$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json) Hash identifier: 8UvtXJHufTsGJeGuU3cQLLumkw85VNDA/VbSj8nSFAQ= Subject key identifier: CF:BC:32:A6:F7:96:15:5A:7F:D3:CB:EF:87:C6:15:9C:81:31:7C:FF Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Certificate serial: 0519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft Manifest number: 0514 Signing time: Fri 22 Nov 2024 23:10:30 +0000 Manifest this update: Fri 22 Nov 2024 23:10:30 +0000 Manifest next update: Fri 29 Nov 2024 23:10:30 +0000 Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: VWbGkDEloduz0Na8ulA3MY0M6DbJM53UoN6AhvvADPI=) 2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: +hS0TVD0X9uG67g79eiaJGg+9lKriguUI4QCyoszmNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Validity Not Before: Nov 22 23:10:30 2024 GMT Not After : Nov 29 23:10:30 2024 GMT Subject: CN=67410f66-f52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4a:a4:7e:6d:23:91:26:5f:1b:df:b3:3d:e8: ce:53:b1:17:11:55:c9:42:08:e2:f8:b9:4c:9a:58: 56:c6:8c:e7:fd:82:da:ac:74:df:a0:ae:69:05:86: 58:fc:6c:f4:3f:be:f8:18:6e:f6:fe:49:8d:10:08: c8:4c:f5:cc:a6:49:6e:4a:a1:83:4d:03:ed:97:30: ed:58:c8:05:40:52:72:e7:6a:1a:c7:77:18:2d:55: 29:73:ac:ca:75:ac:d2:be:72:ff:1d:cc:1d:eb:e0: bb:98:8f:db:03:30:6e:98:1d:69:c8:50:84:0a:7b: 4b:93:84:3f:c9:c9:b4:fc:69:18:78:ed:a4:b8:38: e8:b8:f6:c8:4d:24:32:78:84:34:ff:36:44:00:9f: a0:58:f5:f6:2a:87:8c:87:0c:28:cb:2e:af:8f:0b: 3a:fd:79:db:15:b4:37:9f:a9:2d:c7:02:b6:43:4b: 8c:a0:9b:59:db:29:bb:5c:32:2f:68:51:fe:89:23: 06:d3:6f:44:66:60:5f:33:97:7e:31:d4:bd:58:2a: f0:35:20:a2:bd:a7:3d:72:2c:e0:bc:ad:50:53:08: 03:7a:bf:e7:7d:b9:fe:ad:7f:43:e5:0f:39:3e:20: b4:8c:11:d2:09:d2:e1:72:58:57:b6:3f:ea:51:4c: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:32:A6:F7:96:15:5A:7F:D3:CB:EF:87:C6:15:9C:81:31:7C:FF X509v3 Authority Key Identifier: keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:66:cc:2d:ff:fa:66:ae:d2:56:26:e2:a4:a1:1a:94:85:ef: c7:52:df:e6:24:2b:ba:eb:98:3a:b0:3d:62:b2:0f:bc:27:31: 38:b4:71:ca:6c:68:ff:c8:ae:de:14:65:47:6d:c6:91:8b:37: 3c:42:13:13:16:c6:e1:95:1b:3b:0e:a3:53:a4:73:3f:d0:a9: 34:20:60:cc:c5:6b:ee:ee:6f:0b:5c:cb:90:02:59:20:39:59: 65:d4:73:85:e9:75:e0:52:48:e6:c2:0c:83:0c:e4:47:80:66: 13:da:fc:09:1f:47:eb:98:9d:25:20:4a:fb:fb:ea:46:fb:4c: 56:41:30:57:34:c2:e2:81:13:19:03:dd:6c:7d:12:84:61:61: ab:15:a2:db:64:e2:ef:14:6f:90:1a:d5:0d:86:6a:6c:80:1a: ed:6d:99:d5:d1:75:73:dc:68:db:17:c1:2a:6a:47:cc:68:e3: 6b:c1:29:b9:ae:e0:fe:a5:39:81:83:78:fe:6f:75:eb:d6:a2: 5a:ce:bb:c6:4a:ed:28:37:5b:33:0a:b4:56:f6:35:11:95:f1: 5c:22:bb:44:1f:dc:38:a4:1e:12:7f:fa:79:c2:fb:b1:67:37: 26:43:e1:61:1f:0c:84:38:56:25:93:5d:ad:88:6d:c4:0f:d4: 2a:2e:a8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4 Qzk0NTY4NzcwHhcNMjQxMTIyMjMxMDMwWhcNMjQxMTI5MjMxMDMwWjAYMRYwFAYD VQQDEw02NzQxMGY2Ni1mNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Eqkfm0jkSZfG9+zPejOU7EXEVXJQgji+LlMmlhWxozn/YLarHTfoK5pBYZY /Gz0P774GG72/kmNEAjITPXMpkluSqGDTQPtlzDtWMgFQFJy52oax3cYLVUpc6zK dazSvnL/Hcwd6+C7mI/bAzBumB1pyFCECntLk4Q/ycm0/GkYeO2kuDjouPbITSQy eIQ0/zZEAJ+gWPX2KoeMhwwoyy6vjws6/XnbFbQ3n6ktxwK2Q0uMoJtZ2ym7XDIv aFH+iSMG029EZmBfM5d+MdS9WCrwNSCivac9cizgvK1QUwgDer/nfbn+rX9D5Q85 PiC0jBHSCdLhclhXtj/qUUx4+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+8Mqb3 lhVaf9PL74fGFZyBMXz/MB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0 dVg0MEpqWmN4X0dNbEZhSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzZswt//pmrtJWJuKkoRqUhe/HUt/mJCu665g6sD1isg+8JzE4tHHK bGj/yK7eFGVHbcaRizc8QhMTFsbhlRs7DqNTpHM/0Kk0IGDMxWvu7m8LXMuQAlkg OVll1HOF6XXgUkjmwgyDDORHgGYT2vwJH0frmJ0lIEr7++pG+0xWQTBXNMLigRMZ A91sfRKEYWGrFaLbZOLvFG+QGtUNhmpsgBrtbZnV0XVz3GjbF8EqakfMaONrwSm5 ruD+pTmBg3j+b3Xr1qJazrvGSu0oN1szCrRW9jURlfFcIrtEH9w4pB4Sf/p5wvux ZzcmQ+FhHwyEOFYlk12tiG3ED9QqLqiu -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org