$ rpki-client -vvf rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft File: ntLhokBcme5158OQPfckDKqr-yU.mft (raw, json) Hash identifier: fPZk+yXMENJjp59Cv7pxBUBArugeKlGJeoOm89QjTzU= Subject key identifier: DB:1F:A7:F0:BF:CE:F0:99:83:8A:6B:DC:88:C3:83:8B:66:4B:A6:D0 Authority key identifier: 9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25 Certificate issuer: /CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25 Certificate serial: 09A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft Manifest number: 098E Signing time: Tue 30 Apr 2024 21:17:14 +0000 Manifest this update: Tue 30 Apr 2024 21:17:14 +0000 Manifest next update: Tue 07 May 2024 21:17:14 +0000 Files and hashes: 1: ntLhokBcme5158OQPfckDKqr-yU.crl (hash: 9Ei6N1Nv1j3JgTV3dGzfOy1UqfgL9ukx1z3JdUIjKGA=) 2: AD47EF027F2511EBA072E644C4F9AE02.roa (hash: z6+2v3/pdLwPsBIrNEcAABTvCzYvsvoWXQtis5ZZToM=) 3: 7CFFFCEEA18D11EE84DFAF0EC4F9AE02.roa (hash: lIN4SzXOUw4yTZWxf0fMT5RgJ2aNx7m1qdP/rdroWrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.crl rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2465 (0x9a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25 Validity Not Before: Apr 30 21:17:14 2024 GMT Not After : May 7 21:17:14 2024 GMT Subject: CN=66315fda-bfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:97:70:15:bb:3b:b9:3b:11:69:f0:d2:e9: d0:9e:9b:4e:48:3d:dd:3b:e5:d2:93:0d:ed:09:79: 10:60:ef:6d:9a:79:0c:3b:08:8c:4e:47:79:22:54: 18:54:39:87:88:51:82:9a:bd:61:72:bd:9a:5d:40: 82:ff:ea:87:ca:64:d3:01:19:63:ec:78:c1:21:74: ec:18:6d:af:14:bc:3a:6d:f3:38:6d:e2:73:6f:b5: 82:f6:ef:a0:44:37:1e:ee:58:d8:6e:6e:14:90:60: 9b:59:cc:78:61:1b:9c:d8:29:8b:c7:ad:ee:00:2a: 2a:1d:a7:a5:6e:ab:22:80:42:64:66:33:01:f5:4a: 81:a8:d4:e9:e0:6d:d1:f8:0b:59:25:4b:49:91:d9: 30:61:ae:73:55:2a:0b:75:6b:5c:63:b0:a3:13:db: f3:81:db:37:0e:ed:2d:cc:2d:f7:59:6f:1d:89:b4: af:4b:6a:f8:90:55:2a:cd:f5:17:96:3e:6e:97:4a: cb:cb:e7:51:75:80:5b:35:73:39:cf:42:54:80:e0: 7a:3f:b5:1b:03:74:55:a1:2f:f0:97:3c:3e:d7:01: ad:71:fa:23:b9:6f:ea:b3:33:3f:21:20:03:e1:11: 01:c2:af:49:c8:f6:84:c8:15:09:44:95:06:4a:6e: 93:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1F:A7:F0:BF:CE:F0:99:83:8A:6B:DC:88:C3:83:8B:66:4B:A6:D0 X509v3 Authority Key Identifier: keyid:9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b3:ad:b9:c8:08:92:ca:4b:6f:58:a8:ff:77:98:32:80:0a: 41:87:b3:e8:71:ac:67:8c:c5:46:04:5c:ed:3c:13:0b:39:a5: 2d:5c:78:47:17:e6:2e:19:8d:ed:81:b7:8e:e6:7a:50:3e:75: 5b:af:51:83:7b:f4:d1:74:04:8f:f0:c8:3c:27:53:b8:af:c0: 26:32:a7:65:fb:31:7e:b7:5a:e6:6a:fe:60:f0:cb:02:a7:2e: 11:f8:12:57:26:1f:a0:62:57:65:21:f4:0a:93:32:0b:83:1d: 45:b0:67:e1:69:5e:cf:70:81:7a:e1:32:5b:31:48:e0:42:28: 8d:5f:08:17:15:78:bc:25:46:e8:2f:02:d1:a1:f8:3f:bd:65: 6b:08:af:bb:df:7a:ef:2f:78:03:fe:09:68:d6:16:de:b0:b1: b6:be:8c:2f:33:a2:2a:a8:87:ad:e0:6c:03:f1:b4:70:3a:58: 95:bf:eb:30:0b:4e:c2:7a:14:98:cc:f5:eb:ad:77:34:a4:c6: cf:fc:d4:d1:20:b7:09:a3:27:db:f1:5e:ae:58:55:28:eb:e1: e4:5f:41:c4:04:f8:01:b3:c6:78:4a:fd:e0:f2:91:cc:a9:78: 38:03:e5:14:0d:1b:f0:c0:00:26:e1:be:01:cd:49:4b:3a:12: 85:77:42:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk4RjAxMTAvBgNVBAUTKDlFRDJFMUEyNDA1Qzk5RUU3NUU3QzM5MDNERjcyNDBD QUFBQkZCMjUwHhcNMjQwNDMwMjExNzE0WhcNMjQwNTA3MjExNzE0WjAYMRYwFAYD VQQDEw02NjMxNWZkYS1iZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26WXcBW7O7k7EWnw0unQnptOSD3dO+XSkw3tCXkQYO9tmnkMOwiMTkd5IlQY VDmHiFGCmr1hcr2aXUCC/+qHymTTARlj7HjBIXTsGG2vFLw6bfM4beJzb7WC9u+g RDce7ljYbm4UkGCbWcx4YRuc2CmLx63uACoqHaelbqsigEJkZjMB9UqBqNTp4G3R +AtZJUtJkdkwYa5zVSoLdWtcY7CjE9vzgds3Du0tzC33WW8dibSvS2r4kFUqzfUX lj5ul0rLy+dRdYBbNXM5z0JUgOB6P7UbA3RVoS/wlzw+1wGtcfojuW/qszM/ISAD 4REBwq9JyPaEyBUJRJUGSm6TnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsfp/C/ zvCZg4pr3IjDg4tmS6bQMB8GA1UdIwQYMBaAFJ7S4aJAXJnudefDkD33JAyqq/sl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOThGMC84QTFBRTFGNDY3 MkMxMUVBODM5M0RGMjVDNEY5QUUwMi9udExob2tCY21lNTE1OE9RUGZja0RLcXIt eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250TGhva0JjbWU1MTU4T1FQZmNrREtxci15VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OThGMC84QTFBRTFGNDY3MkMxMUVBODM5M0RGMjVDNEY5QUUwMi9udExob2tCY21l NTE1OE9RUGZja0RLcXIteVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZs625yAiSyktvWKj/d5gygApBh7PocaxnjMVGBFztPBMLOaUtXHhH F+YuGY3tgbeO5npQPnVbr1GDe/TRdASP8Mg8J1O4r8AmMqdl+zF+t1rmav5g8MsC py4R+BJXJh+gYldlIfQKkzILgx1FsGfhaV7PcIF64TJbMUjgQiiNXwgXFXi8JUbo LwLRofg/vWVrCK+733rvL3gD/glo1hbesLG2vowvM6IqqIet4GwD8bRwOliVv+sw C07CehSYzPXrrXc0pMbP/NTRILcJoyfb8V6uWFUo6+HkX0HEBPgBs8Z4Sv3g8pHM qXg4A+UUDRvwwAAm4b4BzUlLOhKFd0IO -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:18 2024 by rpki-client on console-fra.rpki-client.org