$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: gKEIN3RMebTPCjDMHK+uaaCg52dn82rFQiBrD2cV/0o= Subject key identifier: 68:39:FF:53:24:CE:6C:4B:C8:B7:61:2E:53:8B:37:12:20:1C:71:F4 Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 66 Signing time: Sun 19 May 2024 07:35:45 +0000 Manifest this update: Sun 19 May 2024 07:35:44 +0000 Manifest next update: Sun 26 May 2024 07:35:44 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: sn11G0jcuYcxepDCWohO1fDaNup/2BOVS7ZfRg0nyNA=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: Jfys2C4eSWOalmHAkdo6WoYvtCISlkXq81R5CJTq2MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: May 19 07:35:44 2024 GMT Not After : May 26 07:35:44 2024 GMT Subject: CN=6649abd1-1ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:0c:04:bd:d9:12:09:81:8e:cd:7a:4f:95: 14:0e:05:65:b1:12:8f:3f:1f:cb:e6:7b:d5:ef:4c: ec:f1:52:f4:bf:d3:b6:e1:03:2a:5d:a8:b6:85:7c: b3:a9:51:45:f7:ae:fa:9b:0d:8e:75:5f:54:51:13: 8d:07:73:a5:14:d2:3c:ab:ec:7b:3b:9e:1a:a2:d8: 1b:69:ee:27:0b:73:bf:9c:38:59:7c:0b:45:4e:ad: e7:a8:3a:71:1e:a0:22:d4:26:b0:86:ba:9f:05:57: 19:fa:c5:bc:79:ff:af:ae:5b:4c:a4:ef:85:76:ee: 7e:ec:2a:bc:94:61:1b:1c:01:b0:13:3f:a5:a9:31: fc:7e:0b:fb:45:2f:2f:4e:e5:61:5e:43:65:85:29: 9f:92:ac:46:1e:cb:8b:54:eb:7f:9f:4a:49:a4:28: 4c:b8:b9:fa:b7:08:8a:69:06:20:99:51:aa:64:fa: 02:00:01:1f:9d:91:33:fc:8f:15:4f:96:f9:59:a4: eb:9e:67:31:18:ed:34:9a:7b:b2:69:a5:70:99:b9: e9:61:a9:18:b1:19:76:bc:dd:c8:d4:ea:4a:5a:c9: b5:79:97:41:eb:0b:32:21:18:21:e1:0f:67:ab:2f: 67:de:f5:73:8d:a0:0a:e6:90:86:8f:07:e3:1b:90: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:39:FF:53:24:CE:6C:4B:C8:B7:61:2E:53:8B:37:12:20:1C:71:F4 X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:28:4f:11:da:ae:da:c2:60:ce:26:1a:3b:c0:f6:06:1d:5e: 87:c8:49:fc:b5:cb:fa:05:36:ea:54:e9:e7:dc:5d:8b:dc:b9: f9:08:0b:d2:29:53:d7:ff:e3:c2:33:40:68:1d:63:13:1f:85: 14:b0:0b:2b:55:96:f7:4d:f1:ef:f7:16:a7:4d:c0:d3:65:37: 3d:6a:13:a4:81:e3:32:dd:b2:88:ac:86:02:cd:9e:d1:26:ec: 96:bd:70:35:17:3b:e7:eb:7b:9d:71:49:a6:50:1b:2c:51:68: 9c:4d:0a:89:6e:44:33:c9:0e:57:de:b4:d0:6a:ca:bc:1e:1e: aa:0a:d9:73:38:43:1e:89:53:8b:67:b7:eb:6c:05:a2:f3:78: 93:61:4b:0b:3d:a8:23:80:6a:c8:47:89:95:e5:1a:5b:b8:2c: cd:2e:ff:37:43:db:63:9f:43:36:f3:91:65:20:43:fc:a1:10: df:ba:4c:02:52:88:71:0b:de:63:17:5c:91:3e:4a:44:6d:fa: b6:c5:3a:a9:04:52:ef:88:2a:83:69:14:cf:c8:03:0c:87:64: 16:db:84:18:1c:27:ce:16:dd:fc:c5:b2:5b:e6:7b:58:5a:c3: 86:65:7b:9a:48:5a:d6:69:ac:8e:58:6d:20:02:22:20:19:cd: de:09:90:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjVEMjExMC8GA1UEBRMoMzQ1MTdDQzI5Rjc0MTY5RkQ3MzZBMkMyNDA2MTlGOEIz MzBGREQ5RDAeFw0yNDA1MTkwNzM1NDRaFw0yNDA1MjYwNzM1NDRaMBgxFjAUBgNV BAMTDTY2NDlhYmQxLTFlZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSyQwEvdkSCYGOzXpPlRQOBWWxEo8/H8vme9XvTOzxUvS/07bhAypdqLaFfLOp UUX3rvqbDY51X1RRE40Hc6UU0jyr7Hs7nhqi2Btp7icLc7+cOFl8C0VOreeoOnEe oCLUJrCGup8FVxn6xbx5/6+uW0yk74V27n7sKryUYRscAbATP6WpMfx+C/tFLy9O 5WFeQ2WFKZ+SrEYey4tU63+fSkmkKEy4ufq3CIppBiCZUapk+gIAAR+dkTP8jxVP lvlZpOueZzEY7TSae7JppXCZuelhqRixGXa83cjU6kpaybV5l0HrCzIhGCHhD2er L2fe9XONoArmkIaPB+MbkAXZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaDn/UyTO bEvIt2EuU4s3EiAccfQwHwYDVR0jBBgwFoAUNFF8wp90Fp/XNqLCQGGfizMP3Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNUQyLzZERjYwMkQwNzhC RjExRUU5M0ZGQjc2NEM0RjlBRTAyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkZGOHdwOTBGcF9YTnFMQ1FHR2Zpek1QM1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky NUQyLzZERjYwMkQwNzhCRjExRUU5M0ZGQjc2NEM0RjlBRTAyL05GRjh3cDkwRnBf WE5xTENRR0dmaXpNUDNaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADooTxHartrCYM4mGjvA9gYdXofISfy1y/oFNupU6efcXYvcufkIC9Ip U9f/48IzQGgdYxMfhRSwCytVlvdN8e/3FqdNwNNlNz1qE6SB4zLdsoishgLNntEm 7Ja9cDUXO+fre51xSaZQGyxRaJxNColuRDPJDlfetNBqyrweHqoK2XM4Qx6JU4tn t+tsBaLzeJNhSws9qCOAashHiZXlGlu4LM0u/zdD22OfQzbzkWUgQ/yhEN+6TAJS iHEL3mMXXJE+SkRt+rbFOqkEUu+IKoNpFM/IAwyHZBbbhBgcJ84W3fzFslvme1ha w4Zle5pIWtZprI5YbSACIiAZzd4JkHE= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org