$ rpki-client -vvf rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft File: NMONZkm5DWjTzmwJ8euU0-V5_J0.mft (raw, json) Hash identifier: 7sbosT5g1j5KfgZWbFpY46OGgLEqks+I7tP1wFcbMGo= Subject key identifier: 0F:49:B9:79:41:7C:9A:82:C5:A3:DD:A2:57:2B:9A:3C:05:AF:E9:F3 Authority key identifier: 34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D Certificate issuer: /CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Certificate serial: 0DA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft Manifest number: 0D9E Signing time: Fri 22 Nov 2024 17:51:32 +0000 Manifest this update: Fri 22 Nov 2024 17:51:31 +0000 Manifest next update: Fri 29 Nov 2024 17:51:31 +0000 Files and hashes: 1: NMONZkm5DWjTzmwJ8euU0-V5_J0.crl (hash: F/X8J+oLRO1fzEeu7hfT2tXGtbGLPKGDxLewx3EtfTQ=) 2: 54AE11C6AD3211E9B3BC7385C4F9AE02.roa (hash: a2Zz+SuX3DCfdSuIf8QT+Sa+cHmZnSxsIqO80zeBe3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3495 (0xda7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192491/serialNumber=34C38D6649B90D68D3CE6C09F1EB94D3E579FC9D Validity Not Before: Nov 22 17:51:31 2024 GMT Not After : Nov 29 17:51:31 2024 GMT Subject: CN=6740c4a3-a80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:9b:d8:e8:c2:df:19:e4:eb:41:dc:c2:c1: a7:5b:a7:c2:d9:df:66:76:2f:ae:7b:7c:0c:95:f2: d5:f4:b9:4b:a7:1e:43:91:e4:9c:cc:f8:ef:db:a8: b0:a8:9c:85:01:e0:18:15:f7:07:89:9f:bc:9e:bf: 09:20:ae:62:27:b7:64:a4:ec:6d:36:7b:61:66:2d: c0:38:13:76:cd:3c:ee:47:91:12:f8:1d:16:78:32: 5d:61:71:55:ee:5b:12:00:0c:5c:b1:84:15:c5:7a: f9:3f:a2:fa:f3:7a:34:3b:13:97:c5:12:92:d0:5d: 53:a7:10:16:77:ac:35:60:16:a2:fb:46:06:a8:52: 0b:70:cc:5d:f4:b5:34:13:e5:48:e9:29:12:e2:f2: 69:12:76:8f:8d:25:64:cf:65:c8:9e:64:e4:9a:f3: f8:9e:46:26:46:85:ea:89:56:e1:93:0a:e8:1d:6a: 8f:12:e2:8b:dd:67:c1:ec:93:3f:b2:3f:69:fd:0d: 05:a4:a7:00:6c:ac:48:69:5e:e2:47:b3:52:71:9f: 81:3c:ce:a0:22:a4:f0:8e:7d:0a:f0:1c:70:e2:17: f5:fe:22:48:fd:9a:61:18:59:3c:e9:ce:a8:23:fc: 7a:e2:2d:e0:df:42:f5:d2:de:ee:4d:40:c6:3b:df: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:49:B9:79:41:7C:9A:82:C5:A3:DD:A2:57:2B:9A:3C:05:AF:E9:F3 X509v3 Authority Key Identifier: keyid:34:C3:8D:66:49:B9:0D:68:D3:CE:6C:09:F1:EB:94:D3:E5:79:FC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NMONZkm5DWjTzmwJ8euU0-V5_J0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192491/D0626D92AD2F11E98FF8D77FC4F9AE02/NMONZkm5DWjTzmwJ8euU0-V5_J0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7b:a0:58:e2:c5:6b:18:7b:5e:39:63:f1:65:77:b0:63:c7: 88:0a:3b:62:23:8d:2e:bd:09:67:55:00:19:df:9c:38:00:23: 55:c0:02:56:ed:da:c1:27:61:6e:30:ad:24:8f:67:80:80:f4: 32:8d:40:64:ab:a9:a2:2c:68:e0:bd:2d:e5:9a:76:52:26:18: 82:b1:15:e2:d4:2f:14:d5:d4:e3:42:af:93:b3:64:f8:0d:54: 1b:e7:19:a0:e6:c9:1c:7c:54:f8:ca:e4:0b:99:1f:08:c5:17: a3:54:e4:01:07:a2:bb:72:a3:d7:2e:66:5a:69:a6:3b:ac:4a: b9:57:0e:a1:74:11:25:6c:de:13:54:68:61:07:b4:3b:0e:0f: 9f:a2:21:c9:5e:88:63:fb:a1:19:74:49:8f:a2:79:1e:44:f4: 35:39:4f:59:65:ee:00:f9:90:f4:29:fe:c9:ca:9a:cf:28:20: 5b:b2:0c:da:9f:6e:41:2d:10:2f:b5:bb:e1:53:fb:41:30:dd: 86:c7:a0:c0:1a:6c:92:22:1a:03:bc:5e:06:49:fc:3b:5a:a6: 2f:b3:6b:62:ce:f9:60:eb:68:b2:0c:cc:11:3e:76:ad:0f:c1: 72:5f:45:f6:97:7e:bc:42:23:21:65:b5:c0:c5:0a:7a:6e:34: 4b:29:d8:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI0OTExMTAvBgNVBAUTKDM0QzM4RDY2NDlCOTBENjhEM0NFNkMwOUYxRUI5NEQz RTU3OUZDOUQwHhcNMjQxMTIyMTc1MTMxWhcNMjQxMTI5MTc1MTMxWjAYMRYwFAYD VQQDEw02NzQwYzRhMy1hODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2Kb2OjC3xnk60HcwsGnW6fC2d9mdi+ue3wMlfLV9LlLpx5DkeSczPjv26iw qJyFAeAYFfcHiZ+8nr8JIK5iJ7dkpOxtNnthZi3AOBN2zTzuR5ES+B0WeDJdYXFV 7lsSAAxcsYQVxXr5P6L683o0OxOXxRKS0F1TpxAWd6w1YBai+0YGqFILcMxd9LU0 E+VI6SkS4vJpEnaPjSVkz2XInmTkmvP4nkYmRoXqiVbhkwroHWqPEuKL3WfB7JM/ sj9p/Q0FpKcAbKxIaV7iR7NScZ+BPM6gIqTwjn0K8Bxw4hf1/iJI/ZphGFk86c6o I/x64i3g30L10t7uTUDGO98QyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9JuXlB fJqCxaPdolcrmjwFr+nzMB8GA1UdIwQYMBaAFDTDjWZJuQ1o085sCfHrlNPlefyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjQ5MS9EMDYyNkQ5MkFE MkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURXalR6bXdKOGV1VTAtVjVf SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05NT05aa201RFdqVHptd0o4ZXVVMC1WNV9KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjQ5MS9EMDYyNkQ5MkFEMkYxMUU5OEZGOEQ3N0ZDNEY5QUUwMi9OTU9OWmttNURX alR6bXdKOGV1VTAtVjVfSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPe6BY4sVrGHteOWPxZXewY8eICjtiI40uvQlnVQAZ35w4ACNVwAJW 7drBJ2FuMK0kj2eAgPQyjUBkq6miLGjgvS3lmnZSJhiCsRXi1C8U1dTjQq+Ts2T4 DVQb5xmg5skcfFT4yuQLmR8IxRejVOQBB6K7cqPXLmZaaaY7rEq5Vw6hdBElbN4T VGhhB7Q7Dg+foiHJXohj+6EZdEmPonkeRPQ1OU9ZZe4A+ZD0Kf7JyprPKCBbsgza n25BLRAvtbvhU/tBMN2Gx6DAGmySIhoDvF4GSfw7WqYvs2tizvlg62iyDMwRPnat D8FyX0X2l368QiMhZbXAxQp6bjRLKdgA -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org