$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft File: Nvf123A1uQ_bKShY4vz45rmRgXg.mft (raw, json) Hash identifier: LCVhh4Zz+BxgLpw9vJ5RUa2XCLPDZcNrHuYGkhPftPk= Subject key identifier: B7:4E:1C:6F:E1:1D:67:AB:0D:E6:32:FF:41:33:2E:AE:F7:59:C4:F6 Authority key identifier: 36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 Certificate issuer: /CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft Manifest number: EB Signing time: Sat 23 Nov 2024 03:28:07 +0000 Manifest this update: Sat 23 Nov 2024 03:28:07 +0000 Manifest next update: Sat 30 Nov 2024 03:28:07 +0000 Files and hashes: 1: Nvf123A1uQ_bKShY4vz45rmRgXg.crl (hash: xmv/JaYksvf2NiS2NaEONMne7dky0ySFX68/kbDPraA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC636/serialNumber=36F7F5DB7035B90FDB292858E2FCF8E6B9918178 Validity Not Before: Nov 23 03:28:07 2024 GMT Not After : Nov 30 03:28:07 2024 GMT Subject: CN=67414bc7-55af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:43:c0:70:6a:cc:d1:3e:dc:e3:42:cb:4c: bb:9f:44:57:f7:2b:bf:dc:99:23:07:19:8b:dd:9b: 0c:a2:f1:6d:a8:19:ba:50:d4:a8:de:b0:ae:d5:20: 08:4a:0b:c2:61:19:54:65:fa:4e:54:84:0e:71:8c: c9:e1:62:12:b8:54:be:8f:f5:d6:44:6b:e8:16:5f: 8a:73:27:96:b9:15:46:37:47:2c:fc:12:cd:65:49: 00:2d:2d:16:b9:7a:6b:66:6d:b4:ad:a3:d7:15:d0: 8e:75:4b:57:0d:bb:29:07:6d:f6:85:f5:2b:2f:01: f4:5e:e7:47:5d:0d:96:4c:ca:20:ce:3e:46:a6:fd: 03:18:22:87:ae:40:5d:b1:10:18:01:ca:ce:82:ce: b2:66:9c:17:bc:ab:f3:3c:79:bc:e4:fc:73:42:96: b8:48:87:a4:9d:28:18:6a:16:ad:ce:b6:98:35:43: 68:48:45:d2:4f:32:fd:b9:3b:69:a5:4a:58:2d:e4: e8:33:a0:69:30:f1:1c:d3:ab:59:9f:fc:ec:e0:d3: 47:e1:c6:8f:80:70:01:e4:4a:4f:73:2d:9f:3a:69: e1:16:82:6c:69:b0:50:60:88:0a:dc:24:9e:bc:7f: 00:b0:cd:d4:bb:68:06:d4:95:70:8b:ab:c1:6a:89: a2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4E:1C:6F:E1:1D:67:AB:0D:E6:32:FF:41:33:2E:AE:F7:59:C4:F6 X509v3 Authority Key Identifier: keyid:36:F7:F5:DB:70:35:B9:0F:DB:29:28:58:E2:FC:F8:E6:B9:91:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nvf123A1uQ_bKShY4vz45rmRgXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC636/54D27E20423511EEA840F148C4F9AE02/Nvf123A1uQ_bKShY4vz45rmRgXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f4:56:61:9b:31:0d:ba:0c:cd:4d:74:fe:79:33:cc:57:e1: 1f:8e:5d:c3:ba:91:ac:7f:d7:d4:57:92:65:ed:42:0e:ba:0d: 8d:f7:83:43:d8:33:0c:3e:9a:0b:16:7c:54:31:22:58:81:80: 9e:68:4e:9b:fb:59:a1:c6:32:d3:96:73:8b:0c:38:fe:54:c3: 85:18:33:f7:be:0e:c2:3b:c4:b6:c6:8e:3b:9f:78:99:44:aa: ca:ec:45:4c:e3:60:d8:15:0e:bd:cf:f8:13:10:dc:73:da:67: 28:92:48:82:d4:38:0b:5e:f9:a1:d9:45:19:1d:03:72:33:2e: b6:e1:c6:5a:c5:c3:f8:7a:d0:d8:0e:73:13:49:61:63:a7:7e: 83:57:b7:76:e0:92:49:fe:5f:1a:b6:f3:9b:94:75:27:18:6a: 3e:27:23:72:10:19:0a:fb:68:41:cf:6e:21:ee:86:9c:3c:37: 27:fa:5c:cb:19:e5:89:a0:90:66:b9:39:d8:6a:99:e8:1e:b5: 0a:03:b2:ed:1d:95:5e:8b:77:3e:0a:4d:60:dc:2a:fa:e2:42: 0c:66:42:e4:f4:f6:75:01:86:14:37:d2:6a:ff:17:b0:4a:a8: dc:42:4d:71:e3:2c:f0:2f:f1:62:25:e4:f7:ec:b0:3e:7c:06: fa:84:76:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M2MzYxMTAvBgNVBAUTKDM2RjdGNURCNzAzNUI5MEZEQjI5Mjg1OEUyRkNGOEU2 Qjk5MTgxNzgwHhcNMjQxMTIzMDMyODA3WhcNMjQxMTMwMDMyODA3WjAYMRYwFAYD VQQDEw02NzQxNGJjNy01NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc1DwHBqzNE+3ONCy0y7n0RX9yu/3JkjBxmL3ZsMovFtqBm6UNSo3rCu1SAI SgvCYRlUZfpOVIQOcYzJ4WISuFS+j/XWRGvoFl+KcyeWuRVGN0cs/BLNZUkALS0W uXprZm20raPXFdCOdUtXDbspB232hfUrLwH0XudHXQ2WTMogzj5Gpv0DGCKHrkBd sRAYAcrOgs6yZpwXvKvzPHm85PxzQpa4SIeknSgYahatzraYNUNoSEXSTzL9uTtp pUpYLeToM6BpMPEc06tZn/zs4NNH4caPgHAB5EpPcy2fOmnhFoJsabBQYIgK3CSe vH8AsM3Uu2gG1JVwi6vBaomiowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdOHG/h HWerDeYy/0EzLq73WcT2MB8GA1UdIwQYMBaAFDb39dtwNbkP2ykoWOL8+Oa5kYF4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzYzNi81NEQyN0UyMDQy MzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVRX2JLU2hZNHZ6NDVybVJn WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052ZjEyM0ExdVFfYktTaFk0dno0NXJtUmdYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzYzNi81NEQyN0UyMDQyMzUxMUVFQTg0MEYxNDhDNEY5QUUwMi9OdmYxMjNBMXVR X2JLU2hZNHZ6NDVybVJnWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg9FZhmzENugzNTXT+eTPMV+Efjl3DupGsf9fUV5Jl7UIOug2N94ND 2DMMPpoLFnxUMSJYgYCeaE6b+1mhxjLTlnOLDDj+VMOFGDP3vg7CO8S2xo47n3iZ RKrK7EVM42DYFQ69z/gTENxz2mcokkiC1DgLXvmh2UUZHQNyMy624cZaxcP4etDY DnMTSWFjp36DV7d24JJJ/l8atvOblHUnGGo+JyNyEBkK+2hBz24h7oacPDcn+lzL GeWJoJBmuTnYapnoHrUKA7LtHZVei3c+Ck1g3Cr64kIMZkLk9PZ1AYYUN9Jq/xew SqjcQk1x4yzwL/FiJeT37LA+fAb6hHaa -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:23 2024 by rpki-client on console-ams.rpki-client.org