$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json) Hash identifier: AqRZVD/PZLV30OUu3Twe/BOxKHkIAah25VrYR2vBYkI= Subject key identifier: 9C:17:4F:AF:7D:3A:DC:7B:59:F9:2E:3E:48:97:25:B7:99:4B:18:B1 Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft Manifest number: 07E6 Signing time: Sat 04 May 2024 22:09:16 +0000 Manifest this update: Sat 04 May 2024 22:09:16 +0000 Manifest next update: Sat 11 May 2024 22:09:16 +0000 Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: XfjjRx8QG/ZzowyLNS8cy3FeWBHC9j9hpuJXMKENQ3I=) 2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: RuINhF2PAQ9fVQvaa/nlC34dALITzZSCmAOEzcedlFI=) 3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: ltlfrlUHISmA7QAU+zbb0n7XbL6k8oTar+kPBLTi47o=) 4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: 84+SX+WZRBLF23SmV8Z4wZ3c8jqDkimTM0kIMMPP+Kg=) 5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: amWkI8EJnpB0l45lHnJHw1bJ3YiEznB3Tvl/Qm8umkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Validity Not Before: May 4 22:09:16 2024 GMT Not After : May 11 22:09:16 2024 GMT Subject: CN=6636b20c-d7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:5b:68:83:45:94:95:8b:65:9d:59:3c:ee: 3b:34:13:4b:28:9f:f3:99:2c:4b:4c:c2:fe:be:cc: 7d:a9:e1:10:e8:e3:da:a1:a4:14:0d:2d:e9:92:52: 3d:ea:6d:3a:b1:9f:e7:5e:69:4e:1c:6a:75:e9:f4: a7:de:60:c0:1c:97:69:14:dd:be:9d:0c:de:eb:97: fb:79:35:45:49:88:41:1e:94:78:1f:16:d8:28:7d: 9d:89:bd:31:a3:70:da:e6:92:7f:bb:5d:b1:70:0d: a0:9b:89:66:ea:b3:96:de:2d:3e:0e:17:9b:ec:78: fa:ef:55:7c:c1:e7:5e:15:14:24:22:26:f2:3f:5d: e2:6c:59:ad:18:15:41:48:63:51:ae:ff:fc:09:6a: c1:0b:7d:c4:da:b7:40:a4:7e:4a:34:45:93:a8:b6: a6:4d:d8:b9:94:93:66:81:c1:c6:26:13:25:42:ed: eb:0c:f1:82:e0:cb:40:e6:dd:08:5a:58:e8:8b:30: bc:f3:d0:bf:8e:2d:fb:62:31:0b:1b:c3:95:cb:05: e0:1a:fd:9c:1f:43:a6:be:06:d3:b8:4b:57:c1:f2: f1:48:da:60:97:19:ef:ba:34:4b:d4:54:dc:08:06: c6:44:a0:e1:ab:da:7a:7a:91:7f:07:f8:87:ac:f4: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:17:4F:AF:7D:3A:DC:7B:59:F9:2E:3E:48:97:25:B7:99:4B:18:B1 X509v3 Authority Key Identifier: keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0a:fb:34:4e:46:c0:3e:9b:6c:dc:b2:d3:41:1e:5b:84:55: 99:82:9f:c6:7f:32:9d:00:ec:42:8d:97:9e:f4:af:16:ba:3d: 48:d7:ba:51:63:99:a1:69:92:99:d9:24:cd:41:ae:68:06:3f: c8:b0:fc:f7:19:f4:13:6e:c9:46:c9:15:19:2f:ee:30:ba:e9: b1:ce:e3:cc:03:11:59:fe:d5:2a:2c:b1:b4:04:b1:67:aa:fe: ab:8c:83:f3:c4:29:0e:1c:9e:70:85:40:dc:e7:c1:83:aa:86: f1:60:77:dc:66:3d:c0:08:4a:1a:4a:97:d8:b4:26:ac:9a:c5: 69:6e:d5:a8:9b:3e:5d:bb:a6:1b:d7:f2:88:26:94:5f:6f:e8: 2f:61:92:23:4b:7c:c7:39:6d:c8:e2:98:ac:c1:04:35:2b:58: c9:0a:10:12:60:6c:55:8f:5e:57:8d:57:ee:05:ca:84:96:5f: 37:44:94:8c:6d:81:2c:c0:68:5a:f5:71:5b:63:7f:7c:1e:cc: f7:94:15:3c:b0:16:9a:1c:f3:79:68:42:e0:ae:cb:f3:59:00: 75:e5:26:bc:a9:83:96:83:ce:84:c9:75:e3:d3:32:23:15:83: 35:b3:e0:2f:96:68:4c:00:2f:38:62:95:4e:ff:8f:92:a6:9b: 92:a2:32:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz OEIwQkNCQzQwHhcNMjQwNTA0MjIwOTE2WhcNMjQwNTExMjIwOTE2WjAYMRYwFAYD VQQDEw02NjM2YjIwYy1kN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurNbaINFlJWLZZ1ZPO47NBNLKJ/zmSxLTML+vsx9qeEQ6OPaoaQUDS3pklI9 6m06sZ/nXmlOHGp16fSn3mDAHJdpFN2+nQze65f7eTVFSYhBHpR4HxbYKH2dib0x o3Da5pJ/u12xcA2gm4lm6rOW3i0+Dheb7Hj671V8wedeFRQkIibyP13ibFmtGBVB SGNRrv/8CWrBC33E2rdApH5KNEWTqLamTdi5lJNmgcHGJhMlQu3rDPGC4MtA5t0I WljoizC889C/ji37YjELG8OVywXgGv2cH0OmvgbTuEtXwfLxSNpglxnvujRL1FTc CAbGRKDhq9p6epF/B/iHrPQS9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwXT699 Otx7WfkuPkiXJbeZSxixMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTJBQy9BNDhENTk2NkJCM0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVp X1ZTV29wR0RDMzA0c0x5OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtCvs0TkbAPpts3LLTQR5bhFWZgp/GfzKdAOxCjZee9K8Wuj1I17pR Y5mhaZKZ2STNQa5oBj/IsPz3GfQTbslGyRUZL+4wuumxzuPMAxFZ/tUqLLG0BLFn qv6rjIPzxCkOHJ5whUDc58GDqobxYHfcZj3ACEoaSpfYtCasmsVpbtWomz5du6Yb 1/KIJpRfb+gvYZIjS3zHOW3I4piswQQ1K1jJChASYGxVj15XjVfuBcqEll83RJSM bYEswGha9XFbY398Hsz3lBU8sBaaHPN5aELgrsvzWQB15Sa8qYOWg86EyXXj0zIj FYM1s+AvlmhMAC84YpVO/4+SppuSojKN -----END CERTIFICATE-----Generated at Sun May 5 00:14:41 2024 by rpki-client on console-ams.rpki-client.org