$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: DUGNlEunH2UYcE8Dptj57dAt+laHKOINJghshSB11UU= Subject key identifier: 79:BD:F7:4B:20:3A:2E:87:D9:5F:37:D1:C9:DE:9E:29:9B:83:FC:A8 Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0B14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0B02 Signing time: Wed 20 Nov 2024 19:00:27 +0000 Manifest this update: Wed 20 Nov 2024 19:00:27 +0000 Manifest next update: Wed 27 Nov 2024 19:00:27 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: Bgy5+cndboh1QsCrGcT7fPhbBJes6+Vx1lJ+uz5B0sQ=) 2: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: y28rLGPdPmm2RMeTHn7TROIYxoMrptjo0yzzyCvWoMs=) 3: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: dDWf0aYmxu05SE8QIKzfCcmUhn7e971nZnRqmk+LmCo=) 4: E5675F48336E11EA94623E18C4F9AE02.roa (hash: iPbzGQb+v1UtoJ+/xdLJYlI0s4JJe78IGCPidttsEfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2836 (0xb14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Nov 20 19:00:27 2024 GMT Not After : Nov 27 19:00:27 2024 GMT Subject: CN=673e31cb-939d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:dd:9a:30:15:bf:85:b6:b3:4b:8f:fb:20: e0:be:2b:1a:ac:2a:e6:54:89:97:7b:1f:a9:9c:ec: a8:14:4b:c4:ac:ff:c5:0d:5c:ce:95:75:22:b6:b3: 0e:c0:58:cc:a1:0b:f0:df:94:f8:74:70:56:8f:7b: c2:94:be:6a:1f:3f:41:7f:89:5e:0e:05:de:1d:9b: 26:22:01:97:53:58:db:e2:a0:86:96:cc:29:fd:c0: bf:8b:ae:17:00:97:80:66:fd:b2:57:c9:fd:d3:d3: ff:a1:ca:dc:85:9d:07:1c:16:96:32:21:31:a8:25: 8b:a7:b1:dc:d6:0e:7f:ad:a4:3a:c4:1b:21:a3:76: 03:76:20:bb:c6:c1:4f:1f:e4:1b:5e:20:2a:7e:26: 97:b0:c9:77:5b:72:a7:78:b4:dd:0a:4c:75:34:20: 39:29:12:82:20:08:eb:a5:1b:6d:10:05:97:d3:ca: 4f:e5:4c:41:d3:56:4d:0d:f7:4d:3e:d8:73:f5:a0: 53:fc:ca:70:8d:e8:b4:44:69:60:2b:6d:a7:8b:fd: b3:02:92:54:a9:a7:c2:8b:34:44:4e:d8:43:fe:e2: e5:1f:b9:88:d7:dc:cb:a1:29:cb:af:c0:b7:a9:ef: d3:97:27:b8:e3:8e:3d:4d:32:04:fa:52:1e:7e:86: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BD:F7:4B:20:3A:2E:87:D9:5F:37:D1:C9:DE:9E:29:9B:83:FC:A8 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:48:bd:ca:b1:9e:5a:11:e3:bd:bb:b6:f1:2b:60:d3:da:ee: af:d3:41:e2:d8:41:4a:3e:b0:c7:d1:ed:68:fb:50:c2:f6:8e: 1a:12:44:4d:d8:14:88:28:31:92:c8:1a:73:0f:44:09:27:88: 78:df:97:6e:d9:78:b9:3d:b0:01:75:b7:d6:6a:bb:2f:87:ba: af:a8:08:d8:5b:72:c8:7b:1b:1c:4a:2d:27:c4:3e:e7:62:76: 04:c5:da:06:42:ef:e5:44:3d:aa:a9:07:54:42:36:c7:50:59: fe:02:78:64:e3:93:a9:c8:d4:b8:57:ca:1a:ce:c1:ae:d2:e4: 17:20:02:b4:24:d4:e4:97:21:78:14:96:1c:01:1e:84:3a:73: 77:01:0f:66:00:3e:33:6b:43:da:52:4e:d2:e3:a4:8e:c4:86: 4e:c7:29:04:d6:c2:a8:aa:33:ee:08:a8:bb:c3:b2:bf:8d:e3: e2:5d:5e:41:fc:88:8c:90:68:22:e9:ce:79:77:0b:d1:1f:04: fa:ea:0c:81:19:b3:e5:ef:92:22:d4:d1:51:e5:74:5a:28:b7: e3:86:31:d3:39:e3:f8:f2:0d:61:42:79:85:66:a3:4c:c7:f2: f8:b4:95:99:2e:f8:3e:10:24:09:f6:43:43:62:a3:90:1e:6f: cc:fa:04:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjQxMTIwMTkwMDI3WhcNMjQxMTI3MTkwMDI3WjAYMRYwFAYD VQQDEw02NzNlMzFjYi05MzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomjdmjAVv4W2s0uP+yDgvisarCrmVImXex+pnOyoFEvErP/FDVzOlXUitrMO wFjMoQvw35T4dHBWj3vClL5qHz9Bf4leDgXeHZsmIgGXU1jb4qCGlswp/cC/i64X AJeAZv2yV8n909P/ocrchZ0HHBaWMiExqCWLp7Hc1g5/raQ6xBsho3YDdiC7xsFP H+QbXiAqfiaXsMl3W3KneLTdCkx1NCA5KRKCIAjrpRttEAWX08pP5UxB01ZNDfdN Pthz9aBT/Mpwjei0RGlgK22ni/2zApJUqafCizRETthD/uLlH7mI19zLoSnLr8C3 qe/Tlye44449TTIE+lIefob9KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm990sg Oi6H2V830cnenimbg/yoMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMSL3KsZ5aEeO9u7bxK2DT2u6v00Hi2EFKPrDH0e1o+1DC9o4aEkRN 2BSIKDGSyBpzD0QJJ4h435du2Xi5PbABdbfWarsvh7qvqAjYW3LIexscSi0nxD7n YnYExdoGQu/lRD2qqQdUQjbHUFn+Anhk45OpyNS4V8oazsGu0uQXIAK0JNTklyF4 FJYcAR6EOnN3AQ9mAD4za0PaUk7S46SOxIZOxykE1sKoqjPuCKi7w7K/jePiXV5B /IiMkGgi6c55dwvRHwT66gyBGbPl75Ii1NFR5XRaKLfjhjHTOeP48g1hQnmFZqNM x/L4tJWZLvg+ECQJ9kNDYqOQHm/M+gRw -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:27 2024 by rpki-client on console-fra.rpki-client.org