$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft File: nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json) Hash identifier: CEGbBQWJWZFrTJ+eG7oSkLpOdRTNmGK+2DpIawx1LiU= Subject key identifier: DD:B7:40:C9:68:00:F2:CB:89:7A:99:B1:38:CC:67:05:38:7A:AE:A0 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 24AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft Manifest number: 2226 Signing time: Fri 22 Nov 2024 15:58:16 +0000 Manifest this update: Fri 22 Nov 2024 15:58:15 +0000 Manifest next update: Fri 29 Nov 2024 15:58:15 +0000 Files and hashes: 1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: 6BbRv3lmKXH2G6eNiGXuq5ZsoAMJibGeP0SUhas/2MQ=) 2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: n7pXi66lxgmnVUzRCaGjU+Jyqvcaobv+LRa6sWK36IE=) 3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: N/j8Xc916eNg8eHpf/TimkfEUKue+NoblWGnaKxHRm0=) 4: 4E8411A48C5411EF84ABE03CC4F9AE02.roa (hash: kqgtET6dT+7WkHTTkaAtc0y7QommXqhZIm2vxrnlQt0=) 5: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: bxRIP/V3KFaeNWfQRbqaVdttFxEirD+o4UsmoISKZuc=) 6: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: CQWi2YF8MQ4UHFHqDi+xaEbH9uwwbmiWIRH/VdottEg=) 7: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: nPuyeWNG9exmJBtrhR6dKImyLvexezTrvMYpeknk12s=) 8: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: tUCXmWof0USHAd/AnTe/zIcja2f8KydMrpeti85baXA=) 9: 94C16496222811EF99153155C4F9AE02.roa (hash: Ac6cnmBtCeQwIV5PdTOpzzOyj+FEtvQgRkdEJEIsldM=) 10: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: WtwbdAJs3osRQvsAOMvWgusqoBOVQjjr1Dv2FNOXu+k=) 11: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: tS+qP2Je+Zz8kTJK21naf6pRVHAGu1cyXc5EQvZ1I6M=) 12: BA007060162D11EEB79F703CC4F9AE02.roa (hash: lUK9e8KXzb4mh4DSCsGxShI/wXwRxSgyur8fdRUnUJ0=) 13: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: n7jlwwjdFJ+RKwuKH29PXvEGEpKzuEPAVlddcWoawd4=) 14: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: +CGhSvKre7unc2jjZTN2h/5C4OKnNYy8AFrBlT9QgCc=) 15: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: BoIbbyMCoyjBPVVzzNzvY0re58/2xN3cHA7chKiXOvg=) 16: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: 42+AdUwxxCnW8+mpW9En0BbvfvMfDp076eo2jJL8hog=) 17: 76C40F2C8A9A11EF91E12447C4F9AE02.roa (hash: BcmhJnfscqqH9nlm97b0RolsDRoz5ArAqjNc94+W2lQ=) 18: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: 4Baklu7fz790X3t+DnvBTOz3bpmb9db78d+W2Rsz46U=) 19: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: vz5Z9nbhArLFUDa6lBQHIH/+PVhK9f57JyQYXdb1QBQ=) 20: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: o/tOGxE4Ft5fX3yUC9xv485nnBbYIcg8RYaepJzupC0=) 21: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: uzN3qB5XPrhFucLN2OmQ5NTjj6qYhLZBg4aeWaCRKe4=) 22: 4CF2D3B68C5411EF84ABE03CC4F9AE02.roa (hash: 94Rt3YQOo3z7AHBNPf7mUO8MdNhSBexZLfHTIqNCUWQ=) 23: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: AITRCg2vjnVWNYtFs2RtxbI+uUU9ZjuERKnWghkFVBY=) 24: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: 2MFkWatEYr7ySzuIIVO+LKsoWJa2vp38UqDbLF7GUV8=) 25: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: mSHVgOgebMql2vVyUMQtDn8MbI5cBn29yqk8tb1nlIk=) 26: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: mmR6Uep7EqCu0nzQaonURcP5xC0tMXraR08pUCncH0A=) 27: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: n/BL8NEIAHpYJ0v9wedyUGmzL2t/5O06rDGFVPPDMuI=) 28: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: 6y4Mf6N4wFMfqpPJoLDOmmq0S1UQIMIv6lZqvZ9nJLY=) 29: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: 6cY6Ob6u+QL6WHZfOXxaIiNx2wMqL0gPJlcRnC46fIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9388 (0x24ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Nov 22 15:58:15 2024 GMT Not After : Nov 29 15:58:15 2024 GMT Subject: CN=6740aa18-eba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:28:b9:97:54:a1:83:f6:e9:08:e1:6e:f6: 3b:13:a8:03:b4:18:ed:37:21:0c:65:7a:35:bf:3f: bb:6d:b0:d3:54:97:3d:a2:53:72:67:b0:a6:a6:d1: 14:91:c6:2a:9c:6e:9a:37:e3:de:fa:5f:8a:86:59: dc:1a:d6:29:4c:a3:71:c4:48:3c:ad:e6:3f:80:97: de:6e:26:40:4b:97:b6:5d:fe:be:d2:3b:ef:06:73: 9c:dd:4d:c0:b0:95:52:c8:48:f6:93:1f:cf:80:36: 1b:df:a2:14:8f:29:80:72:cb:b4:ac:12:f2:11:5b: 95:eb:01:85:c8:f9:51:dd:8e:fa:00:ea:d0:09:47: 7a:44:d9:64:a3:5a:cd:8f:d2:0f:ef:5e:e8:58:c6: 5e:00:53:f5:d3:ff:83:a1:e3:16:97:9a:77:3c:b2: bc:49:5d:57:83:33:18:c9:3d:00:77:94:b4:09:b8: 87:cb:d1:18:57:0e:8c:d9:79:9f:2b:6a:a8:6d:b4: 72:fc:22:62:75:bd:a2:85:ed:cd:b5:92:3e:e5:8e: 33:82:dc:47:77:be:a0:b7:5c:b3:84:25:21:f2:58: 81:e5:03:45:ad:ff:da:2f:23:1e:9e:5a:60:7d:3e: c6:2b:3a:ac:85:98:25:41:7c:9c:2d:3b:64:ea:c8: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B7:40:C9:68:00:F2:CB:89:7A:99:B1:38:CC:67:05:38:7A:AE:A0 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:c9:91:65:c9:01:ff:3a:d4:60:ee:22:b8:03:79:65:54: 8d:a6:f1:d0:50:fe:38:f3:8d:db:0e:2d:ab:87:1b:09:23:6e: be:bd:f6:ec:43:62:7b:fe:f3:cd:c1:b5:fa:85:2f:6b:5c:d3: 04:ba:48:83:a1:35:ee:6d:98:ac:cf:0e:7e:9a:9c:54:1d:a1: 1b:a3:af:f5:ed:aa:ff:3f:c6:17:9e:89:23:01:b5:30:f4:c8: 40:ac:91:35:a1:5a:e1:9a:f5:41:87:ec:1f:43:b6:95:91:79: 55:50:89:89:f7:f3:fd:0b:bb:20:7c:4c:41:1e:de:d1:a8:4a: 3a:20:a3:7f:f5:95:92:c1:3c:b1:df:98:0f:84:65:09:0a:6d: 71:2e:d4:9d:c5:84:6c:63:bb:27:17:be:1d:c7:aa:2b:ef:7d: 49:6a:0e:cc:8d:99:64:a8:87:da:34:71:f3:ad:90:c0:ba:e3: ba:1c:ae:b2:62:ea:33:b6:3d:f9:ea:76:b1:c0:6e:4f:6f:98: 2e:0b:49:69:8e:c5:36:42:d0:e9:87:6d:50:4b:8e:2e:63:0e: 2a:a1:fd:c2:1d:7b:a7:a0:9f:78:d2:0e:8b:84:a3:92:2e:a9: 77:20:d6:2e:5e:f5:b0:82:c0:8b:00:84:51:ec:84:d2:f9:b5: 2f:c4:3c:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjQxMTIyMTU1ODE1WhcNMjQxMTI5MTU1ODE1WjAYMRYwFAYD VQQDEw02NzQwYWExOC1lYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIQouZdUoYP26QjhbvY7E6gDtBjtNyEMZXo1vz+7bbDTVJc9olNyZ7CmptEU kcYqnG6aN+Pe+l+KhlncGtYpTKNxxEg8reY/gJfebiZAS5e2Xf6+0jvvBnOc3U3A sJVSyEj2kx/PgDYb36IUjymAcsu0rBLyEVuV6wGFyPlR3Y76AOrQCUd6RNlko1rN j9IP717oWMZeAFP10/+DoeMWl5p3PLK8SV1XgzMYyT0Ad5S0CbiHy9EYVw6M2Xmf K2qobbRy/CJidb2ihe3NtZI+5Y4zgtxHd76gt1yzhCUh8liB5QNFrf/aLyMenlpg fT7GKzqshZglQXycLTtk6sjjkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN23QMlo APLLiXqZsTjMZwU4eq6gMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy9GRTc1NjM0MDAyQ0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBL ejVRS0lveEx3Sk80c2tBQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBilMmRZckB/zrUYO4iuAN5ZVSNpvHQUP44843bDi2rhxsJI26+vfbs Q2J7/vPNwbX6hS9rXNMEukiDoTXubZiszw5+mpxUHaEbo6/17ar/P8YXnokjAbUw 9MhArJE1oVrhmvVBh+wfQ7aVkXlVUImJ9/P9C7sgfExBHt7RqEo6IKN/9ZWSwTyx 35gPhGUJCm1xLtSdxYRsY7snF74dx6or731Jag7MjZlkqIfaNHHzrZDAuuO6HK6y Yuoztj356naxwG5Pb5guC0lpjsU2QtDph21QS44uYw4qof3CHXunoJ940g6LhKOS Lql3INYuXvWwgsCLAIRR7ITS+bUvxDzA -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org