$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json) Hash identifier: LUUKtHiyNch9lDGranIMLEUahN0h/MN0D9JazvDYltE= Subject key identifier: F2:DF:63:53:84:F5:C6:39:9E:D0:15:7A:75:E8:FF:B2:66:3F:D5:00 Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft Manifest number: 2C Signing time: Sun 15 Sep 2024 10:08:06 +0000 Manifest this update: Sun 15 Sep 2024 10:08:05 +0000 Manifest next update: Sun 22 Sep 2024 10:08:05 +0000 Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: UpL/vtxgznf/gwuEWgqHGpRmPBFSy7Vp8dhSYa6Yjtk=) 2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: eZp2CA+M2VeWLVisSQN2NYrGntfUlIE7QcZK9HLRl2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Validity Not Before: Sep 15 10:08:05 2024 GMT Not After : Sep 22 10:08:05 2024 GMT Subject: CN=66e6b205-2b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:20:82:ad:a6:af:6c:9f:27:ec:86:8f:cf: eb:6b:85:0d:1d:77:f7:7c:98:c8:50:19:4d:81:5d: bc:69:79:65:e8:98:a9:d9:dd:68:7b:8d:db:fd:db: fd:65:43:d0:37:c4:45:71:ca:51:95:0e:e2:2b:80: 12:38:98:cf:ea:b1:a2:27:63:3d:93:c9:43:c6:38: 2f:20:e5:05:a9:4f:b2:9e:8e:c0:6a:e8:39:21:20: 99:e9:df:62:9f:bc:f3:ff:5e:d1:87:ff:4b:8e:d0: 1c:d3:c7:a1:5d:57:8e:50:8d:10:16:0c:1f:f5:bc: 48:f4:ae:21:ba:15:3d:e6:f1:d3:df:9a:7e:a8:14: 29:2d:e5:46:97:1b:49:2d:e1:d6:27:58:59:1c:28: 0c:99:ac:59:3c:9f:f0:00:67:50:de:13:b9:3c:98: 31:f9:36:43:25:5b:c5:cc:79:12:f2:a8:62:0e:2c: fb:33:98:8f:c8:a9:82:c9:08:3b:f5:22:53:48:a6: c4:d0:7c:7c:76:91:9c:ea:00:47:9a:0f:1a:4e:bb: db:89:3a:97:00:b2:1b:30:5d:3d:90:6c:d5:02:26: 8e:fa:57:45:aa:fb:cb:0a:94:6d:c6:d8:b8:95:09: fd:32:81:b4:e3:c1:99:49:b1:a4:11:6e:d2:88:fb: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DF:63:53:84:F5:C6:39:9E:D0:15:7A:75:E8:FF:B2:66:3F:D5:00 X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:8c:a8:f5:8c:09:37:ee:06:e8:4d:4e:5e:bb:21:e9:8c:b1: 82:dc:25:9d:9b:ae:17:1b:0f:45:32:74:4d:31:43:3a:86:04: 93:66:70:c1:8f:38:89:c5:46:59:01:97:f6:e8:39:91:d3:77: c8:4c:7c:e5:8a:50:ae:76:02:4b:7d:7e:19:c0:7b:08:83:24: 2a:b3:14:35:42:41:6f:ae:e0:52:52:eb:89:da:3d:21:35:b0: 37:fb:67:6d:a0:bb:d6:f0:0b:ab:ed:4a:6e:dc:80:37:c0:33: 87:4e:f8:4a:ce:14:52:28:90:5a:a4:25:a8:58:e7:6b:5e:b8: 37:c2:43:3f:2f:d1:47:0c:45:89:25:3a:9c:0d:c8:61:87:13: fd:b3:c7:ea:89:b8:40:be:f2:78:e2:f5:ff:f9:d8:44:f3:0f: f3:5d:31:53:e6:3d:57:21:6b:82:bb:01:d5:ae:3b:64:11:a9: 1a:93:ef:bd:8f:5c:9a:d8:3e:d0:18:c0:ce:f4:db:12:98:34: ab:98:89:88:ca:b5:e2:ee:d5:15:45:34:50:30:79:31:ec:fb: 1e:75:66:25:0e:4a:d9:00:f2:a7:6e:b5:8b:82:f6:23:b6:b1: f2:24:13:ab:29:89:88:b4:c3:1a:49:eb:32:46:19:a3:24:b8: f5:62:35:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0QwQzExMC8GA1UEBRMoMzUyQzJGNDJGRkY2NkNCODZBNjlDNjdFRTYxQkFCNkUx MTE1NEVDQjAeFw0yNDA5MTUxMDA4MDVaFw0yNDA5MjIxMDA4MDVaMBgxFjAUBgNV BAMTDTY2ZTZiMjA1LTJiNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHGyCCraavbJ8n7IaPz+trhQ0dd/d8mMhQGU2BXbxpeWXomKnZ3Wh7jdv92/1l Q9A3xEVxylGVDuIrgBI4mM/qsaInYz2TyUPGOC8g5QWpT7KejsBq6DkhIJnp32Kf vPP/XtGH/0uO0BzTx6FdV45QjRAWDB/1vEj0riG6FT3m8dPfmn6oFCkt5UaXG0kt 4dYnWFkcKAyZrFk8n/AAZ1DeE7k8mDH5NkMlW8XMeRLyqGIOLPszmI/IqYLJCDv1 IlNIpsTQfHx2kZzqAEeaDxpOu9uJOpcAshswXT2QbNUCJo76V0Wq+8sKlG3G2LiV Cf0ygbTjwZlJsaQRbtKI+28vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8t9jU4T1 xjme0BV6dej/smY/1QAwHwYDVR0jBBgwFoAUNSwvQv/2bLhqacZ+5hurbhEVTssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRDBDLzgxOUEwMjM0MzJD QjExRUY5RUEwQzk2QUM0RjlBRTAyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlN3dlF2XzJiTGhxYWNaLTVodXJiaEVWVHNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND RDBDLzgxOUEwMjM0MzJDQjExRUY5RUEwQzk2QUM0RjlBRTAyL05Td3ZRdl8yYkxo cWFjWi01aHVyYmhFVlRzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL6MqPWMCTfuBuhNTl67IemMsYLcJZ2brhcbD0UydE0xQzqGBJNmcMGP OInFRlkBl/boOZHTd8hMfOWKUK52Akt9fhnAewiDJCqzFDVCQW+u4FJS64naPSE1 sDf7Z22gu9bwC6vtSm7cgDfAM4dO+ErOFFIokFqkJahY52teuDfCQz8v0UcMRYkl OpwNyGGHE/2zx+qJuEC+8nji9f/52ETzD/NdMVPmPVcha4K7AdWuO2QRqRqT772P XJrYPtAYwM702xKYNKuYiYjKteLu1RVFNFAweTHs+x51ZiUOStkA8qdutYuC9iO2 sfIkE6spiYi0wxpJ6zJGGaMkuPViNRg= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:36 2024 by rpki-client on console-ams.rpki-client.org