$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft File: NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json) Hash identifier: Y9OMDN6PrfupdQ/e1r3tr/BdGSE02gujWRWjlps4gu4= Subject key identifier: 9F:2A:07:B0:80:37:C0:EC:D1:05:D4:DB:44:82:49:36:A6:4A:61:B2 Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Certificate serial: 17AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft Manifest number: 17A4 Signing time: Fri 22 Nov 2024 16:34:29 +0000 Manifest this update: Fri 22 Nov 2024 16:34:28 +0000 Manifest next update: Fri 29 Nov 2024 16:34:28 +0000 Files and hashes: 1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: u9rXQKDgYgiPnzSX377HVniH8cGbVdpoy4nhhQjIrg0=) 2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: TzvQgcIEdDiZ2vx98Eai/8pokoL7PkZgm06lLl+dtq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6061 (0x17ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15 Validity Not Before: Nov 22 16:34:28 2024 GMT Not After : Nov 29 16:34:28 2024 GMT Subject: CN=6740b294-07d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e2:2c:ae:4b:68:7c:a6:09:f1:84:fc:d2:d3: 80:40:81:ae:8c:10:2f:9b:c8:c3:9c:68:fb:19:24: 05:2a:f1:58:ee:db:10:42:13:28:a3:a5:a3:d2:ee: 22:d2:e9:d2:ad:3c:6d:a7:53:4a:4d:45:5e:13:bb: b1:5e:f9:ff:1a:e4:15:da:0b:7d:43:40:78:73:19: 58:2d:c8:97:7e:39:4e:93:3a:d5:c4:e7:68:94:bb: 4b:87:ef:0c:f0:88:01:c8:c8:a3:0c:ad:0b:d1:36: a4:13:37:d3:2f:68:0f:15:a0:b9:6e:77:85:ad:5f: 99:3b:a1:84:b0:ff:06:23:ab:01:25:1e:4b:bc:11: fe:a7:ec:90:26:9e:eb:49:cc:ad:f9:25:89:43:a8: de:7b:65:f4:a9:0d:21:02:ba:6b:00:04:28:50:73: ee:de:a5:e6:32:6a:a1:ac:03:48:20:e1:01:86:e0: ef:ae:5e:47:0e:1c:ad:ee:6d:97:06:cb:23:97:74: c8:e4:11:af:a1:be:73:cc:8f:ac:7e:87:67:58:a9: b8:5c:4e:75:24:ca:54:2f:c3:ec:59:da:3a:50:0f: 27:01:14:8c:b8:79:c9:5f:0f:d2:4c:74:7b:ea:02: 2e:b4:43:7d:7d:2f:56:17:1e:7e:e9:0b:b9:f4:09: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2A:07:B0:80:37:C0:EC:D1:05:D4:DB:44:82:49:36:A6:4A:61:B2 X509v3 Authority Key Identifier: keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:77:c8:24:1f:b3:07:eb:a3:b4:aa:ee:7a:5d:91:77:b7:e4: 50:08:1c:0e:c8:58:c4:a6:f9:cc:d9:36:13:b9:c4:18:30:93: 7c:75:c2:e1:78:3c:53:4c:3d:4d:ef:fc:40:ec:8c:13:c1:6e: b9:09:90:e5:a4:c2:05:77:52:a6:c1:6e:2b:f4:4f:e7:b0:a7: d7:ba:e7:d3:85:f4:e2:ed:ca:4b:7d:09:5f:e7:73:87:6c:51: 1f:2f:82:90:67:eb:48:2f:d7:6c:99:40:4c:98:04:ee:35:53: 12:3d:cd:69:71:89:0f:1a:6f:48:7d:ec:7f:0c:a0:fb:68:cb: eb:ad:ab:fc:ee:ae:bd:df:e7:21:f3:0b:a8:0e:90:80:fb:fc: 8f:56:76:7b:77:6a:56:d9:bf:0d:e3:6b:85:71:11:83:32:75: 8d:79:ef:5a:33:24:a1:eb:d6:86:22:b9:50:a2:38:b3:cb:95: 76:62:ab:03:ea:fb:f2:ab:55:dd:6b:cf:28:bd:4b:00:7d:0e: 98:e3:3d:90:e2:a8:d6:62:c3:55:53:72:c8:81:25:c9:e4:92: 6f:a1:6b:b1:07:9c:58:6e:94:56:bd:89:6c:6b:a7:a0:ee:10: fd:02:0a:86:be:3b:28:20:9a:05:56:98:95:1c:44:31:df:58: 78:58:10:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxMEYxMTAvBgNVBAUTKDM0M0M4MjcxMzc2MUM1OEU4MjQ1MEQ5NEFBNTc5NjdE RjlCNDZGMTUwHhcNMjQxMTIyMTYzNDI4WhcNMjQxMTI5MTYzNDI4WjAYMRYwFAYD VQQDEw02NzQwYjI5NC0wN2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+IsrktofKYJ8YT80tOAQIGujBAvm8jDnGj7GSQFKvFY7tsQQhMoo6Wj0u4i 0unSrTxtp1NKTUVeE7uxXvn/GuQV2gt9Q0B4cxlYLciXfjlOkzrVxOdolLtLh+8M 8IgByMijDK0L0TakEzfTL2gPFaC5bneFrV+ZO6GEsP8GI6sBJR5LvBH+p+yQJp7r Scyt+SWJQ6jee2X0qQ0hArprAAQoUHPu3qXmMmqhrANIIOEBhuDvrl5HDhyt7m2X Bssjl3TI5BGvob5zzI+sfodnWKm4XE51JMpUL8PsWdo6UA8nARSMuHnJXw/STHR7 6gIutEN9fS9WFx5+6Qu59AnuhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8qB7CA N8Ds0QXU20SCSTamSmGyMB8GA1UdIwQYMBaAFDQ8gnE3YcWOgkUNlKpXln35tG8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTEwRi82MEVBNUMyQ0I1 RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZNkNSUTJVcWxlV2ZmbTBi eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EeUNjVGRoeFk2Q1JRMlVxbGVXZmZtMGJ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTEwRi82MEVBNUMyQ0I1RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZ NkNSUTJVcWxlV2ZmbTBieFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOd8gkH7MH66O0qu56XZF3t+RQCBwOyFjEpvnM2TYTucQYMJN8dcLh eDxTTD1N7/xA7IwTwW65CZDlpMIFd1KmwW4r9E/nsKfXuufThfTi7cpLfQlf53OH bFEfL4KQZ+tIL9dsmUBMmATuNVMSPc1pcYkPGm9Ifex/DKD7aMvrrav87q693+ch 8wuoDpCA+/yPVnZ7d2pW2b8N42uFcRGDMnWNee9aMySh69aGIrlQojizy5V2YqsD 6vvyq1Xda88ovUsAfQ6Y4z2Q4qjWYsNVU3LIgSXJ5JJvoWuxB5xYbpRWvYlsa6eg 7hD9AgqGvjsoIJoFVpiVHEQx31h4WBD1 -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org