$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json) Hash identifier: xi8FYOke6xc4WOMyO2GXP3xfoLpijYORZio15EDih0Q= Subject key identifier: D1:C9:54:C4:62:F2:06:6B:C8:BF:53:98:BF:3E:21:8B:51:A2:68:34 Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft Manifest number: 016B Signing time: Sat 23 Nov 2024 02:15:53 +0000 Manifest this update: Sat 23 Nov 2024 02:15:53 +0000 Manifest next update: Sat 30 Nov 2024 02:15:53 +0000 Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: 3Dk8EWxu7ionBLEVnfYhlsW8e7tqZ9jSEsCSEI8cy4I=) 2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: TV2ETZpSfJsFD1ONe5ZtFObX2m18pq7S4p/BI/BJVc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Validity Not Before: Nov 23 02:15:53 2024 GMT Not After : Nov 30 02:15:53 2024 GMT Subject: CN=67413ad9-7ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:d7:b3:47:e7:97:f6:ed:d2:f7:ff:13:61: ec:b0:86:29:45:c0:86:47:28:6e:b7:f2:13:e6:ea: 94:c2:eb:82:04:4b:95:22:8b:06:ce:fb:31:24:b5: e4:66:f1:61:63:8f:48:07:f8:39:70:d0:8e:8c:b6: 3e:89:f0:e7:c9:6b:b2:14:f9:0a:eb:6d:8d:d3:4c: 3c:46:be:0a:7f:0f:ad:e1:de:29:04:97:1d:53:5a: bc:d9:6e:f6:41:9a:cc:ca:35:2d:57:f5:16:0b:5b: cc:e9:d8:cd:12:94:94:ab:e6:64:a4:68:45:35:cc: 45:88:63:15:85:40:17:c0:cf:4f:b8:d9:6e:df:db: 68:fc:a0:5c:8c:29:6d:48:88:e8:3a:6a:c3:fd:e1: 86:56:61:7e:70:99:6b:79:c7:c4:4e:4c:70:5a:cb: 64:5e:26:e9:34:43:27:43:98:44:b3:e5:63:54:23: 47:9e:08:12:fa:1c:76:0c:42:97:b9:82:07:1a:cd: 21:ec:39:cd:bf:61:20:e8:32:f1:3c:f3:57:e8:4c: 3c:67:e5:15:2d:89:1b:4a:25:2e:bb:8a:bd:7a:0a: 25:5a:31:3a:69:93:bf:ac:9f:8f:97:82:01:98:c6: 96:56:6b:b3:61:be:1b:a7:2f:ca:6d:04:09:2f:d1: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C9:54:C4:62:F2:06:6B:C8:BF:53:98:BF:3E:21:8B:51:A2:68:34 X509v3 Authority Key Identifier: keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:82:2f:4c:40:31:9c:ce:15:b4:cc:6c:82:d3:05:2b:74:75: 23:e8:7d:a9:98:1f:2c:59:25:03:48:df:99:de:d3:da:ab:47: 34:09:e4:43:25:ba:0c:e4:25:2a:78:0a:2e:da:73:b8:09:33: 4f:e4:39:b9:06:ed:1d:41:16:01:7d:1c:8f:ed:73:d0:bd:3e: b7:39:1d:a7:e1:7e:03:04:aa:68:f5:51:f1:65:87:63:24:86: 18:76:db:b5:7c:92:22:ef:10:1e:d8:0d:07:2e:da:5d:e0:db: 4b:1c:fe:95:e1:68:53:f9:7c:2f:3a:0c:c1:f4:76:32:e8:a3: e8:de:aa:1a:1f:5a:af:ff:5b:3c:be:79:b8:7e:38:aa:c9:f8: 90:bb:da:4e:0c:1c:95:15:10:39:36:db:00:b6:6d:83:38:e5: fc:ea:43:30:cb:ba:00:00:a4:9c:b9:13:85:40:94:74:06:9e: d2:01:e2:38:57:9f:7f:36:ee:62:de:20:16:3f:a7:9c:99:f1: 9d:ec:42:34:5c:86:ea:e9:9f:0a:00:7c:67:65:51:e9:a5:25: 0a:71:f5:26:87:7b:10:2b:9a:1a:2e:9b:99:18:d6:fe:77:5d: 26:b0:6a:e6:5b:fa:90:08:8f:67:26:23:cc:18:33:66:bf:ea: 12:0f:31:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0 RjQ3OUIwQ0QwHhcNMjQxMTIzMDIxNTUzWhcNMjQxMTMwMDIxNTUzWjAYMRYwFAYD VQQDEw02NzQxM2FkOS03YWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKzXs0fnl/bt0vf/E2HssIYpRcCGRyhut/IT5uqUwuuCBEuVIosGzvsxJLXk ZvFhY49IB/g5cNCOjLY+ifDnyWuyFPkK622N00w8Rr4Kfw+t4d4pBJcdU1q82W72 QZrMyjUtV/UWC1vM6djNEpSUq+ZkpGhFNcxFiGMVhUAXwM9PuNlu39to/KBcjClt SIjoOmrD/eGGVmF+cJlrecfETkxwWstkXibpNEMnQ5hEs+VjVCNHnggS+hx2DEKX uYIHGs0h7DnNv2Eg6DLxPPNX6Ew8Z+UVLYkbSiUuu4q9egolWjE6aZO/rJ+Pl4IB mMaWVmuzYb4bpy/KbQQJL9F80wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHJVMRi 8gZryL9TmL8+IYtRomg0MB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEYzNi8yNDlGNDE0NjdEMDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExY eUhGQzZmNWNmcnhQUjVzTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqgi9MQDGczhW0zGyC0wUrdHUj6H2pmB8sWSUDSN+Z3tPaq0c0CeRD JboM5CUqeAou2nO4CTNP5Dm5Bu0dQRYBfRyP7XPQvT63OR2n4X4DBKpo9VHxZYdj JIYYdtu1fJIi7xAe2A0HLtpd4NtLHP6V4WhT+XwvOgzB9HYy6KPo3qoaH1qv/1s8 vnm4fjiqyfiQu9pODByVFRA5NtsAtm2DOOX86kMwy7oAAKScuROFQJR0Bp7SAeI4 V59/Nu5i3iAWP6ecmfGd7EI0XIbq6Z8KAHxnZVHppSUKcfUmh3sQK5oaLpuZGNb+ d10msGrmW/qQCI9nJiPMGDNmv+oSDzEu -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org