$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft File: nN366rxkvM14iClikQ7BkqLSKDg.mft (raw, json) Hash identifier: MXRav2ak+1F20/GCO4IwWTO0yCq6C2GnMQnds1EnL2A= Subject key identifier: 0D:89:B2:2A:86:FE:FC:A1:57:BB:F7:1B:97:13:7E:70:0A:47:58:BD Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38 Certificate issuer: /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft Manifest number: 06 Signing time: Thu 21 Nov 2024 06:14:52 +0000 Manifest this update: Thu 21 Nov 2024 06:14:51 +0000 Manifest next update: Thu 28 Nov 2024 06:14:51 +0000 Files and hashes: 1: nN366rxkvM14iClikQ7BkqLSKDg.crl (hash: kHSI97g5UdkwCWko0+XiqaPVMHgKd6MZNavtqo7MSbw=) 2: 6EBBA0F4A1AD11EF8A984349C4F9AE02.roa (hash: 4TxOvtXO/ZobHaFuZq+jlbsn4MEouHzffnZwxkoUjpM=) 3: 6F25556CA1AD11EF8A984349C4F9AE02.roa (hash: 9vy2sRLiVK7gv+Iu4032kUkO8gYn31dF49cn6btcuzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838 Validity Not Before: Nov 21 06:14:51 2024 GMT Not After : Nov 28 06:14:51 2024 GMT Subject: CN=673ecfdb-4084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:4a:3f:b1:77:57:f4:f4:e2:87:18:3d:ba: f9:a5:db:6d:f4:98:b1:4b:29:2a:33:06:c1:7d:13: 08:af:15:a3:2f:80:15:fe:ee:60:93:59:ce:49:4d: 1b:82:9d:14:03:c1:9d:fd:2b:9d:8e:47:a5:ab:ab: 8b:a1:1f:9f:8b:1a:19:d8:dd:c6:c1:b3:00:ba:13: 05:42:76:b0:64:20:d9:5d:5d:d8:96:45:ae:87:6a: b3:f7:15:ec:12:3f:9c:33:5b:c9:fb:40:0f:1a:61: 0a:2e:c2:57:1e:6b:4e:0a:85:fb:34:20:af:29:45: e8:d3:4d:1f:8c:2e:f0:ad:7d:b1:82:1f:7a:a9:fb: 54:51:70:a2:ca:9c:36:40:09:9d:e1:c4:1c:b0:b2: ea:f9:6e:a4:26:6f:d8:73:37:dd:0e:89:dd:46:b2: 75:6f:34:7a:83:14:0c:d6:ae:80:fd:74:7f:95:a9: f9:ea:d6:9d:6e:a7:8c:3b:ad:20:9b:c9:67:8c:86: 7d:7a:0a:93:97:8f:6c:b3:4f:a8:b9:c8:19:52:75: d6:df:f5:1e:63:f2:1b:a2:a9:f2:6d:60:d7:22:09: ce:72:fe:1b:a2:7c:d7:fe:56:f4:a4:5c:2c:cc:76: 50:fe:e3:d7:de:6c:bf:ef:47:40:6a:eb:4b:b1:54: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:B2:2A:86:FE:FC:A1:57:BB:F7:1B:97:13:7E:70:0A:47:58:BD X509v3 Authority Key Identifier: keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b8:10:c0:55:6e:34:e6:75:30:69:a8:d3:57:97:ef:e8:3b: e3:77:63:77:01:4e:c5:77:ee:b3:ea:7c:d0:78:01:7d:89:27: 4b:df:3a:1b:ec:10:ce:dd:7f:04:7a:71:8a:c3:8e:93:45:e4: 4d:9f:de:8c:22:75:95:72:85:89:4b:e6:12:1d:a6:da:1e:a6: e7:c0:0b:68:91:3d:fe:24:dc:98:06:d7:21:ee:5b:ba:21:89: bd:e4:21:d5:2a:37:a4:77:fd:1a:f1:11:03:eb:8b:57:f7:9a: 34:e3:9d:6b:26:af:57:0e:dd:03:a1:43:d9:2f:c2:7c:8d:0c: 40:8f:db:f6:7e:d1:c9:af:5d:e9:41:4d:65:68:30:1e:01:78: 05:2e:6c:09:cd:31:aa:02:de:e8:46:31:44:8e:cf:17:3e:08: 87:b3:c5:5f:21:66:a4:6a:c3:15:89:20:4f:87:2f:4d:9e:54: f4:93:02:1d:66:90:ed:c7:e4:b5:82:db:a3:ab:2f:b9:04:91: d8:75:64:75:0c:09:0f:98:57:0b:9e:3c:c8:79:15:9e:a8:17: 65:31:ee:0d:a0:36:67:4e:9d:70:d9:92:09:32:01:c2:dc:86: c6:54:21:9d:99:4a:3d:ec:81:22:52:82:31:77:f3:f3:0d:d5: 27:df:c1:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkYyMTExMC8GA1UEBRMoOUNEREZBRUFCQzY0QkNDRDc4ODgyOTYyOTEwRUMxOTJB MkQyMjgzODAeFw0yNDExMjEwNjE0NTFaFw0yNDExMjgwNjE0NTFaMBgxFjAUBgNV BAMTDTY3M2VjZmRiLTQwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpQko/sXdX9PTihxg9uvml2230mLFLKSozBsF9EwivFaMvgBX+7mCTWc5JTRuC nRQDwZ39K52OR6Wrq4uhH5+LGhnY3cbBswC6EwVCdrBkINldXdiWRa6HarP3FewS P5wzW8n7QA8aYQouwlcea04Khfs0IK8pRejTTR+MLvCtfbGCH3qp+1RRcKLKnDZA CZ3hxBywsur5bqQmb9hzN90Oid1GsnVvNHqDFAzWroD9dH+Vqfnq1p1up4w7rSCb yWeMhn16CpOXj2yzT6i5yBlSddbf9R5j8huiqfJtYNciCc5y/huifNf+VvSkXCzM dlD+49febL/vR0Bq60uxVL1ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDYmyKob+ /KFXu/cblxN+cApHWL0wHwYDVR0jBBgwFoAUnN366rxkvM14iClikQ7BkqLSKDgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2RjIxL0ZFMzdFM0VDQTFB QzExRUZCNjc1ODU0OEM0RjlBRTAyL25OMzY2cnhrdk0xNGlDbGlrUTdCa3FMU0tE Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbk4zNjZyeGt2TTE0aUNsaWtRN0JrcUxTS0RnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 RjIxL0ZFMzdFM0VDQTFBQzExRUZCNjc1ODU0OEM0RjlBRTAyL25OMzY2cnhrdk0x NGlDbGlrUTdCa3FMU0tEZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIm4EMBVbjTmdTBpqNNXl+/oO+N3Y3cBTsV37rPqfNB4AX2JJ0vfOhvs EM7dfwR6cYrDjpNF5E2f3owidZVyhYlL5hIdptoepufAC2iRPf4k3JgG1yHuW7oh ib3kIdUqN6R3/RrxEQPri1f3mjTjnWsmr1cO3QOhQ9kvwnyNDECP2/Z+0cmvXelB TWVoMB4BeAUubAnNMaoC3uhGMUSOzxc+CIezxV8hZqRqwxWJIE+HL02eVPSTAh1m kO3H5LWC26OrL7kEkdh1ZHUMCQ+YVwuePMh5FZ6oF2Ux7g2gNmdOnXDZkgkyAcLc hsZUIZ2ZSj3sgSJSgjF38/MN1SffwcE= -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:54 2024 by rpki-client on console-fra.rpki-client.org