$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json) Hash identifier: /QXPxvdM/sjlzjGNkp8Qjx71UhBN9nC8C7kFpE2bzBg= Subject key identifier: 67:13:1D:49:97:A5:C3:19:14:76:D3:CC:A5:BC:E0:75:39:54:ED:1A Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 3442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft Manifest number: 3436 Signing time: Fri 22 Nov 2024 14:44:05 +0000 Manifest this update: Fri 22 Nov 2024 14:44:05 +0000 Manifest next update: Fri 29 Nov 2024 14:44:05 +0000 Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: a7BhQuReXFpnA1b2Lhg5DK6JFpO/8MN0wnG1/NFeNpM=) 2: 2251B910AC7411EBBE196180C4F9AE02.roa (hash: /9MtAWjM3Biiq8nnUtxhVHZDm3Jggzrs5MJ2Ivek0VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13378 (0x3442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: Nov 22 14:44:05 2024 GMT Not After : Nov 29 14:44:05 2024 GMT Subject: CN=674098b5-fb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:3e:93:bc:36:89:5a:35:f6:cf:5c:1c:e9: 0d:b8:9e:04:80:d9:ad:9c:7b:e0:c2:4d:c0:4e:a0: 09:2f:72:ca:e4:ae:30:2e:22:76:f2:18:10:31:93: 62:a3:fb:9c:a3:4f:f1:1c:77:2e:1d:bf:52:da:c2: 8c:68:cc:5d:fd:0f:f3:f7:0e:94:cd:3e:76:ec:bc: 44:82:ad:84:b5:7e:5d:36:43:3c:93:eb:06:1e:b1: 6f:fa:d6:e9:7f:7f:a9:bd:df:19:d2:0f:52:52:93: b0:c8:ea:7f:e7:64:08:a1:16:c4:2c:a2:4d:ec:2a: a6:a6:85:4c:69:a4:aa:34:b6:21:aa:bc:cc:e5:b9: 40:34:b9:76:fa:4a:be:d1:95:a2:c0:f6:d8:54:8d: 8f:38:72:c6:cd:ea:a1:d3:bf:2e:d5:9c:27:ef:db: aa:a9:87:6f:68:16:39:b2:b7:82:0a:c2:f4:8d:06: 50:4c:0a:2d:5c:3c:51:ff:58:79:97:dd:76:2e:df: c4:22:6f:10:b5:00:83:3f:db:28:57:81:27:85:b1: cd:be:47:13:db:e2:28:b5:b7:34:c4:0d:12:90:04: 90:81:c4:0e:68:a6:ee:1f:93:25:c2:ab:62:67:7b: 47:a5:72:87:5d:ea:36:c0:6a:fd:2f:c4:46:b7:6e: f6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:13:1D:49:97:A5:C3:19:14:76:D3:CC:A5:BC:E0:75:39:54:ED:1A X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a1:de:c2:95:fa:81:6f:5b:b7:99:e5:3e:3e:80:2b:1f:32: db:5a:e7:69:e8:6f:af:51:18:f6:a1:d1:38:1c:f5:9c:11:af: 33:59:e1:e2:d0:1e:41:5c:66:6b:92:ff:af:af:4d:ab:41:c4: d7:27:57:57:d7:82:31:b6:7a:4e:4d:86:bc:2c:1c:1f:ec:d9: 47:e4:0e:f5:a4:49:84:d5:77:9a:8d:2b:72:29:56:f2:0d:8f: 69:4c:1c:c9:36:e5:2b:94:b5:7d:41:1a:31:5d:10:69:fd:7a: 6d:e0:74:89:b8:78:6d:cf:9d:b8:7f:4e:a3:ff:bd:7f:f7:f4: 25:f2:a3:97:b8:34:e0:22:22:a8:d7:5f:f9:53:3c:c6:d1:48: 96:eb:c7:0a:75:f7:07:43:90:7e:d8:71:6d:89:fd:11:e4:77: d0:ce:7a:9a:fb:46:87:94:0c:5e:cd:69:95:68:72:c9:91:6d: 3f:ec:8e:2d:9b:27:b9:78:0b:de:a1:74:29:3d:ca:3c:a5:ff: aa:59:42:24:e8:7a:e5:d6:3d:ad:39:10:9b:22:6b:f4:3b:b9: 7d:be:ec:e9:39:d2:70:05:49:c2:1d:90:7f:a1:41:37:3d:91: 86:ff:a8:80:51:ac:c0:25:ce:33:e9:46:4e:ab:e0:18:dc:f8: 14:8f:8d:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjQxMTIyMTQ0NDA1WhcNMjQxMTI5MTQ0NDA1WjAYMRYwFAYD VQQDEw02NzQwOThiNS1mYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwng+k7w2iVo19s9cHOkNuJ4EgNmtnHvgwk3ATqAJL3LK5K4wLiJ28hgQMZNi o/uco0/xHHcuHb9S2sKMaMxd/Q/z9w6UzT527LxEgq2EtX5dNkM8k+sGHrFv+tbp f3+pvd8Z0g9SUpOwyOp/52QIoRbELKJN7CqmpoVMaaSqNLYhqrzM5blANLl2+kq+ 0ZWiwPbYVI2POHLGzeqh078u1Zwn79uqqYdvaBY5sreCCsL0jQZQTAotXDxR/1h5 l912Lt/EIm8QtQCDP9soV4EnhbHNvkcT2+Iotbc0xA0SkASQgcQOaKbuH5Mlwqti Z3tHpXKHXeo2wGr9L8RGt272JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcTHUmX pcMZFHbTzKW84HU5VO0aMB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjE2OC8yNEM2MkMwNjFEOTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BU TU1Hdi1VQmc0VkJWXzA3UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMod7ClfqBb1u3meU+PoArHzLbWudp6G+vURj2odE4HPWcEa8zWeHi 0B5BXGZrkv+vr02rQcTXJ1dX14IxtnpOTYa8LBwf7NlH5A71pEmE1XeajStyKVby DY9pTBzJNuUrlLV9QRoxXRBp/Xpt4HSJuHhtz524f06j/71/9/Ql8qOXuDTgIiKo 11/5UzzG0UiW68cKdfcHQ5B+2HFtif0R5HfQznqa+0aHlAxezWmVaHLJkW0/7I4t mye5eAveoXQpPco8pf+qWUIk6Hrl1j2tORCbImv0O7l9vuzpOdJwBUnCHZB/oUE3 PZGG/6iAUazAJc4z6UZOq+AY3PgUj43g -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org