$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft File: Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json) Hash identifier: doXsYoMT9znN3Mcq8i0vdCc4FgDGVV9ZScBntwoh/TI= Subject key identifier: BB:B5:FB:1C:C7:02:F3:26:CC:3D:64:C2:CE:92:93:48:49:18:9B:4B Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Certificate serial: 0BCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft Manifest number: 0BC3 Signing time: Fri 22 Nov 2024 18:34:22 +0000 Manifest this update: Fri 22 Nov 2024 18:34:22 +0000 Manifest next update: Fri 29 Nov 2024 18:34:22 +0000 Files and hashes: 1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: 9YFIMYE35FdOFZXAAd+4/sq2zwvmkl96yYNck5zy2TM=) 2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: eKmHLQ3I8s2ze1U9U/lgkxDHNGgvE5AVO8RBZS/JWMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58 Validity Not Before: Nov 22 18:34:22 2024 GMT Not After : Nov 29 18:34:22 2024 GMT Subject: CN=6740ceae-86e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:53:06:82:28:40:c6:5f:18:2c:49:4a:3c: 33:5b:d1:d0:42:1c:47:32:78:65:b2:87:eb:bb:8c: 94:d8:03:a9:a5:e8:1c:fa:5d:85:67:ac:78:7c:0b: db:56:25:a6:07:90:0a:d4:6d:40:f5:2d:b4:85:38: 01:30:da:d8:f1:3b:44:85:2e:9f:97:61:6d:e8:f1: bb:a6:c2:dc:04:7f:50:64:1a:da:ea:a6:e0:c8:b3: f4:d7:cd:21:56:18:f9:ad:18:96:9b:40:22:6b:bf: 10:ac:f5:30:68:d1:2b:8e:38:14:55:4d:25:7a:73: 75:ad:8b:38:94:7d:ce:ce:cf:08:91:3b:69:bd:d4: 27:97:5c:b3:76:17:3e:a3:fb:d0:c4:d0:ee:b4:da: c1:74:10:23:32:75:52:93:fd:26:b6:de:a3:0d:bf: fd:14:c1:02:f4:e0:d9:dc:93:c6:9e:89:e7:fc:48: 3d:1c:03:34:26:5e:0e:d5:e5:92:c2:b7:d0:dd:e5: 65:56:0e:bd:f2:d0:bc:bb:77:e0:46:dd:e8:60:56: d3:dd:15:58:0d:58:e7:c5:7c:7b:92:d4:3f:f6:1a: 9e:fa:f6:2c:3b:68:3d:5b:8e:86:b5:50:2f:a3:a0: 05:1c:e3:6d:41:ea:83:d6:39:d5:0b:72:dc:19:6f: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B5:FB:1C:C7:02:F3:26:CC:3D:64:C2:CE:92:93:48:49:18:9B:4B X509v3 Authority Key Identifier: keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:97:50:8f:d7:04:23:a1:b8:0f:cd:cb:6b:ea:ea:5a:f0:a6: 77:ea:c1:0f:60:bc:82:17:c8:93:52:bb:d0:2f:6c:e9:00:2d: 47:54:5f:ff:28:9d:8f:b8:a9:15:bf:2a:99:19:fa:90:ea:81: c2:58:7f:4e:cd:af:23:c8:31:84:da:ba:3b:65:dc:8e:2d:34: 69:e1:a5:06:06:a8:74:0c:d0:36:9a:fc:fd:c5:93:7b:2f:40: 65:79:52:2e:d5:99:1b:19:d3:1e:fe:8f:b5:7a:33:4f:34:1d: 7d:1d:e0:46:be:74:cd:bf:e6:e4:a3:d3:17:85:fd:9c:13:8c: 34:83:5e:52:ab:07:0a:ea:8d:1b:7b:86:6e:8a:6e:73:ad:43: e5:80:38:ff:20:d8:2c:31:84:5e:3c:a2:e4:d7:cc:8d:11:c1: d7:57:b3:6b:02:7a:5f:f8:ce:df:cf:37:aa:1e:f5:af:4b:f5: 9f:89:b6:f3:8a:d9:d8:36:4e:a0:09:df:92:1a:2e:a4:3c:2b: 1a:b2:c1:8e:f1:2f:ef:1f:d2:ca:21:2a:e8:ce:7c:f6:2c:92: f6:76:13:c5:0b:f4:5f:8c:6c:8d:38:6b:e3:1e:62:3c:b4:a2: 73:ac:8b:65:33:e6:ad:4f:aa:1e:3b:c7:0b:36:ce:0e:37:3c: c0:f3:46:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy QjkwQkVFNTgwHhcNMjQxMTIyMTgzNDIyWhcNMjQxMTI5MTgzNDIyWjAYMRYwFAYD VQQDEw02NzQwY2VhZS04NmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8FTBoIoQMZfGCxJSjwzW9HQQhxHMnhlsofru4yU2AOppegc+l2FZ6x4fAvb ViWmB5AK1G1A9S20hTgBMNrY8TtEhS6fl2Ft6PG7psLcBH9QZBra6qbgyLP0180h Vhj5rRiWm0Aia78QrPUwaNErjjgUVU0lenN1rYs4lH3Ozs8IkTtpvdQnl1yzdhc+ o/vQxNDutNrBdBAjMnVSk/0mtt6jDb/9FMEC9ODZ3JPGnonn/Eg9HAM0Jl4O1eWS wrfQ3eVlVg698tC8u3fgRt3oYFbT3RVYDVjnxXx7ktQ/9hqe+vYsO2g9W46GtVAv o6AFHONtQeqD1jnVC3LcGW9W/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLu1+xzH AvMmzD1kws6Sk0hJGJtLMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3 bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWl1CP1wQjobgPzctr6upa8KZ36sEPYLyCF8iTUrvQL2zpAC1HVF// KJ2PuKkVvyqZGfqQ6oHCWH9Oza8jyDGE2ro7ZdyOLTRp4aUGBqh0DNA2mvz9xZN7 L0BleVIu1ZkbGdMe/o+1ejNPNB19HeBGvnTNv+bko9MXhf2cE4w0g15SqwcK6o0b e4Zuim5zrUPlgDj/INgsMYRePKLk18yNEcHXV7NrAnpf+M7fzzeqHvWvS/Wfibbz itnYNk6gCd+SGi6kPCsassGO8S/vH9LKISroznz2LJL2dhPFC/RfjGyNOGvjHmI8 tKJzrItlM+atT6oeO8cLNs4ONzzA80aK -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org