$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft File: NvLl_YZ1AzcwumM6RQCvVQIFnww.mft (raw, json) Hash identifier: ef6ZuwVzb8A7DQAeADpiLiLulB40K0w8ww/5LOAvJ5s= Subject key identifier: B5:8A:C6:7B:5F:88:C5:3A:A0:F6:34:58:90:FF:7D:43:A2:40:2F:6F Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 09CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft Manifest number: 09C9 Signing time: Fri 22 Nov 2024 19:43:32 +0000 Manifest this update: Fri 22 Nov 2024 19:43:32 +0000 Manifest next update: Fri 29 Nov 2024 19:43:32 +0000 Files and hashes: 1: NvLl_YZ1AzcwumM6RQCvVQIFnww.crl (hash: Cvwnk7Cgk/v/r+Ex+nIJhIiz2jU6vNC47qu3F/73uOU=) 2: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (hash: 8IuCCJrlkn8DX5/stJkD0in4BPYiGVJv0wrZdIEdC4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2510 (0x9ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Nov 22 19:43:32 2024 GMT Not After : Nov 29 19:43:32 2024 GMT Subject: CN=6740dee4-c4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:72:8e:65:84:e2:1c:d2:91:dc:ac:33:8e: ff:2f:cc:24:a1:68:7f:c4:e2:ca:5f:87:ad:d5:cd: ba:7f:a2:a5:23:67:0f:b6:e9:2d:d7:af:bd:21:03: 28:1a:ce:66:23:75:29:ee:e7:49:f5:b3:81:b0:38: fa:3e:47:06:8a:33:62:6e:05:95:c2:98:22:f5:64: 21:f0:5e:18:cd:d4:46:f6:ec:32:7c:a9:c8:ce:99: b2:4b:78:6c:1b:7e:4e:76:d8:15:b3:b5:8f:91:b4: c1:72:04:12:4f:a0:9e:4a:4c:1b:ab:e0:59:4b:0b: 7d:cc:e3:ff:c7:60:54:77:ce:b1:d1:f8:72:b2:41: fe:48:d9:45:57:93:01:1a:67:3a:e9:b3:68:3a:dd: 67:0c:ad:28:fb:7d:eb:7f:84:d9:47:b3:7e:70:d5: e0:7f:56:50:c0:96:10:65:c0:8e:ed:79:41:83:ab: 34:4a:f7:c9:94:4c:e5:be:0f:78:f6:ed:e9:e1:39: 46:3b:cd:5a:35:95:16:df:c9:0f:b2:1b:22:e3:68: bd:8b:2c:00:fa:32:e2:1d:bd:d9:bd:da:8a:28:b4: df:3a:4a:a3:6c:49:de:b7:5b:e9:2b:b7:6d:20:9c: 8c:88:d4:a0:13:b0:6f:94:35:ea:8b:5c:b9:f2:73: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8A:C6:7B:5F:88:C5:3A:A0:F6:34:58:90:FF:7D:43:A2:40:2F:6F X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:76:21:95:67:fd:f0:ae:33:7f:c4:f7:39:7b:78:7b:48:03: b2:0f:31:18:9f:9b:cb:ad:d9:66:12:4b:4a:b7:0d:04:69:36: 87:56:8b:78:05:09:98:24:89:02:98:62:9f:42:f9:12:64:2c: 49:1b:b3:53:1b:2b:15:e8:af:e8:ea:9f:f8:79:14:63:1e:60: d8:f2:f1:2f:2e:78:5e:97:80:22:10:65:a2:08:b0:d3:c8:70: 3d:1a:6e:6c:0b:36:09:ae:32:86:fa:30:86:0e:92:c2:5b:62: 2b:45:de:53:e8:73:85:6a:d8:c2:d9:39:8b:bc:02:db:93:3b: bd:ea:30:4c:61:c8:39:63:6c:52:37:90:9f:8a:71:c0:18:05: 37:56:5d:a5:3d:3a:5d:00:75:55:5d:6d:7d:75:de:cc:04:a0: b4:d3:a4:e4:3f:57:a2:72:71:7f:d9:ff:89:fe:a1:80:c1:be: bc:2d:fc:9c:01:5c:d8:3f:cb:0b:41:d4:5b:4e:ad:13:fc:b5: 87:35:fc:dd:e7:69:de:ae:7c:97:29:82:1e:25:eb:2c:36:fd: d2:0f:20:3d:18:aa:3b:b4:f6:f0:5a:fa:6f:53:83:42:05:a1: 6f:49:74:a8:fa:6c:0b:21:af:a3:a9:17:61:f6:0a:b1:15:e9: f3:c8:32:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjQxMTIyMTk0MzMyWhcNMjQxMTI5MTk0MzMyWjAYMRYwFAYD VQQDEw02NzQwZGVlNC1jNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ttyjmWE4hzSkdysM47/L8wkoWh/xOLKX4et1c26f6KlI2cPtukt16+9IQMo Gs5mI3Up7udJ9bOBsDj6PkcGijNibgWVwpgi9WQh8F4YzdRG9uwyfKnIzpmyS3hs G35OdtgVs7WPkbTBcgQST6CeSkwbq+BZSwt9zOP/x2BUd86x0fhyskH+SNlFV5MB Gmc66bNoOt1nDK0o+33rf4TZR7N+cNXgf1ZQwJYQZcCO7XlBg6s0SvfJlEzlvg94 9u3p4TlGO81aNZUW38kPshsi42i9iywA+jLiHb3ZvdqKKLTfOkqjbEnet1vpK7dt IJyMiNSgE7BvlDXqi1y58nPRdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWKxntf iMU6oPY0WJD/fUOiQC9vMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNBMi82MUMxQTU3ODZEQkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6 Y3d1bU02UlFDdlZRSUZud3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxdiGVZ/3wrjN/xPc5e3h7SAOyDzEYn5vLrdlmEktKtw0EaTaHVot4 BQmYJIkCmGKfQvkSZCxJG7NTGysV6K/o6p/4eRRjHmDY8vEvLnhel4AiEGWiCLDT yHA9Gm5sCzYJrjKG+jCGDpLCW2IrRd5T6HOFatjC2TmLvALbkzu96jBMYcg5Y2xS N5CfinHAGAU3Vl2lPTpdAHVVXW19dd7MBKC006TkP1eicnF/2f+J/qGAwb68Lfyc AVzYP8sLQdRbTq0T/LWHNfzd52nernyXKYIeJessNv3SDyA9GKo7tPbwWvpvU4NC BaFvSXSo+mwLIa+jqRdh9gqxFenzyDK+ -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org