$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: JrtadJTPPzb+Wjy1Jt9SPgTl8I0NwuEKkjwU5r6gx+s= Subject key identifier: 44:C1:1D:CF:A3:F7:2D:A4:24:F4:A0:81:D5:B5:96:EC:1A:25:09:B4 Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 0795 Signing time: Fri 22 Nov 2024 20:50:09 +0000 Manifest this update: Fri 22 Nov 2024 20:50:09 +0000 Manifest next update: Fri 29 Nov 2024 20:50:09 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: N/taM7VZ2AZzhPzlej1x5WNg5eZ+k+8ylqRQDhrh57M=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: B/DuXQToKy4NJJ+8lbA6TjX/A2qM6LHM64/A3YRX7ts=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 5FYn5QVSBhm0XZoV+j+o/nzPJ0WO1FJiMFnDtdxaDwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Nov 22 20:50:09 2024 GMT Not After : Nov 29 20:50:09 2024 GMT Subject: CN=6740ee81-fa57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ee:e0:e5:9e:71:bd:d9:ac:d2:3b:7d:7e:ea: 1b:7a:e2:8a:cf:44:11:cc:7b:79:0d:4f:94:0c:7e: 8f:df:f8:5a:4e:f5:9c:c5:b1:ad:08:69:a7:4b:63: bf:19:ce:1f:fe:44:e6:ec:61:a3:dc:a1:06:fd:f1: af:50:3a:90:95:f2:86:76:be:63:7a:08:00:fc:7a: c6:c9:91:c7:fc:95:7f:d0:bb:50:32:c0:3b:74:0b: 50:96:a2:ed:cc:8b:a7:cd:e4:b6:7b:19:6f:ba:f8: a4:71:62:73:8a:96:0f:82:b6:80:da:ec:65:01:96: a0:1b:e0:d4:03:b0:4c:cb:56:80:19:3d:2c:9f:22: c9:87:81:ae:08:e7:44:5f:37:b3:58:44:5c:9b:d9: 89:6d:e9:19:a1:60:b5:eb:19:2d:48:8d:86:65:4d: 88:79:d4:64:d3:88:72:cc:70:ea:0e:65:84:ef:36: 30:8d:6c:c0:f7:ee:62:7d:ff:1e:d3:17:58:46:ae: 0c:9c:34:7d:1f:89:a5:13:79:21:f1:18:24:12:51: ba:5d:f5:a3:18:01:f6:b6:14:36:dc:f5:ee:b3:db: f0:e9:53:73:fa:bb:1f:95:c8:a8:44:ea:a4:9e:07: da:94:ad:db:5c:e2:34:53:a9:df:50:29:e6:d1:35: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C1:1D:CF:A3:F7:2D:A4:24:F4:A0:81:D5:B5:96:EC:1A:25:09:B4 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9a:44:d0:cf:67:d5:5d:42:b7:a2:f0:fb:3b:15:24:88:32: 99:f2:18:71:fd:0f:d2:30:6a:b8:88:46:ea:2c:29:22:2a:91: c1:73:b8:9e:ab:6f:bf:cb:09:30:df:86:71:f0:5a:6e:82:ee: db:17:44:6f:5c:55:af:51:da:ee:e6:94:19:68:de:06:dc:6a: 74:e6:cc:24:91:af:66:b1:58:61:f6:98:a0:8b:0e:0f:02:e9: f9:2d:05:35:6d:2a:8a:40:0f:58:e4:c1:3c:1d:fe:7f:8f:e1: 9d:18:25:4f:43:16:d3:2b:d6:80:4c:e6:5a:3a:e9:cb:c7:86: f0:e5:98:19:31:5e:86:48:b0:b1:0d:1f:7a:f3:3f:78:bc:20: 52:22:8e:9b:cf:dc:71:01:c2:26:db:c2:40:5a:24:d3:6f:3f: f7:db:6f:80:01:d5:30:87:ca:3e:75:08:75:57:bd:7f:2e:32: c7:a5:ea:0a:4a:bf:fe:2d:9a:65:10:2a:09:2e:75:69:6f:b4: 6a:3b:2d:a3:d1:b2:ee:13:68:cd:9e:86:61:61:e5:2e:23:0b: 0d:db:15:fc:c3:71:2f:b7:8b:ba:ea:4b:6e:8d:0f:18:87:3f: d1:47:bd:b8:ea:89:8a:b3:a0:44:62:03:42:fa:60:03:3e:01: 30:1e:de:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjQxMTIyMjA1MDA5WhcNMjQxMTI5MjA1MDA5WjAYMRYwFAYD VQQDEw02NzQwZWU4MS1mYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5e7g5Z5xvdms0jt9fuobeuKKz0QRzHt5DU+UDH6P3/haTvWcxbGtCGmnS2O/ Gc4f/kTm7GGj3KEG/fGvUDqQlfKGdr5jeggA/HrGyZHH/JV/0LtQMsA7dAtQlqLt zIunzeS2exlvuvikcWJzipYPgraA2uxlAZagG+DUA7BMy1aAGT0snyLJh4GuCOdE XzezWERcm9mJbekZoWC16xktSI2GZU2IedRk04hyzHDqDmWE7zYwjWzA9+5iff8e 0xdYRq4MnDR9H4mlE3kh8RgkElG6XfWjGAH2thQ23PXus9vw6VNz+rsflcioROqk ngfalK3bXOI0U6nfUCnm0TVwFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETBHc+j 9y2kJPSggdW1luwaJQm0MB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9mkTQz2fVXUK3ovD7OxUkiDKZ8hhx/Q/SMGq4iEbqLCkiKpHBc7ie q2+/ywkw34Zx8Fpugu7bF0RvXFWvUdru5pQZaN4G3Gp05swkka9msVhh9pigiw4P Aun5LQU1bSqKQA9Y5ME8Hf5/j+GdGCVPQxbTK9aATOZaOunLx4bw5ZgZMV6GSLCx DR968z94vCBSIo6bz9xxAcIm28JAWiTTbz/322+AAdUwh8o+dQh1V71/LjLHpeoK Sr/+LZplECoJLnVpb7RqOy2j0bLuE2jNnoZhYeUuIwsN2xX8w3Evt4u66ktujQ8Y hz/RR7246omKs6BEYgNC+mADPgEwHt6j -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:40 2024 by rpki-client on console-ams.rpki-client.org