$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: 3OxUMPkLiNaTPyvdUG2+88URFXRvFe7Le+zxdeyycfY= Subject key identifier: 41:F3:28:0A:78:9C:B3:C4:A5:D9:06:31:46:10:00:B1:C8:F8:AA:38 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 18AA Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4AAE Signing time: Fri 22 Nov 2024 15:25:45 +0000 Manifest this update: Fri 22 Nov 2024 15:25:44 +0000 Manifest next update: Fri 29 Nov 2024 15:25:44 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: 7O05rldJvZMojPi+kmNvFUBFp8EEU025FXxdk7PMApE=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: T2up6BLAo2bqeuWG4PUsHlE0/L5R2ojrPd9fvOrJMTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6314 (0x18aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Nov 22 15:25:44 2024 GMT Not After : Nov 29 15:25:44 2024 GMT Subject: CN=6740a279-bc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:20:73:0b:74:06:06:8f:ee:69:0b:02:4d:1f: e4:9c:55:38:a9:46:69:03:7f:26:7b:1c:02:c4:bc: 41:cc:0b:40:e3:b7:8d:7d:c9:f1:0e:75:eb:f8:76: 07:da:7b:65:d5:45:a5:0c:f1:e9:d9:73:bd:98:5e: 43:b8:1f:02:85:63:5a:6d:33:a5:d4:d9:7f:af:01: 0e:09:ac:a9:b8:42:f0:3f:f4:c1:3c:a7:2e:60:df: a1:b0:83:72:a0:93:4a:ea:1d:1e:27:6c:53:a1:dd: 55:4f:af:b5:90:6b:fe:65:6b:e0:9f:ee:fa:a3:af: ca:5d:87:44:d7:3c:10:ce:3b:15:d6:ff:92:cb:3f: e5:f2:fd:bf:f3:7e:ff:66:01:9f:37:68:92:62:ec: f7:07:46:77:83:21:8f:c4:6a:01:2a:4d:c1:6d:76: a5:c8:6f:26:b3:9f:7f:2e:63:98:90:33:6e:fb:b3: 75:26:8f:0d:cd:50:b7:d3:17:15:d8:24:08:46:fa: d9:9f:16:52:0e:24:76:c2:9e:da:ee:0c:b5:a9:bc: 17:cb:56:a5:8d:7c:3c:02:d1:28:15:48:c7:df:86: 48:6f:bb:cf:6b:1d:5f:f7:c3:37:cb:af:0d:f8:cc: 42:ae:fb:47:72:30:5d:b6:a7:40:ec:5d:0b:92:69: 35:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F3:28:0A:78:9C:B3:C4:A5:D9:06:31:46:10:00:B1:C8:F8:AA:38 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:64:c3:79:0f:41:52:6b:42:3c:92:96:57:2e:16:b8:64:04: 69:18:e4:e7:79:2b:84:f6:cb:0b:98:1f:78:89:29:ea:55:08: 7d:39:ae:96:fe:6d:33:dd:4e:6f:a3:6a:5e:f3:45:af:b2:1c: c9:8d:02:79:29:4d:fc:ca:83:c7:e5:2a:1e:56:bf:89:11:b3: b6:c9:17:6a:2f:2a:a5:0c:a8:d4:46:25:c1:0e:6f:fa:83:e5: cb:47:d7:94:c7:34:ce:45:26:7e:a3:b7:d3:af:a5:a3:e8:f9: de:55:5e:64:2e:89:5e:cf:72:c6:c5:cf:76:3d:4d:8e:10:db: f1:44:b2:9a:96:87:61:7e:90:bf:c8:51:32:cb:83:79:73:62: fd:1f:59:cc:95:3c:80:b5:c8:c1:a3:55:03:d4:ab:6d:c6:89: 6d:0e:45:b6:1f:f0:f9:aa:9b:27:8d:4b:ca:25:30:bd:70:63: b5:27:97:01:e6:53:53:c9:8f:31:ce:12:b6:98:7c:cc:b5:03: cc:30:48:18:71:60:b6:d8:4a:76:6d:d8:56:3d:3a:ca:2f:14: 4b:ef:f7:af:27:dc:d4:09:2d:40:42:b1:53:57:3e:c3:36:a5: 84:4b:0f:3c:04:fc:5c:1c:5b:42:9a:15:21:a7:fb:fe:83:07: 62:ad:85:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjQxMTIyMTUyNTQ0WhcNMjQxMTI5MTUyNTQ0WjAYMRYwFAYD VQQDEw02NzQwYTI3OS1iYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8CBzC3QGBo/uaQsCTR/knFU4qUZpA38mexwCxLxBzAtA47eNfcnxDnXr+HYH 2ntl1UWlDPHp2XO9mF5DuB8ChWNabTOl1Nl/rwEOCaypuELwP/TBPKcuYN+hsINy oJNK6h0eJ2xTod1VT6+1kGv+ZWvgn+76o6/KXYdE1zwQzjsV1v+Syz/l8v2/837/ ZgGfN2iSYuz3B0Z3gyGPxGoBKk3BbXalyG8ms59/LmOYkDNu+7N1Jo8NzVC30xcV 2CQIRvrZnxZSDiR2wp7a7gy1qbwXy1aljXw8AtEoFUjH34ZIb7vPax1f98M3y68N +MxCrvtHcjBdtqdA7F0Lkmk1oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHzKAp4 nLPEpdkGMUYQALHI+Ko4MB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDZMN5D0FSa0I8kpZXLha4ZARpGOTneSuE9ssLmB94iSnqVQh9Oa6W /m0z3U5vo2pe80WvshzJjQJ5KU38yoPH5SoeVr+JEbO2yRdqLyqlDKjURiXBDm/6 g+XLR9eUxzTORSZ+o7fTr6Wj6PneVV5kLolez3LGxc92PU2OENvxRLKalodhfpC/ yFEyy4N5c2L9H1nMlTyAtcjBo1UD1KttxoltDkW2H/D5qpsnjUvKJTC9cGO1J5cB 5lNTyY8xzhK2mHzMtQPMMEgYcWC22Ep2bdhWPTrKLxRL7/evJ9zUCS1AQrFTVz7D NqWESw88BPxcHFtCmhUhp/v+gwdirYWb -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:23 2024 by rpki-client on console-ams.rpki-client.org