$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: FVRVoSuXfykMmGQ/Jblp44I7Q9b2pT8YGKkC51CgqXA= Subject key identifier: D0:C8:17:DE:EB:70:C7:E1:43:AC:61:99:B0:94:05:9E:F0:C8:0B:F8 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 04B8 Signing time: Fri 22 Nov 2024 23:26:47 +0000 Manifest this update: Fri 22 Nov 2024 23:26:47 +0000 Manifest next update: Fri 29 Nov 2024 23:26:47 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: 1Iqm6j/hvLIGt7hxOqgrJUtRQP9TDTflDDPta1Wyz3g=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: X8TS/dUIvy3XOI0UnJtA1d7RV1bb4SxZ7U2o6VOp3BA=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: Gk9zFIrI4hfeJ0HReT17DaXTFk6xr6upAecBQ6JDnHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Nov 22 23:26:47 2024 GMT Not After : Nov 29 23:26:47 2024 GMT Subject: CN=67411337-3060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:76:c6:17:f1:30:e3:57:41:28:37:ce:74: a4:4d:85:5f:5f:58:11:a8:8c:2f:6f:be:75:45:1b: ee:76:2e:d6:44:23:e4:8c:8f:85:6c:c3:cb:09:5a: e8:e0:75:64:3b:ec:2f:4a:85:5a:eb:60:b7:dd:74: 5a:02:25:2d:45:db:66:2b:b7:49:d8:ba:28:c4:c5: ef:12:59:6a:ca:f9:10:42:27:1c:1f:c9:00:72:28: 2b:67:25:6f:34:19:6e:84:d8:4d:c4:6c:85:f3:13: fe:89:98:16:98:40:29:92:af:54:9f:e3:03:77:d6: e0:dd:e2:4d:78:d5:bf:54:88:a3:75:2b:bc:c4:06: 6a:50:0d:70:20:eb:a5:25:38:7f:3c:89:5d:79:73: 4d:91:41:c4:b7:e5:79:56:1e:1e:6c:07:6b:af:04: 88:26:8e:d7:4b:c6:9e:11:c5:78:1f:da:35:5d:48: 58:c4:4f:08:70:e2:b7:2c:88:0e:e5:19:ff:60:a3: f0:f6:21:79:33:37:98:62:25:ba:f4:2b:4f:b8:fa: e6:00:d9:e6:71:09:3d:5c:cf:84:f8:29:bf:76:7b: 16:eb:16:6b:ff:7d:c5:92:ac:1c:99:0e:32:43:5f: 1c:0b:84:ab:f1:4f:3d:0a:1d:77:dd:9d:82:6e:e0: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C8:17:DE:EB:70:C7:E1:43:AC:61:99:B0:94:05:9E:F0:C8:0B:F8 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e5:52:61:37:cd:5d:54:77:1a:30:12:63:f3:a2:ca:75:17: a8:bb:5a:79:ad:d3:ed:c7:46:1a:8c:e1:be:05:2b:b7:02:db: f4:f3:7e:f1:5d:0e:ee:17:61:59:b1:c0:5a:c2:22:f8:39:e3: 32:20:3d:23:0b:d2:7e:58:8e:99:86:aa:85:ff:f6:3f:27:be: ec:06:42:1f:84:41:9c:f9:0b:80:20:de:2b:c9:bc:37:bc:97: 00:be:d0:8a:5a:b3:04:a9:69:a0:05:f6:15:8e:df:e4:a5:fc: dd:45:8d:c0:d1:a0:f4:46:30:8b:db:25:55:4b:38:e2:e2:8e: 70:e3:36:f8:72:3d:81:2e:f2:c2:2e:c0:ed:cc:d5:30:dd:42: 0b:36:93:81:da:c3:8e:f7:af:24:5f:5a:42:e2:35:9c:83:9c: 27:32:63:86:dc:8b:f0:46:71:64:94:cf:48:4e:a3:64:e4:94: fc:fc:d5:de:87:b4:3c:70:f6:a5:3b:86:4b:1b:23:07:89:4f: e5:d0:ad:b4:a5:c0:20:fe:54:71:6d:cb:95:0f:95:e2:cc:f5: cb:b0:33:83:5c:c6:9f:47:e1:68:7b:67:07:7c:fe:98:f3:c7: af:30:24:47:3d:39:27:5d:7e:75:7b:1d:bb:32:b5:6c:e2:cd: f1:ed:fa:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjQxMTIyMjMyNjQ3WhcNMjQxMTI5MjMyNjQ3WjAYMRYwFAYD VQQDEw02NzQxMTMzNy0zMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNB2xhfxMONXQSg3znSkTYVfX1gRqIwvb751RRvudi7WRCPkjI+FbMPLCVro 4HVkO+wvSoVa62C33XRaAiUtRdtmK7dJ2LooxMXvEllqyvkQQiccH8kAcigrZyVv NBluhNhNxGyF8xP+iZgWmEApkq9Un+MDd9bg3eJNeNW/VIijdSu8xAZqUA1wIOul JTh/PIldeXNNkUHEt+V5Vh4ebAdrrwSIJo7XS8aeEcV4H9o1XUhYxE8IcOK3LIgO 5Rn/YKPw9iF5MzeYYiW69CtPuPrmANnmcQk9XM+E+Cm/dnsW6xZr/33FkqwcmQ4y Q18cC4Sr8U89Ch133Z2CbuCUMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDIF97r cMfhQ6xhmbCUBZ7wyAv4MB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN5VJhN81dVHcaMBJj86LKdReou1p5rdPtx0YajOG+BSu3Atv0837x XQ7uF2FZscBawiL4OeMyID0jC9J+WI6ZhqqF//Y/J77sBkIfhEGc+QuAIN4rybw3 vJcAvtCKWrMEqWmgBfYVjt/kpfzdRY3A0aD0RjCL2yVVSzji4o5w4zb4cj2BLvLC LsDtzNUw3UILNpOB2sOO968kX1pC4jWcg5wnMmOG3IvwRnFklM9ITqNk5JT8/NXe h7Q8cPalO4ZLGyMHiU/l0K20pcAg/lRxbcuVD5XizPXLsDODXMafR+Foe2cHfP6Y 88evMCRHPTknXX51ex27MrVs4s3x7frb -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org