$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: OMgCqzBo4PqnxhSiixaL84/me5KjVAeCieq/aUqiFyw= Subject key identifier: 86:FB:94:72:B4:BB:0A:4E:76:38:30:FF:40:87:97:2F:33:45:70:21 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0C12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0BB8 Signing time: Fri 22 Nov 2024 18:52:17 +0000 Manifest this update: Fri 22 Nov 2024 18:52:16 +0000 Manifest next update: Fri 29 Nov 2024 18:52:16 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: hSblaXZ1ha8YyQzQGOWNrnH6gUj50EyXYTeQdKrMVng=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: CGy5xeA/R04EEe+9BMCjpd9tn/JSS5izmnErdKNLMSk=) 3: 3B84FE56A8DD11EF95A59966C4F9AE02.roa (hash: VKmfv5i+eSAJE895I7T6V3irZF1QAbmZmndIgWhdzpE=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: Da7Oq+gy8JjH2/2kLIZfGFO2TVEISlU4H2fgWS1x8V4=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: 5ix6TXQdDGiTg3sIxgSP6CSbbOhBSuDftWpLz4sc6TI=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: 6CKNYrxn6uuhIzBVf2WpYIgqxuMLibqV+ZHFdmrqlEY=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: zEcAoH6Tp/2QV/N0ADzgdcdiJXIraNxY9bGSgI8p4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3090 (0xc12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Nov 22 18:52:16 2024 GMT Not After : Nov 29 18:52:16 2024 GMT Subject: CN=6740d2e0-f430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:81:38:de:d1:a6:6e:f1:65:b1:96:9a:80:3f: 65:a6:11:b5:0d:a6:13:b8:e1:83:c3:bc:12:c6:74: fc:bb:b1:cf:70:3d:e5:e7:f6:df:8d:9c:da:d6:c5: 22:56:f8:4a:69:54:70:70:4d:a7:6b:0e:f1:c3:0b: 12:30:0a:95:61:b4:43:5c:6a:42:93:50:41:6e:b9: 4f:3a:d5:51:6c:9a:eb:c7:49:53:6d:90:cb:0d:46: ec:66:81:41:e5:7f:12:6f:a2:dd:d8:b8:6d:88:18: b1:c5:09:39:17:3a:de:58:95:24:a7:bd:da:22:8c: 6d:ea:50:d3:0c:87:38:75:c6:92:0e:53:1d:c1:e4: 03:67:72:e9:ca:24:b3:19:d4:46:cc:f6:ed:c3:12: cc:d4:2f:f4:60:25:7c:77:10:9b:19:cd:26:f3:4c: 85:dc:8e:aa:e2:34:36:d9:2b:0d:00:0a:cb:9c:13: 56:5a:5e:2c:9e:5d:b5:21:4c:7b:58:d7:78:6e:e4: 73:a8:a2:fa:15:e6:41:e8:c5:df:33:c5:77:45:18: 92:65:49:49:ba:b1:78:44:90:44:f2:64:2c:7c:c0: 42:b7:4c:2f:63:d1:f6:29:e5:27:d1:fa:39:59:bd: 95:84:cf:0f:82:8c:cf:07:9c:eb:1f:62:14:9e:6f: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FB:94:72:B4:BB:0A:4E:76:38:30:FF:40:87:97:2F:33:45:70:21 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:87:c7:ec:d3:18:8f:89:ad:7c:14:eb:3f:34:40:97:50:e2: 23:ed:96:b1:4a:a0:3a:0d:db:b9:4e:dc:7b:82:8c:b6:3a:05: 5a:69:0b:72:12:70:a1:08:de:7b:85:97:84:a5:0e:73:a5:df: 35:e1:50:69:73:49:3d:eb:50:d3:ba:e6:a7:e9:97:b4:00:20: 1e:6d:ed:6a:0c:ea:ce:c4:c6:c1:5b:df:e7:ae:e9:d0:99:08: 11:7e:37:cd:3c:ee:58:8f:0d:d2:b9:5a:78:a2:d6:d3:99:be: bd:7a:5e:f4:c1:49:a5:fa:72:9e:c8:c0:28:64:62:a9:42:36: e5:90:80:f4:83:8f:e6:d7:2d:6f:92:f5:fa:69:ae:aa:7b:f7: c4:7b:db:4e:83:f0:0a:5b:65:6d:84:62:bf:34:88:2e:19:09: 88:37:57:03:93:40:3a:fd:0b:b4:45:e5:08:d7:8b:ac:f2:e4: 2e:81:e6:65:7e:dc:41:b0:61:02:e5:2b:fc:1c:c9:40:d7:59: 61:e7:8c:e1:15:59:49:16:e2:83:dd:c5:bf:4b:4f:a7:53:25: e9:f7:0a:4d:e6:67:7e:03:87:6f:7f:92:5f:67:ae:f0:67:2d: 82:63:f6:f3:4f:55:91:4f:9d:27:dd:16:4e:93:6e:28:69:66: d2:d6:16:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjQxMTIyMTg1MjE2WhcNMjQxMTI5MTg1MjE2WjAYMRYwFAYD VQQDEw02NzQwZDJlMC1mNDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/4E43tGmbvFlsZaagD9lphG1DaYTuOGDw7wSxnT8u7HPcD3l5/bfjZza1sUi VvhKaVRwcE2naw7xwwsSMAqVYbRDXGpCk1BBbrlPOtVRbJrrx0lTbZDLDUbsZoFB 5X8Sb6Ld2LhtiBixxQk5FzreWJUkp73aIoxt6lDTDIc4dcaSDlMdweQDZ3LpyiSz GdRGzPbtwxLM1C/0YCV8dxCbGc0m80yF3I6q4jQ22SsNAArLnBNWWl4snl21IUx7 WNd4buRzqKL6FeZB6MXfM8V3RRiSZUlJurF4RJBE8mQsfMBCt0wvY9H2KeUn0fo5 Wb2VhM8PgozPB5zrH2IUnm/M+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb7lHK0 uwpOdjgw/0CHly8zRXAhMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2h8fs0xiPia18FOs/NECXUOIj7ZaxSqA6Ddu5Ttx7goy2OgVaaQty EnChCN57hZeEpQ5zpd814VBpc0k961DTuuan6Ze0ACAebe1qDOrOxMbBW9/nrunQ mQgRfjfNPO5Yjw3SuVp4otbTmb69el70wUml+nKeyMAoZGKpQjblkID0g4/m1y1v kvX6aa6qe/fEe9tOg/AKW2VthGK/NIguGQmIN1cDk0A6/Qu0ReUI14us8uQugeZl ftxBsGEC5Sv8HMlA11lh54zhFVlJFuKD3cW/S0+nUyXp9wpN5md+A4dvf5JfZ67w Zy2CY/bzT1WRT50n3RZOk24oaWbS1hZ3 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org