$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: 0qxq5aIayQ1oDinytAN/BPPdTz1NaWLOvww7CDV4DMc= Subject key identifier: C4:DA:E5:2D:B2:BC:F1:69:6B:1B:81:59:44:40:A8:D1:98:C1:E3:5D Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: 1F Signing time: Thu 21 Nov 2024 05:55:22 +0000 Manifest this update: Thu 21 Nov 2024 05:55:21 +0000 Manifest next update: Thu 28 Nov 2024 05:55:21 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: aGf/mdQhYutZdAkYgsUhElPtSwbBblhQxyG4VNj54Hs=) 2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Nov 21 05:55:21 2024 GMT Not After : Nov 28 05:55:21 2024 GMT Subject: CN=673ecb49-43ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e9:5b:13:cd:9a:17:41:ca:68:b1:a4:15:8f: f8:79:67:db:44:92:98:4a:00:ed:fa:1a:8c:71:86: 66:1b:ad:cf:ea:02:44:55:75:59:e0:26:78:53:5b: 93:c8:99:40:42:35:ed:09:b0:dc:71:f7:05:65:31: 7d:f7:9a:25:1c:0f:6d:1c:a7:61:4d:cf:f9:74:92: 09:44:3f:d4:e6:d1:49:4c:86:f9:33:5a:89:f2:75: 0b:a1:e1:34:99:f7:4b:10:59:31:f9:ee:3f:cd:d0: 20:cc:61:76:af:1f:3a:67:ad:da:3d:05:5c:7d:41: 3c:16:bd:68:1c:e4:fa:83:9a:dd:4e:8c:34:7f:d8: 57:40:6c:a0:2e:a1:5b:86:d8:52:0d:78:a1:ab:5f: 57:49:a8:81:aa:c7:8f:f5:b5:d3:17:47:25:50:fc: cc:a9:aa:f1:4d:2c:a9:fe:3c:92:cb:ac:a5:c3:f1: b4:b3:02:e0:66:24:25:6e:8f:35:65:97:13:7f:77: c7:c0:dc:11:bf:3a:dd:28:34:b0:a8:ac:53:47:03: ad:46:0d:3a:4a:6a:d1:32:ef:aa:c2:22:19:1f:74: b4:02:a8:69:ac:06:9b:71:f7:d3:bd:9f:39:21:4f: e5:4d:08:be:92:1b:f4:2e:dd:54:91:bb:5f:e4:dd: 53:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DA:E5:2D:B2:BC:F1:69:6B:1B:81:59:44:40:A8:D1:98:C1:E3:5D X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:24:5c:90:f2:90:b3:34:51:a2:f5:85:8b:55:43:27:94:9b: 94:1e:4d:05:f0:9f:02:02:c4:27:21:47:1d:3d:a1:8f:c1:58: 88:2d:d4:25:90:a6:30:af:05:e3:27:43:61:02:7f:fb:d3:db: 81:3d:8d:1a:ee:7e:9c:0c:7f:40:c0:d6:c9:77:68:8a:3b:3e: e5:27:25:78:42:2b:3b:9b:cd:03:02:36:f9:ed:eb:f4:c4:b4: d5:62:26:a3:cc:f6:c1:89:33:22:83:5d:54:41:13:89:80:fc: 0b:0d:01:fc:f9:56:08:c1:09:59:92:cb:80:d5:0e:cd:53:f2: 95:dd:1d:30:a0:a0:1d:e3:96:64:3c:8f:30:6e:f5:4d:63:2c: 38:78:6e:d7:52:32:61:6a:1c:2b:46:75:31:38:de:e7:62:e8: d4:65:1f:08:c8:7d:b8:c6:37:c1:d8:80:a7:80:1a:d0:cf:24: ba:bf:c1:d2:a0:29:55:5d:7f:03:a6:27:59:c4:d3:70:a3:5a: b7:16:d1:fc:27:03:59:e7:72:0b:f4:ad:11:8c:38:e9:92:25: 8f:b4:4e:78:81:42:58:f3:67:a9:11:9a:cb:e5:37:75:2c:fa: 70:4b:c7:3a:9a:62:8d:c6:22:11:55:63:c0:10:d8:9b:01:a9: f3:d6:0f:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTkwRjExMC8GA1UEBRMoOUM2OEY0MDNGMDI0MDE3QkREMjZENkREMEQyMDI3QTQw MkI5RjI4MTAeFw0yNDExMjEwNTU1MjFaFw0yNDExMjgwNTU1MjFaMBgxFjAUBgNV BAMTDTY3M2VjYjQ5LTQzZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm6VsTzZoXQcposaQVj/h5Z9tEkphKAO36GoxxhmYbrc/qAkRVdVngJnhTW5PI mUBCNe0JsNxx9wVlMX33miUcD20cp2FNz/l0kglEP9Tm0UlMhvkzWonydQuh4TSZ 90sQWTH57j/N0CDMYXavHzpnrdo9BVx9QTwWvWgc5PqDmt1OjDR/2FdAbKAuoVuG 2FINeKGrX1dJqIGqx4/1tdMXRyVQ/MypqvFNLKn+PJLLrKXD8bSzAuBmJCVujzVl lxN/d8fA3BG/Ot0oNLCorFNHA61GDTpKatEy76rCIhkfdLQCqGmsBptx99O9nzkh T+VNCL6SG/Qu3VSRu1/k3VPVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxNrlLbK8 8WlrG4FZRECo0ZjB410wHwYDVR0jBBgwFoAUnGj0A/AkAXvdJtbdDSAnpAK58oEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOTBGL0JGQTk2RkFBN0JF QzExRUY5OTlGQkMxOUM0RjlBRTAyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbkdqMEFfQWtBWHZkSnRiZERTQW5wQUs1OG9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx OTBGL0JGQTk2RkFBN0JFQzExRUY5OTlGQkMxOUM0RjlBRTAyL25HajBBX0FrQVh2 ZEp0YmREU0FucEFLNThvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4kXJDykLM0UaL1hYtVQyeUm5QeTQXwnwICxCchRx09oY/BWIgt1CWQ pjCvBeMnQ2ECf/vT24E9jRrufpwMf0DA1sl3aIo7PuUnJXhCKzubzQMCNvnt6/TE tNViJqPM9sGJMyKDXVRBE4mA/AsNAfz5VgjBCVmSy4DVDs1T8pXdHTCgoB3jlmQ8 jzBu9U1jLDh4btdSMmFqHCtGdTE43udi6NRlHwjIfbjGN8HYgKeAGtDPJLq/wdKg KVVdfwOmJ1nE03CjWrcW0fwnA1nncgv0rRGMOOmSJY+0TniBQljzZ6kRmsvlN3Us +nBLxzqaYo3GIhFVY8AQ2JsBqfPWD2k= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:48 2024 by rpki-client on console-fra.rpki-client.org