$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json) Hash identifier: TVmEpK4FV7/yBAgUIACniDJOn5nWd57V3nevqOHqDI0= Subject key identifier: 9B:05:A9:40:D3:59:D4:81:A0:77:F2:D8:68:B3:70:BA:D6:39:F0:12 Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Certificate serial: 26DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft Manifest number: 26DC Signing time: Wed 20 Nov 2024 15:39:11 +0000 Manifest this update: Wed 20 Nov 2024 15:39:10 +0000 Manifest next update: Wed 27 Nov 2024 15:39:10 +0000 Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: r1lw+Nttamh2w1uM4uTDHeYByIAGiQvihogSM9DdDvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9948 (0x26dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Validity Not Before: Nov 20 15:39:10 2024 GMT Not After : Nov 27 15:39:10 2024 GMT Subject: CN=673e029e-7b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:df:72:79:04:f1:6b:49:e1:ff:f6:22:85: 45:74:77:9b:d2:4c:65:82:1b:1d:42:c0:4f:14:f7: 86:0b:85:fd:8e:8b:22:ef:13:4f:56:ca:da:bf:1f: 33:ee:16:b5:83:b4:c8:7f:b2:96:c7:a7:eb:8b:29: 5e:72:d9:fd:b5:3e:6c:b2:60:f2:2a:92:1f:6e:57: 2e:2b:f0:68:0b:a4:2e:8f:27:eb:77:6c:84:5d:c0: 00:0a:04:90:1a:b2:3d:66:48:94:24:68:a2:a6:b2: 04:07:ae:e9:73:28:37:e2:22:09:06:4c:b8:66:16: 95:3e:44:58:87:c1:00:22:12:59:ee:ce:f9:e6:4f: b0:28:5f:81:08:e5:e0:06:f0:4f:de:80:39:c3:73: 94:d9:29:e4:a1:db:84:6e:10:25:41:24:03:18:bf: 9f:64:61:ac:d6:1d:dd:72:b3:75:b3:51:a1:1e:1a: aa:4c:f4:02:f3:ca:8b:b2:ff:b9:67:26:ea:38:d4: 01:9b:ba:c9:c8:87:18:12:a0:aa:99:86:1d:87:43: 4e:66:5b:0e:92:6f:e8:f0:0f:31:e5:ed:4f:c8:0a: 70:db:8d:a8:5d:74:69:59:55:16:e3:45:0a:4b:9d: 82:c4:ec:8e:15:c0:65:ea:0d:09:6c:65:31:51:2c: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:05:A9:40:D3:59:D4:81:A0:77:F2:D8:68:B3:70:BA:D6:39:F0:12 X509v3 Authority Key Identifier: keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:29:db:6d:61:81:d2:de:ec:1a:e2:47:d5:2d:83:5b:fc:aa: 29:65:01:0c:c8:e2:ef:6c:b5:e0:ce:9f:18:7a:4c:37:43:a9: 8d:ad:18:b4:bb:15:3b:7e:72:3f:7f:e3:e5:80:be:46:68:cf: df:4f:29:a0:8a:8c:d5:ef:d1:32:d8:4e:3c:9c:7d:8a:0a:88: d7:18:85:44:c0:bd:8e:6e:f2:06:a8:df:58:fa:01:f6:5b:a3: 7d:b9:11:e0:c2:f7:65:77:7b:d7:bb:fa:79:91:b1:80:8e:14: b1:03:55:3e:db:7d:85:6f:96:d2:46:f3:eb:99:98:7f:37:ee: 80:a6:6d:20:59:8c:7b:77:50:fb:ac:73:d5:9b:32:5a:d5:9f: 26:86:17:03:20:33:2a:d6:1b:df:da:7b:e8:08:55:5a:66:54: f5:48:9e:0b:e0:93:35:2e:ea:8b:74:ee:4c:c4:cc:c6:80:b8: 3d:48:50:5c:3e:96:8e:4b:0c:67:73:dc:3c:39:11:c6:5b:61: e1:fc:ab:e7:68:80:80:35:2e:dd:34:78:90:59:3c:44:b4:a1: cd:11:f9:c1:75:34:0f:e1:87:57:62:9e:38:b1:0b:af:46:d0: 18:07:ab:8f:90:db:fb:95:a3:3d:b4:f3:91:84:be:1e:cf:a2: 68:a6:cf:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0QzMxMTAvBgNVBAUTKDM2MEFEQUZFODYxQzQ4M0FCNkQ1NEFBMzQwRkI4NEQy NEJBQkYyMUIwHhcNMjQxMTIwMTUzOTEwWhcNMjQxMTI3MTUzOTEwWjAYMRYwFAYD VQQDEw02NzNlMDI5ZS03YjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxbfcnkE8WtJ4f/2IoVFdHeb0kxlghsdQsBPFPeGC4X9josi7xNPVsravx8z 7ha1g7TIf7KWx6friylectn9tT5ssmDyKpIfblcuK/BoC6Qujyfrd2yEXcAACgSQ GrI9ZkiUJGiiprIEB67pcyg34iIJBky4ZhaVPkRYh8EAIhJZ7s755k+wKF+BCOXg BvBP3oA5w3OU2SnkoduEbhAlQSQDGL+fZGGs1h3dcrN1s1GhHhqqTPQC88qLsv+5 ZybqONQBm7rJyIcYEqCqmYYdh0NOZlsOkm/o8A8x5e1PyApw242oXXRpWVUW40UK S52CxOyOFcBl6g0JbGUxUSznwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsFqUDT WdSBoHfy2GizcLrWOfASMB8GA1UdIwQYMBaAFDYK2v6GHEg6ttVKo0D7hNJLq/Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8xOEVEMzgyOEI4 QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NEcTIxVXFqUVB1RTBrdXI4 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05ncmFfb1ljU0RxMjFVcWpRUHVFMGt1cjhocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRDMy8xOEVEMzgyOEI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NE cTIxVXFqUVB1RTBrdXI4aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2KdttYYHS3uwa4kfVLYNb/KopZQEMyOLvbLXgzp8Yekw3Q6mNrRi0 uxU7fnI/f+PlgL5GaM/fTymgiozV79Ey2E48nH2KCojXGIVEwL2ObvIGqN9Y+gH2 W6N9uRHgwvdld3vXu/p5kbGAjhSxA1U+232Fb5bSRvPrmZh/N+6Apm0gWYx7d1D7 rHPVmzJa1Z8mhhcDIDMq1hvf2nvoCFVaZlT1SJ4L4JM1LuqLdO5MxMzGgLg9SFBc PpaOSwxnc9w8ORHGW2Hh/KvnaICANS7dNHiQWTxEtKHNEfnBdTQP4YdXYp44sQuv RtAYB6uPkNv7laM9tPORhL4ez6Jops9c -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:18 2024 by rpki-client on console-ams.rpki-client.org