$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: ozwpVKiI+tYITy8MAqBGWP6zIADPi0b1b4ftnfTJhlU= Subject key identifier: FF:5B:E4:37:91:9F:50:B8:DA:0F:56:79:09:BB:95:59:00:84:CF:EC Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: DE Signing time: Thu 21 Nov 2024 03:41:42 +0000 Manifest this update: Thu 21 Nov 2024 03:41:41 +0000 Manifest next update: Thu 28 Nov 2024 03:41:41 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: piwOX77i50cbnoUeQD7/lYJynGr0/SQj2shEy+yWWao=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: uDYRjWDNbbuer7nADrVfw+s2rVnYHfiATUhAxlq32S0=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: LoclVr/421CJQL/D+2O/iwx9gXkx3/NwzPPfEEt2ocM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Nov 21 03:41:41 2024 GMT Not After : Nov 28 03:41:41 2024 GMT Subject: CN=673eabf6-45a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:bd:89:99:ac:51:a2:01:8d:2b:d7:8b:94: a8:57:ae:22:2e:fc:0c:e6:3d:ef:96:83:af:66:3f: a5:26:e9:89:fb:81:fe:45:20:22:cc:01:4d:92:8f: 42:29:34:ce:0e:2a:a0:ae:d4:af:5e:ae:29:8c:88: be:8c:8a:79:df:34:fa:10:3d:a6:75:f4:b3:3e:ba: d6:8e:57:ae:89:3b:56:6c:b3:9b:19:8f:8a:9c:83: a3:c5:c5:cc:fc:8b:57:96:b6:43:47:b6:48:81:27: 75:33:95:23:4a:ef:18:3e:16:5b:68:21:d2:d4:86: 1d:28:40:3f:92:d5:ad:f4:7d:5d:6e:3e:e1:87:a3: f6:e6:18:d9:e5:c6:57:1c:7a:4a:15:31:e5:89:0a: b1:de:d3:54:6c:94:be:94:cc:10:07:f7:d9:00:b2: 36:7c:68:48:5d:aa:91:bb:ba:29:fd:e5:44:f4:40: 5b:5a:05:ba:fc:62:43:65:81:e9:af:43:19:91:e8: 5a:5e:0d:05:0a:78:5d:e4:cf:ec:4c:c0:3a:6f:f9: 45:73:98:c9:4a:11:15:07:73:52:57:15:3c:39:6a: ed:a6:33:15:ab:22:3e:fe:44:26:ce:1c:4f:ac:31: 6f:b3:08:ed:f6:ac:49:c4:28:53:b0:47:6f:26:a6: 95:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5B:E4:37:91:9F:50:B8:DA:0F:56:79:09:BB:95:59:00:84:CF:EC X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:fa:e0:ab:b3:c0:f7:06:6a:e2:34:81:36:78:ea:3c:b3:6b: 2a:be:87:6a:60:46:91:00:4b:79:63:67:2c:b2:cc:03:c9:28: 52:ba:f8:7d:10:9c:aa:40:cb:e4:bd:2c:8c:94:8d:97:98:d8: dd:6b:3a:dd:17:5f:d0:92:ff:7f:08:01:e4:e1:03:d8:10:94: 17:81:51:e6:d0:3d:3b:d3:3b:24:80:bb:58:f9:38:81:01:a6: 62:41:b4:62:12:dc:12:25:84:9f:46:ea:45:6b:09:bf:03:73: 01:b8:ad:a4:c3:3c:3b:37:e0:e3:27:75:5e:a8:a8:c9:29:20: 12:cc:e0:44:d1:f0:31:eb:3f:6a:07:99:2e:93:71:15:ef:b3: fc:9f:ed:43:3e:66:b0:35:b1:a5:df:28:4b:f2:a1:8b:71:9e: 9a:be:b2:b7:ae:96:d4:04:01:36:89:c7:01:c4:a3:ed:5f:ff: 1e:69:16:fa:37:a6:25:40:b5:4d:04:24:70:55:45:88:ca:ce: c5:85:0d:81:f7:f3:db:3a:d7:a0:51:fe:26:d7:a2:5a:8e:87: 86:aa:39:eb:2c:8a:89:73:ea:77:3d:b1:4d:26:09:01:18:54: 1d:1e:df:80:86:62:a4:9b:fe:35:05:90:3c:33:f7:c1:7f:32: f3:06:1a:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjQxMTIxMDM0MTQxWhcNMjQxMTI4MDM0MTQxWjAYMRYwFAYD VQQDEw02NzNlYWJmNi00NWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGm9iZmsUaIBjSvXi5SoV64iLvwM5j3vloOvZj+lJumJ+4H+RSAizAFNko9C KTTODiqgrtSvXq4pjIi+jIp53zT6ED2mdfSzPrrWjleuiTtWbLObGY+KnIOjxcXM /ItXlrZDR7ZIgSd1M5UjSu8YPhZbaCHS1IYdKEA/ktWt9H1dbj7hh6P25hjZ5cZX HHpKFTHliQqx3tNUbJS+lMwQB/fZALI2fGhIXaqRu7op/eVE9EBbWgW6/GJDZYHp r0MZkehaXg0FCnhd5M/sTMA6b/lFc5jJShEVB3NSVxU8OWrtpjMVqyI+/kQmzhxP rDFvswjt9qxJxChTsEdvJqaV7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9b5DeR n1C42g9WeQm7lVkAhM/sMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl+uCrs8D3BmriNIE2eOo8s2sqvodqYEaRAEt5Y2cssswDyShSuvh9 EJyqQMvkvSyMlI2XmNjdazrdF1/Qkv9/CAHk4QPYEJQXgVHm0D070zskgLtY+TiB AaZiQbRiEtwSJYSfRupFawm/A3MBuK2kwzw7N+DjJ3VeqKjJKSASzOBE0fAx6z9q B5kuk3EV77P8n+1DPmawNbGl3yhL8qGLcZ6avrK3rpbUBAE2iccBxKPtX/8eaRb6 N6YlQLVNBCRwVUWIys7FhQ2B9/PbOtegUf4m16JajoeGqjnrLIqJc+p3PbFNJgkB GFQdHt+AhmKkm/41BZA8M/fBfzLzBhpI -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:17 2024 by rpki-client on console-ams.rpki-client.org