$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft File: n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json) Hash identifier: 4/g47SV22Z8ZhcWDs3OhzbfphsnJ/lIxR+FZZ1E7k+Q= Subject key identifier: 00:41:68:D2:EA:E9:1D:A8:1B:55:E0:E0:25:B4:C7:80:0F:FF:2C:0F Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 Certificate issuer: /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft Manifest number: 01B9 Signing time: Sat 23 Nov 2024 01:46:38 +0000 Manifest this update: Sat 23 Nov 2024 01:46:37 +0000 Manifest next update: Sat 30 Nov 2024 01:46:37 +0000 Files and hashes: 1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: wAsbGN1cXziKLpMJg7hDQOI+wCLlB0NowmZZ+ZWJreM=) 2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Validity Not Before: Nov 23 01:46:37 2024 GMT Not After : Nov 30 01:46:37 2024 GMT Subject: CN=674133fd-50cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:fe:dc:e0:d6:c7:24:8f:8b:13:d6:bf:76: cc:36:39:fa:2a:42:c8:0b:ca:68:29:a1:cd:47:f3: 0a:1d:62:fc:67:df:e6:14:1c:eb:6e:8c:1a:78:47: c0:94:68:db:c9:75:42:95:58:44:2f:a0:44:30:71: 63:38:a8:76:4d:9d:8d:0f:3d:c0:b1:8d:5e:05:f3: ea:88:fc:e9:c4:31:8a:24:f0:89:c5:36:17:cf:a3: 90:8d:5c:6c:ef:b4:6a:d1:1a:c2:2d:b5:d2:a2:59: 84:65:8f:13:b0:b2:20:c7:55:92:7b:ea:a9:02:9d: f2:25:89:68:a2:0f:18:54:de:9f:78:e4:94:9d:c4: cc:8d:32:20:d0:c1:da:48:be:2f:32:d1:73:de:1c: b5:be:62:65:2b:ef:9d:a8:ec:39:31:6a:f5:63:07: c4:a6:59:13:af:30:0d:69:e1:de:61:9f:4c:d9:6a: 79:87:4c:03:9f:17:99:94:0a:76:db:1a:83:81:71: 00:6f:16:0a:89:31:89:32:e3:8a:0e:10:d1:b6:b1: de:48:6c:ec:ad:0a:96:95:96:8c:71:9f:ad:d7:68: 6d:69:8a:17:f7:cb:16:2e:17:67:4d:7a:d9:0d:5b: 53:12:09:79:5b:4c:3b:b0:36:0d:28:e9:d3:48:8e: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:41:68:D2:EA:E9:1D:A8:1B:55:E0:E0:25:B4:C7:80:0F:FF:2C:0F X509v3 Authority Key Identifier: keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:23:06:bb:0e:cf:9f:9c:c5:1b:9d:8f:52:5c:98:cd:7c:1f: e8:eb:06:4e:3b:0a:91:12:23:e5:76:78:cf:77:17:dc:f8:2d: da:1b:5b:6b:26:d0:f0:88:b3:90:3e:57:2d:4e:e2:29:da:fd: b6:ea:17:7f:5e:c0:11:48:90:5c:c2:3f:4f:3c:22:4e:b6:43: 30:f2:9c:06:50:9f:b8:fb:c7:c8:40:39:a1:38:58:2e:e2:58: 14:5f:4f:ae:82:cb:ab:75:9c:10:06:60:1a:10:02:f7:61:6e: 76:ea:85:31:cd:04:4c:31:d6:fb:fe:7e:ce:05:95:34:3b:81: c2:58:88:8e:6e:a2:13:61:5c:6b:98:50:48:69:a8:d0:a2:4a: 30:cd:96:e6:a2:c0:b0:31:49:54:80:12:39:7d:15:2c:6c:87: bc:3c:b6:41:e5:9b:c5:0b:4c:df:30:62:e2:c6:26:ee:28:5a: 85:41:05:b2:1a:e1:08:7b:44:d6:14:df:31:af:1b:b1:10:35: a7:cc:67:da:1f:98:93:84:8d:53:a4:c7:52:57:f1:8a:51:89: 18:b6:d1:34:e1:7a:04:4b:53:b2:e7:d8:90:04:60:17:38:5b: 89:97:98:7f:76:47:89:d2:ca:25:17:55:d8:91:eb:b7:65:70: d0:64:29:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzOTMxMTAvBgNVBAUTKDlGNDlBMEMyOUFERjREODMwMzA3NzMzRDJDNjBBOUQ5 MzExMEEyMDgwHhcNMjQxMTIzMDE0NjM3WhcNMjQxMTMwMDE0NjM3WjAYMRYwFAYD VQQDEw02NzQxMzNmZC01MGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHH+3ODWxySPixPWv3bMNjn6KkLIC8poKaHNR/MKHWL8Z9/mFBzrbowaeEfA lGjbyXVClVhEL6BEMHFjOKh2TZ2NDz3AsY1eBfPqiPzpxDGKJPCJxTYXz6OQjVxs 77Rq0RrCLbXSolmEZY8TsLIgx1WSe+qpAp3yJYloog8YVN6feOSUncTMjTIg0MHa SL4vMtFz3hy1vmJlK++dqOw5MWr1YwfEplkTrzANaeHeYZ9M2Wp5h0wDnxeZlAp2 2xqDgXEAbxYKiTGJMuOKDhDRtrHeSGzsrQqWlZaMcZ+t12htaYoX98sWLhdnTXrZ DVtTEgl5W0w7sDYNKOnTSI5nZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABBaNLq 6R2oG1Xg4CW0x4AP/ywPMB8GA1UdIwQYMBaAFJ9JoMKa302DAwdzPSxgqdkxEKII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjM5My8zMjZDQkQ1ODMy NTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZTURCM005TEdDcDJURVFv Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24wbWd3cHJmVFlNREIzTTlMR0NwMlRFUW9nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjM5My8zMjZDQkQ1ODMyNTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZ TURCM005TEdDcDJURVFvZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvIwa7Ds+fnMUbnY9SXJjNfB/o6wZOOwqREiPldnjPdxfc+C3aG1tr JtDwiLOQPlctTuIp2v226hd/XsARSJBcwj9PPCJOtkMw8pwGUJ+4+8fIQDmhOFgu 4lgUX0+ugsurdZwQBmAaEAL3YW526oUxzQRMMdb7/n7OBZU0O4HCWIiObqITYVxr mFBIaajQokowzZbmosCwMUlUgBI5fRUsbIe8PLZB5ZvFC0zfMGLixibuKFqFQQWy GuEIe0TWFN8xrxuxEDWnzGfaH5iThI1TpMdSV/GKUYkYttE04XoES1Oy59iQBGAX OFuJl5h/dkeJ0solF1XYkeu3ZXDQZCl8 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org