$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: lflHriLxohv6BGegd5BuB0okysrtwtctEdci+vCRtPo= Subject key identifier: AE:ED:FE:E3:FE:38:F5:EF:40:D1:B0:46:4E:D0:53:E8:98:6C:9F:2B Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 0EDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 0EB8 Signing time: Sat 18 May 2024 18:19:04 +0000 Manifest this update: Sat 18 May 2024 18:19:03 +0000 Manifest next update: Sat 25 May 2024 18:19:03 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: lUA12f0988zbkDFja+ho7xYPF5ehARbXsRVMf7nvPPI=) 2: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: Wgl12J3aO6xtiEgwwFNRQx2lXEcg0zHav6fTzt5T3BE=) 3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: Ox9R9PiD8T0HlZTCVj50DkgG3vmsXlU+75pqLoh4Z1Y=) 4: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: gl6wFA8dPzIoLv1TnXCbO0ajqlLPYVSjBbHWje+e0k8=) 5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: 55sVOk6/UnAp/fexIIaN6RRwH8HC98g4QsPN92ZTKEc=) 6: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: Qd2fS017bmmI4dqXgfO7lOJxE7pdpoytjHBgfsVzSRw=) 7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: mILgjaEaplyNRnR3VkJIbJkHq2ArOnJINitmDYzwuDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3803 (0xedb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: May 18 18:19:03 2024 GMT Not After : May 25 18:19:03 2024 GMT Subject: CN=6648f118-0c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:93:06:01:95:18:6c:0a:ad:1f:05:6f:d7: be:cd:79:24:08:89:8d:b3:16:8e:dc:7b:56:ac:ab: 1a:e0:97:7b:da:0f:d5:18:c5:ed:e7:4d:b3:90:90: 79:67:f9:16:ea:85:62:6f:72:92:ac:26:86:e8:b2: 42:fd:44:6f:7a:ac:9c:6f:f8:62:f4:88:45:97:1b: 2d:00:9d:4d:b7:92:66:21:33:63:12:d6:37:c2:1a: b7:70:82:92:d8:eb:93:d2:dc:dc:84:01:76:9d:5b: 78:01:e8:de:71:f9:9e:41:ad:f4:7c:ab:0a:d8:b9: 82:a4:b0:17:28:b4:4d:cd:78:af:6a:b0:9c:28:d7: a2:55:e6:95:ab:1f:af:60:e5:4b:df:7b:df:27:77: 48:bd:a8:29:67:12:bf:fe:06:3d:0f:e7:67:ea:55: 25:7a:05:0e:2c:e7:bf:87:1d:1d:56:99:65:89:0a: 83:82:3f:d4:81:c2:be:9f:33:51:71:d8:26:90:50: b6:36:94:4a:87:8c:4a:91:6f:c2:e8:99:44:26:e1: f9:1e:37:8a:40:29:df:61:6f:50:2e:22:69:60:7b: 64:e5:ce:04:6e:19:2d:55:b9:fc:30:88:1c:5f:39: bc:1e:d0:b9:ff:d4:69:9c:cc:ee:5f:79:77:cb:4b: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:ED:FE:E3:FE:38:F5:EF:40:D1:B0:46:4E:D0:53:E8:98:6C:9F:2B X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:af:dc:6a:0b:a1:91:6a:63:a9:45:b9:90:0b:bb:fe:5c:27: 67:2a:e4:d4:82:f1:6f:72:9a:d8:f2:5b:88:70:b0:22:2d:d5: 52:b8:0d:5f:6e:be:7c:75:33:72:e2:2a:60:97:b8:47:7f:d1: 60:52:eb:27:a6:93:68:5c:8c:f0:d4:da:7e:a7:ec:c6:c7:8b: 03:98:e8:58:d4:9c:01:6f:3b:03:96:ad:b6:92:5d:a0:55:c1: 6a:72:62:85:dc:fa:25:b1:1e:94:98:db:4b:a8:be:e0:4e:d6: f1:04:f0:19:23:6f:41:c9:40:60:d8:2d:a6:d4:d3:b6:b3:01: 6f:f0:b2:89:c3:03:0b:58:e4:f5:78:b8:7d:dd:5d:a5:f7:c9: 54:3c:03:8c:12:9b:5e:be:73:fb:0a:a4:1e:27:44:b2:77:50: 8a:46:26:9f:fc:b6:65:78:91:8a:b8:f7:92:e2:e5:92:dc:a0: 11:40:d2:71:94:bc:9e:d3:d3:2a:b8:54:19:28:a4:39:05:0a: 1b:c0:e5:8a:9e:91:e3:1d:e8:60:c5:1d:2c:da:b3:16:0b:1a: fd:d3:d9:56:d8:45:f9:a9:84:d5:1a:bd:55:7f:fa:94:6d:3b: e7:c8:75:20:c5:79:ce:a3:78:ea:30:64:4b:6f:82:0a:d5:76: 81:eb:7b:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjQwNTE4MTgxOTAzWhcNMjQwNTI1MTgxOTAzWjAYMRYwFAYD VQQDEw02NjQ4ZjExOC0wYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfmTBgGVGGwKrR8Fb9e+zXkkCImNsxaO3HtWrKsa4Jd72g/VGMXt502zkJB5 Z/kW6oVib3KSrCaG6LJC/URveqycb/hi9IhFlxstAJ1Nt5JmITNjEtY3whq3cIKS 2OuT0tzchAF2nVt4AejecfmeQa30fKsK2LmCpLAXKLRNzXivarCcKNeiVeaVqx+v YOVL33vfJ3dIvagpZxK//gY9D+dn6lUlegUOLOe/hx0dVplliQqDgj/UgcK+nzNR cdgmkFC2NpRKh4xKkW/C6JlEJuH5HjeKQCnfYW9QLiJpYHtk5c4EbhktVbn8MIgc Xzm8HtC5/9RpnMzuX3l3y0vcewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7t/uP+ OPXvQNGwRk7QU+iYbJ8rMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLr9xqC6GRamOpRbmQC7v+XCdnKuTUgvFvcprY8luIcLAiLdVSuA1f br58dTNy4ipgl7hHf9FgUusnppNoXIzw1Np+p+zGx4sDmOhY1JwBbzsDlq22kl2g VcFqcmKF3PolsR6UmNtLqL7gTtbxBPAZI29ByUBg2C2m1NO2swFv8LKJwwMLWOT1 eLh93V2l98lUPAOMEptevnP7CqQeJ0Syd1CKRiaf/LZleJGKuPeS4uWS3KARQNJx lLye09MquFQZKKQ5BQobwOWKnpHjHehgxR0s2rMWCxr909lW2EX5qYTVGr1Vf/qU bTvnyHUgxXnOo3jqMGRLb4IK1XaB63sc -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org