$ rpki-client -vvf rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft File: NAcoRkbqh4WDwlsPqefW7aCRMpg.mft (raw, json) Hash identifier: JUqG1vp4dqmTlFwsoIko0HCL2yTYhpXAN70246NHLTA= Subject key identifier: 1C:AD:34:9C:EA:E1:1E:FA:D8:BE:2D:A1:E7:82:F1:46:A7:F5:68:3A Authority key identifier: 34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 Certificate issuer: /CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft Manifest number: 089B Signing time: Fri 22 Nov 2024 20:16:45 +0000 Manifest this update: Fri 22 Nov 2024 20:16:44 +0000 Manifest next update: Fri 29 Nov 2024 20:16:44 +0000 Files and hashes: 1: NAcoRkbqh4WDwlsPqefW7aCRMpg.crl (hash: PFd0TwE8suryuBFDpEI2XjcN3gE3eEY93QL1byKly4g=) 2: 9AA539E6A82411EA996D5F41C4F9AE02.roa (hash: gEu0ijhyj0r+0z14Ka2hm7sOceLx+LnbF4hfMxdOez4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C318/serialNumber=3407284646EA878583C25B0FA9E7D6EDA0913298 Validity Not Before: Nov 22 20:16:44 2024 GMT Not After : Nov 29 20:16:44 2024 GMT Subject: CN=6740e6ac-cf0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:64:a5:57:b1:08:51:fc:05:39:bf:e5:66: 6e:04:06:8b:a2:b0:47:7c:05:89:3c:2d:e8:91:0a: 28:32:c4:73:32:08:00:39:f4:8b:cf:58:db:be:ba: f2:2f:15:d7:74:70:12:be:04:71:15:c5:fa:e7:4c: ce:c0:2f:d0:18:6f:26:f0:2b:29:7a:60:06:3e:e1: 3c:8c:91:1d:79:9b:b7:bc:b6:e5:a5:4b:52:62:91: 26:19:67:67:d6:0e:92:05:ab:96:d2:cf:08:4a:85: 90:9d:4c:93:ca:67:3a:7a:85:2f:87:a6:fa:2f:51: 24:ad:46:51:21:a0:8a:c4:f0:d2:62:bd:95:72:24: 51:69:e0:22:a7:da:c2:d5:e0:36:4e:61:1b:95:ba: 2a:8c:79:18:5c:5a:61:9b:99:59:e5:5a:c7:f7:44: 61:e3:cb:b1:46:fb:0a:53:f9:f0:cc:3b:a8:20:ec: a0:a4:31:f0:d0:1e:5b:ac:41:d8:40:82:76:a3:cd: b7:15:27:6d:52:d9:1a:a2:e9:6f:65:92:bf:61:5f: 1c:70:dd:e4:b4:71:4e:72:f2:f2:3b:8e:70:9b:31: 6d:4c:53:48:6b:ce:be:98:a5:79:ff:e1:af:42:5d: fc:a5:5b:8a:da:2c:a4:f5:69:2e:d2:60:4a:ec:5b: 84:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AD:34:9C:EA:E1:1E:FA:D8:BE:2D:A1:E7:82:F1:46:A7:F5:68:3A X509v3 Authority Key Identifier: keyid:34:07:28:46:46:EA:87:85:83:C2:5B:0F:A9:E7:D6:ED:A0:91:32:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcoRkbqh4WDwlsPqefW7aCRMpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C318/65B671B6A82211EAABAA2F19C4F9AE02/NAcoRkbqh4WDwlsPqefW7aCRMpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:25:63:cd:f3:df:66:08:7a:90:80:e7:26:c5:94:a4:23:6b: be:ae:55:01:dd:d0:9c:8f:60:32:2c:e1:4a:cb:aa:1d:d6:19: 6d:81:f5:57:2e:17:91:71:88:4a:df:4b:4c:e9:ae:6a:58:c5: f9:cd:52:f8:a6:21:e9:40:28:08:9b:56:32:35:28:bc:dd:b1: db:ce:2f:0e:f4:1b:14:c3:3c:87:28:84:ea:f6:d0:67:73:6a: ed:4c:d7:d1:a2:b4:d3:fd:be:6d:19:40:6b:eb:cb:19:8f:e8: 49:62:cc:02:b4:5c:cf:f9:9b:cf:a0:4c:b4:e2:c7:ec:05:f3: 6c:d3:40:7b:87:b2:93:a8:27:f5:a8:22:47:db:d2:ac:d0:fd: c7:a1:99:b5:21:21:ec:3f:ec:79:a0:24:9d:d5:59:87:d4:44: db:e9:4c:01:1d:06:51:05:75:c6:ba:06:7c:f8:1d:15:1b:f9: 6e:3d:a6:02:75:24:08:38:45:04:63:6d:4d:ac:c6:2b:68:08: 4d:6e:14:af:be:76:17:12:1a:76:73:9f:30:ab:ed:23:51:89: 92:a0:6b:25:57:9f:1b:37:af:b6:e3:19:cc:07:0e:53:b1:3c: d8:eb:ff:07:c1:8e:b7:de:5d:11:e4:9b:33:4c:66:25:8a:f9: 56:e1:f5:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzMTgxMTAvBgNVBAUTKDM0MDcyODQ2NDZFQTg3ODU4M0MyNUIwRkE5RTdENkVE QTA5MTMyOTgwHhcNMjQxMTIyMjAxNjQ0WhcNMjQxMTI5MjAxNjQ0WjAYMRYwFAYD VQQDEw02NzQwZTZhYy1jZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymhkpVexCFH8BTm/5WZuBAaLorBHfAWJPC3okQooMsRzMggAOfSLz1jbvrry LxXXdHASvgRxFcX650zOwC/QGG8m8CspemAGPuE8jJEdeZu3vLblpUtSYpEmGWdn 1g6SBauW0s8ISoWQnUyTymc6eoUvh6b6L1EkrUZRIaCKxPDSYr2VciRRaeAip9rC 1eA2TmEblboqjHkYXFphm5lZ5VrH90Rh48uxRvsKU/nwzDuoIOygpDHw0B5brEHY QIJ2o823FSdtUtkaoulvZZK/YV8ccN3ktHFOcvLyO45wmzFtTFNIa86+mKV5/+Gv Ql38pVuK2iyk9Wku0mBK7FuEtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBytNJzq 4R762L4toeeC8Uan9Wg6MB8GA1UdIwQYMBaAFDQHKEZG6oeFg8JbD6nn1u2gkTKY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzMxOC82NUI2NzFCNkE4 MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0V0R3bHNQcWVmVzdhQ1JN cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BY29Sa2JxaDRXRHdsc1BxZWZXN2FDUk1wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzMxOC82NUI2NzFCNkE4MjIxMUVBQUJBQTJGMTlDNEY5QUUwMi9OQWNvUmticWg0 V0R3bHNQcWVmVzdhQ1JNcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzJWPN899mCHqQgOcmxZSkI2u+rlUB3dCcj2AyLOFKy6od1hltgfVX LheRcYhK30tM6a5qWMX5zVL4piHpQCgIm1YyNSi83bHbzi8O9BsUwzyHKITq9tBn c2rtTNfRorTT/b5tGUBr68sZj+hJYswCtFzP+ZvPoEy04sfsBfNs00B7h7KTqCf1 qCJH29Ks0P3HoZm1ISHsP+x5oCSd1VmH1ETb6UwBHQZRBXXGugZ8+B0VG/luPaYC dSQIOEUEY21NrMYraAhNbhSvvnYXEhp2c58wq+0jUYmSoGslV58bN6+24xnMBw5T sTzY6/8HwY633l0R5JszTGYlivlW4fVL -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org