$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft File: ng7u9_yIBOBDfomd7TGYizxgLQI.mft (raw, json) Hash identifier: OQaHReW/tfz3PZwGbF7k/kJ1H8LvrBt/4PKPV8+B070= Subject key identifier: 3B:20:DD:AD:C9:EB:18:D7:D0:43:46:F0:E3:D3:1A:65:CC:88:48:21 Authority key identifier: 9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 Certificate issuer: /CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Certificate serial: 0B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft Manifest number: 0CAE Signing time: Fri 22 Nov 2024 18:52:42 +0000 Manifest this update: Fri 22 Nov 2024 18:52:41 +0000 Manifest next update: Fri 29 Nov 2024 18:52:41 +0000 Files and hashes: 1: ng7u9_yIBOBDfomd7TGYizxgLQI.crl (hash: /yZ6CnrzgQdJ//yW8JvhuiiU3h1FtojQPDBBgy6Igzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Validity Not Before: Nov 22 18:52:41 2024 GMT Not After : Nov 29 18:52:41 2024 GMT Subject: CN=6740d2fa-3e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:9c:85:a1:f0:91:a5:63:64:ea:fb:93:7d: 5e:32:bf:7b:27:1a:f0:d1:44:bf:43:bf:f0:dc:d6: 9e:24:8e:21:55:31:f4:ac:8e:c7:5b:40:df:34:84: d3:87:d2:da:93:0d:9b:dd:61:84:59:67:0b:43:ad: ac:67:e8:2e:d2:48:77:34:54:c6:2b:eb:79:57:64: 46:dd:84:73:a0:a4:66:20:45:b9:8c:e9:b2:76:41: 03:25:5c:e3:a9:7e:b6:74:f9:69:4f:d7:be:c7:cb: 99:44:14:11:81:ce:b5:7a:b8:88:8f:1c:b8:78:30: 48:b7:18:a4:d2:30:28:d0:89:e9:f1:64:8f:c3:ad: 4a:80:05:d8:ff:dc:7d:a0:df:9d:88:e4:c2:9e:4f: 6c:2b:f6:f3:55:82:de:98:b1:77:62:6c:92:29:22: ad:bc:20:76:cf:58:55:70:d6:16:da:85:8f:f1:9d: c3:ab:c8:19:a7:a9:6e:24:d6:d7:36:8b:e4:3a:f8: 84:77:95:a2:0e:3f:ee:66:e9:25:e4:d5:d3:67:9b: 2e:99:b6:2b:e1:b0:26:10:ba:72:8b:5d:6d:b7:f7: 30:43:c2:7a:f7:47:d4:1d:19:f7:69:97:9e:42:d4: d8:67:79:aa:30:13:7d:c7:e2:84:60:48:4f:48:0a: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:DD:AD:C9:EB:18:D7:D0:43:46:F0:E3:D3:1A:65:CC:88:48:21 X509v3 Authority Key Identifier: keyid:9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:14:8c:d3:c7:7a:83:74:ca:54:ad:7b:18:db:7b:5e:56:16: 88:2d:d6:b5:55:e8:b2:f2:2a:44:27:6e:be:7c:10:e2:cb:9a: 9b:58:6c:de:9d:0a:3d:ca:3f:84:78:dd:83:32:b4:13:88:99: 32:44:8d:9a:3d:d4:36:f5:b5:47:6a:39:a3:ac:b4:d7:14:9b: 27:3a:7f:2c:f1:bd:10:40:d8:07:d5:50:ed:f4:eb:26:d3:25: f3:1a:86:7d:24:92:5d:cd:3e:d6:e3:0e:cb:98:6e:d9:b7:77: 27:4c:4e:27:b2:83:16:c8:90:4c:ec:01:2b:3f:9e:cf:18:0c: fa:f4:3f:7a:d6:2a:cb:ed:1a:36:47:f8:00:25:c8:5e:4f:84: f2:8a:a1:74:e2:86:74:fc:6c:14:fd:17:71:83:f7:11:3a:e0: 73:51:b0:49:2f:18:a6:5e:78:1d:d8:69:c2:9d:46:78:40:66: 74:48:00:3e:d5:c3:50:25:b8:e4:56:bf:cb:6e:cd:1c:ac:96: d0:71:93:b9:a3:9e:fa:f3:98:fb:23:ef:f4:98:b1:ce:be:33: 53:9a:d9:c2:b6:21:9c:ef:25:cd:c1:5c:38:8e:22:1d:c5:c5: ec:96:30:58:c7:60:f7:16:bd:47:59:2d:a0:64:43:51:be:60: 97:da:a6:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDlFMEVFRUY3RkM4ODA0RTA0MzdFODk5REVEMzE5ODhC M0M2MDJEMDIwHhcNMjQxMTIyMTg1MjQxWhcNMjQxMTI5MTg1MjQxWjAYMRYwFAYD VQQDEw02NzQwZDJmYS0zZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOychaHwkaVjZOr7k31eMr97Jxrw0US/Q7/w3NaeJI4hVTH0rI7HW0DfNITT h9Lakw2b3WGEWWcLQ62sZ+gu0kh3NFTGK+t5V2RG3YRzoKRmIEW5jOmydkEDJVzj qX62dPlpT9e+x8uZRBQRgc61eriIjxy4eDBItxik0jAo0Inp8WSPw61KgAXY/9x9 oN+diOTCnk9sK/bzVYLemLF3YmySKSKtvCB2z1hVcNYW2oWP8Z3Dq8gZp6luJNbX NovkOviEd5WiDj/uZukl5NXTZ5sumbYr4bAmELpyi11tt/cwQ8J690fUHRn3aZee QtTYZ3mqMBN9x+KEYEhPSAp2/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsg3a3J 6xjX0ENG8OPTGmXMiEghMB8GA1UdIwQYMBaAFJ4O7vf8iATgQ36Jne0xmIs8YC0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJPQkRmb21kN1RHWWl6eGdM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nN3U5X3lJQk9CRGZvbWQ3VEdZaXp4Z0xRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJP QkRmb21kN1RHWWl6eGdMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7FIzTx3qDdMpUrXsY23teVhaILda1Veiy8ipEJ26+fBDiy5qbWGze nQo9yj+EeN2DMrQTiJkyRI2aPdQ29bVHajmjrLTXFJsnOn8s8b0QQNgH1VDt9Osm 0yXzGoZ9JJJdzT7W4w7LmG7Zt3cnTE4nsoMWyJBM7AErP57PGAz69D961irL7Ro2 R/gAJcheT4TyiqF04oZ0/GwU/Rdxg/cROuBzUbBJLximXngd2GnCnUZ4QGZ0SAA+ 1cNQJbjkVr/Lbs0crJbQcZO5o57685j7I+/0mLHOvjNTmtnCtiGc7yXNwVw4jiId xcXsljBYx2D3Fr1HWS2gZENRvmCX2qaK -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:26 2024 by rpki-client on console-ams.rpki-client.org