$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: PH4Pwx0QYVJXALGqBy8wa8KWDm+ypatj/ZZzKy4PT1w= Subject key identifier: 8F:B2:9A:CF:EB:BB:77:EB:19:82:54:D1:CB:5C:F9:2D:AE:F9:A7:85 Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 3446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 3439 Signing time: Fri 22 Nov 2024 15:02:30 +0000 Manifest this update: Fri 22 Nov 2024 15:02:30 +0000 Manifest next update: Fri 29 Nov 2024 15:02:30 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: Fw4QFsCny61qwmpf1PfynkxU9qPGmva7o3rVLf+6pBQ=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OiW89qQFovmBoY5voLYQMPJS/gYyS8nvSRtkPJR5YIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13382 (0x3446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: Nov 22 15:02:30 2024 GMT Not After : Nov 29 15:02:30 2024 GMT Subject: CN=67409d06-cb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:8e:4a:05:76:31:0b:e1:ff:a4:df:7e:ab: 61:58:7d:d6:d4:67:33:c5:4e:26:92:86:aa:83:ae: c1:6c:28:c3:f3:d7:0e:cf:e0:bb:13:f7:b6:26:50: 88:00:11:1b:04:57:70:e1:06:e1:4a:da:95:96:e1: 15:5b:44:01:f0:c6:88:fa:1d:9b:b3:bb:e3:92:42: 10:14:c3:33:f5:b7:9c:b1:61:20:1a:2f:6f:42:64: 87:01:db:46:01:f3:33:e3:aa:9a:b3:90:3d:0d:8f: a0:e5:cb:71:a7:16:7d:83:da:e6:6b:ca:db:11:ec: d3:56:6c:19:de:36:7e:3e:b6:21:9b:d7:c2:af:5f: ea:bc:56:b6:49:94:32:69:22:52:e6:f2:16:f8:d3: 34:97:6a:ee:6c:14:c8:f4:93:2d:d1:43:28:b1:e4: 4f:25:ba:03:b0:7b:81:ee:4f:65:24:01:e4:bc:df: 22:23:01:bf:c8:31:47:bb:76:38:d0:43:8e:f0:e6: c7:9d:2a:47:18:e5:27:6e:14:1b:d7:ad:9b:6f:c1: 8c:00:bc:25:97:f0:55:04:41:74:5c:84:e4:e3:f1: b6:74:49:3a:c0:e1:b5:73:dd:a4:44:a2:70:87:7c: d8:de:7f:3f:53:48:cc:1a:ad:80:12:05:e8:4c:53: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B2:9A:CF:EB:BB:77:EB:19:82:54:D1:CB:5C:F9:2D:AE:F9:A7:85 X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:80:74:32:a1:a6:c3:29:e7:8c:77:dd:bd:ee:06:f2:92:6c: fd:a2:54:3d:02:77:1d:2f:aa:e2:17:ad:9e:40:ed:99:0e:e3: d1:10:a6:e3:2f:27:35:2a:50:27:fb:52:5f:e5:db:01:1e:e3: 6e:1d:2c:ba:a2:3e:6a:ed:c9:be:43:dc:08:96:bf:91:ae:99: d7:d6:04:88:29:f1:2f:00:42:32:6d:6f:94:15:95:4f:15:39: d0:fb:ce:d2:e0:fa:c7:30:d8:12:be:b4:9e:6d:83:7e:d5:2c: 85:fe:c9:fc:07:93:19:7d:81:db:7f:a3:7b:3c:35:aa:1c:80: 56:df:9c:24:6d:6c:5d:58:e3:a8:1e:8c:9c:07:42:97:da:74: 5b:af:69:19:77:d3:f3:8a:01:2f:57:04:5c:5c:49:94:ef:2b: b8:e5:d1:69:c0:15:d8:b6:44:96:69:01:ce:3a:b1:ee:d8:9c: a1:62:d5:c7:27:f1:21:4e:66:b3:be:fc:94:ad:2e:1e:75:82: 49:8e:96:19:eb:4a:d4:40:4b:2a:53:76:78:ff:b1:76:e0:0a: 9a:5d:af:89:46:b7:58:b9:0b:eb:92:c8:2a:63:9b:b5:e5:06: 46:54:4e:d9:9b:5a:7c:d0:c1:27:5a:ab:9d:cb:dd:9e:6f:f9: 2b:09:9d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjQxMTIyMTUwMjMwWhcNMjQxMTI5MTUwMjMwWjAYMRYwFAYD VQQDEw02NzQwOWQwNi1jYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw82OSgV2MQvh/6TffqthWH3W1GczxU4mkoaqg67BbCjD89cOz+C7E/e2JlCI ABEbBFdw4QbhStqVluEVW0QB8MaI+h2bs7vjkkIQFMMz9becsWEgGi9vQmSHAdtG AfMz46qas5A9DY+g5ctxpxZ9g9rma8rbEezTVmwZ3jZ+PrYhm9fCr1/qvFa2SZQy aSJS5vIW+NM0l2rubBTI9JMt0UMoseRPJboDsHuB7k9lJAHkvN8iIwG/yDFHu3Y4 0EOO8ObHnSpHGOUnbhQb162bb8GMALwll/BVBEF0XITk4/G2dEk6wOG1c92kRKJw h3zY3n8/U0jMGq2AEgXoTFN9aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+yms/r u3frGYJU0ctc+S2u+aeFMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFgHQyoabDKeeMd9297gbykmz9olQ9AncdL6riF62eQO2ZDuPREKbj Lyc1KlAn+1Jf5dsBHuNuHSy6oj5q7cm+Q9wIlr+RrpnX1gSIKfEvAEIybW+UFZVP FTnQ+87S4PrHMNgSvrSebYN+1SyF/sn8B5MZfYHbf6N7PDWqHIBW35wkbWxdWOOo HoycB0KX2nRbr2kZd9PzigEvVwRcXEmU7yu45dFpwBXYtkSWaQHOOrHu2JyhYtXH J/EhTmazvvyUrS4edYJJjpYZ60rUQEsqU3Z4/7F24AqaXa+JRrdYuQvrksgqY5u1 5QZGVE7Zm1p80MEnWqudy92eb/krCZ3n -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:57 2024 by rpki-client on console-ams.rpki-client.org