$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: lRo12XRaCiGjyHMdJq4B1o/wd+Rr85+ixsC7N9eOtkY= Subject key identifier: 55:21:12:99:D9:94:1E:71:C3:13:53:C3:30:BC:D2:3F:FB:79:30:BA Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1E5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1D9E Signing time: Wed 20 Nov 2024 16:07:59 +0000 Manifest this update: Wed 20 Nov 2024 16:07:59 +0000 Manifest next update: Wed 27 Nov 2024 16:07:59 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: Uyf9p6wY13K6GxTE2z8A2e+CHynxrv+aHJa1Es6t4s0=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: oAMN3Hv+FrxmGc6WWivme2gl9rs4/jmndz5EfWvV6Og=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 8qTsqRmO80AHFfBUyqSAVB8YDABzwuoAca88nBKF+bs=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: ASgDZ6RBvaayw4ZZjs56syo0bK53qF3EjAkzSzUWdkE=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: HfFeTs2pTlN0dZCGR3ETDmagxtrVoRQmHypj0cKvrXs=) 6: AB549D62125711EF94D14874C4F9AE02.roa (hash: 7u2tPWvB312w4cQ7LNuAKQdY34Bf1MbZPEt4wkYYHWg=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: 75sNh1PMhH03uxHTO3l/1V5P1IOdr7+9Td6YwoWFqok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7774 (0x1e5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Nov 20 16:07:59 2024 GMT Not After : Nov 27 16:07:59 2024 GMT Subject: CN=673e095f-4289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:a9:c3:e7:24:40:32:36:74:a1:e5:94:f0: 49:c4:86:bd:dc:e9:d8:e9:31:be:d6:ed:27:19:ee: 7b:7c:17:be:70:6f:d8:37:0c:8c:cb:f4:2e:1d:aa: ba:e0:4e:40:a0:dc:6c:95:08:54:e1:c4:79:44:ef: 2b:33:4d:22:45:86:94:4a:98:73:26:d7:11:f3:2d: f6:3f:57:94:b3:6f:e4:31:9b:e3:e5:3d:9f:55:e4: 4d:5e:a9:f1:b7:33:9f:8b:71:80:81:89:e6:42:ac: d3:bc:2c:3c:66:a7:1c:66:76:7f:63:07:23:99:0b: c2:98:9c:3d:01:b4:19:4a:70:8c:24:9a:95:70:f6: cc:c4:ec:63:8d:0f:ec:57:1f:99:7d:60:e7:2b:fd: 87:5b:50:3c:87:55:2f:b6:18:7e:30:30:fc:e6:75: 8a:da:35:d8:1e:f1:e4:6c:e7:9b:ed:01:64:61:77: 9e:47:28:fd:1e:de:d9:04:cd:e7:0c:86:c9:f5:6c: a2:ea:a7:b0:85:1d:b5:36:20:5c:e2:7f:55:a3:5b: d5:5c:f2:ba:28:82:fe:90:ba:40:bf:4d:12:83:ed: 41:ba:b4:d2:1b:5d:4d:a2:f4:8f:67:eb:aa:82:0a: a6:2c:da:6a:28:13:cd:2a:51:60:16:7a:71:42:8d: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:21:12:99:D9:94:1E:71:C3:13:53:C3:30:BC:D2:3F:FB:79:30:BA X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4d:86:c2:b0:b8:48:82:0a:cd:d5:04:a4:8c:45:2f:5e:5d: 32:2e:d7:40:f8:ef:ac:f2:12:d8:87:3f:d4:2b:6f:5b:02:37: 9c:82:c4:db:b2:aa:32:b6:14:b1:07:9f:51:d5:a9:b9:f0:f5: d5:0a:b2:09:39:f3:1f:38:59:c3:df:b9:9e:7f:0c:0e:e6:d7: 6e:a7:80:6d:62:4d:cb:1c:32:d7:cd:9e:9e:9f:e3:c4:67:66: 31:77:05:36:b9:e7:b2:b1:b1:84:5f:2e:24:a8:ce:f6:ee:99: ba:fa:33:9e:c5:c5:94:2c:48:05:92:b0:b7:1b:51:2f:dd:5b: 3a:96:14:c4:d6:6c:cc:1d:68:4b:e0:5b:51:4e:a4:8e:37:7b: 72:53:a3:2c:6b:ea:a3:a8:49:ea:65:66:a1:d2:ad:17:33:9d: fd:cf:ef:04:be:6c:bc:0d:ce:7d:80:60:e2:a4:b8:1d:d6:7b: aa:8b:9f:da:0e:f5:ff:af:b0:c6:0b:99:9e:68:cd:c9:fc:6a: 2d:4e:d6:d9:d0:9a:b0:81:3f:38:3d:9b:06:3d:db:23:24:82: eb:63:b6:09:44:7e:58:e9:b4:d0:8d:1a:44:b4:59:fa:e0:47: 82:00:48:b2:f7:d0:b4:f3:ac:cd:ee:cc:af:16:27:2b:3e:e8: bb:4e:db:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjQxMTIwMTYwNzU5WhcNMjQxMTI3MTYwNzU5WjAYMRYwFAYD VQQDEw02NzNlMDk1Zi00Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy6pw+ckQDI2dKHllPBJxIa93OnY6TG+1u0nGe57fBe+cG/YNwyMy/QuHaq6 4E5AoNxslQhU4cR5RO8rM00iRYaUSphzJtcR8y32P1eUs2/kMZvj5T2fVeRNXqnx tzOfi3GAgYnmQqzTvCw8ZqccZnZ/YwcjmQvCmJw9AbQZSnCMJJqVcPbMxOxjjQ/s Vx+ZfWDnK/2HW1A8h1Uvthh+MDD85nWK2jXYHvHkbOeb7QFkYXeeRyj9Ht7ZBM3n DIbJ9Wyi6qewhR21NiBc4n9Vo1vVXPK6KIL+kLpAv00Sg+1BurTSG11NovSPZ+uq ggqmLNpqKBPNKlFgFnpxQo3OCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUhEpnZ lB5xwxNTwzC80j/7eTC6MB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALTYbCsLhIggrN1QSkjEUvXl0yLtdA+O+s8hLYhz/UK29bAjecgsTb sqoythSxB59R1am58PXVCrIJOfMfOFnD37mefwwO5tdup4BtYk3LHDLXzZ6en+PE Z2YxdwU2ueeysbGEXy4kqM727pm6+jOexcWULEgFkrC3G1Ev3Vs6lhTE1mzMHWhL 4FtRTqSON3tyU6Msa+qjqEnqZWah0q0XM539z+8Evmy8Dc59gGDipLgd1nuqi5/a DvX/r7DGC5meaM3J/GotTtbZ0JqwgT84PZsGPdsjJILrY7YJRH5Y6bTQjRpEtFn6 4EeCAEiy99C086zN7syvFicrPui7TtvJ -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:10 2024 by rpki-client on console-ams.rpki-client.org