$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: yYJvXJrg4z5PSbXJZawRiy+nhbrX5IbcCfYo9101geo= Subject key identifier: 74:1D:97:37:69:9D:86:2F:F5:61:48:5D:58:D4:65:20:11:26:59:82 Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0AA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0A97 Signing time: Fri 26 Apr 2024 20:09:58 +0000 Manifest this update: Fri 26 Apr 2024 20:09:58 +0000 Manifest next update: Fri 03 May 2024 20:09:58 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: +FRFO1ewBUwXaemPm0dPjGIOWJYqqD9pD8YStdRFJds=) 2: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: yDufJXufAMETisXbFvpnQ3a1k2Wn60TOyOnkemkwgEg=) 3: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: mhtlL/9IwO2U7Cm3tnQ6f0X8LzgIxwGszfyHNQNqAyk=) 4: E5675F48336E11EA94623E18C4F9AE02.roa (hash: IKLPiPB24hMmBTYNbmsAB+c/092wl/g7u5VhBuX71Zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 20:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Apr 26 20:09:58 2024 GMT Not After : May 3 20:09:58 2024 GMT Subject: CN=662c0a16-4e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:59:6f:d0:d7:74:8a:b6:cd:19:40:9e:e6: 5c:e0:28:a1:5e:7d:77:c4:63:c2:81:ae:9e:bf:68: e2:76:99:a1:37:ef:c1:ad:28:d4:8f:d6:8a:5c:d3: 3c:0d:71:7d:3b:cc:4e:b3:25:d7:45:7c:2c:38:70: 32:4e:f6:f6:fc:e7:21:23:be:2f:77:fb:46:cc:12: af:d5:51:d6:51:db:ae:f7:83:bb:72:cd:92:de:1e: 02:7c:1f:82:c6:9f:9b:e1:02:90:83:5b:92:4a:a2: 8e:a4:0a:b5:db:c3:f5:e7:36:1b:63:d5:26:6e:82: d4:c6:19:10:68:28:0f:e2:f1:c0:a6:91:70:8d:a4: 6b:4e:14:53:e5:1a:a2:51:e5:5b:4d:ab:93:aa:1e: 4d:f4:0e:cb:c5:2e:b4:4f:5c:e5:0c:2a:5f:fe:1b: 94:c3:f7:6c:20:38:27:4e:6d:ed:cb:e9:a4:6b:43: a3:c4:02:9b:8a:03:bb:8d:98:c4:bd:41:16:e0:90: 7c:c2:cc:a1:5c:6b:e0:a4:95:be:2f:d0:2f:90:a9: a8:bf:89:9e:4a:67:81:20:8f:2a:62:cd:7d:60:36: 84:f2:1a:d0:f4:96:5e:7d:c7:38:aa:49:9e:e7:e8: a8:ab:b5:1e:37:82:d4:85:51:68:27:48:65:12:bc: 49:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1D:97:37:69:9D:86:2F:F5:61:48:5D:58:D4:65:20:11:26:59:82 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:30:61:d6:3e:3b:96:00:6d:24:b0:49:c0:a2:23:ca:fa:88: 1d:40:a9:c6:80:d8:88:4f:41:df:74:da:32:73:82:42:aa:62: 0c:13:e1:68:db:81:9b:d0:db:13:84:66:83:a3:0d:9a:85:55: 3d:4f:ff:f7:40:c8:eb:df:24:35:7d:c2:5e:c1:bc:06:10:f5: 1b:07:07:97:c3:21:32:2a:35:0c:a2:0e:6a:93:85:53:de:6d: 7b:e8:9c:22:e1:90:fd:c5:1a:2f:35:4b:73:93:27:7e:9a:85: fe:59:65:1e:c3:09:9f:dc:56:c1:29:dc:97:f8:29:f1:88:1a: de:5d:0d:c3:cf:d4:64:ad:a7:4f:78:26:a8:b7:bd:2d:62:47: 54:4f:e6:f8:28:4c:e2:b8:5f:20:b7:84:08:23:83:85:5e:b0: 81:2a:b5:e0:c0:93:e0:48:dd:75:2f:a4:11:d2:bf:41:26:82: 58:b9:43:5d:3d:f3:6e:40:bd:f3:e5:62:aa:d9:1a:d0:52:70: 51:36:29:5b:f1:75:83:70:f1:1f:d4:b4:a2:f5:57:25:d7:c1: 26:41:46:11:93:b8:ff:cb:4d:a7:e4:71:50:14:45:85:8a:01: b7:52:bf:57:50:94:2c:ea:cd:1d:df:ac:68:e2:f8:83:dd:4f: e7:cb:f7:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjQwNDI2MjAwOTU4WhcNMjQwNTAzMjAwOTU4WjAYMRYwFAYD VQQDEw02NjJjMGExNi00ZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/pZb9DXdIq2zRlAnuZc4CihXn13xGPCga6ev2jidpmhN+/BrSjUj9aKXNM8 DXF9O8xOsyXXRXwsOHAyTvb2/OchI74vd/tGzBKv1VHWUduu94O7cs2S3h4CfB+C xp+b4QKQg1uSSqKOpAq128P15zYbY9UmboLUxhkQaCgP4vHAppFwjaRrThRT5Rqi UeVbTauTqh5N9A7LxS60T1zlDCpf/huUw/dsIDgnTm3ty+mka0OjxAKbigO7jZjE vUEW4JB8wsyhXGvgpJW+L9AvkKmov4meSmeBII8qYs19YDaE8hrQ9JZefcc4qkme 5+ioq7UeN4LUhVFoJ0hlErxJewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQdlzdp nYYv9WFIXVjUZSARJlmCMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWMGHWPjuWAG0ksEnAoiPK+ogdQKnGgNiIT0HfdNoyc4JCqmIME+Fo 24Gb0NsThGaDow2ahVU9T//3QMjr3yQ1fcJewbwGEPUbBweXwyEyKjUMog5qk4VT 3m176Jwi4ZD9xRovNUtzkyd+moX+WWUewwmf3FbBKdyX+CnxiBreXQ3Dz9RkradP eCaot70tYkdUT+b4KEziuF8gt4QII4OFXrCBKrXgwJPgSN11L6QR0r9BJoJYuUNd PfNuQL3z5WKq2RrQUnBRNilb8XWDcPEf1LSi9Vcl18EmQUYRk7j/y02n5HFQFEWF igG3Ur9XUJQs6s0d36xo4viD3U/ny/dx -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:26 2024 by rpki-client on console-ams.rpki-client.org