$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft File: NuTjWeIN2mUTPhIaktbWrLHlMSM.mft (raw, json) Hash identifier: sNoC7z8w/pP9hfjCqPLI7qUKMCSaRAZ3XPhB9gcUzrU= Subject key identifier: DD:FA:95:15:A2:39:6B:BF:24:C6:22:2E:33:D3:E5:36:50:4F:CC:47 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft Manifest number: 02A0 Signing time: Sat 23 Nov 2024 01:05:14 +0000 Manifest this update: Sat 23 Nov 2024 01:05:14 +0000 Manifest next update: Sat 30 Nov 2024 01:05:14 +0000 Files and hashes: 1: NuTjWeIN2mUTPhIaktbWrLHlMSM.crl (hash: YYRf+BU7VDdd0Hw5aYbxEhnBrw6OA8SFY40PrJy49UI=) 2: 0D09EE14D79411EC955CCA68C4F9AE02.roa (hash: C0oMAxQHsYdHAGjubReHZgymtUaTL7q6qGZom3tg5Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Nov 23 01:05:14 2024 GMT Not After : Nov 30 01:05:14 2024 GMT Subject: CN=67412a4a-d88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:05:e6:47:53:d0:c2:45:b5:96:bd:93:26: 80:f8:7a:38:c1:10:28:83:6d:27:48:e0:d5:4d:3d: e3:b3:1b:ca:6a:f8:4d:09:e9:8a:5f:a0:64:02:04: 19:ff:0a:44:45:62:91:b7:42:a5:e6:17:24:78:08: 18:cf:d5:ea:b2:cf:eb:ff:1a:d5:2e:71:d7:9a:a9: 6c:dd:f4:c9:b2:6e:5f:1e:89:c4:52:01:cc:f4:5f: 56:a5:33:a7:09:17:c7:e0:30:3b:d8:6d:69:4e:a4: c0:c1:96:ca:77:e4:cf:d1:50:fe:0f:4a:44:2d:11: bf:ff:79:38:49:85:8a:0d:e0:fc:85:8c:5e:2a:bc: 7f:ee:c8:79:d1:03:39:b1:b4:38:84:31:cb:1a:0e: a8:11:e1:6e:9a:dd:76:56:e0:b5:a4:10:bb:08:dc: 39:aa:c2:ba:91:4c:eb:ce:7f:a9:58:31:85:0e:86: c1:b1:89:07:83:ae:f6:8c:b8:50:7d:92:ae:6f:d2: fd:8e:ce:b0:26:f6:62:8a:02:8f:96:55:b2:83:51: 84:f1:71:71:eb:cf:9c:db:b7:60:04:c9:63:b7:96: a4:a4:a9:12:02:23:1e:31:67:f9:3c:4e:79:7b:d2: d9:9a:b5:a0:6d:dd:ec:51:c1:d8:4e:5c:3c:cb:9b: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FA:95:15:A2:39:6B:BF:24:C6:22:2E:33:D3:E5:36:50:4F:CC:47 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a4:a1:1a:68:7f:9a:62:4f:79:5d:88:b9:f8:23:4a:6b:4c: 7e:ff:78:a8:cf:ab:37:2a:2d:ef:33:ca:2a:5b:97:6e:0d:5f: 97:e5:6d:bc:00:89:82:3e:d4:33:05:fb:e2:fd:c6:29:cb:b8: 64:a9:45:42:00:ea:a8:7e:f6:6f:4c:d2:59:e8:0c:7f:a6:3e: 20:6a:2c:fb:85:da:58:c0:ec:3a:ab:8d:7e:37:1c:d6:9c:d1: 32:c7:73:ac:63:a2:b6:0f:da:de:cf:a9:2b:a3:41:19:69:95: 91:fe:f3:96:e5:41:46:e3:19:d5:6a:2e:ba:bf:2a:4b:e3:bb: a0:8e:12:e6:ed:f8:59:f3:4e:e3:8c:ed:82:b2:d6:08:47:0b: 00:14:d4:a0:df:36:56:e5:e8:39:4f:6d:ae:30:76:00:bd:41: 33:77:f4:53:c7:99:e8:4f:cf:f6:0b:a9:7e:81:70:c7:6d:fb: d9:5a:2b:b8:63:a0:85:06:3c:63:bf:8b:6a:72:e1:ff:17:e1: 34:0a:e4:6a:f4:39:95:50:fd:e4:62:96:26:88:e9:ff:1b:b9: d4:7f:29:92:9f:32:23:bf:3f:83:fc:e0:6d:68:08:00:46:63: e2:27:be:e6:32:2d:72:de:1f:01:fc:77:b9:54:cf:66:ad:36: 69:8b:45:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjQxMTIzMDEwNTE0WhcNMjQxMTMwMDEwNTE0WjAYMRYwFAYD VQQDEw02NzQxMmE0YS1kODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQwF5kdT0MJFtZa9kyaA+Ho4wRAog20nSODVTT3jsxvKavhNCemKX6BkAgQZ /wpERWKRt0Kl5hckeAgYz9Xqss/r/xrVLnHXmqls3fTJsm5fHonEUgHM9F9WpTOn CRfH4DA72G1pTqTAwZbKd+TP0VD+D0pELRG//3k4SYWKDeD8hYxeKrx/7sh50QM5 sbQ4hDHLGg6oEeFumt12VuC1pBC7CNw5qsK6kUzrzn+pWDGFDobBsYkHg672jLhQ fZKub9L9js6wJvZiigKPllWyg1GE8XFx68+c27dgBMljt5akpKkSAiMeMWf5PE55 e9LZmrWgbd3sUcHYTlw8y5vQpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN36lRWi OWu/JMYiLjPT5TZQT8xHMB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDExMi9EQUJBQjVEQ0Q3OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJt VVRQaElha3RiV3JMSGxNU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmpKEaaH+aYk95XYi5+CNKa0x+/3ioz6s3Ki3vM8oqW5duDV+X5W28 AImCPtQzBfvi/cYpy7hkqUVCAOqofvZvTNJZ6Ax/pj4gaiz7hdpYwOw6q41+NxzW nNEyx3OsY6K2D9rez6kro0EZaZWR/vOW5UFG4xnVai66vypL47ugjhLm7fhZ807j jO2CstYIRwsAFNSg3zZW5eg5T22uMHYAvUEzd/RTx5noT8/2C6l+gXDHbfvZWiu4 Y6CFBjxjv4tqcuH/F+E0CuRq9DmVUP3kYpYmiOn/G7nUfymSnzIjvz+D/OBtaAgA RmPiJ77mMi1y3h8B/He5VM9mrTZpi0V9 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org