$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft File: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json) Hash identifier: rZICIRt1ghk1/QjLs0pdQg8r1oh4y404HTZ1+kbs3b8= Subject key identifier: 25:EA:16:7C:04:9B:67:BB:78:16:8D:40:A4:A6:A7:5A:14:2E:04:1F Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0DEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft Manifest number: 0D49 Signing time: Wed 20 Nov 2024 17:59:37 +0000 Manifest this update: Wed 20 Nov 2024 17:59:37 +0000 Manifest next update: Wed 27 Nov 2024 17:59:37 +0000 Files and hashes: 1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: wKSZLXu2xYH6TuWI3hfvPXqLnl/2N2zj/+OWVCzfYNE=) 2: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: 7msEvTLtFsUPExajJssY7rK4WVcg4LZn9GJ36tHnfps=) 3: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: EKrxivQN/ugEIGuNskep3asGKS1SHAvX1FnHQ+xTspc=) 4: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: u3WzgpaL6M5sXXo26nPKh9UHSPFb46VhuO2Q5Fo8Shs=) 5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: NWo/6+CZ9HQYfqESvTvUnv7ahdvIp39DlAFteKyJz6Y=) 6: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: mTcIHah4w3Vjv+PUpTnmqnHZ/WWcS1sHh5BVs3GE+UQ=) 7: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: xGtgEmqtoxW1ZnFqrfdXZFVQbRuwiMqE40Ohns82lks=) 8: 0D90C6C899BC11EEBF0F7411C4F9AE02.roa (hash: SwVIU1/ODHqHDBYRb3zDXJM3iD52uVTOm3kwR0D00Ag=) 9: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: SXM3r93+JAbfUFOgTJZWpNNuc7IK/ZoNqCIsmPIym1s=) 10: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: HNDIzi1kzv+rbEdjXVJF19/xDZWlePAah9JkFcYlECE=) 11: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: jVu5ZnLYMd3KFvMDPxIr2Kr82SJ5+hpIDGoI5dhGF7o=) 12: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1e5MpWXXLnucpXgA7+/6NcCslKn9LXNV+RznqlHIuF0=) 13: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: EZcxncfNl0zD/tSncvn3SUo/vaEA9kPik+cwYMuomd0=) 14: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: qiruACIeUuWCHVE9fSq/awWWHhKH4G60m/pcIC2u5z8=) 15: 915FFF14A5AF11EAB039ED67C4F9AE02.roa (hash: 2jainDeXw/J702lQhxkzNdpAlcOPjELdE2rK7IEazhc=) 16: 03774914696211EC8A05D115C4F9AE02.roa (hash: /71jeZ/z/bjdOuocI7pJpODjcutgjWmyBXnbScV8x34=) 17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: zfIXPPCdkOaknfqYs53DeFIT3TNh9PqHIQnfhYmK5wM=) 18: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: SBkKKnAR6IJ2hBnL0p0PNg19RBJEETP5xc3S8pI7apE=) 19: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: IXKoMwA1CHlc+rwm36botjnh/fDCInGR5gYfUdLmCvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3567 (0xdef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Nov 20 17:59:37 2024 GMT Not After : Nov 27 17:59:37 2024 GMT Subject: CN=673e2389-d7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:7f:db:98:d6:21:40:df:d4:a8:55:0b:32: 54:72:21:e6:5d:ff:e1:46:9e:e8:dd:57:d3:e9:90: e2:ba:8d:83:05:cc:93:e1:73:c1:77:27:82:c2:0e: 16:2c:7d:a3:6a:e9:8a:03:9b:f4:d3:c5:c7:8f:f4: 91:c5:59:9a:ea:6a:b2:92:53:da:79:30:9b:19:d1: 6d:b9:ea:33:b7:01:69:21:6f:1c:fb:68:6b:8e:ee: fd:58:0b:c4:19:16:fe:3e:f5:dd:15:1e:f5:30:2e: cc:66:e6:d1:2b:2f:29:3b:ef:47:ce:38:8e:2c:51: 12:f6:1b:a7:ab:f4:c4:40:67:d7:cd:6c:f9:0b:f5: cd:98:c5:82:cb:3c:09:f4:b9:4c:bc:38:f7:32:4c: 06:92:de:89:72:d1:29:a2:52:35:d4:e9:84:19:d7: ce:be:0d:49:10:ac:20:87:cc:c8:d0:08:30:d0:60: ef:52:d1:0e:2d:33:79:c5:f4:82:49:7d:b4:2a:c3: d3:0d:a9:84:64:f4:5b:25:f6:7a:ac:92:84:a1:8b: 55:61:5d:9f:2d:72:75:c5:95:7e:54:b0:ef:31:2a: ec:61:92:9e:0f:48:99:94:48:2b:a0:ea:7f:d0:16: 10:4b:77:e4:99:df:73:9e:0a:1d:fd:bd:1d:8e:18: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EA:16:7C:04:9B:67:BB:78:16:8D:40:A4:A6:A7:5A:14:2E:04:1F X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:90:00:d0:16:12:42:27:e0:d8:d2:49:6e:2b:44:ff:71:47: 46:04:6c:c1:54:8c:db:7b:3c:60:c6:ce:57:4d:ae:02:a1:a3: f7:fd:64:ba:d2:fa:dd:e8:18:58:43:d8:a9:01:a2:bb:80:82: a8:f9:1f:83:2a:d0:b2:18:5e:64:cd:c2:df:88:2c:38:cd:32: d5:52:8a:57:43:e9:53:5b:0f:04:d1:52:09:49:15:d5:99:14: 7b:3f:21:7d:8d:9e:56:12:e7:4e:f6:59:cd:b0:a0:35:0f:97: bc:76:39:2c:a5:a0:78:d5:f7:29:ca:da:ad:93:da:8e:89:1b: 69:9c:f6:e7:e9:d3:e8:9a:7b:63:22:e0:0f:b8:03:56:35:d8: 0f:15:df:04:ff:01:47:39:8b:68:2f:9c:12:d1:3d:41:ed:2a: 34:e1:92:28:39:aa:cd:26:96:47:4f:42:c3:fc:fb:52:86:b7: af:6a:36:ca:78:07:92:c1:10:bc:44:cf:1f:14:18:42:9f:97: fd:4d:f5:7a:b7:26:dd:03:0c:60:e5:c9:94:4d:62:0c:51:14: 98:82:e6:2c:5b:93:b5:be:5a:4d:d2:4d:ce:fb:ba:d8:c7:29: 33:b4:b7:37:04:5f:51:da:8e:66:7e:e9:cd:62:4c:62:24:c7: 57:4c:b9:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjQxMTIwMTc1OTM3WhcNMjQxMTI3MTc1OTM3WjAYMRYwFAYD VQQDEw02NzNlMjM4OS1kN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWd/25jWIUDf1KhVCzJUciHmXf/hRp7o3VfT6ZDiuo2DBcyT4XPBdyeCwg4W LH2jaumKA5v008XHj/SRxVma6mqyklPaeTCbGdFtueoztwFpIW8c+2hrju79WAvE GRb+PvXdFR71MC7MZubRKy8pO+9HzjiOLFES9hunq/TEQGfXzWz5C/XNmMWCyzwJ 9LlMvDj3MkwGkt6JctEpolI11OmEGdfOvg1JEKwgh8zI0Agw0GDvUtEOLTN5xfSC SX20KsPTDamEZPRbJfZ6rJKEoYtVYV2fLXJ1xZV+VLDvMSrsYZKeD0iZlEgroOp/ 0BYQS3fkmd9zngod/b0djhjA2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXqFnwE m2e7eBaNQKSmp1oULgQfMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEM2MC9CNTI2RkY3NEQ4NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpU SjF4NVkxbU5hMFczQ3ZnSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCkADQFhJCJ+DY0kluK0T/cUdGBGzBVIzbezxgxs5XTa4CoaP3/WS6 0vrd6BhYQ9ipAaK7gIKo+R+DKtCyGF5kzcLfiCw4zTLVUopXQ+lTWw8E0VIJSRXV mRR7PyF9jZ5WEudO9lnNsKA1D5e8djkspaB41fcpytqtk9qOiRtpnPbn6dPomntj IuAPuANWNdgPFd8E/wFHOYtoL5wS0T1B7So04ZIoOarNJpZHT0LD/PtShrevajbK eAeSwRC8RM8fFBhCn5f9TfV6tybdAwxg5cmUTWIMURSYguYsW5O1vlpN0k3O+7rY xykztLc3BF9R2o5mfunNYkxiJMdXTLns -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:04 2024 by rpki-client on console-ams.rpki-client.org