$ rpki-client -vvf rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft File: NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft (raw, json) Hash identifier: aF4MHG7hfCC/njcbn/tBtAgHYP10/Un3d/+dk/1COu4= Subject key identifier: 07:8C:6D:63:AF:EC:4D:6E:C4:0F:D4:C4:32:20:FD:3D:C5:79:48:CA Authority key identifier: 34:7A:FE:B3:94:C5:69:7E:97:92:21:4E:F8:CF:56:A5:9C:A8:E8:BD Certificate issuer: /CN=A91626EF/serialNumber=347AFEB394C5697E9792214EF8CF56A59CA8E8BD Certificate serial: 0C20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHr-s5TFaX6XkiFO-M9WpZyo6L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft Manifest number: 0C0F Signing time: Fri 22 Nov 2024 18:18:51 +0000 Manifest this update: Fri 22 Nov 2024 18:18:50 +0000 Manifest next update: Fri 29 Nov 2024 18:18:50 +0000 Files and hashes: 1: NHr-s5TFaX6XkiFO-M9WpZyo6L0.crl (hash: hFDRuSRKW1d+7kf6QCqRD79/yS9+1kdHRc9IOde7B/M=) 2: 4E130D564F7F11EDACECBE79C4F9AE02.roa (hash: Ifdlq/gxjD1LRVuw8RpiZsn3oVXsh2vyWEYkzFa2ENU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.crl rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHr-s5TFaX6XkiFO-M9WpZyo6L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3104 (0xc20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91626EF/serialNumber=347AFEB394C5697E9792214EF8CF56A59CA8E8BD Validity Not Before: Nov 22 18:18:50 2024 GMT Not After : Nov 29 18:18:50 2024 GMT Subject: CN=6740cb0a-f61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9f:90:8d:7f:72:bb:5f:51:36:ae:8b:d9:1a: 6a:2d:ed:c0:5f:7f:86:3a:e3:ae:1a:1c:27:bc:fa: 75:18:5d:2e:e5:d9:66:1a:fd:2d:b7:c5:b8:05:72: 6b:3b:fc:3d:43:37:22:78:1f:22:98:4d:fd:d2:a8: 75:1f:79:1b:45:91:6b:ef:7b:e6:e5:96:28:b8:c1: 70:ef:66:e8:c5:84:d8:fd:b4:d2:04:77:07:a2:3e: 30:25:4c:96:1f:62:4b:b4:fe:b5:51:96:f6:3d:d8: 27:2b:cd:5a:bd:12:9d:05:e6:02:ac:ed:bb:37:0a: b9:7c:0e:99:15:52:dd:e1:c0:ea:76:f1:10:33:c7: 3c:f6:31:88:2f:63:1d:08:28:38:7c:34:07:9c:8d: 9e:e7:08:dc:28:26:bb:d3:b7:64:17:bf:5f:91:8f: d5:b0:ce:0f:8a:ec:62:db:df:c6:43:9a:fa:b9:4a: 37:38:32:82:f8:22:85:48:e8:b4:0e:a6:c0:e0:b3: d3:bc:36:5c:67:eb:60:e4:b7:46:11:ad:0f:03:1f: b0:81:e2:65:32:c4:bf:d4:ef:85:ae:37:82:cc:b5: 56:b2:bb:bd:56:10:57:99:e5:c7:ed:f0:9d:40:e7: 23:30:45:7b:43:cf:67:d6:bc:8c:4e:84:ae:cb:d1: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8C:6D:63:AF:EC:4D:6E:C4:0F:D4:C4:32:20:FD:3D:C5:79:48:CA X509v3 Authority Key Identifier: keyid:34:7A:FE:B3:94:C5:69:7E:97:92:21:4E:F8:CF:56:A5:9C:A8:E8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHr-s5TFaX6XkiFO-M9WpZyo6L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626EF/9D867510FFD411E992D06518C4F9AE02/NHr-s5TFaX6XkiFO-M9WpZyo6L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f4:54:34:b7:58:81:5a:ed:30:c2:ce:fa:7f:39:cd:11:5d: f9:6e:98:8f:9a:1f:63:64:32:30:a4:7b:a5:0b:68:b1:19:d0: 3d:10:31:a9:1b:eb:c7:60:a2:dc:df:38:76:0f:6a:9f:03:59: 79:58:72:9f:a6:bd:2e:df:72:19:43:a2:3f:8a:fb:1d:31:b0: ea:c7:7c:6c:58:45:87:af:77:34:71:25:49:2c:a1:0d:6c:e2: 1d:d6:88:36:55:b5:76:a0:2e:16:60:f3:7e:70:9f:d4:db:18: 38:d3:52:2b:40:bc:06:a1:4e:a9:8c:55:c9:97:ae:25:9e:63: c8:71:2a:46:5d:89:87:22:78:12:3d:ff:20:44:c2:3f:1f:4d: ae:30:08:0b:86:43:c6:62:f4:de:a2:2b:81:3e:9a:65:fc:43: f9:46:18:60:54:1c:10:ea:44:73:76:9c:9a:2b:5a:94:28:76: 7e:dd:6b:7f:cd:57:fd:06:fe:91:74:12:2c:36:3a:79:a9:7b: ad:9d:02:89:ba:ed:a0:15:f5:f3:a3:34:e1:c0:65:86:f6:fd: dd:cd:6a:c6:fb:6b:8c:30:ef:46:62:bf:6e:10:46:5e:9a:54: 1a:14:ec:0a:be:51:29:4c:4c:e5:0d:1b:f1:46:5c:20:6b:ac: 47:21:32:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2RUYxMTAvBgNVBAUTKDM0N0FGRUIzOTRDNTY5N0U5NzkyMjE0RUY4Q0Y1NkE1 OUNBOEU4QkQwHhcNMjQxMTIyMTgxODUwWhcNMjQxMTI5MTgxODUwWjAYMRYwFAYD VQQDEw02NzQwY2IwYS1mNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4J+QjX9yu19RNq6L2RpqLe3AX3+GOuOuGhwnvPp1GF0u5dlmGv0tt8W4BXJr O/w9QzcieB8imE390qh1H3kbRZFr73vm5ZYouMFw72boxYTY/bTSBHcHoj4wJUyW H2JLtP61UZb2PdgnK81avRKdBeYCrO27Nwq5fA6ZFVLd4cDqdvEQM8c89jGIL2Md CCg4fDQHnI2e5wjcKCa707dkF79fkY/VsM4Piuxi29/GQ5r6uUo3ODKC+CKFSOi0 DqbA4LPTvDZcZ+tg5LdGEa0PAx+wgeJlMsS/1O+FrjeCzLVWsru9VhBXmeXH7fCd QOcjMEV7Q89n1ryMToSuy9F55wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeMbWOv 7E1uxA/UxDIg/T3FeUjKMB8GA1UdIwQYMBaAFDR6/rOUxWl+l5IhTvjPVqWcqOi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZFRi85RDg2NzUxMEZG RDQxMUU5OTJEMDY1MThDNEY5QUUwMi9OSHItczVURmFYNlhraUZPLU05V3BaeW82 TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Ici1zNVRGYVg2WGtpRk8tTTlXcFp5bzZMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjZFRi85RDg2NzUxMEZGRDQxMUU5OTJEMDY1MThDNEY5QUUwMi9OSHItczVURmFY NlhraUZPLU05V3BaeW82TDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT9FQ0t1iBWu0wws76fznNEV35bpiPmh9jZDIwpHulC2ixGdA9EDGp G+vHYKLc3zh2D2qfA1l5WHKfpr0u33IZQ6I/ivsdMbDqx3xsWEWHr3c0cSVJLKEN bOId1og2VbV2oC4WYPN+cJ/U2xg401IrQLwGoU6pjFXJl64lnmPIcSpGXYmHIngS Pf8gRMI/H02uMAgLhkPGYvTeoiuBPppl/EP5RhhgVBwQ6kRzdpyaK1qUKHZ+3Wt/ zVf9Bv6RdBIsNjp5qXutnQKJuu2gFfXzozThwGWG9v3dzWrG+2uMMO9GYr9uEEZe mlQaFOwKvlEpTEzlDRvxRlwga6xHITKv -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org