$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft File: Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft (raw, json) Hash identifier: sM8cd4XmpnjAjMKZUWIUjOYZOmMwoRzkxG4y27O+fsA= Subject key identifier: 67:46:01:C5:24:C8:C4:95:83:6B:D7:C7:FB:59:7C:D2:55:46:4A:95 Authority key identifier: 35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 Certificate issuer: /CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Certificate serial: 0938 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft Manifest number: 0933 Signing time: Wed 20 Nov 2024 19:58:18 +0000 Manifest this update: Wed 20 Nov 2024 19:58:18 +0000 Manifest next update: Wed 27 Nov 2024 19:58:18 +0000 Files and hashes: 1: Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl (hash: vxvtU57PkC95l6BnKfQifYak9/lmolpKJkfDvIgtxrc=) 2: 5197AD868A0D11EAA9BA2E0FC4F9AE02.roa (hash: bvB7GDHmnaarF1qMqlspjRavNLu6JF79ftbNTEveK8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2360 (0x938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9385/serialNumber=35BF9DC5535A683AB695A77826786D3DF9E2C5B4 Validity Not Before: Nov 20 19:58:18 2024 GMT Not After : Nov 27 19:58:18 2024 GMT Subject: CN=673e3f5a-f5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:0b:9d:8b:0d:d1:94:02:1e:b1:c6:66:da: 63:d6:91:58:07:59:e5:c9:52:aa:4e:39:7a:03:4c: 5a:3c:75:18:74:6b:74:6e:6b:84:ea:84:a1:81:d4: f0:69:10:27:cb:fb:9a:69:b7:e0:84:c4:26:15:a6: 50:de:88:ca:7c:ad:14:b4:12:54:8c:5b:2a:37:53: 93:46:e8:67:93:ef:d6:84:16:62:34:74:d7:5b:1b: 05:1b:68:2f:b6:f7:fa:f4:0b:55:14:ec:ac:47:0a: fe:8c:a6:f2:95:fb:81:2e:4b:73:31:79:71:a8:78: 24:cc:f7:06:9f:71:5f:d0:df:a0:52:c0:4f:9e:ae: bc:35:f3:0e:a1:cc:55:31:39:c9:c7:05:f2:00:96: 26:d7:40:3f:83:68:9b:b9:60:e8:53:ec:b8:10:8c: 20:88:c5:8a:e4:6e:ba:5a:fe:d1:1a:95:e8:f3:f2: f4:8d:32:7b:8e:1a:d8:d7:ec:1f:5e:09:8a:88:7f: 32:ba:7e:5d:e1:2b:97:85:11:53:ae:78:b5:dd:40: 53:f2:a0:76:f0:77:7e:78:45:f7:55:26:13:64:cb: 92:74:96:80:8d:c4:a4:63:23:b4:19:95:08:17:73: 24:56:0d:c3:5c:d7:31:83:5e:70:f9:bf:5e:23:aa: 17:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:46:01:C5:24:C8:C4:95:83:6B:D7:C7:FB:59:7C:D2:55:46:4A:95 X509v3 Authority Key Identifier: keyid:35:BF:9D:C5:53:5A:68:3A:B6:95:A7:78:26:78:6D:3D:F9:E2:C5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nb-dxVNaaDq2lad4JnhtPfnixbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9385/73CF676A8A0B11EAA2964C0BC4F9AE02/Nb-dxVNaaDq2lad4JnhtPfnixbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7f:d0:15:16:26:ed:e4:82:8b:c1:4f:77:4e:af:b8:7c:4f: a5:00:4c:1d:e4:af:ee:5a:47:19:6c:8f:b6:bf:a4:ac:49:27: 1e:84:dc:4b:7c:8e:01:68:06:58:be:81:f7:8c:92:3a:43:cf: 9f:33:f7:09:24:6b:2f:23:e0:a5:aa:ac:d4:56:c1:57:cc:f2: 34:45:54:d8:bc:2b:0e:43:19:1c:5a:c6:a6:f3:fb:4e:d5:a0: 87:0a:28:18:e0:f9:2b:69:88:ed:45:ca:ac:66:cf:ba:07:2b: 20:e6:5f:88:9a:a9:b4:d1:8e:ee:54:2e:96:19:40:99:c4:db: eb:a3:44:bd:f3:c7:98:39:a8:d6:e6:69:b1:8d:c0:ea:0a:a9: 33:fa:3d:b2:bc:17:d5:32:1b:37:33:54:61:b6:0a:e8:1a:59: 0d:20:e8:d8:2c:75:7f:08:eb:bf:11:4d:23:46:fc:57:0c:42: 59:7e:62:49:5c:f4:ca:55:66:2e:f1:af:eb:62:ab:96:10:de: b4:3e:31:0f:86:82:c4:f0:1e:5b:c9:f7:11:1a:16:3f:0e:50: 14:9a:fc:84:ac:c0:e3:9e:33:60:6c:50:50:0d:78:e6:8c:7b: 68:c7:a7:29:55:06:ce:e0:5a:b7:be:3f:94:df:54:1b:1a:14: 54:63:27:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzODUxMTAvBgNVBAUTKDM1QkY5REM1NTM1QTY4M0FCNjk1QTc3ODI2Nzg2RDNE RjlFMkM1QjQwHhcNMjQxMTIwMTk1ODE4WhcNMjQxMTI3MTk1ODE4WjAYMRYwFAYD VQQDEw02NzNlM2Y1YS1mNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiULnYsN0ZQCHrHGZtpj1pFYB1nlyVKqTjl6A0xaPHUYdGt0bmuE6oShgdTw aRAny/uaabfghMQmFaZQ3ojKfK0UtBJUjFsqN1OTRuhnk+/WhBZiNHTXWxsFG2gv tvf69AtVFOysRwr+jKbylfuBLktzMXlxqHgkzPcGn3Ff0N+gUsBPnq68NfMOocxV MTnJxwXyAJYm10A/g2ibuWDoU+y4EIwgiMWK5G66Wv7RGpXo8/L0jTJ7jhrY1+wf XgmKiH8yun5d4SuXhRFTrni13UBT8qB28Hd+eEX3VSYTZMuSdJaAjcSkYyO0GZUI F3MkVg3DXNcxg15w+b9eI6oXnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdGAcUk yMSVg2vXx/tZfNJVRkqVMB8GA1UdIwQYMBaAFDW/ncVTWmg6tpWneCZ4bT354sW0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTM4NS83M0NGNjc2QThB MEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFEcTJsYWQ0Sm5odFBmbml4 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05iLWR4Vk5hYURxMmxhZDRKbmh0UGZuaXhiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTM4NS83M0NGNjc2QThBMEIxMUVBQTI5NjRDMEJDNEY5QUUwMi9OYi1keFZOYWFE cTJsYWQ0Sm5odFBmbml4YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPf9AVFibt5IKLwU93Tq+4fE+lAEwd5K/uWkcZbI+2v6SsSScehNxL fI4BaAZYvoH3jJI6Q8+fM/cJJGsvI+ClqqzUVsFXzPI0RVTYvCsOQxkcWsam8/tO 1aCHCigY4PkraYjtRcqsZs+6Bysg5l+Imqm00Y7uVC6WGUCZxNvro0S988eYOajW 5mmxjcDqCqkz+j2yvBfVMhs3M1RhtgroGlkNIOjYLHV/COu/EU0jRvxXDEJZfmJJ XPTKVWYu8a/rYquWEN60PjEPhoLE8B5byfcRGhY/DlAUmvyErMDjnjNgbFBQDXjm jHtox6cpVQbO4Fq3vj+U31QbGhRUYyfm -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:45 2024 by rpki-client on console-fra.rpki-client.org