$ rpki-client -vvf rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft File: nm-wk8ALBix4zOEdID6XGh0H15U.mft (raw, json) Hash identifier: xTd/fPkKNPJGUrZJeek5dAe6rSh35xJU6UzF6EsZQwk= Subject key identifier: 8D:AB:12:5C:33:D8:E3:6A:CB:47:0E:08:8A:54:F6:F4:DE:A3:10:05 Authority key identifier: 9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95 Certificate issuer: /CN=A91535A9/serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft Manifest number: 3C Signing time: Sun 15 Sep 2024 09:52:31 +0000 Manifest this update: Sun 15 Sep 2024 09:52:31 +0000 Manifest next update: Sun 22 Sep 2024 09:52:31 +0000 Files and hashes: 1: nm-wk8ALBix4zOEdID6XGh0H15U.crl (hash: erJX7AkBDfU80qQIxJn2qrAwO4uWnAOa/9gseA7A8V0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91535A9/serialNumber=9E6FB093C00B062C78CCE11D203E971A1D07D795 Validity Not Before: Sep 15 09:52:31 2024 GMT Not After : Sep 22 09:52:31 2024 GMT Subject: CN=66e6ae5f-9d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:56:c8:4f:af:ae:49:c2:78:53:99:d6:bb: fc:78:05:ac:f8:6b:99:be:a5:9d:d1:0d:18:47:44: 7d:d4:5a:bd:ef:66:07:a3:08:72:8a:3b:73:cd:8f: 01:ab:20:03:f3:9d:a3:aa:cf:e8:07:81:e2:c3:db: 9c:4d:45:64:1f:14:16:d4:88:7c:ad:28:f8:9c:7b: 21:16:85:90:de:ed:35:e3:ea:f4:02:3c:00:00:d9: 7c:69:38:e8:d6:96:83:b1:16:b5:90:ff:e6:13:46: ad:d0:dc:78:44:f0:73:1a:57:2f:b8:ea:f7:a1:a1: 4c:53:42:3c:07:9b:98:f7:6e:70:08:39:66:23:f9: 6c:d4:e0:7e:f3:36:16:27:20:5e:54:b2:25:63:6c: 70:a3:7c:bc:cd:cf:f5:8b:0e:39:7c:e1:78:5a:c3: 1a:09:c1:c6:d1:27:37:05:4a:a7:26:c1:df:c7:94: e2:c6:52:22:6a:ae:d7:c4:4d:56:80:66:d4:6b:15: 6f:80:56:43:03:39:6d:42:eb:94:43:51:20:4e:e3: 75:91:67:75:d8:79:7e:a1:c9:1f:78:e3:6d:0d:a1: d4:ed:2c:c0:13:ae:0e:4c:ea:1a:cd:74:08:2d:7c: 0b:88:0b:c4:b7:62:db:7c:e8:bd:c2:e1:6f:ed:fa: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AB:12:5C:33:D8:E3:6A:CB:47:0E:08:8A:54:F6:F4:DE:A3:10:05 X509v3 Authority Key Identifier: keyid:9E:6F:B0:93:C0:0B:06:2C:78:CC:E1:1D:20:3E:97:1A:1D:07:D7:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nm-wk8ALBix4zOEdID6XGh0H15U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91535A9/F41404E0195D11EF8E132F7BC4F9AE02/nm-wk8ALBix4zOEdID6XGh0H15U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:a7:b4:b6:bf:c7:86:11:72:3d:d5:ac:09:aa:ec:2b:58:3b: f2:7a:15:b9:26:bc:e1:08:1a:60:49:b8:69:72:0d:21:fd:08: ce:2b:fb:49:51:83:1c:98:53:a5:89:88:ef:33:ef:80:ed:6c: 6b:93:38:2e:94:3a:50:0f:c5:30:f8:ad:70:f8:46:8e:42:e6: d1:7a:0b:bb:3c:6d:fe:6f:2a:2b:40:35:9a:a1:26:01:0e:64: 52:cb:22:9e:d6:47:8b:67:8b:be:ac:38:e6:2a:61:0d:9c:7a: c4:28:f9:a6:0d:47:70:61:81:d8:1e:8d:69:64:19:c6:96:89: 56:ba:af:af:de:3e:cf:5d:53:be:bf:2c:49:02:1f:5b:2c:dd: 96:e1:b9:2b:c3:33:ea:73:dc:58:0b:6d:8e:aa:0b:15:84:fa: 5a:48:e0:27:34:83:04:3f:69:6e:c3:ad:f3:01:35:3a:de:ee: af:52:be:c0:4d:05:0f:de:14:fd:b8:48:2d:f8:40:ef:16:f4: c1:80:69:48:bd:9a:4c:63:4a:9a:c2:d6:3b:5d:44:93:a9:1c: 6f:b0:3f:98:aa:73:09:e4:50:92:3f:78:b1:b7:5f:c0:73:3d: 40:f5:0d:b8:c3:41:be:8b:b9:ae:c8:e1:03:51:6a:14:48:35: 2f:54:cd:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzVBOTExMC8GA1UEBRMoOUU2RkIwOTNDMDBCMDYyQzc4Q0NFMTFEMjAzRTk3MUEx RDA3RDc5NTAeFw0yNDA5MTUwOTUyMzFaFw0yNDA5MjIwOTUyMzFaMBgxFjAUBgNV BAMTDTY2ZTZhZTVmLTlkMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ2VbIT6+uScJ4U5nWu/x4Baz4a5m+pZ3RDRhHRH3UWr3vZgejCHKKO3PNjwGr IAPznaOqz+gHgeLD25xNRWQfFBbUiHytKPiceyEWhZDe7TXj6vQCPAAA2XxpOOjW loOxFrWQ/+YTRq3Q3HhE8HMaVy+46vehoUxTQjwHm5j3bnAIOWYj+WzU4H7zNhYn IF5UsiVjbHCjfLzNz/WLDjl84XhawxoJwcbRJzcFSqcmwd/HlOLGUiJqrtfETVaA ZtRrFW+AVkMDOW1C65RDUSBO43WRZ3XYeX6hyR94420NodTtLMATrg5M6hrNdAgt fAuIC8S3Ytt86L3C4W/t+v4tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjasSXDPY 42rLRw4IilT29N6jEAUwHwYDVR0jBBgwFoAUnm+wk8ALBix4zOEdID6XGh0H15Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNUE5L0Y0MTQwNEUwMTk1 RDExRUY4RTEzMkY3QkM0RjlBRTAyL25tLXdrOEFMQml4NHpPRWRJRDZYR2gwSDE1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbm0td2s4QUxCaXg0ek9FZElENlhHaDBIMTVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NUE5L0Y0MTQwNEUwMTk1RDExRUY4RTEzMkY3QkM0RjlBRTAyL25tLXdrOEFMQml4 NHpPRWRJRDZYR2gwSDE1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmntLa/x4YRcj3VrAmq7CtYO/J6FbkmvOEIGmBJuGlyDSH9CM4r+0lR gxyYU6WJiO8z74DtbGuTOC6UOlAPxTD4rXD4Ro5C5tF6C7s8bf5vKitANZqhJgEO ZFLLIp7WR4tni76sOOYqYQ2cesQo+aYNR3BhgdgejWlkGcaWiVa6r6/ePs9dU76/ LEkCH1ss3ZbhuSvDM+pz3FgLbY6qCxWE+lpI4Cc0gwQ/aW7DrfMBNTre7q9SvsBN BQ/eFP24SC34QO8W9MGAaUi9mkxjSprC1jtdRJOpHG+wP5iqcwnkUJI/eLG3X8Bz PUD1DbjDQb6Lua7I4QNRahRINS9Uzf0= -----END CERTIFICATE-----Generated at Sun Sep 15 10:46:17 2024 by rpki-client on console-ams.rpki-client.org