$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft File: nvPmBKY_LO9L3eN9yokNBFGWeuw.mft (raw, json) Hash identifier: Ky8OdDsgT6+6lzoyfYeL4I2fNrZTlfo+ihxObPgD8BA= Subject key identifier: CF:32:F0:60:E0:5F:A8:AC:00:90:66:68:99:E2:6F:30:FE:36:C3:9B Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft Manifest number: 73 Signing time: Sat 23 Nov 2024 04:52:19 +0000 Manifest this update: Sat 23 Nov 2024 04:52:19 +0000 Manifest next update: Sat 30 Nov 2024 04:52:19 +0000 Files and hashes: 1: nvPmBKY_LO9L3eN9yokNBFGWeuw.crl (hash: Bl8zC6Qn2AOnyxLd4DFOmHBDIwYS7JkQpblcUHnW0jE=) 2: 3F7B6BA6759A11EF88710D30C4F9AE02.roa (hash: oTI4/5J52N+CdGqh6V5SlwZzW8qZ2EAhotERjvLVwjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Nov 23 04:52:19 2024 GMT Not After : Nov 30 04:52:19 2024 GMT Subject: CN=67415f83-2dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:82:24:3c:5a:3b:82:1c:68:86:0d:f4:c5: 12:5a:a0:52:ed:8a:a8:f2:02:a0:58:91:d4:04:95: 6a:f1:1b:3b:fe:ef:99:f3:9a:a6:0a:91:c0:50:28: 58:b5:fe:d6:1c:51:a8:13:2f:a7:0a:d9:91:38:6a: 49:f3:d3:55:27:ac:18:58:0e:ab:44:9f:71:76:a6: ca:2c:cd:3b:c9:76:17:86:b1:63:6d:b5:c5:4d:1f: e6:c8:60:00:bf:57:ef:ca:5b:36:b3:32:92:28:84: 9b:a3:64:de:64:01:10:2e:bf:af:4f:f6:97:9a:a9: 1b:ee:8c:20:b2:34:7c:fa:22:cf:8c:aa:8e:a3:48: e2:c6:6c:40:56:e6:f4:2e:3c:1d:8e:fd:df:a4:a6: 32:0c:12:f4:59:56:26:ee:38:99:3a:c5:1f:e1:de: bf:6c:a5:0b:f9:69:71:74:a4:0f:26:3f:c7:a5:78: 57:7d:6c:aa:4f:6f:7d:a1:a4:84:56:d6:13:ac:0c: 36:74:d0:86:52:c3:2d:e9:20:80:e5:3d:7d:56:ad: 6e:6e:5a:cc:11:3f:9e:07:7c:3c:44:5f:53:c2:26: 05:3c:56:7b:ae:f4:d3:d0:ca:7b:06:b0:09:48:62: 72:63:d2:d6:cb:82:1d:64:6d:2b:20:18:56:bd:b3: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:32:F0:60:E0:5F:A8:AC:00:90:66:68:99:E2:6F:30:FE:36:C3:9B X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:76:41:5f:3b:26:39:a8:27:5a:0f:e7:85:34:39:25:13:06: a8:90:d1:63:83:79:73:55:08:dc:c9:71:81:fc:f3:5a:21:33: a9:14:6b:ba:c4:46:d8:76:1e:7f:78:f4:29:13:9d:be:43:c4: 82:6b:eb:d2:6e:3f:c3:6f:23:27:79:9c:f7:d3:4b:ca:7a:2a: 92:75:90:de:da:cb:f2:5a:70:7a:5c:90:49:b7:84:5a:15:e5: 38:92:52:5a:04:7d:69:b7:3c:c9:be:6d:0a:97:f2:a2:21:5b: 65:30:88:7a:3f:07:43:83:1a:d7:5d:3c:05:d7:eb:e7:54:72: f4:ce:b2:68:6f:61:62:52:9a:a7:d1:02:78:b5:af:01:24:10: ec:0d:f3:79:2b:49:04:e9:47:83:19:99:e6:fc:bd:f0:a8:05: f8:85:00:c7:7b:15:59:27:a7:ab:09:16:4a:81:0f:4d:09:ed: f5:3e:d5:93:98:59:40:77:0e:86:f7:0f:a6:d9:a1:da:80:3a: b4:3c:35:10:85:4a:bd:66:7c:48:be:ad:65:b5:85:0e:ff:e7: 17:8e:8a:8b:f7:c6:83:68:e9:65:64:05:03:1f:be:66:aa:a2: f7:1b:b2:e8:b5:69:83:c3:64:6e:e0:07:74:b8:7f:0f:ea:f1: f5:92:5a:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjAwMjExMC8GA1UEBRMoOUVGM0U2MDRBNjNGMkNFRjRCRERFMzdEQ0E4OTBEMDQ1 MTk2N0FFQzAeFw0yNDExMjMwNDUyMTlaFw0yNDExMzAwNDUyMTlaMBgxFjAUBgNV BAMTDTY3NDE1ZjgzLTJkZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7gYIkPFo7ghxohg30xRJaoFLtiqjyAqBYkdQElWrxGzv+75nzmqYKkcBQKFi1 /tYcUagTL6cK2ZE4aknz01UnrBhYDqtEn3F2psoszTvJdheGsWNttcVNH+bIYAC/ V+/KWzazMpIohJujZN5kARAuv69P9peaqRvujCCyNHz6Is+Mqo6jSOLGbEBW5vQu PB2O/d+kpjIMEvRZVibuOJk6xR/h3r9spQv5aXF0pA8mP8eleFd9bKpPb32hpIRW 1hOsDDZ00IZSwy3pIIDlPX1WrW5uWswRP54HfDxEX1PCJgU8Vnuu9NPQynsGsAlI YnJj0tbLgh1kbSsgGFa9s8GlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzzLwYOBf qKwAkGZomeJvMP42w5swHwYDVR0jBBgwFoAUnvPmBKY/LO9L3eN9yokNBFGWeuww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCMDAyL0UyNEY4MjM0MDIy RTExRUY4NTZGNTEzMkM0RjlBRTAyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnZQbUJLWV9MTzlMM2VOOXlva05CRkdXZXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC MDAyL0UyNEY4MjM0MDIyRTExRUY4NTZGNTEzMkM0RjlBRTAyL252UG1CS1lfTE85 TDNlTjl5b2tOQkZHV2V1dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF12QV87JjmoJ1oP54U0OSUTBqiQ0WODeXNVCNzJcYH881ohM6kUa7rE Rth2Hn949CkTnb5DxIJr69JuP8NvIyd5nPfTS8p6KpJ1kN7ay/JacHpckEm3hFoV 5TiSUloEfWm3PMm+bQqX8qIhW2UwiHo/B0ODGtddPAXX6+dUcvTOsmhvYWJSmqfR Ani1rwEkEOwN83krSQTpR4MZmeb8vfCoBfiFAMd7FVknp6sJFkqBD00J7fU+1ZOY WUB3Dob3D6bZodqAOrQ8NRCFSr1mfEi+rWW1hQ7/5xeOiov3xoNo6WVkBQMfvmaq ovcbsui1aYPDZG7gB3S4fw/q8fWSWk0= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org