$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: NS5b0kkj//lv8pkWShQVOf7K+fGOw5uaIVp3YdRYrW4= Subject key identifier: 5B:9C:FF:0B:9C:DF:F0:F6:A8:15:E6:6B:43:9D:18:73:1E:81:3D:A9 Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0A9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 1109 Signing time: Fri 22 Nov 2024 19:18:26 +0000 Manifest this update: Fri 22 Nov 2024 19:18:26 +0000 Manifest next update: Fri 29 Nov 2024 19:18:26 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: l7yRhKor+l0pLVQAa5bGXyVdqYc4su+kJwdRaM9TmXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2714 (0xa9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Nov 22 19:18:26 2024 GMT Not After : Nov 29 19:18:26 2024 GMT Subject: CN=6740d902-aea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:e3:e6:0e:a7:95:60:31:e9:a1:65:44:97: 84:96:22:91:65:16:73:37:b4:2a:a5:8c:5c:3d:db: 15:5c:06:92:57:8e:18:c6:be:78:a7:99:e2:ad:e1: 2e:bd:04:10:f0:56:c2:53:b9:d7:9e:1f:15:fb:b9: 75:22:a2:c6:cf:7a:ba:52:ad:6c:0d:68:66:c1:95: 2e:fd:88:bf:6a:d7:25:64:b8:93:70:be:26:f7:fd: 4d:9a:63:60:e4:c4:e4:37:7f:f8:ae:c0:9c:14:63: 32:fd:d7:32:98:3d:3f:7c:bd:98:47:e1:ad:ed:24: 9e:dd:55:99:10:b6:32:79:1a:f0:f5:94:aa:90:fb: 73:ee:6b:d4:06:79:48:8c:b7:7e:e4:85:70:c3:7e: 22:fe:b6:da:62:a7:48:ea:60:53:2f:d4:80:7a:a8: 85:f0:1c:0a:4f:b6:6b:4c:03:f2:6b:72:27:ee:f9: 8b:6b:6b:6b:25:c6:06:4d:22:1c:96:b0:c2:ed:8b: 29:99:02:2d:08:d4:c5:7f:f0:e9:b8:a5:f3:5e:91: cc:74:04:77:d1:ee:0c:21:30:94:e6:83:e1:ca:41: b2:85:3d:97:55:31:5d:fa:9d:4b:af:33:a9:ce:0a: d9:cc:02:8c:6e:12:bf:cf:5b:50:b7:7a:d2:3d:f7: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9C:FF:0B:9C:DF:F0:F6:A8:15:E6:6B:43:9D:18:73:1E:81:3D:A9 X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f3:f1:2d:51:0e:50:83:55:51:17:b1:f5:6e:fb:7f:dd:2b: 40:af:ca:b2:8f:84:70:5d:fa:b3:23:d3:2a:6a:16:c8:d8:d8: c3:d0:19:d8:37:ef:f5:df:65:dc:1b:47:15:9e:fd:2a:ca:45: 55:79:e2:4c:2d:0f:8a:11:38:79:37:7a:52:96:67:25:56:23: b8:59:ac:bb:44:f3:66:b1:8f:2a:31:7d:71:01:51:6e:d6:d7: e9:99:c4:3f:2f:47:a9:15:28:4b:49:f9:fe:6b:03:6a:31:fb: 4c:83:53:46:64:b5:34:b3:ea:30:13:bf:a8:b7:e0:13:61:81: be:e8:d6:f8:b8:9e:a1:e7:a3:87:7f:f7:60:f7:9c:e2:92:d0: 46:f9:b2:7c:f6:27:78:65:a4:5f:50:ee:07:eb:98:bd:c6:70: 88:6e:cb:3c:b0:68:69:32:9c:45:ca:55:2d:8a:a6:d2:45:1c: cc:e6:9f:77:0e:3f:21:31:f0:88:3f:e3:3c:8a:59:3e:2f:ed: 9d:32:0d:c3:bf:74:df:cc:c6:87:8a:db:62:4d:47:b7:23:23: e3:4b:6b:e1:b1:a4:32:05:33:bb:3b:79:ea:f8:63:23:fa:3e: f4:9a:40:c8:76:38:cd:23:d0:57:9b:7d:46:44:c9:b4:fe:b9: a1:7a:63:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjQxMTIyMTkxODI2WhcNMjQxMTI5MTkxODI2WjAYMRYwFAYD VQQDEw02NzQwZDkwMi1hZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9Tj5g6nlWAx6aFlRJeEliKRZRZzN7QqpYxcPdsVXAaSV44Yxr54p5nireEu vQQQ8FbCU7nXnh8V+7l1IqLGz3q6Uq1sDWhmwZUu/Yi/atclZLiTcL4m9/1NmmNg 5MTkN3/4rsCcFGMy/dcymD0/fL2YR+Gt7SSe3VWZELYyeRrw9ZSqkPtz7mvUBnlI jLd+5IVww34i/rbaYqdI6mBTL9SAeqiF8BwKT7ZrTAPya3In7vmLa2trJcYGTSIc lrDC7YspmQItCNTFf/DpuKXzXpHMdAR30e4MITCU5oPhykGyhT2XVTFd+p1LrzOp zgrZzAKMbhK/z1tQt3rSPff7AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuc/wuc 3/D2qBXma0OdGHMegT2pMB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT8/EtUQ5Qg1VRF7H1bvt/3StAr8qyj4RwXfqzI9MqahbI2NjD0BnY N+/132XcG0cVnv0qykVVeeJMLQ+KETh5N3pSlmclViO4Way7RPNmsY8qMX1xAVFu 1tfpmcQ/L0epFShLSfn+awNqMftMg1NGZLU0s+owE7+ot+ATYYG+6Nb4uJ6h56OH f/dg95ziktBG+bJ89id4ZaRfUO4H65i9xnCIbss8sGhpMpxFylUtiqbSRRzM5p93 Dj8hMfCIP+M8ilk+L+2dMg3Dv3TfzMaHittiTUe3IyPjS2vhsaQyBTO7O3nq+GMj +j70mkDIdjjNI9BXm31GRMm0/rmhemP6 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org