$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: ltffqkjvhP6jh0ff9RaEfOVTRrsBaau4z24DzqW8wRE= Subject key identifier: 39:2F:13:54:1A:1B:71:93:4D:27:69:49:8C:60:81:F9:BF:57:01:9A Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: 23 Signing time: Thu 19 Sep 2024 06:04:50 +0000 Manifest this update: Thu 19 Sep 2024 06:04:49 +0000 Manifest next update: Thu 26 Sep 2024 06:04:49 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: CUTJGM+1W3KvjPo+LUYrNmVcacwEi8uHCGbmc36QXY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Sep 19 06:04:49 2024 GMT Not After : Sep 26 06:04:49 2024 GMT Subject: CN=66ebbf01-82df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:0c:1f:b1:56:cf:75:1b:5d:16:78:5a:56: 7a:59:4a:5d:28:f6:03:23:b9:1f:26:45:b1:9d:c1: 85:18:b7:0b:20:e8:c4:bc:2d:ad:a0:12:f9:de:88: 72:d0:40:0f:a0:ce:22:92:19:4c:7a:b1:13:aa:c7: 4f:c5:3b:34:81:a2:7d:c7:81:49:f0:3c:49:58:ba: 28:e3:b4:d7:78:04:d2:78:c9:8b:a0:6a:a0:3e:f0: 0b:b2:f8:45:5c:1d:63:70:c7:d7:cf:2d:cc:04:23: a1:12:13:92:3f:ee:ff:ea:1a:d0:14:22:b0:dd:3e: 18:63:f1:9c:8d:8b:32:19:6c:bb:f8:23:db:55:f6: 13:b7:02:23:0a:68:0d:b6:84:d9:f6:ac:60:17:57: f0:80:d8:54:21:70:66:38:94:9b:af:97:cf:2c:31: 1d:b3:6f:bf:a8:f6:88:be:f9:aa:47:92:b9:2c:bd: b5:97:8f:28:12:b4:a9:aa:6b:92:0b:c0:9c:e4:0f: 77:d8:35:d1:0f:38:3e:73:2e:7f:38:18:c1:f7:80: 93:a2:17:48:cb:7a:2e:57:40:83:1b:0c:a6:8a:d0: 37:5f:6b:67:38:ba:10:11:c0:ec:a0:7e:74:e3:32: 31:a7:66:d8:df:e7:db:f1:a2:f0:60:a6:f0:31:4d: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2F:13:54:1A:1B:71:93:4D:27:69:49:8C:60:81:F9:BF:57:01:9A X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a8:cb:40:02:d4:fd:f3:7d:c9:d8:38:c6:ef:61:37:63:3b: bd:5e:ca:2e:df:e4:03:46:9f:e2:05:d5:aa:6b:c9:5f:70:26: 95:41:56:b9:22:8a:23:42:34:2e:ed:f1:0f:4b:00:cf:94:0f: 96:3c:0b:26:4c:68:60:bc:36:1f:e7:71:3b:b0:6e:14:f3:b1: 47:58:ac:f7:36:ff:6f:af:12:96:37:33:d6:30:ec:f4:61:03: 0e:f3:1f:b9:42:bc:ac:27:cc:d6:6c:e9:c7:72:6c:d2:1c:75: 1a:84:e2:89:45:9d:5b:44:96:01:31:dc:19:1e:a5:a0:26:58: ea:17:e8:71:35:f5:54:e5:ad:9c:18:e2:15:aa:10:8a:7d:56: f9:9d:d7:1e:9d:d2:1c:40:b3:fc:4d:5e:7e:9a:c7:00:4b:c7: 16:0c:cc:d9:36:56:9f:dd:f0:c1:6f:c5:0c:9d:48:26:0d:dc: 64:2a:d7:36:03:e9:3d:62:83:f8:a6:a2:87:2a:66:6a:f4:84: 48:6b:ee:9e:a0:a6:b8:9c:10:d0:91:71:0b:53:f1:de:aa:4c: 3c:c4:ff:3d:4e:88:ce:3a:64:94:59:18:47:34:4d:3e:85:1e: dd:8f:53:4f:81:83:33:c4:a0:b8:16:1f:de:c1:49:2b:63:d9: e8:e8:72:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjFEQjExMC8GA1UEBRMoOUU3NjlCNTQ2ODIyRUVENUE3M0QzRjVEMDJERjlBQjQ4 OTgwMDNBOTAeFw0yNDA5MTkwNjA0NDlaFw0yNDA5MjYwNjA0NDlaMBgxFjAUBgNV BAMTDTY2ZWJiZjAxLTgyZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfcQwfsVbPdRtdFnhaVnpZSl0o9gMjuR8mRbGdwYUYtwsg6MS8La2gEvneiHLQ QA+gziKSGUx6sROqx0/FOzSBon3HgUnwPElYuijjtNd4BNJ4yYugaqA+8Auy+EVc HWNwx9fPLcwEI6ESE5I/7v/qGtAUIrDdPhhj8ZyNizIZbLv4I9tV9hO3AiMKaA22 hNn2rGAXV/CA2FQhcGY4lJuvl88sMR2zb7+o9oi++apHkrksvbWXjygStKmqa5IL wJzkD3fYNdEPOD5zLn84GMH3gJOiF0jLei5XQIMbDKaK0Ddfa2c4uhARwOygfnTj MjGnZtjf59vxovBgpvAxTTYdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOS8TVBob cZNNJ2lJjGCB+b9XAZowHwYDVR0jBBgwFoAUnnabVGgi7tWnPT9dAt+atImAA6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMURCLzJEODdERkQ2NDMx MDExRUY4NjhCMkI4MUM0RjlBRTAyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbm5hYlZHZ2k3dFduUFQ5ZEF0LWF0SW1BQTZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC MURCLzJEODdERkQ2NDMxMDExRUY4NjhCMkI4MUM0RjlBRTAyL25uYWJWR2dpN3RX blBUOWRBdC1hdEltQUE2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGKoy0AC1P3zfcnYOMbvYTdjO71eyi7f5ANGn+IF1apryV9wJpVBVrki iiNCNC7t8Q9LAM+UD5Y8CyZMaGC8Nh/ncTuwbhTzsUdYrPc2/2+vEpY3M9Yw7PRh Aw7zH7lCvKwnzNZs6cdybNIcdRqE4olFnVtElgEx3BkepaAmWOoX6HE19VTlrZwY 4hWqEIp9Vvmd1x6d0hxAs/xNXn6axwBLxxYMzNk2Vp/d8MFvxQydSCYN3GQq1zYD 6T1ig/imoocqZmr0hEhr7p6gpricENCRcQtT8d6qTDzE/z1OiM46ZJRZGEc0TT6F Ht2PU0+BgzPEoLgWH97BSStj2ejocnw= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:48 2024 by rpki-client on console-fra.rpki-client.org