$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft File: 8hTt1--NAG-Coif85lvF8-ZIo_o.mft (raw, json) Hash identifier: 6aBe/oFuD8qSCSm6uGj4cVS0Qi1wod2rFdSQyhYnwm4= Subject key identifier: 6B:DB:93:7F:5D:0C:FD:AB:38:A8:9B:85:55:CC:A4:22:60:F7:15:1E Authority key identifier: F2:14:ED:D7:EF:8D:00:6F:82:A2:27:FC:E6:5B:C5:F3:E6:48:A3:FA Certificate issuer: /CN=A91DBD27/serialNumber=F214EDD7EF8D006F82A227FCE65BC5F3E648A3FA Certificate serial: 038C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft Manifest number: 0388 Signing time: Sat 23 Nov 2024 00:22:36 +0000 Manifest this update: Sat 23 Nov 2024 00:22:35 +0000 Manifest next update: Sat 30 Nov 2024 00:22:35 +0000 Files and hashes: 1: 8hTt1--NAG-Coif85lvF8-ZIo_o.crl (hash: 6HXgS1LXKapO4kHjx/Xyoiy2mVopSXc7qQs3tCnpE7A=) 2: 1A15CABE7DD111ECBB4A7D84C4F9AE02.roa (hash: cvcGyNcc42SIpQ685Vf1az6PZMwbXQgpnrfaFAmN05o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.crl rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBD27/serialNumber=F214EDD7EF8D006F82A227FCE65BC5F3E648A3FA Validity Not Before: Nov 23 00:22:35 2024 GMT Not After : Nov 30 00:22:35 2024 GMT Subject: CN=6741204b-d546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:85:59:63:0d:c1:04:86:39:7b:f5:98:60: c1:7e:e2:97:36:e7:41:12:8f:43:8b:d6:e0:e5:66: ac:7e:ef:36:82:c6:a8:05:37:06:44:ec:b9:95:01: 32:58:e9:bf:06:3f:9b:3b:dd:34:54:3d:b8:f2:28: 8b:bd:cb:e0:5c:54:d5:fd:67:27:80:13:e0:28:af: 95:57:09:f2:32:e3:21:4f:58:d6:88:47:0a:0a:85: c0:42:3b:12:2f:f7:38:a3:84:95:2a:57:fc:da:5f: 7d:7e:dc:f9:11:8f:e9:09:29:3b:0b:f3:6a:38:dd: 7a:a6:0d:7f:6b:b9:a2:b9:08:cb:3e:b7:1d:32:de: 28:6e:07:fe:a2:f6:7d:2c:6a:be:ff:bb:b0:5f:24: eb:38:c4:43:93:71:6d:bb:7b:be:1e:25:32:b0:9b: 0e:4b:38:19:5d:51:14:a9:5d:ce:c9:d4:d9:71:c4: 0c:22:24:7f:8c:c2:da:80:27:4a:10:c7:59:b1:b8: b7:7b:a2:70:95:d2:3a:35:34:17:da:0c:da:d9:22: 44:f8:b0:e3:10:f5:4b:ac:08:7c:bd:25:6c:72:07: 25:79:66:50:85:a9:23:8f:2e:fc:a0:d3:6d:39:0c: ba:98:5c:22:ce:42:aa:0d:5a:e8:62:a0:80:85:69: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DB:93:7F:5D:0C:FD:AB:38:A8:9B:85:55:CC:A4:22:60:F7:15:1E X509v3 Authority Key Identifier: keyid:F2:14:ED:D7:EF:8D:00:6F:82:A2:27:FC:E6:5B:C5:F3:E6:48:A3:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8hTt1--NAG-Coif85lvF8-ZIo_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBD27/DE5E774E7DCD11ECA6BD9D32C4F9AE02/8hTt1--NAG-Coif85lvF8-ZIo_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:67:ea:45:cc:7c:e7:e0:a3:97:5b:16:8b:f2:b7:77:d4:eb: ca:3c:6d:ca:18:f3:a4:56:c8:37:14:7e:89:23:e9:c4:a1:a6: f8:82:a9:9a:5c:50:44:ac:ae:a6:8a:82:ec:d1:d0:54:f4:1a: 34:4b:40:c6:32:3a:73:f9:41:c3:b0:13:b2:77:af:34:c0:65: 53:13:6d:90:c1:87:74:64:4f:15:09:5f:05:00:cb:e9:98:d9: d8:ab:d9:83:fa:a3:1b:8c:46:c7:a5:d8:d1:c6:cb:cd:5c:b9: 5d:dd:cd:d0:7e:ca:de:d9:b7:9c:92:6b:38:75:69:7c:aa:05: ca:eb:32:d7:3f:57:69:8e:8f:9b:9b:0a:ca:b7:de:1c:7f:1f: 35:51:fc:ef:d3:40:d0:76:30:6c:c6:a8:ff:83:5a:df:75:0a: 1e:17:0b:3f:a6:09:3d:33:05:49:23:6f:72:9d:b9:68:19:ae: 19:3e:ee:b6:e9:c3:7e:fa:c8:9c:25:02:3a:d5:03:2c:80:b8: 87:54:f3:e2:9d:a4:27:b3:99:37:8b:d2:01:04:94:39:46:08: 8d:2f:a5:bf:45:73:23:2d:5d:f1:d4:44:bf:5d:46:4f:64:3a: e2:d3:49:77:05:04:82:98:13:32:dc:b7:bf:49:1b:19:f8:1d: 32:53:39:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJEMjcxMTAvBgNVBAUTKEYyMTRFREQ3RUY4RDAwNkY4MkEyMjdGQ0U2NUJDNUYz RTY0OEEzRkEwHhcNMjQxMTIzMDAyMjM1WhcNMjQxMTMwMDAyMjM1WjAYMRYwFAYD VQQDEw02NzQxMjA0Yi1kNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MWFWWMNwQSGOXv1mGDBfuKXNudBEo9Di9bg5Wasfu82gsaoBTcGROy5lQEy WOm/Bj+bO900VD248iiLvcvgXFTV/WcngBPgKK+VVwnyMuMhT1jWiEcKCoXAQjsS L/c4o4SVKlf82l99ftz5EY/pCSk7C/NqON16pg1/a7miuQjLPrcdMt4obgf+ovZ9 LGq+/7uwXyTrOMRDk3Ftu3u+HiUysJsOSzgZXVEUqV3OydTZccQMIiR/jMLagCdK EMdZsbi3e6JwldI6NTQX2gza2SJE+LDjEPVLrAh8vSVscgcleWZQhakjjy78oNNt OQy6mFwizkKqDVroYqCAhWkygQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvbk39d DP2rOKibhVXMpCJg9xUeMB8GA1UdIwQYMBaAFPIU7dfvjQBvgqIn/OZbxfPmSKP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkQyNy9ERTVFNzc0RTdE Q0QxMUVDQTZCRDlEMzJDNEY5QUUwMi84aFR0MS0tTkFHLUNvaWY4NWx2RjgtWklv X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhoVHQxLS1OQUctQ29pZjg1bHZGOC1aSW9fby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkQyNy9ERTVFNzc0RTdEQ0QxMUVDQTZCRDlEMzJDNEY5QUUwMi84aFR0MS0tTkFH LUNvaWY4NWx2RjgtWklvX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjZ+pFzHzn4KOXWxaL8rd31OvKPG3KGPOkVsg3FH6JI+nEoab4gqma XFBErK6mioLs0dBU9Bo0S0DGMjpz+UHDsBOyd680wGVTE22QwYd0ZE8VCV8FAMvp mNnYq9mD+qMbjEbHpdjRxsvNXLld3c3Qfsre2beckms4dWl8qgXK6zLXP1dpjo+b mwrKt94cfx81Ufzv00DQdjBsxqj/g1rfdQoeFws/pgk9MwVJI29ynbloGa4ZPu62 6cN++sicJQI61QMsgLiHVPPinaQns5k3i9IBBJQ5RgiNL6W/RXMjLV3x1ES/XUZP ZDri00l3BQSCmBMy3Le/SRsZ+B0yUzli -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:48 2024 by rpki-client on console-fra.rpki-client.org