$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft File: neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json) Hash identifier: Kgt91kRBlT8smpMlnvNP9hTjvV3tt43aQh9HD1LLxnA= Subject key identifier: 5D:4E:0A:FE:EC:74:BB:4C:62:BC:3C:ED:79:8A:A0:68:7D:85:BB:AA Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 Certificate issuer: /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Certificate serial: 0630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft Manifest number: 5160 Signing time: Fri 22 Nov 2024 15:06:05 +0000 Manifest this update: Fri 22 Nov 2024 15:06:05 +0000 Manifest next update: Fri 29 Nov 2024 15:06:05 +0000 Files and hashes: 1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: bZ4h6vdqat6XKYdHfWM9tgxgjuBmVdfLQYMwXECM6A4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8 Validity Not Before: Nov 22 15:06:05 2024 GMT Not After : Nov 29 15:06:05 2024 GMT Subject: CN=67409ddd-3ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:d8:9a:aa:94:40:29:d2:9d:5c:51:95:86: 57:5f:eb:b6:0e:33:8c:bb:a4:7f:b7:78:1e:be:ad: 62:39:37:ce:1a:91:9c:d1:4c:8d:54:5a:77:8d:b0: 81:68:17:04:80:57:bd:4c:58:21:49:c9:f2:16:fe: fc:ce:a0:44:8b:91:4c:85:7e:a3:01:65:df:3a:64: 61:1f:49:65:c7:d5:8e:62:4f:4a:92:2e:4b:79:fd: 10:58:d7:76:58:73:4c:94:c3:18:83:5b:27:7a:e2: 78:32:40:ea:9c:09:66:05:1c:8e:bc:e1:44:5a:d4: d7:fe:bf:c7:90:0e:05:f8:62:8d:ec:f0:b3:24:34: f1:76:1d:82:5d:12:4a:58:51:10:78:de:04:da:20: d4:9f:4e:b5:cc:a6:f5:ea:63:f0:c0:a2:77:56:dc: ab:b6:e6:5b:73:b8:22:44:33:2c:dd:68:dc:4a:c2: 67:40:90:e5:9c:be:59:3b:73:16:e2:0b:71:7d:c1: 9e:18:52:fa:a7:61:3d:73:b8:c2:39:8f:c1:66:21: 6e:0a:ea:ec:3c:a1:c9:58:96:60:5f:f4:df:20:51: e1:71:34:6c:d3:d5:8d:51:8d:2e:70:51:2b:a3:bc: 31:06:33:a8:c9:fb:bc:46:74:4b:1d:42:c4:95:fa: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4E:0A:FE:EC:74:BB:4C:62:BC:3C:ED:79:8A:A0:68:7D:85:BB:AA X509v3 Authority Key Identifier: keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:24:ac:d5:9f:f4:ba:67:c2:18:09:62:d3:53:f6:6e:32:73: 95:97:dd:42:dc:df:df:20:b3:b7:ff:a9:d6:08:c5:5f:80:ad: b6:2a:6b:ad:b9:33:2d:98:01:32:e7:64:c6:84:f8:dd:79:e9: 58:96:18:7a:a0:b0:98:03:94:b8:70:13:bb:82:62:ce:a9:08: 85:c9:7f:1d:b0:b3:14:3f:a3:79:4d:b8:04:1c:c2:07:a1:f5: a0:15:e5:16:05:a7:ca:0c:be:ce:d4:87:b5:da:cc:3b:93:7a: 13:65:85:8d:16:32:0a:70:1e:c2:08:ca:79:0c:92:ef:f1:fe: 53:eb:bb:6b:a9:11:d5:19:2a:6b:69:0d:c6:b2:74:39:94:b9: 95:ab:85:ab:fa:32:19:70:21:bb:11:1b:e6:a2:39:7b:f1:a9: 38:e7:d6:23:b6:ee:c5:12:1d:39:2d:06:ff:89:ff:b1:2d:b0: c4:c6:1b:7c:78:67:20:ec:7f:e2:b0:12:4f:9a:df:bc:7b:6a: 9b:9c:0b:c3:a6:aa:f7:9c:fd:04:9f:85:20:3d:80:42:56:8e: 03:4f:ea:82:80:f1:f0:47:5e:46:9c:3e:66:b1:86:8f:27:34: 2b:64:06:d8:e4:42:68:52:4e:61:de:19:14:f9:76:11:8c:62: 1d:a2:1e:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyQ0ExMTAvBgNVBAUTKDlERTMyNTQyNTgwRkE4NDMxNjUzOEEzREVCMjg3MUU4 MjU1NkY3QjgwHhcNMjQxMTIyMTUwNjA1WhcNMjQxMTI5MTUwNjA1WjAYMRYwFAYD VQQDEw02NzQwOWRkZC0zZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVTYmqqUQCnSnVxRlYZXX+u2DjOMu6R/t3gevq1iOTfOGpGc0UyNVFp3jbCB aBcEgFe9TFghScnyFv78zqBEi5FMhX6jAWXfOmRhH0llx9WOYk9Kki5Lef0QWNd2 WHNMlMMYg1sneuJ4MkDqnAlmBRyOvOFEWtTX/r/HkA4F+GKN7PCzJDTxdh2CXRJK WFEQeN4E2iDUn061zKb16mPwwKJ3VtyrtuZbc7giRDMs3WjcSsJnQJDlnL5ZO3MW 4gtxfcGeGFL6p2E9c7jCOY/BZiFuCursPKHJWJZgX/TfIFHhcTRs09WNUY0ucFEr o7wxBjOoyfu8RnRLHULElfotxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1OCv7s dLtMYrw87XmKoGh9hbuqMB8GA1UdIwQYMBaAFJ3jJUJYD6hDFlOKPesoceglVve4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDJDQS9EMzREQjk3RTFE QTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFFTVdVNG85NnloeDZDVlc5 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lTWxRbGdQcUVNV1U0bzk2eWh4NkNWVzk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDJDQS9EMzREQjk3RTFEQTAxMUUyODNBMTYxOTIwOEIwMkNEMi9uZU1sUWxnUHFF TVdVNG85NnloeDZDVlc5N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWJKzVn/S6Z8IYCWLTU/ZuMnOVl91C3N/fILO3/6nWCMVfgK22Kmut uTMtmAEy52TGhPjdeelYlhh6oLCYA5S4cBO7gmLOqQiFyX8dsLMUP6N5TbgEHMIH ofWgFeUWBafKDL7O1Ie12sw7k3oTZYWNFjIKcB7CCMp5DJLv8f5T67trqRHVGSpr aQ3GsnQ5lLmVq4Wr+jIZcCG7ERvmojl78ak459Yjtu7FEh05LQb/if+xLbDExht8 eGcg7H/isBJPmt+8e2qbnAvDpqr3nP0En4UgPYBCVo4DT+qCgPHwR15GnD5msYaP JzQrZAbY5EJoUk5h3hkU+XYRjGIdoh4z -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org