$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft File: NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft (raw, json) Hash identifier: tLTyDpkHP/g2tri9zRNzHx0GDKMdSNvxhQfDszIFgPc= Subject key identifier: 41:7D:E5:A1:14:CF:6B:C9:DB:4A:B9:2D:5F:3B:FC:7F:D7:81:75:4B Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D Certificate issuer: /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft Manifest number: 65 Signing time: Fri 17 May 2024 07:41:59 +0000 Manifest this update: Fri 17 May 2024 07:41:59 +0000 Manifest next update: Fri 24 May 2024 07:41:59 +0000 Files and hashes: 1: NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl (hash: veeT+JdU3fPyJ0cBi5XIp8n3au+nbTMkIVsOMBC50yU=) 2: 2C4CD10078C011EE90D36F13C4F9AE02.roa (hash: Jfys2C4eSWOalmHAkdo6WoYvtCISlkXq81R5CJTq2MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D Validity Not Before: May 17 07:41:59 2024 GMT Not After : May 24 07:41:59 2024 GMT Subject: CN=66470a47-b0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:f0:ee:b6:f4:7f:40:27:ab:34:46:e1:8b: 9c:e4:26:9c:2c:a0:53:dd:6b:e0:97:d0:f6:5b:5b: a4:6a:2a:f5:85:c8:25:bf:d0:9e:6f:51:ff:3d:56: 25:4a:be:c5:1b:87:05:55:3a:17:ab:38:83:c6:85: 36:4f:47:14:b6:b3:29:27:22:6c:82:32:11:4e:db: 87:f1:b3:a2:f8:3b:cb:bb:8b:65:e7:8f:9d:69:dc: 75:4f:1e:0d:dc:a4:4e:97:66:61:55:8d:43:92:b7: 1d:e7:95:7f:37:db:08:d1:86:8a:2d:5d:76:2b:e8: 4a:32:0a:e9:02:45:84:48:b2:87:8b:5f:8d:4c:38: 53:f7:56:b0:fe:9d:f3:d7:f4:63:16:1b:85:87:90: 54:07:ab:d4:bd:50:85:40:aa:2c:73:89:20:31:45: 22:c8:b4:d8:f0:53:38:25:31:21:a5:61:da:04:ff: fb:1e:13:1b:cc:a3:0f:27:48:0d:d4:50:30:97:84: b9:1c:56:29:c5:0f:c7:2c:45:76:b6:70:49:0d:ed: fa:3d:5a:26:a5:f9:a0:af:bc:6f:7b:9e:76:81:ca: 58:d1:80:98:49:b7:06:25:54:e6:06:fd:28:27:f8: af:a5:d6:01:f8:4e:89:a5:ed:7d:01:05:33:01:a7: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:E5:A1:14:CF:6B:C9:DB:4A:B9:2D:5F:3B:FC:7F:D7:81:75:4B X509v3 Authority Key Identifier: keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d4:8d:c2:18:c2:4b:03:f3:16:ef:7e:7b:10:a2:8b:fd:a6: 39:0b:48:c8:2a:34:fb:30:53:63:97:04:94:8e:e9:61:90:72: c5:8f:5a:83:89:69:97:18:e5:3e:21:54:06:0b:2b:4e:36:9e: d4:6b:dd:b6:c9:9f:fe:05:aa:d6:78:4d:48:e2:00:f7:7d:08: d5:b3:24:71:e7:ce:f8:3e:7e:74:50:15:27:7a:4a:f6:5f:e8: fb:66:87:e3:3d:6f:8f:8a:98:22:e7:d8:a3:bc:bb:d4:fd:6e: e6:f3:68:74:50:94:c9:31:4e:70:e1:27:d5:a7:05:04:da:fa: 88:65:e6:6d:1a:fb:24:97:a9:9d:1f:90:07:32:d1:3f:75:71: 87:12:1f:24:15:17:3a:c0:5d:03:8a:b0:4a:a2:bb:c0:24:8a: b2:f4:4d:c0:8d:53:fe:c1:cc:e5:9f:db:6c:2b:76:8d:68:8a: 55:12:01:41:29:c6:45:c6:85:ae:43:87:66:c1:99:3a:31:55: 3d:64:df:af:27:93:18:f3:59:de:ac:20:74:69:d7:b9:f4:c0: 13:70:34:d3:af:a0:02:2b:88:fd:b8:1a:52:c4:ff:df:c9:3d: 07:d2:2d:75:6e:12:b0:00:4b:4b:92:a8:ec:c0:b8:52:5f:8c: 77:27:5b:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjVEMjExMC8GA1UEBRMoMzQ1MTdDQzI5Rjc0MTY5RkQ3MzZBMkMyNDA2MTlGOEIz MzBGREQ5RDAeFw0yNDA1MTcwNzQxNTlaFw0yNDA1MjQwNzQxNTlaMBgxFjAUBgNV BAMTDTY2NDcwYTQ3LWIwZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUWvDutvR/QCerNEbhi5zkJpwsoFPda+CX0PZbW6RqKvWFyCW/0J5vUf89ViVK vsUbhwVVOherOIPGhTZPRxS2syknImyCMhFO24fxs6L4O8u7i2Xnj51p3HVPHg3c pE6XZmFVjUOStx3nlX832wjRhootXXYr6EoyCukCRYRIsoeLX41MOFP3VrD+nfPX 9GMWG4WHkFQHq9S9UIVAqixziSAxRSLItNjwUzglMSGlYdoE//seExvMow8nSA3U UDCXhLkcVinFD8csRXa2cEkN7fo9Wial+aCvvG97nnaByljRgJhJtwYlVOYG/Sgn +K+l1gH4Toml7X0BBTMBpyoBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQX3loRTP a8nbSrktXzv8f9eBdUswHwYDVR0jBBgwFoAUNFF8wp90Fp/XNqLCQGGfizMP3Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNUQyLzZERjYwMkQwNzhC RjExRUU5M0ZGQjc2NEM0RjlBRTAyL05GRjh3cDkwRnBfWE5xTENRR0dmaXpNUDNa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkZGOHdwOTBGcF9YTnFMQ1FHR2Zpek1QM1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky NUQyLzZERjYwMkQwNzhCRjExRUU5M0ZGQjc2NEM0RjlBRTAyL05GRjh3cDkwRnBf WE5xTENRR0dmaXpNUDNaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB/UjcIYwksD8xbvfnsQoov9pjkLSMgqNPswU2OXBJSO6WGQcsWPWoOJ aZcY5T4hVAYLK042ntRr3bbJn/4FqtZ4TUjiAPd9CNWzJHHnzvg+fnRQFSd6SvZf 6Ptmh+M9b4+KmCLn2KO8u9T9bubzaHRQlMkxTnDhJ9WnBQTa+ohl5m0a+ySXqZ0f kAcy0T91cYcSHyQVFzrAXQOKsEqiu8AkirL0TcCNU/7BzOWf22wrdo1oilUSAUEp xkXGha5Dh2bBmToxVT1k368nkxjzWd6sIHRp17n0wBNwNNOvoAIriP24GlLE/9/J PQfSLXVuErAAS0uSqOzAuFJfjHcnW4E= -----END CERTIFICATE-----Generated at Fri May 17 08:52:51 2024 by rpki-client on console-ams.rpki-client.org