$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: RQDRFo5+4n8bB9xIZN6nkrbpS8t7alSVcA/N+KVA52w= Subject key identifier: 1D:B7:DE:37:AB:B7:E2:7A:44:BC:C4:20:1C:CC:FC:D0:1F:9A:D1:69 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2998 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 2991 Signing time: Wed 20 Nov 2024 14:23:15 +0000 Manifest this update: Wed 20 Nov 2024 14:23:15 +0000 Manifest next update: Wed 27 Nov 2024 14:23:15 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: W3QEYvSW0aITwsDIx8M5JRMO0skIpg/QJpgmcz/FG9I=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: 1MwVLRpbfDqQcwZxnbAiHImneNLRD8huPIYGfKChQyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10648 (0x2998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Nov 20 14:23:15 2024 GMT Not After : Nov 27 14:23:15 2024 GMT Subject: CN=673df0d3-2cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:13:42:19:ac:ad:fb:6f:67:65:be:bd:33:87: 52:18:61:9c:5e:56:c6:78:1f:9c:c2:c0:b6:cf:05: 10:36:b3:b2:73:25:40:6e:b4:35:7c:61:7d:8e:ab: 4d:e7:18:63:1c:61:2a:b3:31:81:fa:58:db:59:b3: 21:fc:06:24:63:41:8d:90:12:fb:30:9c:36:50:e5: 0a:86:c5:17:47:c1:1d:34:d5:4c:8f:11:ae:84:e0: fd:14:04:2a:c7:16:22:99:4c:45:c8:e3:f9:c0:63: 64:6f:6a:fa:74:ae:31:f5:a1:13:90:b6:e4:36:c8: 55:45:b1:28:81:1c:48:92:4b:00:68:b0:96:f8:ce: 76:2b:d4:eb:0a:d6:f8:e0:35:2d:e9:93:9b:c3:19: 85:0d:24:e6:ca:01:bf:69:90:a1:6f:1c:fd:90:10: dd:70:d4:d4:47:d8:25:26:4e:c8:d0:d9:f0:8b:94: 86:f6:75:eb:1d:d2:e0:35:c6:d1:c8:0e:8f:87:9f: 1a:6d:24:94:8c:5b:32:4f:67:50:17:3e:4e:7f:45: 17:31:ab:21:ac:4a:14:da:cb:b6:5f:37:db:3c:b9: 8d:a6:4f:72:b4:e1:5a:3b:a0:97:c9:9f:7c:aa:7e: 94:ab:67:16:5e:83:01:19:2d:d6:f1:56:71:b4:f3: e9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B7:DE:37:AB:B7:E2:7A:44:BC:C4:20:1C:CC:FC:D0:1F:9A:D1:69 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bb:94:00:61:60:21:7e:82:8c:5c:5b:e8:64:f7:e1:5a:40: 7c:9c:3b:1b:0e:01:ad:ca:d2:65:fe:2d:e5:69:c1:7c:42:9a: 83:06:63:2d:d3:b8:63:1d:3a:6c:a9:6f:4c:69:cf:5e:e8:e8: 44:ba:41:4d:f6:18:bb:4c:8e:42:74:a7:07:21:2d:bd:94:4f: fe:88:31:27:d0:b1:14:32:f5:9a:ee:21:a9:34:2d:aa:47:d8: 76:49:46:20:f7:fc:42:12:91:2d:a2:72:7e:26:59:8d:f5:22: 63:95:2b:0e:39:51:68:91:36:a8:de:24:9f:df:40:d5:6f:67: 66:88:16:11:d6:d6:c1:34:71:8d:e3:9f:36:3e:b1:e5:94:7d: 05:c3:df:24:31:e2:7a:38:e3:c7:b4:fc:45:3f:32:9a:60:8f: a9:a2:84:26:4d:29:b8:6c:ab:6d:fd:5a:15:46:3c:97:7a:c1: 09:f5:21:4c:68:fa:d7:34:1b:70:1a:45:a8:61:68:1a:b2:ca: df:c9:25:38:76:db:c5:2a:78:01:49:3b:bf:1e:34:a1:f9:ce: ac:79:af:0a:54:fe:99:a2:68:5a:84:e7:8d:a2:02:a9:af:57: 90:18:6f:62:9a:19:29:70:3d:ba:83:46:cf:cb:c4:74:8d:49: 91:43:27:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjQxMTIwMTQyMzE1WhcNMjQxMTI3MTQyMzE1WjAYMRYwFAYD VQQDEw02NzNkZjBkMy0yY2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RNCGayt+29nZb69M4dSGGGcXlbGeB+cwsC2zwUQNrOycyVAbrQ1fGF9jqtN 5xhjHGEqszGB+ljbWbMh/AYkY0GNkBL7MJw2UOUKhsUXR8EdNNVMjxGuhOD9FAQq xxYimUxFyOP5wGNkb2r6dK4x9aETkLbkNshVRbEogRxIkksAaLCW+M52K9TrCtb4 4DUt6ZObwxmFDSTmygG/aZChbxz9kBDdcNTUR9glJk7I0Nnwi5SG9nXrHdLgNcbR yA6Ph58abSSUjFsyT2dQFz5Of0UXMashrEoU2su2XzfbPLmNpk9ytOFaO6CXyZ98 qn6Uq2cWXoMBGS3W8VZxtPPp/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB233jer t+J6RLzEIBzM/NAfmtFpMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdu5QAYWAhfoKMXFvoZPfhWkB8nDsbDgGtytJl/i3lacF8QpqDBmMt 07hjHTpsqW9Mac9e6OhEukFN9hi7TI5CdKcHIS29lE/+iDEn0LEUMvWa7iGpNC2q R9h2SUYg9/xCEpEtonJ+JlmN9SJjlSsOOVFokTao3iSf30DVb2dmiBYR1tbBNHGN 4582PrHllH0Fw98kMeJ6OOPHtPxFPzKaYI+pooQmTSm4bKtt/VoVRjyXesEJ9SFM aPrXNBtwGkWoYWgassrfySU4dtvFKngBSTu/HjSh+c6sea8KVP6ZomhahOeNogKp r1eQGG9imhkpcD26g0bPy8R0jUmRQydN -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:20 2024 by rpki-client on console-ams.rpki-client.org