$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: TvPNZyXkm1PPG+ivQvI3M4RsDx8bvau3mDUMdjGYiFk= Subject key identifier: 1D:95:04:9E:AD:67:0D:35:EB:3A:C8:CA:F4:5F:84:66:7A:F8:3C:DE Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 0390 Signing time: Thu 21 Nov 2024 00:24:27 +0000 Manifest this update: Thu 21 Nov 2024 00:24:26 +0000 Manifest next update: Thu 28 Nov 2024 00:24:26 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: waploSChqTgZciezt1umMACXWvF2LsSNGME7hwkFzxE=) 2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: AN4hBiZx1+tVHoaN/LazZ9dbBGKvWOUI1wRt7z4HbB0=) 3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: 2ORnkhzshra5gFpyLproOPD3/repbchwTxkXJLvaYUk=) 4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: wgX+EMzgoKfrAVdDz/48mCSLSDU8m2MWUYcABpMkNSU=) 5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: Hb+mhjOnUiRcLYwNjTfwnpK/Ky2Nkaju8DZXLfXW14s=) 6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: Cfsk+t84ibLo+fkUEG7hLT0dawrjqPaFJly7xspE4TQ=) 7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PGtYjaqkpIprbzlxtBJWh83LZS83/aciT2SXNSejhqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Nov 21 00:24:26 2024 GMT Not After : Nov 28 00:24:26 2024 GMT Subject: CN=673e7dbb-fe6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:e0:60:f7:5b:39:57:a1:a0:57:ee:9c:0b: dd:13:e0:b9:50:a6:00:03:a6:f6:20:04:f9:a1:a2: 1e:ec:3b:92:3e:96:cd:9b:b3:1a:78:80:bb:7c:67: f3:87:3a:9f:21:3a:19:8d:f6:63:9e:c3:ed:cd:c4: 5f:50:6d:c9:09:02:92:68:a5:58:08:43:84:a0:24: 00:b0:9d:86:0b:ee:a0:37:21:15:17:0d:27:d7:6b: 84:5e:3a:e4:00:fd:b6:b3:50:6c:f1:fb:16:b4:98: 89:09:db:08:00:ef:c9:6b:24:34:8e:fa:8f:94:c9: 93:00:f9:26:1a:e2:72:e8:42:84:b8:49:78:1d:07: 4f:12:79:80:ec:bd:a1:4a:b5:9d:cb:7b:86:a8:62: d1:fa:f5:ab:7f:9e:bf:b2:90:8f:50:ce:bc:39:96: 7d:c5:c7:c1:c2:d8:dc:08:86:f0:98:0b:25:90:00: 61:5c:d2:3c:dc:d3:1e:16:02:a7:82:b6:e3:8e:e4: 0b:79:c5:84:89:94:64:90:34:fa:44:45:9e:d7:c5: 17:5f:a9:c1:43:ab:36:50:9b:f5:c0:c2:d2:fb:94: e3:3a:94:9e:8a:70:88:99:fc:aa:2d:e3:4f:23:bb: 20:df:d7:40:81:2b:59:8c:78:6a:9c:7d:e7:d9:85: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:95:04:9E:AD:67:0D:35:EB:3A:C8:CA:F4:5F:84:66:7A:F8:3C:DE X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9d:2e:8b:35:73:90:4a:57:af:46:7b:76:62:bb:1b:ae:24: 53:e3:63:1e:de:7f:8b:fe:b9:a4:2f:fc:97:ff:2c:d1:c5:34: 77:a5:db:35:80:ed:4d:28:bc:84:c8:85:8c:70:31:60:0d:1d: 4b:bf:0f:38:f4:61:3e:f5:87:30:ae:1f:82:68:4f:68:6b:a4: 38:c0:11:ec:f0:c0:cf:dd:ee:60:9f:53:b9:c9:c0:0c:8c:54: 2e:99:bc:7d:50:04:2c:3e:33:df:e1:be:d2:e1:cd:0a:92:58: 5f:e8:44:b6:d4:9c:09:78:af:dc:2a:fb:32:fc:cf:4f:ef:2d: 55:e8:b1:06:f6:3b:87:fb:fe:e0:43:a0:da:9f:12:42:68:d2: 79:e1:5e:6e:f2:12:fb:af:85:a3:5f:ab:d9:b0:3e:15:f3:9d: 68:c8:d5:29:db:14:31:eb:c4:3c:53:86:cb:e3:3e:de:4a:96: ad:81:ee:70:07:bd:a2:6a:8a:72:76:06:ee:18:d1:83:ee:5f: 91:50:dc:2e:75:ef:bf:5c:76:8a:30:60:0f:fc:fc:52:5d:f9: 41:52:6f:c9:f6:cf:28:98:d6:a0:78:aa:f1:54:cb:bd:90:1e: b9:f4:e8:b7:1f:82:b9:e5:b4:fb:8a:97:86:73:cf:1f:f3:03: cf:82:6a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjQxMTIxMDAyNDI2WhcNMjQxMTI4MDAyNDI2WjAYMRYwFAYD VQQDEw02NzNlN2RiYi1mZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgfgYPdbOVehoFfunAvdE+C5UKYAA6b2IAT5oaIe7DuSPpbNm7MaeIC7fGfz hzqfIToZjfZjnsPtzcRfUG3JCQKSaKVYCEOEoCQAsJ2GC+6gNyEVFw0n12uEXjrk AP22s1Bs8fsWtJiJCdsIAO/JayQ0jvqPlMmTAPkmGuJy6EKEuEl4HQdPEnmA7L2h SrWdy3uGqGLR+vWrf56/spCPUM68OZZ9xcfBwtjcCIbwmAslkABhXNI83NMeFgKn grbjjuQLecWEiZRkkDT6REWe18UXX6nBQ6s2UJv1wMLS+5TjOpSeinCImfyqLeNP I7sg39dAgStZjHhqnH3n2YUcDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2VBJ6t Zw016zrIyvRfhGZ6+DzeMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKnS6LNXOQSlevRnt2YrsbriRT42Me3n+L/rmkL/yX/yzRxTR3pds1 gO1NKLyEyIWMcDFgDR1Lvw849GE+9Ycwrh+CaE9oa6Q4wBHs8MDP3e5gn1O5ycAM jFQumbx9UAQsPjPf4b7S4c0Kklhf6ES21JwJeK/cKvsy/M9P7y1V6LEG9juH+/7g Q6DanxJCaNJ54V5u8hL7r4WjX6vZsD4V851oyNUp2xQx68Q8U4bL4z7eSpatge5w B72iaopydgbuGNGD7l+RUNwude+/XHaKMGAP/PxSXflBUm/J9s8omNageKrxVMu9 kB659Oi3H4K55bT7ipeGc88f8wPPgmrR -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:00 2024 by rpki-client on console-ams.rpki-client.org