$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: I41mAICea5x3IscBYORl2hT2aq+Fs8fCeN3NWiv5bwc= Subject key identifier: 35:42:46:C1:97:2E:F0:50:B8:0A:49:4B:5C:5C:17:E2:FE:87:65:D6 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0BA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0B51 Signing time: Sat 18 May 2024 19:56:49 +0000 Manifest this update: Sat 18 May 2024 19:56:48 +0000 Manifest next update: Sat 25 May 2024 19:56:48 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: hET3gYyE2tnxdxH/Z/10XS2tUrKaoUGLIR5i4pafDbo=) 2: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: Da7Oq+gy8JjH2/2kLIZfGFO2TVEISlU4H2fgWS1x8V4=) 3: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: 5ix6TXQdDGiTg3sIxgSP6CSbbOhBSuDftWpLz4sc6TI=) 4: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: 6CKNYrxn6uuhIzBVf2WpYIgqxuMLibqV+ZHFdmrqlEY=) 5: F84DF4120E8C11EE89A0B128C4F9AE02.roa (hash: vzRcvU26t6pM9TX7jixNRhU0a87b4yz9peGC5cm/y/U=) 6: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: zEcAoH6Tp/2QV/N0ADzgdcdiJXIraNxY9bGSgI8p4Ow=) 7: 082742FCD23B11EB8E7BA35DC4F9AE02.roa (hash: lpOmpTSPywGCuwJbtcbPpb+g5bAej18u+xB1ckkmSRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2982 (0xba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: May 18 19:56:48 2024 GMT Not After : May 25 19:56:48 2024 GMT Subject: CN=66490801-4a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:70:30:2e:f4:ce:dc:b9:9d:73:c9:79:08: 50:64:18:f1:f8:6f:88:55:85:75:c2:ee:3d:23:ad: a6:7c:ec:b7:0f:3c:cc:34:ee:1c:e2:ab:d4:cf:44: 23:40:79:9b:29:a3:7b:96:ef:d8:f8:03:5c:67:94: 72:79:58:ed:92:be:03:aa:f3:76:bb:11:5a:c0:56: 30:c9:b9:b7:99:1b:73:45:01:27:37:67:db:6d:6c: 79:b5:d4:07:d7:75:44:c5:7a:2d:c6:b0:e5:79:f1: df:d6:e9:05:bb:be:6a:5f:ae:d9:c9:4c:fe:17:63: 41:e6:07:68:1c:76:e6:6e:0f:50:28:cf:b1:0d:a1: 5f:36:66:f6:27:6e:c2:ea:c4:10:79:ef:0b:ae:57: a5:51:21:38:e2:02:0f:50:7d:b8:50:70:05:2a:7c: d4:25:04:31:8e:f5:6c:a3:2d:13:66:0a:eb:ae:37: ae:52:79:49:bd:b6:4e:b2:b4:cd:61:2a:0f:fd:2f: d6:1a:4a:49:f6:72:f5:5f:06:93:a8:bf:80:98:52: 03:e7:7f:6e:cb:ed:0c:b0:b6:02:0b:99:81:a4:5a: c4:3f:eb:1c:0a:24:26:ce:19:72:6c:f9:f7:46:94: f1:43:b2:e3:0d:ea:48:55:24:ae:ec:9c:9d:7d:41: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:42:46:C1:97:2E:F0:50:B8:0A:49:4B:5C:5C:17:E2:FE:87:65:D6 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:47:23:e2:47:1b:d8:77:1b:e4:06:43:aa:b8:de:44:95:42: 32:23:48:f9:4f:d6:93:74:c8:71:a8:44:31:e0:15:c4:49:1f: f3:9e:50:d3:60:03:66:2a:51:73:6a:e3:b7:20:c1:b9:e4:03: c6:1b:7b:fe:6e:02:d8:50:9b:ab:fc:1a:a2:b8:8f:9a:00:f0: 8d:69:24:51:e1:d4:f5:e3:31:b1:c5:3c:1a:46:09:86:8b:5f: 5d:d4:30:fc:47:1b:91:7c:58:2f:d1:24:9a:1f:13:ba:6e:4b: 0a:8a:2a:0d:ff:97:28:58:6c:1d:e9:cb:13:5a:85:5c:b3:79: bc:ca:cb:15:06:52:58:37:a5:03:7d:6d:c2:65:ce:00:f7:60: ec:9d:5e:68:a1:0d:2a:73:de:d7:6f:fe:f2:25:b9:90:bd:45: fc:77:11:ed:2f:e1:93:bc:6d:de:e6:b1:60:d3:ee:08:28:03: 42:86:30:c2:93:36:54:21:ab:78:b6:58:78:0c:c8:36:71:37: c9:af:b2:f8:9a:cd:f8:c0:a1:08:e9:98:92:72:fc:65:7c:46: 4b:c0:ba:3a:a1:b1:86:cb:48:00:7d:47:30:8f:24:db:b9:d2: 3c:d6:d8:95:77:36:4d:5a:c8:58:0b:ed:7c:e5:e8:e3:c0:d3: 30:48:a8:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjQwNTE4MTk1NjQ4WhcNMjQwNTI1MTk1NjQ4WjAYMRYwFAYD VQQDEw02NjQ5MDgwMS00YTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRhwMC70zty5nXPJeQhQZBjx+G+IVYV1wu49I62mfOy3DzzMNO4c4qvUz0Qj QHmbKaN7lu/Y+ANcZ5RyeVjtkr4DqvN2uxFawFYwybm3mRtzRQEnN2fbbWx5tdQH 13VExXotxrDlefHf1ukFu75qX67ZyUz+F2NB5gdoHHbmbg9QKM+xDaFfNmb2J27C 6sQQee8LrlelUSE44gIPUH24UHAFKnzUJQQxjvVsoy0TZgrrrjeuUnlJvbZOsrTN YSoP/S/WGkpJ9nL1XwaTqL+AmFID539uy+0MsLYCC5mBpFrEP+scCiQmzhlybPn3 RpTxQ7LjDepIVSSu7JydfUHrJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVCRsGX LvBQuApJS1xcF+L+h2XWMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBARyPiRxvYdxvkBkOquN5ElUIyI0j5T9aTdMhxqEQx4BXESR/znlDT YANmKlFzauO3IMG55APGG3v+bgLYUJur/BqiuI+aAPCNaSRR4dT14zGxxTwaRgmG i19d1DD8RxuRfFgv0SSaHxO6bksKiioN/5coWGwd6csTWoVcs3m8yssVBlJYN6UD fW3CZc4A92DsnV5ooQ0qc97Xb/7yJbmQvUX8dxHtL+GTvG3e5rFg0+4IKANChjDC kzZUIat4tlh4DMg2cTfJr7L4ms34wKEI6ZiScvxlfEZLwLo6obGGy0gAfUcwjyTb udI81tiVdzZNWshYC+185ejjwNMwSKjq -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org