$ rpki-client -vvf rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft File: nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft (raw, json) Hash identifier: A/rhiZqMgbg9AE9pNk2rMS+5SehOWcD2zkuIqJVO4F0= Subject key identifier: 5F:CF:B1:D6:D0:1E:5F:71:B2:D1:57:09:2F:C7:87:A0:00:AB:83:6A Authority key identifier: 9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 Certificate issuer: /CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft Manifest number: 0853 Signing time: Wed 20 Nov 2024 20:24:12 +0000 Manifest this update: Wed 20 Nov 2024 20:24:11 +0000 Manifest next update: Wed 27 Nov 2024 20:24:11 +0000 Files and hashes: 1: nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl (hash: rGaAcE3EX3/nNEGP4MCuC7oQwhc4pgzX6gF5Scp0qsY=) 2: B7ACB272A25611EFACD47A47C4F9AE02.roa (hash: vLwsN6XlSbBFyRzXSCrEwO8DAZca1xs9SHlcyqnbxYE=) 3: 0A8890FE2F4C11EDB0375D6CC4F9AE02.roa (hash: sSNo+/dLUh/bje18BPzZPQTxMEMoTmVIKuRUAdfqRAo=) 4: 096864742F4C11EDB0375D6CC4F9AE02.roa (hash: jla9AG1gExZIQpCD/EW4q3Wp+FwlnerqSvxfxkw43CI=) 5: 0834FF2C2F4C11EDB0375D6CC4F9AE02.roa (hash: jsKgrIPw9kysznIIPdP3oqonMHQ5VwN13abO5ggVkg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813F1/serialNumber=9EFEAA724D708CFE82C6B6BF270CBB5DD4306F20 Validity Not Before: Nov 20 20:24:11 2024 GMT Not After : Nov 27 20:24:11 2024 GMT Subject: CN=673e456c-2223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:1f:46:a3:15:b9:cf:cb:f1:3b:f7:88:6d: f2:2a:26:c6:11:00:14:9c:05:41:7b:bf:76:5c:d3: 97:7e:e4:82:36:a3:99:03:4f:89:03:94:a0:6c:77: 7d:31:b1:7a:65:bb:cc:ea:82:23:9d:0b:7e:a7:8a: 45:69:36:19:8f:96:c3:ee:2b:f2:28:bd:6d:17:aa: 49:85:69:b7:99:20:c7:67:87:5b:b7:5c:b8:56:1d: 64:65:d9:c6:25:9f:d1:10:6d:a3:a6:76:7e:27:fc: 5d:f0:fe:2d:51:e1:dc:7f:b4:ae:f6:c1:7f:d0:c7: d9:7b:97:cf:51:7d:40:89:c5:68:9e:bc:e1:4a:90: 2c:dc:38:e1:69:f4:9d:99:35:06:33:18:23:39:19: 89:23:87:e8:fa:ee:58:93:d1:58:fc:d2:ea:6d:b8: b1:5c:77:d7:94:8f:a0:e2:b9:80:4a:60:36:ef:14: 21:a4:86:92:52:31:f4:bf:07:22:49:1f:09:c2:77: 56:48:7c:20:4d:aa:37:be:44:c2:3b:37:7d:99:80: 0f:ed:e9:9b:c3:f6:e2:e5:3b:b9:f6:c1:27:5d:6a: 94:7e:99:83:fc:8f:56:a5:c4:43:4c:1f:01:18:6b: 18:b7:21:08:fb:ad:b1:c8:51:d0:7f:d4:74:ad:44: 9c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CF:B1:D6:D0:1E:5F:71:B2:D1:57:09:2F:C7:87:A0:00:AB:83:6A X509v3 Authority Key Identifier: keyid:9E:FE:AA:72:4D:70:8C:FE:82:C6:B6:BF:27:0C:BB:5D:D4:30:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nv6qck1wjP6Cxra_Jwy7XdQwbyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813F1/D0CAF384BA5911EA904FF91DC4F9AE02/nv6qck1wjP6Cxra_Jwy7XdQwbyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5d:ba:f2:9b:93:c2:58:a4:7c:4e:0e:fb:b1:0b:ff:8c:be: 62:8b:ef:e6:92:a9:f1:80:20:3b:7b:83:11:10:0c:b9:13:9f: ec:95:02:fb:5f:0f:ff:52:d4:5b:3e:e5:a0:5e:1d:05:d2:27: 90:d6:92:4c:37:bb:10:16:09:78:07:1c:26:b1:44:ce:8b:28: 2d:ef:63:f1:37:83:eb:51:77:8a:3c:6d:6c:8f:c8:ab:88:52: c8:d2:0c:09:c6:09:e7:fa:c6:70:34:be:f8:6f:f2:d1:82:b5: c0:6b:0d:cf:13:b6:ca:e6:66:34:aa:52:12:27:1d:7f:8d:81: b0:65:0a:9c:34:05:ef:2b:15:34:ca:be:1c:4e:fe:da:1e:b6: ec:2b:1c:39:36:4b:27:9a:31:1d:bf:72:0f:1d:c3:ef:60:c4: 44:8a:34:24:5e:1a:09:70:b0:eb:4a:92:9d:af:de:8d:18:61: 25:57:ae:f6:1e:02:a0:d6:dd:0a:4e:b3:78:44:2c:84:20:85: eb:5c:25:06:4b:dd:a5:af:5c:dd:e1:36:fe:2b:5c:4f:79:94: cd:3c:27:a2:fc:27:97:ea:cd:80:e1:51:ef:8f:f1:18:18:5d: ff:3e:a9:e6:e1:2e:83:61:fa:ab:fb:34:4d:91:30:30:84:ff: ac:35:e7:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRjExMTAvBgNVBAUTKDlFRkVBQTcyNEQ3MDhDRkU4MkM2QjZCRjI3MENCQjVE RDQzMDZGMjAwHhcNMjQxMTIwMjAyNDExWhcNMjQxMTI3MjAyNDExWjAYMRYwFAYD VQQDEw02NzNlNDU2Yy0yMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueEfRqMVuc/L8Tv3iG3yKibGEQAUnAVBe792XNOXfuSCNqOZA0+JA5SgbHd9 MbF6ZbvM6oIjnQt+p4pFaTYZj5bD7ivyKL1tF6pJhWm3mSDHZ4dbt1y4Vh1kZdnG JZ/REG2jpnZ+J/xd8P4tUeHcf7Su9sF/0MfZe5fPUX1AicVonrzhSpAs3DjhafSd mTUGMxgjORmJI4fo+u5Yk9FY/NLqbbixXHfXlI+g4rmASmA27xQhpIaSUjH0vwci SR8JwndWSHwgTao3vkTCOzd9mYAP7embw/bi5Tu59sEnXWqUfpmD/I9WpcRDTB8B GGsYtyEI+62xyFHQf9R0rUSccQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/PsdbQ Hl9xstFXCS/Hh6AAq4NqMB8GA1UdIwQYMBaAFJ7+qnJNcIz+gsa2vycMu13UMG8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNGMS9EMENBRjM4NEJB NTkxMUVBOTA0RkY5MURDNEY5QUUwMi9udjZxY2sxd2pQNkN4cmFfSnd5N1hkUXdi eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252NnFjazF3alA2Q3hyYV9Kd3k3WGRRd2J5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNGMS9EMENBRjM4NEJBNTkxMUVBOTA0RkY5MURDNEY5QUUwMi9udjZxY2sxd2pQ NkN4cmFfSnd5N1hkUXdieUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsXbrym5PCWKR8Tg77sQv/jL5ii+/mkqnxgCA7e4MREAy5E5/slQL7 Xw//UtRbPuWgXh0F0ieQ1pJMN7sQFgl4BxwmsUTOiygt72PxN4PrUXeKPG1sj8ir iFLI0gwJxgnn+sZwNL74b/LRgrXAaw3PE7bK5mY0qlISJx1/jYGwZQqcNAXvKxU0 yr4cTv7aHrbsKxw5NksnmjEdv3IPHcPvYMREijQkXhoJcLDrSpKdr96NGGElV672 HgKg1t0KTrN4RCyEIIXrXCUGS92lr1zd4Tb+K1xPeZTNPCei/CeX6s2A4VHvj/EY GF3/Pqnm4S6DYfqr+zRNkTAwhP+sNedO -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org