$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft File: NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft (raw, json) Hash identifier: hS07KnEs06GMWchjVakUf7E30MjRHt2TzDoRLbqkhN0= Subject key identifier: E4:98:85:21:F4:1A:26:B6:C0:62:7A:B2:0A:7D:E7:25:43:9D:A4:FF Authority key identifier: 35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED Certificate issuer: /CN=A918779B/serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft Manifest number: 1605 Signing time: Fri 22 Nov 2024 17:29:49 +0000 Manifest this update: Fri 22 Nov 2024 17:29:48 +0000 Manifest next update: Fri 29 Nov 2024 17:29:48 +0000 Files and hashes: 1: NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl (hash: nzFVXUeVlvAb+8GPO65QkGrebi9Iw4KBzht9bZGzsq8=) 2: 8C6A656045C211EE9E812B5BC4F9AE02.roa (hash: xSUotL3uRXaGILcmrFgVpQdPIOl2eEJeK9qN7+ax0sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B/serialNumber=356FEDFC1512FB8826075F0D62600E40AD8E7AED Validity Not Before: Nov 22 17:29:48 2024 GMT Not After : Nov 29 17:29:48 2024 GMT Subject: CN=6740bf8d-298a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0c:a8:1e:2d:5c:ad:27:ad:45:ff:d0:35:7a: 0e:28:5d:e8:3c:ec:d7:06:fe:f6:56:54:aa:98:36: 89:1f:01:9a:34:7e:d4:d9:2d:f3:ab:ae:50:fd:ec: 3f:de:5d:c0:0e:89:22:70:00:1b:b6:af:dd:bd:30: 90:81:ce:0b:82:55:c3:95:b6:d8:cc:6f:54:e2:8f: 03:43:65:fc:18:ac:35:24:8a:ac:cf:56:4e:94:71: f4:7d:c5:b1:21:1e:48:4d:44:4c:88:02:40:e4:c9: 77:0d:f0:6e:30:34:53:ba:e6:a7:f5:82:54:46:66: 7f:09:f9:93:f6:39:c5:87:91:66:0d:79:b2:34:5e: 00:f2:51:98:36:ce:ed:e0:7e:d2:eb:a9:8a:72:03: a3:c4:30:7c:34:6b:2f:1a:57:8e:fc:ea:10:7e:90: 3d:d2:f0:5d:48:ad:df:7f:3e:d8:4e:54:12:0c:3d: 28:28:49:2b:76:f6:25:a2:e6:7f:6e:69:13:1a:02: 4f:ae:82:78:6b:bc:eb:8d:04:95:69:25:fa:7c:13: 43:2c:54:91:d5:ce:63:5c:97:33:f1:77:97:33:1f: b3:07:88:a8:cf:31:21:01:55:77:50:84:85:49:8d: 42:6c:a2:06:aa:60:f2:be:43:17:e5:41:c8:a1:00: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:98:85:21:F4:1A:26:B6:C0:62:7A:B2:0A:7D:E7:25:43:9D:A4:FF X509v3 Authority Key Identifier: keyid:35:6F:ED:FC:15:12:FB:88:26:07:5F:0D:62:60:0E:40:AD:8E:7A:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NW_t_BUS-4gmB18NYmAOQK2Oeu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/NW_t_BUS-4gmB18NYmAOQK2Oeu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5e:96:39:eb:46:c6:49:59:53:25:39:9e:e1:66:d2:3c:1a: 09:7f:09:ea:ef:a7:1e:1c:b6:d3:79:99:29:ed:63:b4:b2:82: 3f:2f:f7:13:dc:99:2d:c7:03:31:58:f1:2f:08:4c:30:a1:c8: 78:c9:4b:07:8b:0e:72:1a:67:c5:63:51:b8:c7:ad:15:46:be: c3:eb:37:7b:55:c0:e5:d4:05:c1:51:d9:c6:7e:01:cd:25:d8: 93:fa:e6:ca:1d:18:2a:2d:e3:3d:05:5f:10:43:83:68:c3:f6: e3:d9:6b:9c:31:3c:44:5e:f3:dd:57:5c:27:66:84:79:9b:40: fc:fc:1b:4c:86:c0:2e:e5:0f:63:69:97:9a:25:c2:4a:69:8e: 01:36:cb:f3:2c:0a:ca:09:9e:c7:32:5f:82:57:a4:b4:f8:b7: 36:b0:fd:74:ec:e0:26:6b:cc:1b:59:5d:c5:73:ae:68:b2:2f: 46:b3:47:92:01:fa:c8:e2:3d:a1:c5:c3:c9:f7:1c:bb:e1:28: d7:8c:e2:b0:38:b7:2b:cb:40:c6:49:60:a1:1b:9f:f8:99:fb: 35:27:55:3a:b2:61:ca:33:9c:cc:f8:98:f1:c7:43:2a:ff:8b: e6:50:eb:5a:f0:ad:e1:2b:57:3f:81:12:a5:b3:0a:c7:b5:16: c5:aa:bc:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDM1NkZFREZDMTUxMkZCODgyNjA3NUYwRDYyNjAwRTQw QUQ4RTdBRUQwHhcNMjQxMTIyMTcyOTQ4WhcNMjQxMTI5MTcyOTQ4WjAYMRYwFAYD VQQDEw02NzQwYmY4ZC0yOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAyoHi1crSetRf/QNXoOKF3oPOzXBv72VlSqmDaJHwGaNH7U2S3zq65Q/ew/ 3l3ADokicAAbtq/dvTCQgc4LglXDlbbYzG9U4o8DQ2X8GKw1JIqsz1ZOlHH0fcWx IR5ITURMiAJA5Ml3DfBuMDRTuuan9YJURmZ/CfmT9jnFh5FmDXmyNF4A8lGYNs7t 4H7S66mKcgOjxDB8NGsvGleO/OoQfpA90vBdSK3ffz7YTlQSDD0oKEkrdvYlouZ/ bmkTGgJProJ4a7zrjQSVaSX6fBNDLFSR1c5jXJcz8XeXMx+zB4iozzEhAVV3UISF SY1CbKIGqmDyvkMX5UHIoQAdiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSYhSH0 Gia2wGJ6sgp95yVDnaT/MB8GA1UdIwQYMBaAFDVv7fwVEvuIJgdfDWJgDkCtjnrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9OV190X0JVUy00Z21CMThOWW1BT1FLMk9l dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05XX3RfQlVTLTRnbUIxOE5ZbUFPUUsyT2V1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9OV190X0JVUy00 Z21CMThOWW1BT1FLMk9ldTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzXpY560bGSVlTJTme4WbSPBoJfwnq76ceHLbTeZkp7WO0soI/L/cT 3JktxwMxWPEvCEwwoch4yUsHiw5yGmfFY1G4x60VRr7D6zd7VcDl1AXBUdnGfgHN JdiT+ubKHRgqLeM9BV8QQ4Now/bj2WucMTxEXvPdV1wnZoR5m0D8/BtMhsAu5Q9j aZeaJcJKaY4BNsvzLArKCZ7HMl+CV6S0+Lc2sP107OAma8wbWV3Fc65osi9Gs0eS AfrI4j2hxcPJ9xy74SjXjOKwOLcry0DGSWChG5/4mfs1J1U6smHKM5zM+Jjxx0Mq /4vmUOta8K3hK1c/gRKlswrHtRbFqrzV -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org