$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft File: NHTCU5hhEAr9ljoWPIAtAmT47H0.mft (raw, json) Hash identifier: 3a2SHjms1i+xYu7YyNj5IZ7uLVE9nPlhkV5ZzUtIQ4Q= Subject key identifier: CA:E0:12:1A:20:12:29:7E:85:95:46:08:60:C1:6D:5A:55:B5:52:18 Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft Manifest number: 49 Signing time: Wed 29 May 2024 08:47:41 +0000 Manifest this update: Wed 29 May 2024 08:47:41 +0000 Manifest next update: Wed 05 Jun 2024 08:47:41 +0000 Files and hashes: 1: NHTCU5hhEAr9ljoWPIAtAmT47H0.crl (hash: jOJkDuQ5Tl+EtgT368mislfJ9tnYr8u1viIMZHoQGdk=) 2: A244D92411E111EFBEBDD04FC4F9AE02.roa (hash: Sn/X8QwI7RWARUV5M3ib9s4fogqlJ/WgTeiO4skend4=) 3: 6241069011E111EFBBB70B32C4F9AE02.roa (hash: JxI86Wejjp4xvatXjkIX7nssbC2BudoqYiXNb8glC5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 08:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Validity Not Before: May 29 08:47:41 2024 GMT Not After : Jun 5 08:47:41 2024 GMT Subject: CN=6656ebad-2022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:7e:af:6d:50:ba:09:a6:8c:ba:86:7b:0e: ec:b8:b2:e1:21:68:ae:6b:f5:40:50:fe:60:78:b9: 35:d9:94:6c:03:ea:3c:77:fd:21:7a:7f:06:13:c9: 08:5b:08:4b:e0:86:2b:83:36:33:d6:14:a0:c9:a9: 01:5b:b1:0c:58:9a:a2:f4:06:62:32:9e:f0:f1:17: 4e:86:6a:f2:fb:3b:a0:79:0e:19:b5:cd:b9:92:91: ae:e4:bd:93:4d:5d:cd:13:4e:8b:54:4b:6c:b9:57: c0:3b:b1:81:fb:96:5f:2d:d8:7d:88:a8:84:cc:e8: 6d:36:51:7e:09:7a:72:d4:f3:8c:82:54:d2:8c:9c: e9:12:73:5a:14:ab:fc:46:51:dc:a0:fa:a5:1e:92: 85:50:90:df:9f:94:80:4c:3b:99:28:67:45:a8:3c: e5:f2:8a:fd:d4:32:ac:c3:bf:f5:2d:d3:88:31:c3: 14:19:92:60:fe:82:e7:46:a8:b1:5e:1d:e5:84:3e: ba:e3:5c:9b:36:ea:09:b4:49:a9:a9:13:8d:32:2a: 9b:86:bb:be:c7:50:58:0e:b1:ab:fc:ab:e5:21:c5: 6d:d0:5d:a8:ee:e6:85:39:66:62:d9:79:ff:6f:cc: 99:9e:fa:24:f9:5d:3b:35:1e:47:e0:2f:33:9c:33: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E0:12:1A:20:12:29:7E:85:95:46:08:60:C1:6D:5A:55:B5:52:18 X509v3 Authority Key Identifier: keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:8e:7d:cc:51:16:8c:f8:18:f9:d5:aa:f0:3f:79:0f:e0:6c: aa:15:07:a9:64:70:40:85:ca:c5:31:d9:10:d3:dd:7e:e5:13: 44:e9:ab:79:90:f7:55:82:1c:8d:42:9c:0e:43:c4:2b:54:01: ba:44:e0:4f:84:64:4c:38:fe:e2:f1:82:d1:22:94:80:0a:39: a2:08:73:fe:82:38:ed:7d:36:9e:30:5e:ca:11:ce:d5:d0:62: ef:86:ad:e2:cc:d7:a9:73:11:8a:4d:0b:4f:d4:4c:4b:4f:52: 20:80:d6:b3:60:19:64:f7:09:e2:5f:82:c4:4d:ac:77:28:fb: d3:f6:14:4c:0f:ed:8b:90:d8:b1:d5:11:e5:f3:38:86:44:45: fe:d5:09:ca:47:25:cc:34:3f:07:30:1d:69:9c:3e:1f:85:97: 85:b9:e8:1d:69:6d:05:f6:7c:f9:3a:35:55:86:83:68:78:e6: 1b:51:a2:27:d8:ee:d2:7f:9a:e7:a9:3e:58:94:fe:cb:e1:d4: df:74:32:93:12:3f:da:b2:f2:81:b9:dc:bc:a7:eb:34:a7:fa: 04:1c:d7:6a:e7:80:8f:77:a8:8f:97:90:88:c7:38:6d:0e:af: ef:ee:83:b1:56:64:de:77:ac:d5:b4:5b:fe:96:56:bf:c5:58: 99:57:3c:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjNBRjExMC8GA1UEBRMoMzQ3NEMyNTM5ODYxMTAwQUZEOTYzQTE2M0M4MDJEMDI2 NEY4RUM3RDAeFw0yNDA1MjkwODQ3NDFaFw0yNDA2MDUwODQ3NDFaMBgxFjAUBgNV BAMTDTY2NTZlYmFkLTIwMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD236vbVC6CaaMuoZ7Duy4suEhaK5r9UBQ/mB4uTXZlGwD6jx3/SF6fwYTyQhb CEvghiuDNjPWFKDJqQFbsQxYmqL0BmIynvDxF06GavL7O6B5Dhm1zbmSka7kvZNN Xc0TTotUS2y5V8A7sYH7ll8t2H2IqITM6G02UX4JenLU84yCVNKMnOkSc1oUq/xG Udyg+qUekoVQkN+flIBMO5koZ0WoPOXyiv3UMqzDv/Ut04gxwxQZkmD+gudGqLFe HeWEPrrjXJs26gm0SampE40yKpuGu77HUFgOsav8q+UhxW3QXaju5oU5ZmLZef9v zJme+iT5XTs1HkfgLzOcM2bBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyuASGiAS KX6FlUYIYMFtWlW1UhgwHwYDVR0jBBgwFoAUNHTCU5hhEAr9ljoWPIAtAmT47H0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2M0FGLzRERkU2ODI0QjZC NzExRUVBOUQ3RkMzQUM0RjlBRTAyL05IVENVNWhoRUFyOWxqb1dQSUF0QW1UNDdI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkhUQ1U1aGhFQXI5bGpvV1BJQXRBbVQ0N0gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 M0FGLzRERkU2ODI0QjZCNzExRUVBOUQ3RkMzQUM0RjlBRTAyL05IVENVNWhoRUFy OWxqb1dQSUF0QW1UNDdIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKmOfcxRFoz4GPnVqvA/eQ/gbKoVB6lkcECFysUx2RDT3X7lE0Tpq3mQ 91WCHI1CnA5DxCtUAbpE4E+EZEw4/uLxgtEilIAKOaIIc/6COO19Np4wXsoRztXQ Yu+GreLM16lzEYpNC0/UTEtPUiCA1rNgGWT3CeJfgsRNrHco+9P2FEwP7YuQ2LHV EeXzOIZERf7VCcpHJcw0PwcwHWmcPh+Fl4W56B1pbQX2fPk6NVWGg2h45htRoifY 7tJ/muepPliU/svh1N90MpMSP9qy8oG53Lyn6zSn+gQc12rngI93qI+XkIjHOG0O r+/ug7FWZN53rNW0W/6WVr/FWJlXPPU= -----END CERTIFICATE-----Generated at Wed May 29 10:44:01 2024 by rpki-client on console-ams.rpki-client.org