$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft File: NsqppHOp6nOCn3NWgJvBYQOtA64.mft (raw, json) Hash identifier: wFLJUHHn1uBn88YNs+X168US7oApSI8zOeZZGOt94Ac= Subject key identifier: 5A:95:1A:18:A2:38:8B:1F:58:56:EC:2F:BD:71:69:E9:F5:52:F1:77 Authority key identifier: 36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE Certificate issuer: /CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft Manifest number: 08 Signing time: Mon 25 Nov 2024 06:07:17 +0000 Manifest this update: Mon 25 Nov 2024 06:07:17 +0000 Manifest next update: Mon 02 Dec 2024 06:07:17 +0000 Files and hashes: 1: NsqppHOp6nOCn3NWgJvBYQOtA64.crl (hash: oQniQYUlJ7F2baBWyhDuWdXKKGciqUvUwKN7ISc6sGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152329/serialNumber=36CAA9A473A9EA73829F7356809BC16103AD03AE Validity Not Before: Nov 25 06:07:17 2024 GMT Not After : Dec 2 06:07:17 2024 GMT Subject: CN=67441415-3066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:9f:99:2f:1c:bc:fa:da:8e:3b:2b:a2:6a: 85:1b:b6:ea:b9:79:5d:53:5d:a4:52:0d:4c:16:4f: 29:2b:5b:b0:82:86:15:34:d3:9a:9e:ac:be:11:e4: 20:73:e5:be:ab:ba:3c:ab:82:2e:90:2e:1c:46:1a: 72:8d:f9:c9:51:1b:a0:ee:a7:14:6f:82:76:69:ec: 93:ff:1e:43:c1:55:39:7b:69:8b:18:cb:30:ed:80: 56:16:2e:74:50:45:60:42:46:06:e0:6c:f4:c2:a2: 15:69:e3:50:3b:4a:1c:a5:55:a0:ac:70:be:7a:4c: 83:e7:81:f1:f2:3f:80:06:8a:cc:d8:c1:81:75:97: b7:d9:3e:ae:96:9d:fb:b7:e6:b4:f7:19:28:00:74: 2a:c8:8b:3b:83:a0:c0:6a:61:a4:9e:dd:81:8b:25: e8:6f:07:1b:27:08:da:0b:c3:c6:80:70:7d:c2:45: f4:ea:df:d8:00:ff:54:65:3b:ca:24:bd:ee:5b:63: 38:51:b2:ec:38:66:0b:fe:f3:c8:74:30:55:8a:e7: 12:c1:e4:f7:fc:cc:93:c3:90:61:03:69:10:54:ce: 4b:b2:b0:41:9a:10:20:b0:15:4c:3f:05:b8:fd:08: 3d:0d:c0:f4:e3:34:b0:4b:24:6e:82:9c:47:d1:63: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:95:1A:18:A2:38:8B:1F:58:56:EC:2F:BD:71:69:E9:F5:52:F1:77 X509v3 Authority Key Identifier: keyid:36:CA:A9:A4:73:A9:EA:73:82:9F:73:56:80:9B:C1:61:03:AD:03:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NsqppHOp6nOCn3NWgJvBYQOtA64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/D086D55EA26811EF9D914118C4F9AE02/NsqppHOp6nOCn3NWgJvBYQOtA64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f4:36:d7:08:8c:11:26:9a:6a:d2:33:6b:11:4e:05:03:8d: 3f:37:89:c9:52:82:4c:06:66:4b:f9:f3:49:8f:2c:e0:2c:ab: 87:aa:3f:80:a9:71:f3:36:da:2e:8e:fa:5b:23:a0:86:d3:36: 71:e3:73:b5:b6:9b:83:7a:c2:3d:b4:3b:b8:7e:d1:ce:44:81: 92:db:11:3d:a6:a5:ea:d9:cf:f8:35:24:d1:79:0b:bc:40:36: 71:6b:75:0d:9f:d5:67:9f:d6:12:36:0a:62:30:2e:ce:1c:e1: 7b:be:ec:52:05:b6:8d:45:19:ce:54:5b:b7:81:02:66:43:6e: 24:62:5d:8d:f5:69:ef:14:5d:f4:c0:5a:1d:33:7e:a3:78:db: 76:53:26:72:35:66:d0:ce:50:99:af:0c:e4:2f:11:a0:44:23: 63:93:03:97:66:32:81:44:35:ca:5f:1f:c7:08:a2:50:55:c0: 59:34:31:71:a2:2b:d6:a4:68:dc:0f:cb:00:df:b9:17:69:ab: 2a:a4:d4:99:75:f1:89:b9:45:97:a5:8a:e4:c7:e1:7f:a0:c8: 8c:8a:b9:59:71:a7:65:e0:a0:ab:7a:60:76:17:12:3a:73:21: b5:cf:c9:e9:ab:2a:a4:6d:8a:fa:b2:4c:fa:10:04:79:a3:6c: 24:58:a4:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjMyOTExMC8GA1UEBRMoMzZDQUE5QTQ3M0E5RUE3MzgyOUY3MzU2ODA5QkMxNjEw M0FEMDNBRTAeFw0yNDExMjUwNjA3MTdaFw0yNDEyMDIwNjA3MTdaMBgxFjAUBgNV BAMTDTY3NDQxNDE1LTMwNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeA5+ZLxy8+tqOOyuiaoUbtuq5eV1TXaRSDUwWTykrW7CChhU005qerL4R5CBz 5b6rujyrgi6QLhxGGnKN+clRG6DupxRvgnZp7JP/HkPBVTl7aYsYyzDtgFYWLnRQ RWBCRgbgbPTCohVp41A7ShylVaCscL56TIPngfHyP4AGiszYwYF1l7fZPq6Wnfu3 5rT3GSgAdCrIizuDoMBqYaSe3YGLJehvBxsnCNoLw8aAcH3CRfTq39gA/1RlO8ok ve5bYzhRsuw4Zgv+88h0MFWK5xLB5Pf8zJPDkGEDaRBUzkuysEGaECCwFUw/Bbj9 CD0NwPTjNLBLJG6CnEfRY4RzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWpUaGKI4 ix9YVuwvvXFp6fVS8XcwHwYDVR0jBBgwFoAUNsqppHOp6nOCn3NWgJvBYQOtA64w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMzI5L0QwODZENTVFQTI2 ODExRUY5RDkxNDExOEM0RjlBRTAyL05zcXBwSE9wNm5PQ24zTldnSnZCWVFPdEE2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnNxcHBIT3A2bk9DbjNOV2dKdkJZUU90QTY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MzI5L0QwODZENTVFQTI2ODExRUY5RDkxNDExOEM0RjlBRTAyL05zcXBwSE9wNm5P Q24zTldnSnZCWVFPdEE2NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJL0NtcIjBEmmmrSM2sRTgUDjT83iclSgkwGZkv580mPLOAsq4eqP4Cp cfM22i6O+lsjoIbTNnHjc7W2m4N6wj20O7h+0c5EgZLbET2mperZz/g1JNF5C7xA NnFrdQ2f1Wef1hI2CmIwLs4c4Xu+7FIFto1FGc5UW7eBAmZDbiRiXY31ae8UXfTA Wh0zfqN423ZTJnI1ZtDOUJmvDOQvEaBEI2OTA5dmMoFENcpfH8cIolBVwFk0MXGi K9akaNwPywDfuRdpqyqk1Jl18Ym5RZeliuTH4X+gyIyKuVlxp2XgoKt6YHYXEjpz IbXPyemrKqRtivqyTPoQBHmjbCRYpCQ= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:48 2024 by rpki-client on console-ams.rpki-client.org