$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json) Hash identifier: iiz/0rB07ue/i33yrRCwefFXeUOVK8iWfvqmk+sw4vI= Subject key identifier: 1D:8A:15:31:A0:C1:6F:BD:98:A1:3F:70:6C:72:7C:CF:2E:98:DA:3D Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft Manifest number: CF Signing time: Thu 21 Nov 2024 03:53:19 +0000 Manifest this update: Thu 21 Nov 2024 03:53:18 +0000 Manifest next update: Thu 28 Nov 2024 03:53:18 +0000 Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: 692+DSN+wUNNx7W8sXMhoeQ2lCTu5vmplYwgX6C+ja8=) 2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: k94xftsmS29G5Ki6l7RDKyar+9tisgQaPG/llPqEy08=) 3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: jJZ2st+CIoJi16FozwjzTqCOp1E/h6RGbAayfoXDVxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Validity Not Before: Nov 21 03:53:18 2024 GMT Not After : Nov 28 03:53:18 2024 GMT Subject: CN=673eaeae-6990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:25:17:80:8c:b3:c4:13:61:c1:7d:d6:b0: 2a:ce:80:a4:3f:33:bf:b3:4b:d2:81:b5:86:eb:f7: c5:57:57:b7:a9:78:c4:80:7a:4f:b4:1f:9f:0f:06: 17:fb:70:89:b7:61:b7:9d:a0:c4:8f:43:97:22:4b: 51:75:d0:ff:62:96:16:45:ad:47:e9:47:29:ca:68: 44:62:da:d2:04:77:da:c2:5c:c0:9c:da:dd:7e:e5: 67:fa:9a:12:a5:76:05:2d:c3:32:48:4a:6b:3c:b3: b1:ff:da:38:c3:0d:99:77:06:8d:5b:43:18:ea:51: 63:57:56:da:cc:79:cc:51:99:f0:8f:60:d9:49:56: 8a:c9:a1:28:0a:6d:a5:8f:dd:df:0b:fc:7a:e1:29: 2a:a8:4c:94:4b:83:fd:ab:1e:c6:0d:18:51:04:dd: 38:7b:99:9f:e8:13:de:e6:05:09:dc:a6:98:71:ff: dc:c3:8a:67:a2:da:8f:66:4a:8d:e8:09:5f:48:73: 28:79:10:42:31:cd:64:98:a5:b7:27:e2:0c:cd:ac: 35:89:e6:7e:dc:b2:de:6a:b8:22:ce:28:eb:d6:69: ef:8a:ac:19:d1:8b:eb:45:dd:25:0c:cd:e7:60:17: b5:eb:cc:d6:b3:1a:dd:df:2b:3e:6c:26:b6:51:70: a6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8A:15:31:A0:C1:6F:BD:98:A1:3F:70:6C:72:7C:CF:2E:98:DA:3D X509v3 Authority Key Identifier: keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:2c:34:bb:6b:64:84:39:66:de:20:91:2c:7f:b8:d0:85:9e: ef:63:02:7c:78:d2:8e:d4:0c:54:d2:32:fe:4c:ef:44:a7:ce: 19:61:f5:3a:2c:49:c4:6a:76:cc:d2:6a:35:04:b3:c9:51:63: 82:e8:25:25:19:ef:ba:d5:48:c6:b4:e3:59:80:4f:55:5f:0a: 90:1b:c8:45:c0:6d:fc:18:c8:80:6b:ec:e9:97:d3:df:1b:d8: ea:71:84:33:55:d8:7e:5a:92:d6:11:d2:41:00:f1:a1:cd:f8: e6:ab:0a:2d:64:d6:9a:3b:a4:13:cc:8e:46:7a:35:ce:20:4a: b2:44:5c:40:b2:d3:61:14:20:d0:c1:c9:f8:45:f8:3d:f2:8b: c6:da:70:4b:d2:76:d3:45:c7:cf:8e:bd:30:30:05:87:97:e8: 24:4f:d0:29:85:f2:de:a7:08:be:1a:96:6f:84:9c:90:e9:d9: 7e:1b:d7:22:69:c6:24:83:6e:4f:cb:f7:fe:f9:3f:b7:7b:f0: 25:42:50:80:2a:ee:79:4a:3f:6a:63:c9:c6:fd:41:e2:d5:3a: d5:ed:ad:b5:98:42:11:90:2c:d2:89:0d:a4:f9:97:e3:1f:7a: c4:1f:0a:d2:44:58:43:b5:74:b5:70:a3:18:72:92:c8:4d:c3: 43:ce:5b:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3 NjhGMUU5OEYwHhcNMjQxMTIxMDM1MzE4WhcNMjQxMTI4MDM1MzE4WjAYMRYwFAYD VQQDEw02NzNlYWVhZS02OTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTslF4CMs8QTYcF91rAqzoCkPzO/s0vSgbWG6/fFV1e3qXjEgHpPtB+fDwYX +3CJt2G3naDEj0OXIktRddD/YpYWRa1H6UcpymhEYtrSBHfawlzAnNrdfuVn+poS pXYFLcMySEprPLOx/9o4ww2ZdwaNW0MY6lFjV1bazHnMUZnwj2DZSVaKyaEoCm2l j93fC/x64SkqqEyUS4P9qx7GDRhRBN04e5mf6BPe5gUJ3KaYcf/cw4pnotqPZkqN 6AlfSHMoeRBCMc1kmKW3J+IMzaw1ieZ+3LLeargizijr1mnviqwZ0YvrRd0lDM3n YBe168zWsxrd3ys+bCa2UXCmmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2KFTGg wW+9mKE/cGxyfM8umNo9MB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2 WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr WVdnaTN3UF8yQmQyang2WTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrLDS7a2SEOWbeIJEsf7jQhZ7vYwJ8eNKO1AxU0jL+TO9Ep84ZYfU6 LEnEanbM0mo1BLPJUWOC6CUlGe+61UjGtONZgE9VXwqQG8hFwG38GMiAa+zpl9Pf G9jqcYQzVdh+WpLWEdJBAPGhzfjmqwotZNaaO6QTzI5GejXOIEqyRFxAstNhFCDQ wcn4Rfg98ovG2nBL0nbTRcfPjr0wMAWHl+gkT9AphfLepwi+GpZvhJyQ6dl+G9ci acYkg25Py/f++T+3e/AlQlCAKu55Sj9qY8nG/UHi1TrV7a21mEIRkCzSiQ2k+Zfj H3rEHwrSRFhDtXS1cKMYcpLITcNDzltF -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:07 2024 by rpki-client on console-ams.rpki-client.org