$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: 3IyV7rQS4H2xhez16O7EhOVBawROHUl6+TaNhLiaZws= Subject key identifier: 55:B9:05:94:5C:BF:EA:84:EE:DF:FC:9B:62:21:7B:E5:63:12:4F:EF Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0AA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0A9A Signing time: Thu 02 May 2024 20:16:53 +0000 Manifest this update: Thu 02 May 2024 20:16:53 +0000 Manifest next update: Thu 09 May 2024 20:16:53 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: GWn+B7DQmRn3Cgs+exf0WMkZUQSwF6FTQNuxPh0QXLM=) 2: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: yDufJXufAMETisXbFvpnQ3a1k2Wn60TOyOnkemkwgEg=) 3: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: mhtlL/9IwO2U7Cm3tnQ6f0X8LzgIxwGszfyHNQNqAyk=) 4: E5675F48336E11EA94623E18C4F9AE02.roa (hash: IKLPiPB24hMmBTYNbmsAB+c/092wl/g7u5VhBuX71Zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: May 2 20:16:53 2024 GMT Not After : May 9 20:16:53 2024 GMT Subject: CN=6633f4b5-54a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:a9:25:b9:ff:0b:e5:b2:24:6b:1e:41:b8: f9:e5:3c:72:59:8d:c7:0c:54:88:2c:95:e2:08:e8: dc:3e:88:e2:c5:4e:3f:57:4d:49:39:2f:18:09:64: 0e:63:73:a6:2f:ba:47:b4:44:d6:c2:2d:1b:04:7d: 64:47:dc:36:79:4c:ec:36:aa:32:11:d2:2f:13:a4: c8:ed:6e:48:51:e4:c9:6a:b3:9b:58:0c:c3:5c:ef: 19:42:3c:fc:35:4d:55:82:2a:65:3d:36:aa:d3:c7: e0:c4:dd:17:07:d6:ae:d9:a0:96:73:4f:c7:25:39: 7a:77:21:2f:20:c2:82:5f:5a:56:02:1c:e7:71:ba: ac:fc:7b:52:52:8c:21:4c:40:a3:be:b4:ee:35:18: 44:62:47:96:30:17:a3:bb:1d:d0:c1:d6:7c:51:f0: 3e:36:19:d1:4a:28:89:23:7b:d9:c1:f4:f8:33:d6: b9:30:09:e7:d4:e2:90:a8:19:d4:4a:4f:61:06:4d: e2:49:8f:2d:50:65:34:ef:d9:86:eb:d6:e2:d5:9a: d3:16:d1:e7:aa:65:07:ce:19:39:0e:2c:34:d4:a1: b6:a8:50:dc:47:db:5c:d5:c2:c8:c1:74:f3:f6:d3: 4e:b9:85:ab:16:77:0e:e6:99:0f:91:62:d2:ce:ef: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B9:05:94:5C:BF:EA:84:EE:DF:FC:9B:62:21:7B:E5:63:12:4F:EF X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:6f:7e:60:30:4d:ea:7c:01:77:8d:9e:26:94:a7:02:27:23: 29:2b:d3:6b:91:e5:e6:95:7d:85:ab:e8:90:8b:26:42:c9:3a: 84:c8:3b:f6:d8:01:5b:01:2d:08:b5:66:0f:44:ee:cc:ca:d5: 8f:78:38:d6:d8:11:bd:e7:be:1a:87:81:e3:58:17:23:9e:06: 0b:7a:17:4d:c7:f6:cb:d3:00:1d:cf:eb:91:8d:12:14:dc:3b: 70:32:dc:a0:03:7c:ab:12:37:26:c3:5f:d2:62:9b:1e:b1:ae: c7:ec:97:78:e0:7b:7b:d4:c8:88:b6:63:1a:74:e7:6e:77:20: c4:a8:29:3c:d0:e0:56:e2:92:05:53:c6:15:43:51:03:7b:4c: 35:36:f0:23:44:9e:61:f7:f4:b9:47:b1:4f:45:e1:d4:43:20: 0d:29:8a:7b:5f:88:ee:bc:61:e8:75:e9:3a:e6:de:9e:6e:4c: 7f:1a:af:66:b5:ee:f6:6c:72:db:30:d1:24:e3:03:d2:07:33: 8e:b3:b3:07:ca:4c:f7:0e:35:8f:0e:e5:e0:be:7d:f8:44:35: 77:49:30:8d:3c:0e:1b:61:a9:0d:32:e6:ed:68:74:b4:74:28: 19:ec:1f:f1:68:2e:d9:df:dd:87:f3:f8:7b:45:aa:74:34:6b: 84:9a:b8:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjQwNTAyMjAxNjUzWhcNMjQwNTA5MjAxNjUzWjAYMRYwFAYD VQQDEw02NjMzZjRiNS01NGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9ypJbn/C+WyJGseQbj55TxyWY3HDFSILJXiCOjcPojixU4/V01JOS8YCWQO Y3OmL7pHtETWwi0bBH1kR9w2eUzsNqoyEdIvE6TI7W5IUeTJarObWAzDXO8ZQjz8 NU1VgiplPTaq08fgxN0XB9au2aCWc0/HJTl6dyEvIMKCX1pWAhzncbqs/HtSUowh TECjvrTuNRhEYkeWMBejux3QwdZ8UfA+NhnRSiiJI3vZwfT4M9a5MAnn1OKQqBnU Sk9hBk3iSY8tUGU079mG69bi1ZrTFtHnqmUHzhk5Diw01KG2qFDcR9tc1cLIwXTz 9tNOuYWrFncO5pkPkWLSzu8S0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFW5BZRc v+qE7t/8m2Ihe+VjEk/vMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjb35gME3qfAF3jZ4mlKcCJyMpK9NrkeXmlX2Fq+iQiyZCyTqEyDv2 2AFbAS0ItWYPRO7MytWPeDjW2BG9574ah4HjWBcjngYLehdNx/bL0wAdz+uRjRIU 3DtwMtygA3yrEjcmw1/SYpsesa7H7Jd44Ht71MiItmMadOdudyDEqCk80OBW4pIF U8YVQ1EDe0w1NvAjRJ5h9/S5R7FPReHUQyANKYp7X4juvGHodek65t6ebkx/Gq9m te72bHLbMNEk4wPSBzOOs7MHykz3DjWPDuXgvn34RDV3STCNPA4bYakNMubtaHS0 dCgZ7B/xaC7Z392H8/h7Rap0NGuEmrhg -----END CERTIFICATE-----Generated at Thu May 2 22:28:57 2024 by rpki-client on console-ams.rpki-client.org