$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: 5KfEO48WkXmhBSa7oP0x0GOAEO18ZaR+4akIoLl06Zw= Subject key identifier: 5F:92:E4:AE:DD:B5:5C:77:D6:C4:D4:16:D8:8B:9A:EA:3A:FD:8F:88 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 02CC Signing time: Thu 21 Nov 2024 00:55:48 +0000 Manifest this update: Thu 21 Nov 2024 00:55:47 +0000 Manifest next update: Thu 28 Nov 2024 00:55:47 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: YgE+TJBWO9I0cNJmjz6t1dZc99IWWUkP1vpC52fkDwo=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: H1TbSfb4htfB0LmY4JPuswNoz4LPXkP4zd4P9+5LYFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Nov 21 00:55:47 2024 GMT Not After : Nov 28 00:55:47 2024 GMT Subject: CN=673e8513-7b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:45:8b:a0:37:19:f0:fd:8a:08:1e:39:1c: ab:81:1c:1b:0a:ae:84:47:7f:03:a5:fd:16:9f:f2: 47:74:95:2c:13:3c:93:2a:b8:9b:ec:b4:e5:6b:47: 4a:17:24:31:35:ee:e2:6f:b0:a7:fe:87:44:53:a8: b8:05:00:1b:8c:e1:be:bb:09:63:c7:d4:52:83:5f: 57:22:46:16:7e:00:82:bd:0e:ec:9f:b1:79:93:8e: 75:bb:51:6e:27:fd:1a:31:c3:bd:94:76:1e:23:da: b1:e2:08:44:7e:ee:f1:2d:fe:55:32:4d:4a:71:36: 5a:80:a2:8e:24:02:c9:a4:81:c3:e7:6f:0e:7b:85: 7b:01:c6:e3:c0:ad:75:2f:b0:71:0d:e6:1f:c3:d6: c2:ee:c6:fc:4f:e4:9a:99:2b:0f:c0:3e:d6:df:2f: 67:d9:17:ed:1e:8c:c5:57:25:c8:1a:4c:9f:72:62: 72:74:bc:44:6f:6d:eb:85:b5:38:62:f5:26:a2:09: 26:88:fd:2e:9d:66:63:93:7c:c0:90:ca:fc:b2:50: ec:c6:ca:0a:df:30:d3:02:36:73:3c:92:3b:43:c7: 78:b0:21:de:21:15:83:bc:17:94:da:7b:9c:6e:ee: 5c:74:7d:73:59:67:2b:75:8f:e1:be:35:bd:9e:e6: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:E4:AE:DD:B5:5C:77:D6:C4:D4:16:D8:8B:9A:EA:3A:FD:8F:88 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a4:d5:63:55:4a:92:6e:6f:1c:2b:61:9f:3d:56:44:78:7e: bc:6f:21:7f:19:cd:bb:54:61:c4:8d:bb:8f:49:e7:62:ad:f0: f8:b4:ea:fb:f8:be:ba:7c:3f:f4:26:b1:b2:20:21:cd:ab:20: 1b:e6:f5:e7:27:8a:0c:43:e3:27:73:66:4f:f4:9a:bd:b1:7b: 8f:07:3d:05:d5:e7:87:10:28:74:de:fb:cd:76:b9:40:7a:fd: 57:29:3d:e6:73:4f:bd:be:b3:ff:b8:b7:32:3d:9f:32:15:06: dc:78:e7:9e:e4:4a:53:20:99:ec:b3:7d:49:07:9d:a1:f4:3e: 48:98:e8:2b:a6:0c:0b:91:ac:57:70:b1:58:62:27:c3:93:ab: 23:d1:4c:0c:44:19:8a:ee:9f:41:1c:a9:64:61:1b:c8:3d:c0: 89:f3:ab:12:c8:ce:7c:1c:a9:63:3a:58:c6:47:69:99:79:95: 00:83:1d:ac:6a:85:26:09:e5:3d:c1:fe:fd:27:e9:a8:75:af: 38:c5:88:0a:b7:cf:8b:59:94:10:65:db:00:44:8f:63:6b:6e: 1d:ca:37:77:77:f1:0a:f9:5e:9c:98:4b:89:e2:c5:46:74:29: 03:c6:79:fb:df:6c:96:27:55:f9:38:f8:7c:ae:b5:fa:22:2e: ff:51:49:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjQxMTIxMDA1NTQ3WhcNMjQxMTI4MDA1NTQ3WjAYMRYwFAYD VQQDEw02NzNlODUxMy03YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqdFi6A3GfD9iggeORyrgRwbCq6ER38Dpf0Wn/JHdJUsEzyTKrib7LTla0dK FyQxNe7ib7Cn/odEU6i4BQAbjOG+uwljx9RSg19XIkYWfgCCvQ7sn7F5k451u1Fu J/0aMcO9lHYeI9qx4ghEfu7xLf5VMk1KcTZagKKOJALJpIHD528Oe4V7AcbjwK11 L7BxDeYfw9bC7sb8T+SamSsPwD7W3y9n2RftHozFVyXIGkyfcmJydLxEb23rhbU4 YvUmogkmiP0unWZjk3zAkMr8slDsxsoK3zDTAjZzPJI7Q8d4sCHeIRWDvBeU2nuc bu5cdH1zWWcrdY/hvjW9nubxtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+S5K7d tVx31sTUFtiLmuo6/Y+IMB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBpNVjVUqSbm8cK2GfPVZEeH68byF/Gc27VGHEjbuPSedirfD4tOr7 +L66fD/0JrGyICHNqyAb5vXnJ4oMQ+Mnc2ZP9Jq9sXuPBz0F1eeHECh03vvNdrlA ev1XKT3mc0+9vrP/uLcyPZ8yFQbceOee5EpTIJnss31JB52h9D5ImOgrpgwLkaxX cLFYYifDk6sj0UwMRBmK7p9BHKlkYRvIPcCJ86sSyM58HKljOljGR2mZeZUAgx2s aoUmCeU9wf79J+moda84xYgKt8+LWZQQZdsARI9ja24dyjd3d/EK+V6cmEuJ4sVG dCkDxnn732yWJ1X5OPh8rrX6Ii7/UUnR -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:47 2024 by rpki-client on console-ams.rpki-client.org