$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: lISytHlD0v/YrJ8Ij1HhaThy9btQBIdUUpLGUc6aBWQ= Subject key identifier: DE:6F:7B:47:43:A1:48:45:70:67:B0:56:B7:16:C4:5A:59:DD:71:97 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 51 Signing time: Thu 19 Sep 2024 05:45:08 +0000 Manifest this update: Thu 19 Sep 2024 05:45:08 +0000 Manifest next update: Thu 26 Sep 2024 05:45:08 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: +x2piSObk/XGLYRHagBlOAvGTrINc2fQQ0ij4VTNKg4=) 2: FF0454F633C311EFA8168F6FC4F9AE02.roa (hash: zE1x5zNh8a5R2q4FR9Upk026lfGl/wzKDrOoVffTSEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Sep 19 05:45:08 2024 GMT Not After : Sep 26 05:45:08 2024 GMT Subject: CN=66ebba64-98fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:98:48:99:c1:a1:64:7d:c4:f8:7d:5a:5d: b5:32:36:24:71:9f:5b:f6:1f:41:40:44:18:80:b6: 9b:3e:a0:a3:bd:c3:98:8b:38:2c:78:9a:48:46:a8: 3c:ed:91:dd:21:f8:0e:ef:4e:eb:8f:d4:c8:f8:7a: 52:bf:a1:96:9d:f8:7a:a1:de:a2:c1:a9:12:5a:8b: 4e:34:35:58:6e:3d:fb:08:4c:ab:bd:e6:36:a3:3c: b4:9d:4f:53:a0:ea:72:43:04:10:43:07:12:3f:6e: 56:32:4f:fb:90:b9:fd:e1:21:18:f2:7c:56:3c:bc: d3:a0:00:12:01:53:02:a6:22:59:d3:d5:3b:3e:f3: c1:52:06:62:ad:b5:b3:de:a1:58:74:67:36:14:d9: da:51:2f:ae:aa:18:2a:b3:e5:0e:7a:67:c7:e7:65: d9:df:df:30:9c:ff:21:a1:4d:93:31:76:4c:1f:7c: 8f:25:38:f1:c0:ec:54:08:62:0d:a7:b6:31:c2:82: f7:62:18:7f:3a:5c:e8:8c:59:ea:70:94:e0:a0:16: f6:55:d9:61:93:88:f2:3d:df:06:b0:29:d3:1a:a7: 36:36:a8:6c:e1:23:4e:3b:98:f1:f8:be:c7:a9:96: 63:70:7d:61:6b:22:eb:eb:79:8c:e7:fc:e9:ed:3c: 6e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6F:7B:47:43:A1:48:45:70:67:B0:56:B7:16:C4:5A:59:DD:71:97 X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:70:f0:42:b6:09:8a:17:39:aa:30:fa:f2:5d:30:b8:c1:b6: 1c:2c:c8:3b:6c:20:6a:4d:7a:6d:96:89:7c:f4:09:0c:b7:29: e2:35:5b:d2:e1:7c:aa:c1:0f:4c:05:af:ce:51:c7:c5:03:78: 91:f5:54:37:d1:d8:c2:f0:40:d1:e2:8e:5a:d4:ff:d6:fb:bf: be:2d:84:c4:8e:5d:6d:80:8c:15:7f:be:02:ee:06:b1:f1:3d: 0b:48:65:9c:33:88:d5:d7:3f:93:ab:1e:63:92:3e:a6:3c:ea: af:f1:5f:91:f0:ab:62:40:aa:41:3d:e6:24:f1:dc:ac:10:56: 99:8d:35:80:63:82:33:27:a1:b4:c4:92:5d:2c:04:9c:a6:ae: bc:84:98:83:58:d4:63:cd:bf:cb:ee:2f:5a:a5:84:8d:f0:54: 5c:5a:2e:37:c7:91:55:14:e5:c2:41:b4:fa:cc:b5:6d:8b:fa: 8c:8e:36:f9:fb:35:87:7d:2e:86:65:1f:79:3d:eb:73:17:27: b6:3e:66:c7:17:aa:02:a7:ed:73:59:b6:b0:34:41:69:b1:5f: 2c:fc:9e:13:4c:d6:a1:e0:e8:61:a0:12:63:84:09:aa:22:85: a6:f6:ed:98:57:d5:69:68:02:b5:8a:9f:09:33:e9:d4:4a:07: b0:1c:66:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUFFMDExMC8GA1UEBRMoOURGNEZFREZGOTJBOUU3RjZFMDJCRkMwNTRBRDMzOTg1 M0Q5REQzMjAeFw0yNDA5MTkwNTQ1MDhaFw0yNDA5MjYwNTQ1MDhaMBgxFjAUBgNV BAMTDTY2ZWJiYTY0LTk4ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa4ZhImcGhZH3E+H1aXbUyNiRxn1v2H0FARBiAtps+oKO9w5iLOCx4mkhGqDzt kd0h+A7vTuuP1Mj4elK/oZad+Hqh3qLBqRJai040NVhuPfsITKu95jajPLSdT1Og 6nJDBBBDBxI/blYyT/uQuf3hIRjyfFY8vNOgABIBUwKmIlnT1Ts+88FSBmKttbPe oVh0ZzYU2dpRL66qGCqz5Q56Z8fnZdnf3zCc/yGhTZMxdkwffI8lOPHA7FQIYg2n tjHCgvdiGH86XOiMWepwlOCgFvZV2WGTiPI93wawKdMapzY2qGzhI047mPH4vsep lmNwfWFrIuvreYzn/OntPG4jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3m97R0Oh SEVwZ7BWtxbEWlndcZcwHwYDVR0jBBgwFoAUnfT+3/kqnn9uAr/AVK0zmFPZ3TIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQUUwL0FFRjYzNzYwMTk2 ODExRUY4RkY3QkU2RkM0RjlBRTAyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbmZULTNfa3Fubjl1QXJfQVZLMHptRlBaM1RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF QUUwL0FFRjYzNzYwMTk2ODExRUY4RkY3QkU2RkM0RjlBRTAyL25mVC0zX2txbm45 dUFyX0FWSzB6bUZQWjNUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHNw8EK2CYoXOaow+vJdMLjBthwsyDtsIGpNem2WiXz0CQy3KeI1W9Lh fKrBD0wFr85Rx8UDeJH1VDfR2MLwQNHijlrU/9b7v74thMSOXW2AjBV/vgLuBrHx PQtIZZwziNXXP5OrHmOSPqY86q/xX5Hwq2JAqkE95iTx3KwQVpmNNYBjgjMnobTE kl0sBJymrryEmINY1GPNv8vuL1qlhI3wVFxaLjfHkVUU5cJBtPrMtW2L+oyONvn7 NYd9LoZlH3k963MXJ7Y+ZscXqgKn7XNZtrA0QWmxXyz8nhNM1qHg6GGgEmOECaoi hab27ZhX1WloArWKnwkz6dRKB7AcZlE= -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:54 2024 by rpki-client on console-ams.rpki-client.org