$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json) Hash identifier: 4ArRPqd8usFpXfWk8v8umfjxgz7jewACPC9NkrBMJ0Y= Subject key identifier: 4F:0B:55:4C:91:14:68:94:9C:6C:CD:10:F0:98:AC:81:32:63:5A:6B Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft Manifest number: 5D Signing time: Wed 29 May 2024 08:22:44 +0000 Manifest this update: Wed 29 May 2024 08:22:44 +0000 Manifest next update: Wed 05 Jun 2024 08:22:44 +0000 Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: uNs4iprPlEw1UQW5tco3qBT0JtZuajy2Guju8PPLpKg=) 2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: sSUygvO4tgmOpRgBbCAQ01iCPpNPh5y2xYEsG36MtWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Validity Not Before: May 29 08:22:44 2024 GMT Not After : Jun 5 08:22:44 2024 GMT Subject: CN=6656e5d4-9c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:b8:30:ab:61:8e:89:48:dc:4d:f7:79:11: bf:b4:fb:99:75:4c:be:39:93:9a:b0:3e:bb:fc:8a: 44:62:23:d7:04:46:39:45:36:6a:e4:c3:09:92:d2: b8:b8:3a:e4:ed:c1:0d:5d:db:b2:30:2e:1a:c4:d6: 8d:89:8c:3a:7d:d4:80:86:46:01:af:76:07:64:ce: 05:f7:d8:58:6a:e8:ce:55:97:ae:fa:a4:85:7e:65: 47:97:26:cb:d3:c9:d9:df:80:14:76:bf:7d:ba:33: 41:0a:a6:a9:94:c8:e3:49:a8:89:73:f7:a3:cb:69: e6:75:bb:5d:ea:80:1c:d4:06:90:18:62:a4:4f:1f: c4:c0:a7:83:f6:1c:e8:dd:b4:01:c5:62:4d:d1:81: 20:68:9f:4c:f7:a0:81:8e:70:42:a0:dd:94:02:d4: 32:2c:c9:9d:09:a4:84:34:82:21:28:93:b5:b5:f7: 3d:26:c9:23:82:e8:be:38:42:3a:14:81:61:47:78: 88:e8:f0:4a:01:6c:9b:97:31:ad:16:25:9f:96:dd: e8:ea:ce:99:e3:cc:53:32:ad:45:4e:2b:b9:b0:38: 3d:0e:2c:9f:65:67:80:68:61:a6:d4:3f:f6:e9:3c: 9f:11:f1:b7:b1:21:b0:e1:01:cf:11:c1:b2:4f:13: 4a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0B:55:4C:91:14:68:94:9C:6C:CD:10:F0:98:AC:81:32:63:5A:6B X509v3 Authority Key Identifier: keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:be:85:93:8a:19:00:70:a9:a9:43:0b:2e:88:6c:aa:ea:88: a6:e2:c3:05:d8:ef:0b:5a:10:1c:3d:67:eb:2f:73:87:c7:1b: 33:f2:7a:9f:aa:8b:92:58:e2:60:b5:0b:b2:75:74:d5:a1:f6: e2:54:83:6a:2b:50:12:a8:ab:eb:a4:43:59:d4:ab:db:d3:ce: 97:21:64:ba:95:36:40:1e:e5:92:53:f9:c9:74:09:36:21:38: e4:44:e6:ea:bf:a5:59:99:59:e6:bb:08:e7:a4:d4:93:55:7f: 22:13:45:4f:97:85:83:82:7d:2e:32:78:34:4d:79:b7:6f:48: f1:c5:a3:e3:4d:5f:2e:dc:f0:4d:ba:71:33:6e:85:e4:20:ef: b0:92:99:04:a3:d8:35:cc:60:e8:7c:28:2e:bc:80:f3:cd:e0: 6c:ea:e5:fa:cf:c3:5d:01:54:99:64:f6:56:f4:1e:34:db:e8: cb:f7:99:ce:96:a4:7c:91:93:1b:11:3a:a6:e2:ab:00:b1:51: d8:41:a7:67:68:96:c6:c0:d2:6c:a7:60:c0:62:d6:47:5f:d5: 6d:43:c4:cd:cd:85:99:18:e6:90:0c:dd:35:3f:ac:99:38:87: 86:a4:2e:6e:80:f5:bb:69:d8:38:2f:70:8a:06:cd:74:05:f9: b5:15:40:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjhDODExMC8GA1UEBRMoMzY5QjNFOUI3QjY2RThGNUJCOTc5QTZFMkYyRTdBQUNG NTAwRDNGMTAeFw0yNDA1MjkwODIyNDRaFw0yNDA2MDUwODIyNDRaMBgxFjAUBgNV BAMTDTY2NTZlNWQ0LTljMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX5rgwq2GOiUjcTfd5Eb+0+5l1TL45k5qwPrv8ikRiI9cERjlFNmrkwwmS0ri4 OuTtwQ1d27IwLhrE1o2JjDp91ICGRgGvdgdkzgX32Fhq6M5Vl676pIV+ZUeXJsvT ydnfgBR2v326M0EKpqmUyONJqIlz96PLaeZ1u13qgBzUBpAYYqRPH8TAp4P2HOjd tAHFYk3RgSBon0z3oIGOcEKg3ZQC1DIsyZ0JpIQ0giEok7W19z0mySOC6L44QjoU gWFHeIjo8EoBbJuXMa0WJZ+W3ejqzpnjzFMyrUVOK7mwOD0OLJ9lZ4BoYabUP/bp PJ8R8bexIbDhAc8RwbJPE0obAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTwtVTJEU aJScbM0Q8JisgTJjWmswHwYDVR0jBBgwFoAUNps+m3tm6PW7l5puLy56rPUA0/Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCOEM4L0M0NEMwNDUyOEVD OTExRUU5RjhFNDQ3RkM0RjlBRTAyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBf RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnBzLW0zdG02UFc3bDVwdUx5NTZyUFVBMF9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC OEM4L0M0NEMwNDUyOEVDOTExRUU5RjhFNDQ3RkM0RjlBRTAyL05wcy1tM3RtNlBX N2w1cHVMeTU2clBVQTBfRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK++hZOKGQBwqalDCy6IbKrqiKbiwwXY7wtaEBw9Z+svc4fHGzPyep+q i5JY4mC1C7J1dNWh9uJUg2orUBKoq+ukQ1nUq9vTzpchZLqVNkAe5ZJT+cl0CTYh OORE5uq/pVmZWea7COek1JNVfyITRU+XhYOCfS4yeDRNebdvSPHFo+NNXy7c8E26 cTNuheQg77CSmQSj2DXMYOh8KC68gPPN4Gzq5frPw10BVJlk9lb0HjTb6Mv3mc6W pHyRkxsROqbiqwCxUdhBp2dolsbA0mynYMBi1kdf1W1DxM3NhZkY5pAM3TU/rJk4 h4akLm6A9btp2DgvcIoGzXQF+bUVQPE= -----END CERTIFICATE-----Generated at Wed May 29 09:16:51 2024 by rpki-client on console-fra.rpki-client.org