$ rpki-client -vvf rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft File: ntLhokBcme5158OQPfckDKqr-yU.mft (raw, json) Hash identifier: Ah2w7x6q5FNpbGC6nFzJigMdfZKx4k/6BJNymvsTjIc= Subject key identifier: 61:96:FC:BB:EE:0B:75:F2:B6:5F:E1:FD:4B:37:FE:9A:CD:94:86:A7 Authority key identifier: 9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25 Certificate issuer: /CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25 Certificate serial: 0A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft Manifest number: 09F8 Signing time: Fri 22 Nov 2024 19:39:24 +0000 Manifest this update: Fri 22 Nov 2024 19:39:24 +0000 Manifest next update: Fri 29 Nov 2024 19:39:24 +0000 Files and hashes: 1: ntLhokBcme5158OQPfckDKqr-yU.crl (hash: Dqqu8z4QOYTHp67GranamV8HqlQVM/KnzxQ6pXFsfFk=) 2: AD47EF027F2511EBA072E644C4F9AE02.roa (hash: L2rSWyT7U6NBRQEU8jk8q2T+Vq9Had5EEUoPhXuWAi4=) 3: 7CFFFCEEA18D11EE84DFAF0EC4F9AE02.roa (hash: wPsx9Tq8nhzprRZSFepMrjHo0pJom7iMBA5mXF1c33Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.crl rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25 Validity Not Before: Nov 22 19:39:24 2024 GMT Not After : Nov 29 19:39:24 2024 GMT Subject: CN=6740ddec-898e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c7:0c:f0:86:98:46:d0:90:11:4e:a6:e5:fb: 69:54:36:31:55:b0:1f:23:21:ed:14:fa:18:07:9f: 15:6a:7e:67:4f:18:73:d5:74:7c:66:85:af:a0:53: 36:39:c8:fb:7d:7a:4e:7e:bc:e0:b2:b2:96:a3:3d: a4:66:fe:67:40:1d:1a:37:59:7b:59:18:38:fd:74: 7c:fd:27:f5:71:09:db:a7:99:a9:70:12:d5:d5:c9: 48:5e:fd:c9:32:34:97:3d:e1:ac:cd:a5:3b:c6:8a: 3d:52:13:b3:de:3e:81:7c:a7:73:27:30:59:49:2c: 66:97:22:0c:d4:ca:9c:c5:b3:ef:72:28:cf:e1:c1: 15:96:c2:dc:43:9f:e6:f5:0b:78:77:80:37:ac:0c: 13:3c:c2:82:4e:f2:68:f0:5b:1c:3c:ff:a0:a0:95: 5f:d5:e4:c7:ca:b1:2a:cf:50:f1:11:33:63:f6:a0: ef:8d:8f:a9:a5:54:94:02:99:d4:07:6c:61:89:38: 19:de:d7:fc:e2:c4:f3:35:65:dd:18:c5:0c:49:e9: 9d:1a:a9:c5:a7:0a:55:72:d4:e9:7b:63:0c:b9:49: 12:21:26:66:c3:b1:19:d0:5b:07:a7:4a:94:dc:81: c1:7c:dc:e0:4a:6b:51:d2:8c:58:03:28:91:47:dd: 21:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:96:FC:BB:EE:0B:75:F2:B6:5F:E1:FD:4B:37:FE:9A:CD:94:86:A7 X509v3 Authority Key Identifier: keyid:9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ca:7a:37:58:b6:9f:3a:2a:44:31:c3:fa:1f:26:bc:7a:8a: 99:fd:5b:24:36:2b:62:3a:07:2c:47:7c:b8:49:1b:16:08:21: 27:7a:3b:64:22:15:78:e8:c1:b4:b2:ad:3d:a4:67:e9:ec:be: d4:aa:2f:c9:57:2e:01:43:82:33:ab:3c:5f:47:46:b2:1c:66: 87:b5:92:2a:ef:46:f6:bb:67:a0:fe:b4:7e:e3:44:02:16:31: 98:36:01:ec:86:66:35:24:e2:6f:99:2f:79:34:f6:dd:80:26: f6:99:b8:c4:81:59:e7:24:c1:63:07:e9:0e:c1:97:4c:f8:97: 22:b3:e5:99:33:26:38:dd:30:fe:bf:19:ac:51:22:3a:fe:32: cd:89:81:db:f2:5d:bb:79:f5:28:81:36:b3:b3:4c:8b:a2:17: 60:60:c2:87:84:c0:42:3b:cf:c9:90:94:11:f5:4b:e5:b6:4c: ce:0f:cf:fe:ae:63:fe:18:57:6e:4e:27:13:7f:ba:fa:53:ea: 0e:df:06:7b:6f:89:a0:4f:75:5a:2e:f3:15:0e:3d:0f:8c:9e: ee:78:85:7f:90:29:f0:9e:51:3e:60:2e:ea:44:42:c5:80:e1: 1e:cd:33:71:75:7d:7b:a3:22:63:2c:46:ae:dc:b8:e9:ef:55: 3d:2c:c3:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk4RjAxMTAvBgNVBAUTKDlFRDJFMUEyNDA1Qzk5RUU3NUU3QzM5MDNERjcyNDBD QUFBQkZCMjUwHhcNMjQxMTIyMTkzOTI0WhcNMjQxMTI5MTkzOTI0WjAYMRYwFAYD VQQDEw02NzQwZGRlYy04OThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0scM8IaYRtCQEU6m5ftpVDYxVbAfIyHtFPoYB58Van5nTxhz1XR8ZoWvoFM2 Ocj7fXpOfrzgsrKWoz2kZv5nQB0aN1l7WRg4/XR8/Sf1cQnbp5mpcBLV1clIXv3J MjSXPeGszaU7xoo9UhOz3j6BfKdzJzBZSSxmlyIM1MqcxbPvcijP4cEVlsLcQ5/m 9Qt4d4A3rAwTPMKCTvJo8FscPP+goJVf1eTHyrEqz1DxETNj9qDvjY+ppVSUApnU B2xhiTgZ3tf84sTzNWXdGMUMSemdGqnFpwpVctTpe2MMuUkSISZmw7EZ0FsHp0qU 3IHBfNzgSmtR0oxYAyiRR90h8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGW/Lvu C3Xytl/h/Us3/prNlIanMB8GA1UdIwQYMBaAFJ7S4aJAXJnudefDkD33JAyqq/sl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOThGMC84QTFBRTFGNDY3 MkMxMUVBODM5M0RGMjVDNEY5QUUwMi9udExob2tCY21lNTE1OE9RUGZja0RLcXIt eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250TGhva0JjbWU1MTU4T1FQZmNrREtxci15VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OThGMC84QTFBRTFGNDY3MkMxMUVBODM5M0RGMjVDNEY5QUUwMi9udExob2tCY21l NTE1OE9RUGZja0RLcXIteVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFyno3WLafOipEMcP6Hya8eoqZ/VskNitiOgcsR3y4SRsWCCEnejtk IhV46MG0sq09pGfp7L7Uqi/JVy4BQ4IzqzxfR0ayHGaHtZIq70b2u2eg/rR+40QC FjGYNgHshmY1JOJvmS95NPbdgCb2mbjEgVnnJMFjB+kOwZdM+Jcis+WZMyY43TD+ vxmsUSI6/jLNiYHb8l27efUogTazs0yLohdgYMKHhMBCO8/JkJQR9UvltkzOD8/+ rmP+GFduTicTf7r6U+oO3wZ7b4mgT3VaLvMVDj0PjJ7ueIV/kCnwnlE+YC7qRELF gOEezTNxdX17oyJjLEau3Ljp71U9LMOY -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org