$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: +KxF6fdoQa+SrJS1vTJncmGDAVwhya1WftVywtdL3BI= Subject key identifier: 7F:E0:27:79:BD:FB:56:27:44:DA:C8:7D:83:50:F2:7A:1C:BD:A8:29 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 48 Signing time: Wed 29 May 2024 08:47:57 +0000 Manifest this update: Wed 29 May 2024 08:47:56 +0000 Manifest next update: Wed 05 Jun 2024 08:47:56 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: 6V+3hxOW+ZGg2Jmi70tF/9s+ZOhnnaroXDomD/YoUQE=) 2: ACCC32D0D53611EE993C3C1BC4F9AE02.roa (hash: Fl9sRIi6r69XQw9rfvRkk8nDFzUbWW3Ike1vGNynB0w=) 3: FF74077ED53611EEB0976F1CC4F9AE02.roa (hash: a21MjldC3tAabkFjEuDrfDYCjNKuV0FBz8UPpXCDRK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: May 29 08:47:56 2024 GMT Not After : Jun 5 08:47:56 2024 GMT Subject: CN=6656ebbc-76be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1a:67:d1:eb:70:28:f5:72:6f:8f:d7:00:dd: 34:4f:4e:4e:d1:9c:5d:38:ee:ee:ae:7b:96:62:0b: e3:48:ce:65:85:33:51:ca:03:1a:6a:a5:ad:d5:9c: fc:58:ba:f8:84:f4:d1:bb:23:88:86:22:b7:b6:3f: 8a:48:d3:36:0f:be:34:5a:63:16:1d:62:13:61:8b: db:a1:70:8d:31:af:db:bd:10:60:c4:2d:8b:64:b4: ca:8d:b3:af:d2:7a:a7:9b:94:b4:7f:f0:01:d4:ee: 4b:5e:83:83:53:37:2d:44:a0:5a:bc:b0:19:2d:f3: 12:74:c3:bd:65:d9:69:77:2c:2c:28:72:c4:ba:87: fe:23:06:25:d4:a1:77:2f:eb:4c:32:a1:91:ce:7e: db:98:e2:4a:5b:7a:85:2f:f1:8c:bc:c5:57:51:9b: 19:70:4c:69:2d:40:3e:50:ee:bb:64:56:65:ae:3b: 57:29:d9:2b:d9:d8:53:09:c9:71:a8:6e:85:b7:22: a2:82:86:f6:7a:f1:60:b1:45:b2:08:6e:5e:ea:c3: ad:dd:57:7a:6e:12:13:ff:eb:98:e5:6a:bc:1b:ca: 2c:bd:78:82:55:52:f2:c6:bd:1d:c8:39:77:18:d7: eb:19:b4:ee:09:70:ab:7d:5d:dd:c9:0f:3b:d1:21: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E0:27:79:BD:FB:56:27:44:DA:C8:7D:83:50:F2:7A:1C:BD:A8:29 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:3f:fb:1d:23:be:6b:a8:ad:16:0e:2a:67:d2:ae:cb:54:46: 95:00:57:91:aa:e6:2b:1f:fa:cb:20:f1:b3:5f:08:c6:f5:a7: 14:ca:41:4a:fe:42:72:1d:26:f1:5b:c3:eb:58:63:e7:1d:84: 06:23:e6:ba:66:84:16:51:bb:6e:ad:68:ef:d2:f7:6f:20:9a: ab:73:04:81:38:3d:bf:d0:b4:f9:1d:e5:2c:9b:d8:7b:27:e6: 2b:93:6e:db:74:8f:fe:04:b9:92:dc:09:34:4b:73:2d:cb:09: 4d:2b:a3:16:72:19:14:35:c9:a7:6d:d6:6d:46:c8:4c:8c:b0: 3f:ea:52:58:a4:18:8c:be:aa:94:07:f1:85:e2:a1:83:62:ed: 1a:2a:50:06:21:20:c2:c1:af:66:c4:7e:7c:de:3e:90:f2:ad: 0c:b0:8e:a2:b3:e6:df:b3:ad:39:cd:60:ad:eb:72:8c:48:a2: 26:e9:9a:9b:9f:5f:64:ca:7a:76:e2:38:06:9a:7e:48:23:fa: 82:7e:2a:80:2e:6f:d5:66:74:4a:95:d8:76:7f:b6:62:ec:fc: ab:a1:38:56:ee:78:a9:b8:d3:f3:b3:33:20:87:d0:f7:68:48: 29:4f:7d:b3:9e:f0:05:73:e4:09:c6:aa:fa:87:d1:ce:4b:8b: 90:37:e0:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkNBRjExMC8GA1UEBRMoOUYwMkRBM0FCNUZCNDUzMTc1MDdDNDgwMjFDRTBBOEI5 MzcyNTVDOTAeFw0yNDA1MjkwODQ3NTZaFw0yNDA2MDUwODQ3NTZaMBgxFjAUBgNV BAMTDTY2NTZlYmJjLTc2YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcGmfR63Ao9XJvj9cA3TRPTk7RnF047u6ue5ZiC+NIzmWFM1HKAxpqpa3VnPxY uviE9NG7I4iGIre2P4pI0zYPvjRaYxYdYhNhi9uhcI0xr9u9EGDELYtktMqNs6/S eqeblLR/8AHU7kteg4NTNy1EoFq8sBkt8xJ0w71l2Wl3LCwocsS6h/4jBiXUoXcv 60wyoZHOftuY4kpbeoUv8Yy8xVdRmxlwTGktQD5Q7rtkVmWuO1cp2SvZ2FMJyXGo boW3IqKChvZ68WCxRbIIbl7qw63dV3puEhP/65jlarwbyiy9eIJVUvLGvR3IOXcY 1+sZtO4JcKt9Xd3JDzvRISLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf+Aneb37 VidE2sh9g1Dyehy9qCkwHwYDVR0jBBgwFoAUnwLaOrX7RTF1B8SAIc4Ki5NyVckw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2Q0FGL0YzRTBGQUU0QjZG NDExRUVBQzIwMzgxMEM0RjlBRTAyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZj ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbndMYU9yWDdSVEYxQjhTQUljNEtpNU55VmNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 Q0FGL0YzRTBGQUU0QjZGNDExRUVBQzIwMzgxMEM0RjlBRTAyL253TGFPclg3UlRG MUI4U0FJYzRLaTVOeVZjay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANg/+x0jvmuorRYOKmfSrstURpUAV5Gq5isf+ssg8bNfCMb1pxTKQUr+ QnIdJvFbw+tYY+cdhAYj5rpmhBZRu26taO/S928gmqtzBIE4Pb/QtPkd5Syb2Hsn 5iuTbtt0j/4EuZLcCTRLcy3LCU0roxZyGRQ1yadt1m1GyEyMsD/qUlikGIy+qpQH 8YXioYNi7RoqUAYhIMLBr2bEfnzePpDyrQywjqKz5t+zrTnNYK3rcoxIoibpmpuf X2TKenbiOAaafkgj+oJ+KoAub9VmdEqV2HZ/tmLs/KuhOFbueKm40/OzMyCH0Pdo SClPfbOe8AVz5AnGqvqH0c5Li5A34Kw= -----END CERTIFICATE-----Generated at Wed May 29 10:44:00 2024 by rpki-client on console-ams.rpki-client.org