$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: //4+5m2HKhabGPpZJUvpHFmciDSw+M5DCZJ/sEIjtF8= Subject key identifier: 10:87:88:B2:35:A7:38:0C:47:8E:78:C1:D3:ED:AF:C5:C7:6B:32:23 Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: 44 Signing time: Sat 23 Nov 2024 05:19:38 +0000 Manifest this update: Sat 23 Nov 2024 05:19:37 +0000 Manifest next update: Sat 30 Nov 2024 05:19:37 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: L+d2rWgQJ19WJwkAV1DpXg1byhqj/ewcSVHgmQX8JCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Nov 23 05:19:37 2024 GMT Not After : Nov 30 05:19:37 2024 GMT Subject: CN=674165e9-7844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2d:35:a6:40:79:c1:08:d8:86:6e:e5:7d:a1: 0a:aa:e5:3a:74:21:1d:6b:d3:31:8a:81:60:66:5f: 2e:5e:bd:15:b3:b9:0a:da:73:1e:f2:eb:c5:47:2a: ac:25:64:84:23:fd:d9:62:a2:ec:b3:81:8f:dd:e7: 41:e1:23:f6:d8:21:2d:eb:d2:cf:d8:dc:0c:3f:c9: 3b:7f:92:84:9a:9e:ae:7c:22:11:ba:9a:12:d0:01: 7f:1d:81:68:f6:c6:0d:bb:6e:6a:35:23:92:ad:21: 18:a2:84:05:91:68:b4:e5:88:b6:90:48:e1:c4:b9: 50:d6:0b:df:11:30:ff:fd:23:d9:49:f0:24:b3:25: 78:5b:73:fd:42:d7:32:42:f1:d6:67:f8:c4:23:f4: 72:86:69:fd:a9:0f:1c:e1:0b:42:1c:d9:b6:ca:bb: 94:39:81:07:71:b9:a5:66:95:7e:18:5d:c9:fa:ff: 29:fe:29:f1:6f:4d:83:0e:0f:4f:62:4e:c3:ed:b8: ad:b9:90:e3:fd:c6:ae:41:5c:62:c6:8c:95:5d:c4: f0:cc:a7:24:6f:49:3a:c7:10:91:93:a9:b7:02:43: 15:59:66:51:72:6a:81:3d:2d:f6:cc:69:4c:8b:06: 17:4d:85:85:61:24:7a:dc:87:9a:04:a6:0c:42:61: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:88:B2:35:A7:38:0C:47:8E:78:C1:D3:ED:AF:C5:C7:6B:32:23 X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:b0:e3:ce:7e:05:b6:18:59:71:57:7c:43:89:e3:4a:62:ed: 0d:b0:b4:9e:d2:cc:ed:78:b3:d1:27:84:63:57:f9:8f:36:36: 7f:fe:33:ef:fb:51:e9:76:55:d7:b3:89:b0:83:6a:23:b3:5a: 6f:23:1b:8c:85:40:2a:df:14:f2:ce:07:25:dd:87:c1:62:d8: 55:22:a5:ad:62:43:bd:13:94:de:2b:44:56:b1:c0:89:70:03: f0:aa:9a:0b:d3:a3:6c:19:3d:1a:14:29:9e:1c:30:2e:57:51: 64:35:c5:52:da:b5:80:da:c0:52:f0:60:92:02:a3:dc:ff:ea: f3:b3:3e:48:dc:8a:0c:9b:98:a2:71:58:0c:f2:3a:aa:f7:50: 67:4c:a4:ff:54:d7:d9:09:e8:78:73:86:60:83:16:df:1f:46: 5d:fe:c6:ab:dd:a0:ec:7f:ff:13:0c:3a:fd:15:ed:02:4c:4a: 1e:53:92:1e:2c:1c:5c:ca:91:fe:59:fc:60:bb:b9:f3:ee:33: 56:35:04:1b:29:16:8d:e6:6e:5e:9b:d6:93:ea:ab:85:9c:d5: 67:20:52:ef:93:49:f4:54:25:2d:51:76:c5:28:62:d5:2b:14: 2a:8d:8d:ff:45:86:d7:23:02:eb:3c:5b:8b:e6:0d:93:7e:7e: b8:ec:59:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjFEQjExMC8GA1UEBRMoOUU3NjlCNTQ2ODIyRUVENUE3M0QzRjVEMDJERjlBQjQ4 OTgwMDNBOTAeFw0yNDExMjMwNTE5MzdaFw0yNDExMzAwNTE5MzdaMBgxFjAUBgNV BAMTDTY3NDE2NWU5LTc4NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRLTWmQHnBCNiGbuV9oQqq5Tp0IR1r0zGKgWBmXy5evRWzuQracx7y68VHKqwl ZIQj/dliouyzgY/d50HhI/bYIS3r0s/Y3Aw/yTt/koSanq58IhG6mhLQAX8dgWj2 xg27bmo1I5KtIRiihAWRaLTliLaQSOHEuVDWC98RMP/9I9lJ8CSzJXhbc/1C1zJC 8dZn+MQj9HKGaf2pDxzhC0Ic2bbKu5Q5gQdxuaVmlX4YXcn6/yn+KfFvTYMOD09i TsPtuK25kOP9xq5BXGLGjJVdxPDMpyRvSTrHEJGTqbcCQxVZZlFyaoE9LfbMaUyL BhdNhYVhJHrch5oEpgxCYXSHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEIeIsjWn OAxHjnjB0+2vxcdrMiMwHwYDVR0jBBgwFoAUnnabVGgi7tWnPT9dAt+atImAA6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMURCLzJEODdERkQ2NDMx MDExRUY4NjhCMkI4MUM0RjlBRTAyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbm5hYlZHZ2k3dFduUFQ5ZEF0LWF0SW1BQTZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC MURCLzJEODdERkQ2NDMxMDExRUY4NjhCMkI4MUM0RjlBRTAyL25uYWJWR2dpN3RX blBUOWRBdC1hdEltQUE2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALmw485+BbYYWXFXfEOJ40pi7Q2wtJ7SzO14s9EnhGNX+Y82Nn/+M+/7 Uel2VdezibCDaiOzWm8jG4yFQCrfFPLOByXdh8Fi2FUipa1iQ70TlN4rRFaxwIlw A/CqmgvTo2wZPRoUKZ4cMC5XUWQ1xVLatYDawFLwYJICo9z/6vOzPkjcigybmKJx WAzyOqr3UGdMpP9U19kJ6HhzhmCDFt8fRl3+xqvdoOx//xMMOv0V7QJMSh5Tkh4s HFzKkf5Z/GC7ufPuM1Y1BBspFo3mbl6b1pPqq4Wc1WcgUu+TSfRUJS1RdsUoYtUr FCqNjf9FhtcjAus8W4vmDZN+frjsWQY= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org