$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft File: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft (raw, json) Hash identifier: GWwI9nYUBkCO9tX+AILd8YjRGWWTydckWqC5FobygJ8= Subject key identifier: 51:DD:74:FA:90:BE:CA:7A:03:47:D8:09:FD:90:FA:3A:C8:F6:DC:AE Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft Manifest number: 78 Signing time: Sat 23 Nov 2024 05:00:37 +0000 Manifest this update: Sat 23 Nov 2024 05:00:37 +0000 Manifest next update: Sat 30 Nov 2024 05:00:37 +0000 Files and hashes: 1: nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl (hash: WyHFkuIDY91uXVQf8cPPkVJ2HuP+GJYqEQCtTE7cVmY=) 2: 96B83ED0A64111EF85A21744C4F9AE02.roa (hash: i/pibcZGRbmLWbxKgMM1xMf2Kfhp5on9oaB655UMEfU=) 3: 95F02760A64111EF85A21744C4F9AE02.roa (hash: 3RISD8eDJYcnpJ4sTHHIMkiSdATrnQ/D4bupkZw91+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Nov 23 05:00:37 2024 GMT Not After : Nov 30 05:00:37 2024 GMT Subject: CN=67416175-e62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:da:2d:7d:e1:ae:57:92:fc:05:82:88:a3: ec:c1:cd:1d:81:79:bf:68:9c:07:02:6b:35:c5:01: 35:14:ae:57:3b:cb:0b:ab:ab:bc:72:b2:58:28:03: 5a:74:d7:3b:c6:46:1f:f0:7d:5a:ae:bd:1b:70:80: 7b:f6:e6:08:4c:89:fa:48:e6:f2:17:c0:d9:d0:6c: e0:b8:e8:1d:52:d8:72:d1:25:3f:37:58:7c:0f:7c: e8:e0:14:0d:d5:76:27:25:aa:02:a1:aa:6f:b6:a7: 40:f7:d3:c3:9b:5c:17:56:08:ae:71:c4:33:d9:71: f4:55:f2:51:17:a0:a1:c2:35:b1:d9:5b:40:d9:43: 5d:85:f5:4b:02:5b:48:2d:7d:d1:ed:02:f0:b6:bf: 4b:e2:14:ef:a5:2d:f2:af:47:fa:39:b9:3e:0d:3a: 9c:a0:b8:3f:11:6e:b0:ac:e6:08:1a:b5:24:7e:66: 3c:42:3b:20:e3:f1:c3:12:98:ce:03:52:4d:18:e5: 73:19:45:31:5a:cb:24:bd:96:3f:f5:42:2e:41:63: 6c:be:d8:3d:3f:9c:01:35:7f:83:1a:d3:88:33:8d: 74:ce:8a:bd:67:00:96:fd:82:e2:de:e4:b7:23:e8: 77:82:10:a5:86:88:82:e7:96:a0:cb:7e:54:b8:61: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DD:74:FA:90:BE:CA:7A:03:47:D8:09:FD:90:FA:3A:C8:F6:DC:AE X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:6f:a9:2b:f7:40:44:a0:14:4f:d7:af:6c:db:53:93:aa:e1: 14:fb:c2:41:34:8a:a8:f7:24:2e:d6:a7:57:61:18:79:eb:9e: 7b:43:ed:a7:01:b1:0a:25:df:37:40:2b:e4:cb:76:fd:d1:d9: 1a:84:0f:b4:83:5b:cf:74:45:87:77:8f:5a:ec:79:fc:dc:91: 88:3f:22:90:ba:94:e9:b8:a4:4a:94:8c:59:e5:0b:74:de:b0: 84:98:39:b4:24:5e:06:a3:8d:a5:c8:f1:bd:7b:c7:07:74:61: 02:0a:25:d9:83:d7:9c:1c:6f:d1:71:31:17:66:6b:75:85:fc: d2:e6:ca:44:b1:b3:b9:d2:73:5f:be:10:2e:f0:1d:cf:4b:3c: 31:92:34:7b:84:6b:87:11:89:5f:69:3d:10:88:a3:3f:ac:a8: f8:f6:e3:af:54:03:fe:25:7f:e9:5f:71:da:03:03:1b:71:cd: 84:d6:ef:60:27:48:da:d4:bf:43:06:88:dc:b5:7d:cf:88:36: 2b:1b:e2:1a:8a:16:ec:57:40:ee:bd:91:e7:c7:d8:d4:08:f6: 7a:e6:95:77:4d:c1:bc:8a:0e:b5:9b:01:b5:90:ce:d3:6f:75: a0:e9:f5:e0:ef:37:50:07:07:08:c8:89:aa:3c:cf:3c:d2:ca: 25:af:c1:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjQxMTIzMDUwMDM3WhcNMjQxMTMwMDUwMDM3WjAYMRYwFAYD VQQDEw02NzQxNjE3NS1lNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytHaLX3hrleS/AWCiKPswc0dgXm/aJwHAms1xQE1FK5XO8sLq6u8crJYKANa dNc7xkYf8H1arr0bcIB79uYITIn6SObyF8DZ0GzguOgdUthy0SU/N1h8D3zo4BQN 1XYnJaoCoapvtqdA99PDm1wXVgiuccQz2XH0VfJRF6ChwjWx2VtA2UNdhfVLAltI LX3R7QLwtr9L4hTvpS3yr0f6Obk+DTqcoLg/EW6wrOYIGrUkfmY8Qjsg4/HDEpjO A1JNGOVzGUUxWsskvZY/9UIuQWNsvtg9P5wBNX+DGtOIM410zoq9ZwCW/YLi3uS3 I+h3ghClhoiC55agy35UuGHjCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHddPqQ vsp6A0fYCf2Q+jrI9tyuMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9BRUY2Mzc2MDE5NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5u OXVBcl9BVkswem1GUFozVEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvb6kr90BEoBRP169s21OTquEU+8JBNIqo9yQu1qdXYRh56557Q+2n AbEKJd83QCvky3b90dkahA+0g1vPdEWHd49a7Hn83JGIPyKQupTpuKRKlIxZ5Qt0 3rCEmDm0JF4Go42lyPG9e8cHdGECCiXZg9ecHG/RcTEXZmt1hfzS5spEsbO50nNf vhAu8B3PSzwxkjR7hGuHEYlfaT0QiKM/rKj49uOvVAP+JX/pX3HaAwMbcc2E1u9g J0ja1L9DBojctX3PiDYrG+IaihbsV0DuvZHnx9jUCPZ65pV3TcG8ig61mwG1kM7T b3Wg6fXg7zdQBwcIyImqPM880solr8FF -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:23 2024 by rpki-client on console-ams.rpki-client.org