$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: am01mhv4qLFHJdjdPqDS/xDaopiMV+UbNcUWk6/RMZM= Subject key identifier: D1:73:DF:E2:15:0E:8A:46:F4:E9:40:E1:C8:92:54:73:28:AE:1B:BE Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 7F Signing time: Thu 21 Nov 2024 05:00:26 +0000 Manifest this update: Thu 21 Nov 2024 05:00:26 +0000 Manifest next update: Thu 28 Nov 2024 05:00:26 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: McJoFAWrSyl6NIpOEgrZTB9p/Q9qc6dZ06N8W9mLyjc=) 2: DCEA7D2A319611EFB9AC5611C4F9AE02.roa (hash: Xw4IyXV9qNQAl/iRbZMuPF0pMZnrVBWJVoOK6nUh3L0=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: fBqSW8jISb6HiF16XH44dQP540yVqiuhIc6mypavGXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Nov 21 05:00:26 2024 GMT Not After : Nov 28 05:00:26 2024 GMT Subject: CN=673ebe6a-90db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:9b:cc:3e:1c:9c:43:37:4e:58:ea:6d:bf: cf:bc:1d:08:c6:35:ce:6b:79:e8:f6:a3:68:87:86: d7:38:18:86:f7:2f:5d:48:8c:8b:8f:41:bd:d9:e3: fd:3f:f1:2d:d8:1d:df:93:a9:93:53:bc:48:74:ce: fe:e9:80:aa:55:a9:65:c3:08:5d:ef:11:6d:b5:fb: d3:4a:31:7c:4a:2a:65:55:5a:1b:66:d4:d8:92:8b: bb:15:92:be:2c:90:59:8f:71:ee:9d:fc:e0:2f:f9: 63:c2:8f:bb:09:2d:8e:3c:a2:90:af:62:3a:bc:1f: 9f:81:50:b4:61:e3:74:2c:eb:9d:07:81:81:54:05: c1:cc:35:4e:a6:74:85:00:08:8f:c1:e0:84:33:c5: 93:af:02:3c:10:bb:08:4c:4c:4d:58:e0:d5:49:a2: 73:66:27:bd:68:28:36:0b:1f:f7:a3:40:43:4a:d5: 09:e2:ba:f5:6a:bd:02:19:e3:e5:2d:7d:9f:b0:4c: 13:07:fe:12:5c:25:cd:97:d9:85:4e:00:52:c4:c2: d1:82:55:26:c3:54:cf:45:eb:bb:f7:0d:de:05:0e: aa:8c:37:ec:e6:a8:09:49:50:93:9c:bb:47:a5:02: 67:a0:57:66:24:4a:99:97:0a:b2:e5:9a:63:93:e6: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:73:DF:E2:15:0E:8A:46:F4:E9:40:E1:C8:92:54:73:28:AE:1B:BE X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9e:24:c2:f7:5d:b2:a6:89:b7:76:8e:3e:51:30:9d:cb:2c: 4c:e7:78:c9:da:07:62:5c:7f:ed:81:60:38:2f:5a:a7:aa:aa: de:67:de:d2:68:4d:08:d9:94:26:c0:c9:cd:0e:29:eb:96:99: 5f:5f:cb:7c:4d:13:a3:b3:30:0b:6d:bb:4f:58:20:e6:c6:09: e7:08:bf:ef:33:2b:c0:c8:91:cd:58:85:95:0e:50:01:04:af: 04:50:6c:2d:ae:d7:f1:cf:c9:c0:e4:e3:54:62:71:48:05:f6: 19:56:9e:fd:da:1d:0e:2c:7c:3c:a6:b5:c2:03:01:60:18:15: 5e:47:8e:29:63:9c:d4:29:02:ee:36:dd:e0:cd:73:4f:49:05: fc:3f:29:11:15:b6:9b:76:14:96:e7:4a:37:ee:c0:b5:62:78: 3b:7d:7a:fe:57:8b:fd:32:61:43:9f:8b:ae:c4:1e:fb:1c:90: 87:f9:ce:6e:62:c7:83:01:91:be:6b:9e:0f:dd:aa:02:1c:b7: 7a:a4:8b:cb:08:9a:db:a0:e9:41:b9:a4:40:64:22:76:06:e4: 97:80:31:e1:87:da:aa:55:aa:8d:84:7f:01:da:7e:81:6b:09: 6a:da:4f:80:85:93:2a:a9:7f:08:4b:fd:f7:7f:c6:52:0d:bf: 9a:d8:d3:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjQxMTIxMDUwMDI2WhcNMjQxMTI4MDUwMDI2WjAYMRYwFAYD VQQDEw02NzNlYmU2YS05MGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqR2bzD4cnEM3Tljqbb/PvB0IxjXOa3no9qNoh4bXOBiG9y9dSIyLj0G92eP9 P/Et2B3fk6mTU7xIdM7+6YCqVallwwhd7xFttfvTSjF8SiplVVobZtTYkou7FZK+ LJBZj3HunfzgL/ljwo+7CS2OPKKQr2I6vB+fgVC0YeN0LOudB4GBVAXBzDVOpnSF AAiPweCEM8WTrwI8ELsITExNWODVSaJzZie9aCg2Cx/3o0BDStUJ4rr1ar0CGePl LX2fsEwTB/4SXCXNl9mFTgBSxMLRglUmw1TPReu79w3eBQ6qjDfs5qgJSVCTnLtH pQJnoFdmJEqZlwqy5Zpjk+btJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFz3+IV DopG9OlA4ciSVHMorhu+MB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUniTC912ypom3do4+UTCdyyxM53jJ2gdiXH/tgWA4L1qnqqreZ97S aE0I2ZQmwMnNDinrlplfX8t8TROjszALbbtPWCDmxgnnCL/vMyvAyJHNWIWVDlAB BK8EUGwtrtfxz8nA5ONUYnFIBfYZVp792h0OLHw8prXCAwFgGBVeR44pY5zUKQLu Nt3gzXNPSQX8PykRFbabdhSW50o37sC1Yng7fXr+V4v9MmFDn4uuxB77HJCH+c5u YseDAZG+a54P3aoCHLd6pIvLCJrboOlBuaRAZCJ2BuSXgDHhh9qqVaqNhH8B2n6B awlq2k+AhZMqqX8IS/33f8ZSDb+a2NPh -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:40 2024 by rpki-client on console-ams.rpki-client.org