$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: pM5+Gvs4WtUgV2XIgDjNFf5jAQ1oRUBptyMZpLcvXng= Subject key identifier: 5E:4A:20:48:B8:D2:55:06:41:B3:79:2E:73:E4:6E:12:07:44:A6:84 Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 012C Signing time: Sat 23 Nov 2024 02:50:34 +0000 Manifest this update: Sat 23 Nov 2024 02:50:34 +0000 Manifest next update: Sat 30 Nov 2024 02:50:34 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: HSc1AOXLZ4xzM9+QRFQeFMaHBOh0Al92eoKdLB7Iq14=) 2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: YAYh7VPX1+fJkNqhGMAOJAwYwHnzOloh8Ae+N/XNZQY=) 3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: 0dIV1BuMrGTI1eJ/F5rbagneYyyNugrEiUlk6vS+T68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: Nov 23 02:50:34 2024 GMT Not After : Nov 30 02:50:34 2024 GMT Subject: CN=674142fa-81c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:bb:67:aa:58:99:83:ca:12:ab:1c:17:8d: 9f:f1:1e:16:65:b4:f6:37:35:27:43:d8:a0:ad:99: f1:1c:aa:90:3c:9d:80:27:7c:35:e1:9f:83:98:e3: 2f:67:e8:e5:3d:a5:34:4e:73:1b:b7:da:f3:aa:89: d4:fd:0e:45:27:bd:83:75:09:df:f6:23:a0:92:10: 5e:6d:5d:11:0c:62:c8:21:59:ed:af:fa:61:57:4b: 99:ca:40:55:1d:4a:47:c7:a1:45:f9:0a:a1:b8:8f: f1:3e:d5:c7:1d:e8:06:01:ea:f3:a7:1f:ba:54:d6: 7f:3d:e2:1a:9e:ac:9f:29:2c:98:f7:1f:f8:8f:26: df:fe:d7:c1:f2:0c:76:71:0b:b1:b4:5d:02:a4:56: e7:60:58:6c:0d:24:42:3d:06:0a:09:71:8a:3d:10: 32:2f:ac:e8:9d:d3:45:64:48:47:96:d8:79:c0:db: 43:bf:8b:c3:83:f1:ae:fa:88:d3:81:62:76:53:ff: 72:9c:68:8d:77:5a:01:11:2c:59:73:fb:8a:84:c9: 79:85:ca:10:31:d3:76:3d:7a:c2:2b:80:af:a4:08: d9:86:fd:09:57:86:54:4f:fc:a0:7b:0d:59:7e:88: 01:77:d8:1c:f8:00:46:2a:b3:09:a3:24:ec:fc:a9: 56:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4A:20:48:B8:D2:55:06:41:B3:79:2E:73:E4:6E:12:07:44:A6:84 X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ef:fe:b5:33:1f:4e:98:f0:5a:d6:2e:06:f1:14:8f:30:f1: 3a:da:21:cb:cb:4d:a2:a9:3b:d9:df:31:30:a2:4e:de:aa:de: d6:08:f0:ed:71:57:63:e9:a2:2c:e2:c1:d4:08:3f:f6:95:9b: fc:e7:7a:be:0b:8b:e1:b3:0a:15:e8:ca:63:e7:a5:f5:b4:82: 53:b8:89:de:19:4e:7c:8d:ec:20:f3:32:d7:1e:5a:f9:25:e9: 51:18:84:70:69:2c:5e:e8:ed:7d:cf:ce:cf:06:98:85:de:a4: eb:c4:d6:91:33:ea:93:25:67:41:66:5e:67:cf:a8:a2:26:a7: 91:f8:7d:c8:a9:ae:3e:5c:76:1d:f8:7a:00:32:72:9c:ee:08: 63:0d:75:d1:c2:40:a1:dd:d0:be:48:65:fe:e4:f7:3d:d6:1c: 56:52:b1:17:13:9b:09:c1:62:87:22:e0:c3:5e:62:b4:81:01: 91:3c:27:e4:ff:60:e1:fe:15:b7:c5:92:3b:37:f8:4b:a6:2e: 91:b0:d3:b1:90:b9:86:b2:5b:22:67:05:9c:14:f3:6f:6d:2d: f9:50:0c:92:ac:69:dd:cd:ff:b2:e7:c4:e5:1e:c0:be:b7:76: ad:e4:c2:9a:16:25:71:f0:37:65:d3:41:a6:7e:35:09:d7:97: d1:e0:19:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjQxMTIzMDI1MDM0WhcNMjQxMTMwMDI1MDM0WjAYMRYwFAYD VQQDEw02NzQxNDJmYS04MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NC7Z6pYmYPKEqscF42f8R4WZbT2NzUnQ9igrZnxHKqQPJ2AJ3w14Z+DmOMv Z+jlPaU0TnMbt9rzqonU/Q5FJ72DdQnf9iOgkhBebV0RDGLIIVntr/phV0uZykBV HUpHx6FF+QqhuI/xPtXHHegGAerzpx+6VNZ/PeIanqyfKSyY9x/4jybf/tfB8gx2 cQuxtF0CpFbnYFhsDSRCPQYKCXGKPRAyL6zondNFZEhHlth5wNtDv4vDg/Gu+ojT gWJ2U/9ynGiNd1oBESxZc/uKhMl5hcoQMdN2PXrCK4CvpAjZhv0JV4ZUT/ygew1Z fogBd9gc+ABGKrMJoyTs/KlWOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5KIEi4 0lUGQbN5LnPkbhIHRKaEMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG7/61Mx9OmPBa1i4G8RSPMPE62iHLy02iqTvZ3zEwok7eqt7WCPDt cVdj6aIs4sHUCD/2lZv853q+C4vhswoV6Mpj56X1tIJTuIneGU58jewg8zLXHlr5 JelRGIRwaSxe6O19z87PBpiF3qTrxNaRM+qTJWdBZl5nz6iiJqeR+H3Iqa4+XHYd +HoAMnKc7ghjDXXRwkCh3dC+SGX+5Pc91hxWUrEXE5sJwWKHIuDDXmK0gQGRPCfk /2Dh/hW3xZI7N/hLpi6RsNOxkLmGslsiZwWcFPNvbS35UAySrGndzf+y58TlHsC+ t3at5MKaFiVx8Ddl00GmfjUJ15fR4Bk8 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org