$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: z/rIthGHkfIQIccjdBEZpy6aDATRQdYjCLk2Sr1qjbA= Subject key identifier: C1:CC:98:00:EE:B3:5C:F1:80:87:06:C3:07:32:F5:B8:8D:5D:69:4D Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0B9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0B4A Signing time: Thu 02 May 2024 20:03:49 +0000 Manifest this update: Thu 02 May 2024 20:03:49 +0000 Manifest next update: Thu 09 May 2024 20:03:49 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: v+PJq4iEUdR3ui88EAZQicY+O4Uowx5i497d6DWxL9I=) 2: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: Da7Oq+gy8JjH2/2kLIZfGFO2TVEISlU4H2fgWS1x8V4=) 3: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: 5ix6TXQdDGiTg3sIxgSP6CSbbOhBSuDftWpLz4sc6TI=) 4: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: 6CKNYrxn6uuhIzBVf2WpYIgqxuMLibqV+ZHFdmrqlEY=) 5: F84DF4120E8C11EE89A0B128C4F9AE02.roa (hash: vzRcvU26t6pM9TX7jixNRhU0a87b4yz9peGC5cm/y/U=) 6: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: zEcAoH6Tp/2QV/N0ADzgdcdiJXIraNxY9bGSgI8p4Ow=) 7: 082742FCD23B11EB8E7BA35DC4F9AE02.roa (hash: lpOmpTSPywGCuwJbtcbPpb+g5bAej18u+xB1ckkmSRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2975 (0xb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: May 2 20:03:49 2024 GMT Not After : May 9 20:03:49 2024 GMT Subject: CN=6633f1a5-d874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:32:ee:9f:91:fe:9c:4a:28:c0:84:ea:c9: 5e:04:61:ca:67:ab:64:02:88:af:72:38:de:0f:d4: b6:ac:0a:c5:19:10:96:8e:74:56:5b:70:a5:90:88: 89:bf:36:bc:58:0d:32:95:ac:ff:04:f5:93:b9:f2: 26:92:4c:75:a6:bb:04:13:32:33:9e:64:ef:92:16: 3a:c8:3b:36:0f:4a:bd:1e:cb:30:58:f8:71:b2:55: f3:ee:65:92:38:11:5d:89:e7:4e:96:e7:e5:ab:65: 59:73:a6:fd:97:5e:84:6a:e0:d5:a8:04:9d:9f:19: c1:2b:96:69:4f:73:ee:c4:60:6c:e9:14:d3:c6:a6: b7:88:37:95:f5:7a:87:e2:82:2f:f0:cb:75:8a:af: df:62:fb:1f:74:78:57:d9:12:80:9f:61:03:fb:ce: 4e:e2:45:b9:df:18:df:62:bf:36:ab:2c:6b:70:f7: a7:ab:f1:f5:e4:da:a6:bd:65:6f:e4:1c:05:93:36: 2b:41:c5:51:f2:fd:ea:fe:7e:9b:47:dd:5c:be:08: 13:9d:ac:d4:21:2e:34:c6:a9:d1:34:7c:16:e3:9e: 47:56:44:2f:2f:bf:1b:68:d0:72:06:f4:0a:52:68: 26:59:ea:9a:d6:3f:60:cd:e6:91:a2:36:72:ec:8a: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CC:98:00:EE:B3:5C:F1:80:87:06:C3:07:32:F5:B8:8D:5D:69:4D X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e1:9c:23:ad:9b:52:5a:6c:09:c0:90:15:4e:78:37:60:71: a6:c0:9a:90:40:ae:96:ec:d6:c8:08:a3:51:28:fb:e6:11:90: 38:93:41:b3:4f:2c:aa:af:c4:79:71:e8:79:8d:fb:ec:2f:0e: 9f:6e:87:b1:7c:4e:ca:77:c7:58:a0:53:53:1d:70:00:c0:e0: 37:08:16:85:c0:79:17:d5:69:b4:2e:65:27:9b:09:b2:70:cd: 00:be:52:38:6f:cf:7b:c3:a3:80:4f:37:86:dd:d5:3e:84:ad: ad:2a:98:3a:98:e1:65:96:2a:36:6c:d4:fe:ec:82:a5:42:ee: 2e:88:6b:52:54:93:0c:34:eb:f7:2c:80:83:ed:6e:1e:f0:1d: 6a:9b:25:aa:b5:d1:0d:3b:87:b7:21:2a:59:f2:16:4d:c1:af: 3e:6e:c0:b5:cb:ef:17:60:42:b1:c7:b7:cc:45:87:c1:48:e8: cc:0a:1f:fe:48:5b:02:08:89:5d:29:20:52:7b:84:a8:39:b5: 2c:73:5a:cf:44:3d:fe:93:ea:cb:12:8b:8f:36:16:c9:3a:ae: 9b:d6:dc:f4:35:ce:51:0c:62:96:1a:ef:d3:c8:28:cb:eb:48: 2d:5e:bb:1b:eb:92:91:e1:df:3a:24:14:4c:a3:b5:4b:6f:bd: 0e:29:b3:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjQwNTAyMjAwMzQ5WhcNMjQwNTA5MjAwMzQ5WjAYMRYwFAYD VQQDEw02NjMzZjFhNS1kODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPMy7p+R/pxKKMCE6sleBGHKZ6tkAoivcjjeD9S2rArFGRCWjnRWW3ClkIiJ vza8WA0ylaz/BPWTufImkkx1prsEEzIznmTvkhY6yDs2D0q9HsswWPhxslXz7mWS OBFdiedOluflq2VZc6b9l16EauDVqASdnxnBK5ZpT3PuxGBs6RTTxqa3iDeV9XqH 4oIv8Mt1iq/fYvsfdHhX2RKAn2ED+85O4kW53xjfYr82qyxrcPenq/H15NqmvWVv 5BwFkzYrQcVR8v3q/n6bR91cvggTnazUIS40xqnRNHwW455HVkQvL78baNByBvQK UmgmWeqa1j9gzeaRojZy7IoOswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHMmADu s1zxgIcGwwcy9biNXWlNMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf4ZwjrZtSWmwJwJAVTng3YHGmwJqQQK6W7NbICKNRKPvmEZA4k0Gz Tyyqr8R5ceh5jfvsLw6fboexfE7Kd8dYoFNTHXAAwOA3CBaFwHkX1Wm0LmUnmwmy cM0AvlI4b897w6OATzeG3dU+hK2tKpg6mOFllio2bNT+7IKlQu4uiGtSVJMMNOv3 LICD7W4e8B1qmyWqtdENO4e3ISpZ8hZNwa8+bsC1y+8XYEKxx7fMRYfBSOjMCh/+ SFsCCIldKSBSe4SoObUsc1rPRD3+k+rLEouPNhbJOq6b1tz0Nc5RDGKWGu/TyCjL 60gtXrsb65KR4d86JBRMo7VLb70OKbOL -----END CERTIFICATE-----Generated at Thu May 2 22:28:50 2024 by rpki-client on console-ams.rpki-client.org