$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft File: nC3RgnBi24kuOEZaEK_kkWg1wCc.mft (raw, json) Hash identifier: 2RKRifCikKS3wA6jj6xnWpNTflRiYDBHrTw8H5el/IQ= Subject key identifier: 4A:4A:8E:1D:2C:34:28:09:B4:F0:32:90:48:8A:96:8D:D5:4C:5D:8C Authority key identifier: 9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27 Certificate issuer: /CN=A91B1F27/serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft Manifest number: 011A Signing time: Sat 23 Nov 2024 03:00:40 +0000 Manifest this update: Sat 23 Nov 2024 03:00:39 +0000 Manifest next update: Sat 30 Nov 2024 03:00:39 +0000 Files and hashes: 1: nC3RgnBi24kuOEZaEK_kkWg1wCc.crl (hash: wj8YiimCVL2gqDAW7DbdcIbOgxPQDPjqoaLR73i8zrM=) 2: ED31BA0AFBAE11ED977DEA10C4F9AE02.roa (hash: sZ1Qc0QixkblDQbEZ18gwDagCIypsTqT+SHpNFgumsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F27/serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027 Validity Not Before: Nov 23 03:00:39 2024 GMT Not After : Nov 30 03:00:39 2024 GMT Subject: CN=67414558-5741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:8f:b0:49:38:1a:b3:8a:e5:3f:bd:93:c8: 6b:f5:b0:50:18:9b:7d:83:aa:20:41:1e:e5:e1:18: f6:83:ea:8e:d3:35:54:69:99:40:8d:f1:a0:78:e5: b9:9a:d7:6b:a4:14:86:88:62:d1:5b:ab:26:6f:56: e8:2c:e3:2d:89:89:15:e2:75:72:23:99:c6:b0:f3: 81:79:cd:ec:52:4c:3f:8f:46:99:db:21:a5:9e:78: f9:d9:ef:a2:dd:1b:21:ff:16:b1:ab:d5:85:f5:2f: d5:21:48:f6:b0:6f:08:4b:4f:a7:2d:8e:e5:5d:c9: a3:0f:ac:64:07:08:4b:1d:35:9b:4d:b7:a2:de:3b: 4d:7f:5a:55:02:2e:a5:e8:ae:61:0a:1c:9c:93:3f: 08:05:b5:47:24:cd:fb:27:1e:69:b0:7a:a5:7b:8b: ab:70:be:58:1f:a1:1d:e6:e1:43:f1:1a:81:43:bd: be:5b:b1:b9:c6:33:7a:fa:cf:eb:3f:29:d8:6e:29: fe:ba:c7:f3:18:70:44:ef:19:0e:c9:3e:25:50:b5: 02:b1:00:ac:54:a4:84:43:b0:e5:4d:f2:b1:8f:ef: ca:3d:aa:88:a9:dc:51:82:6d:d0:67:6c:6f:5d:bf: 92:bb:d1:8b:9b:ff:bc:c1:8d:96:f5:fa:74:af:74: cc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4A:8E:1D:2C:34:28:09:B4:F0:32:90:48:8A:96:8D:D5:4C:5D:8C X509v3 Authority Key Identifier: keyid:9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ef:83:ea:fa:bd:b6:45:51:b8:ed:13:84:6f:21:4a:f4:d5: c8:3a:69:7a:41:72:0a:07:d4:6b:ac:98:40:89:28:6b:2f:57: b9:16:e8:64:8f:de:61:66:38:87:f5:0d:84:fc:07:89:a8:b7: 72:89:6d:df:8f:f1:73:98:f5:f3:31:49:a3:34:fb:3e:cf:33: 12:9a:2f:c8:40:16:01:47:4b:64:79:31:63:75:3f:6d:9f:47: e5:99:7f:b1:13:90:a6:9e:bd:b8:ac:94:57:3b:3d:fe:fc:5f: c5:c5:60:74:39:c6:7c:ec:77:e9:99:41:f5:f4:d0:71:6f:02: de:c8:61:99:ba:90:12:1b:f7:e9:69:c6:12:2e:57:ee:b8:4a: 78:83:6f:a9:7c:e5:05:65:18:2f:6c:f9:39:a8:fe:1a:45:22: 16:de:8f:5b:83:dc:a2:9f:6f:b0:1b:56:74:b5:7e:bf:99:99: 9f:84:6a:5a:a6:45:d4:0e:62:27:47:79:ea:ad:c9:1a:a3:a9: 70:ad:72:7a:3c:71:95:2e:a8:da:42:0f:73:ee:b8:40:66:6c: 0f:ec:da:1e:e9:4d:4d:a1:f7:f3:83:3f:39:d9:c8:0b:86:5d: 13:11:fd:d2:81:e3:ee:53:d8:5b:55:d8:a5:03:0c:8b:b9:5e: 3e:74:d5:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGMjcxMTAvBgNVBAUTKDlDMkREMTgyNzA2MkRCODkyRTM4NDY1QTEwQUZFNDkx NjgzNUMwMjcwHhcNMjQxMTIzMDMwMDM5WhcNMjQxMTMwMDMwMDM5WjAYMRYwFAYD VQQDEw02NzQxNDU1OC01NzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur2PsEk4GrOK5T+9k8hr9bBQGJt9g6ogQR7l4Rj2g+qO0zVUaZlAjfGgeOW5 mtdrpBSGiGLRW6smb1boLOMtiYkV4nVyI5nGsPOBec3sUkw/j0aZ2yGlnnj52e+i 3Rsh/xaxq9WF9S/VIUj2sG8IS0+nLY7lXcmjD6xkBwhLHTWbTbei3jtNf1pVAi6l 6K5hChyckz8IBbVHJM37Jx5psHqle4urcL5YH6Ed5uFD8RqBQ72+W7G5xjN6+s/r PynYbin+usfzGHBE7xkOyT4lULUCsQCsVKSEQ7DlTfKxj+/KPaqIqdxRgm3QZ2xv Xb+Su9GLm/+8wY2W9fp0r3TMsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpKjh0s NCgJtPAykEiKlo3VTF2MMB8GA1UdIwQYMBaAFJwt0YJwYtuJLjhGWhCv5JFoNcAn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUYyNy9GNzdDMTA5QUZC QTUxMUVEODhEMEM5NkRDNEY5QUUwMi9uQzNSZ25CaTI0a3VPRVphRUtfa2tXZzF3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DM1JnbkJpMjRrdU9FWmFFS19ra1dnMXdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUYyNy9GNzdDMTA5QUZCQTUxMUVEODhEMEM5NkRDNEY5QUUwMi9uQzNSZ25CaTI0 a3VPRVphRUtfa2tXZzF3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb74Pq+r22RVG47ROEbyFK9NXIOml6QXIKB9RrrJhAiShrL1e5Fuhk j95hZjiH9Q2E/AeJqLdyiW3fj/FzmPXzMUmjNPs+zzMSmi/IQBYBR0tkeTFjdT9t n0flmX+xE5Cmnr24rJRXOz3+/F/FxWB0OcZ87HfpmUH19NBxbwLeyGGZupASG/fp acYSLlfuuEp4g2+pfOUFZRgvbPk5qP4aRSIW3o9bg9yin2+wG1Z0tX6/mZmfhGpa pkXUDmInR3nqrckao6lwrXJ6PHGVLqjaQg9z7rhAZmwP7Noe6U1Noffzgz852cgL hl0TEf3SgePuU9hbVdilAwyLuV4+dNUp -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org