2:84:0b:1a:c4:c1:16:2e:c3:41:ae: 63:ed:a1:a9:be:ae:fb:6a:eb:f1:53:0b:83:bf:f2:fb:c0:b1: 3f:73:ec:88:7f:5e:da:a2:97:23:23:db:a4:d9:34:1b:23:77: b9:86:a9:e2:0e:2e:e9:b6:d3:4c:4c:87:2a:0f:46:35:2d:c5: f3:00:a0:d1:ac:d7:d7:fe:2d:44:03:e9:0a:bc:6b:e3:43:88: 18:ea:36:82:7c:82:88:12:7c:b3:07:95:d4:52:2b:50:7c:0c: 96:0e:1d:15:b7:4c:76:4d:6a:21:a3:84:b3:39:e2:e6:ec:22: 6a:d7:18:4b:cc:31:6f:75:ad:02:72:47:c9:e5:d2:2b:67:fc: 02:09:0a:92:81:18:1b:7a:fd:69:66:ad:52:aa:a7:18:7f:5d: 15:96:bc:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGOUExMTAvBgNVBAUTKDlGN0RFRDdEMDVCODFERTY2QzczNUJCODU0N0U3NjA0 OEM5QzNGNUEwHhcNMjQxMTIyMjI1NDMzWhcNMjQxMTI5MjI1NDMzWjAYMRYwFAYD VQQDEw02NzQxMGJhOS1jM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5T84QRliIYpl/QpUyqcxLHyrd1bxpSq/pIDdA9cy/u/6aGo0CbwBSSjEMX/j DFoJjKuVgjxKfJH4w6qj/t9iKCNzqrXlwqsh1zVBGHhGX9RUKQXGmrGwOm8zynA/ 5+4scmfN6GFpQK6rwNGf3ynlTHTY2UFJeb0jRYCbIBVjh2JWIXi9pXY44Rt6c5Fq 0ILCnOu/IB8AU3lXsVhVPExzHcVMw2Q9rpy+Wqfrnm7ya6f+pojHQeSPoKgfiX4j OT8+0Zf42LIVVtde6FsLM6FJFgro80xX7lTMOKSM096FaEqzk+JaGdTt06h6Q6cU ETz/ygWosHW6k7FB1uGC8ajDywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJR/dw/D AXUh4dJhgcGYUBvzudQoMB8GA1UdIwQYMBaAFJ997X0FuB3mbHNbuFR+dgSMnD9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY5QS9DMEVBNTc5OEJF NDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhlWnNjMXU0Vkg1MkJJeWNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zM3RmUVc0SGVac2MxdTRWSDUyQkl5Y1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEY5QS9DMEVBNTc5OEJFNDUxMUVCQjBDNUQwODRDNEY5QUUwMi9uMzN0ZlFXNEhl WnNjMXU0Vkg1MkJJeWNQMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBal4JpI6opyu/0oyU0OzQAON9ZwuPnVFtbx4pXTlJSt1r8emzXJXSU cEv1IkFVDts9GXGJwQcSJHYBgjFXq+R87bywfF6RNq8//Wr2mfstnrtTg3SIuCmq R2yUpviskQuT0oQLGsTBFi7DQa5j7aGpvq77auvxUwuDv/L7wLE/c+yIf17aopcj I9uk2TQbI3e5hqniDi7pttNMTIcqD0Y1LcXzAKDRrNfX/i1EA+kKvGvjQ4gY6jaC fIKIEnyzB5XUUitQfAyWDh0Vt0x2TWoho4SzOeLm7CJq1xhLzDFvda0CckfJ5dIr Z/wCCQqSgRgbev1pZq1SqqcYf10Vlrzv -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org