$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: o7pi1tfwGcDwrOTjHqZx0Hx69+n0fgFwC2iAdnMC05Q= Subject key identifier: 32:C4:F7:C6:91:7C:E5:1C:E7:39:C3:CF:DA:B1:BC:CE:57:50:45:64 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1DF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1D37 Signing time: Sat 04 May 2024 16:37:23 +0000 Manifest this update: Sat 04 May 2024 16:37:23 +0000 Manifest next update: Sat 11 May 2024 16:37:23 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: zP2vKqsA8Ju2dRaTxNEo4jnuFdxCCwIXPBQ88l/ht10=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: oAMN3Hv+FrxmGc6WWivme2gl9rs4/jmndz5EfWvV6Og=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 8qTsqRmO80AHFfBUyqSAVB8YDABzwuoAca88nBKF+bs=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: ASgDZ6RBvaayw4ZZjs56syo0bK53qF3EjAkzSzUWdkE=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: HfFeTs2pTlN0dZCGR3ETDmagxtrVoRQmHypj0cKvrXs=) 6: 8CD3563C9B8311EC9ABB0A40C4F9AE02.roa (hash: BcQipEJLw413YV8cLD6RtcHTePVRPNOQ114pN4ttsBQ=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: 75sNh1PMhH03uxHTO3l/1V5P1IOdr7+9Td6YwoWFqok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7670 (0x1df6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: May 4 16:37:23 2024 GMT Not After : May 11 16:37:23 2024 GMT Subject: CN=66366443-7950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:cf:72:d1:75:e0:67:4b:00:04:b1:02:74: 1d:08:be:a2:dc:6e:8b:e6:e4:2b:5a:b4:e1:2b:8c: e5:44:87:d6:cb:63:04:31:07:7c:c9:03:78:c7:5b: 16:74:9f:ba:9e:36:c3:22:56:fe:e1:31:ce:34:b3: fa:e5:82:9c:e6:ad:fa:59:38:c7:a4:c1:34:48:28: 51:05:38:a4:1c:a1:96:8b:df:86:24:fc:b9:30:ed: 5d:0d:fb:1c:25:f2:cd:bf:2c:89:93:c2:be:41:ef: be:f8:61:9d:a1:70:19:d8:fb:12:68:84:08:20:f0: be:f9:25:96:cf:c2:c2:08:45:4f:bb:5e:55:ff:8e: ad:1d:1f:f0:55:c9:04:32:98:81:ab:eb:64:97:99: 99:c4:97:ad:d5:1a:b4:f2:b0:e8:d6:55:4e:79:3c: 40:d6:54:9f:6e:ba:cb:73:10:c2:c2:84:95:9e:52: d6:13:5e:0c:6d:d5:1d:23:cc:3f:5c:38:7c:6e:20: 83:d9:2c:65:28:84:ac:b2:b0:5d:fe:b6:41:e5:24: 88:7c:00:ae:f6:e0:df:2f:95:4b:ca:e7:aa:ac:18: 5e:a5:bb:ef:7a:f6:41:a4:61:ca:7e:ef:32:4e:5f: 06:6c:a4:3d:6b:61:c9:cb:7b:b3:90:2d:73:7e:bd: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:F7:C6:91:7C:E5:1C:E7:39:C3:CF:DA:B1:BC:CE:57:50:45:64 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d6:63:4a:55:bd:d2:77:9d:d7:61:84:d1:79:a1:17:7a:bf: e3:e2:cb:74:43:19:f4:a8:03:20:19:18:e4:15:3e:3e:d0:88: c1:5d:22:9b:5f:70:ad:9a:f5:92:68:a3:99:99:fd:47:26:b3: 67:b9:d2:3c:27:3f:5c:8b:de:d3:e6:2d:6f:21:0c:8e:09:2a: cb:a6:06:12:c9:94:52:e8:4c:ab:61:f5:dc:0b:d3:a9:20:00: 2c:c4:c2:45:4d:50:dd:a0:6c:4d:3a:07:5c:f0:d8:df:cc:24: e2:25:aa:14:1b:72:e5:61:86:e2:f4:b6:07:fe:af:e2:a1:4f: 7d:92:28:5e:00:6f:6e:0a:bf:0c:5a:92:7c:45:4d:8c:49:07: 6d:dd:a3:33:b6:ef:8a:a8:26:fa:a9:b7:6b:71:c3:6c:2d:53: 7e:d6:4e:43:b6:91:ac:48:18:33:37:7b:b0:a9:69:df:b7:1e: 68:62:7f:11:21:d6:b8:b1:05:88:51:da:32:05:dc:4e:0c:3e: 26:0a:c4:30:1c:04:2b:52:da:eb:c3:2d:e0:10:07:34:21:15: f0:b9:d6:09:23:8a:6f:c8:f0:a9:b7:a5:ab:3d:78:25:e5:04: bd:f2:77:fd:dd:d4:de:3d:84:e2:df:f0:d2:d3:62:e7:92:e5: 66:4a:0d:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjQwNTA0MTYzNzIzWhcNMjQwNTExMTYzNzIzWjAYMRYwFAYD VQQDEw02NjM2NjQ0My03OTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiHPctF14GdLAASxAnQdCL6i3G6L5uQrWrThK4zlRIfWy2MEMQd8yQN4x1sW dJ+6njbDIlb+4THONLP65YKc5q36WTjHpME0SChRBTikHKGWi9+GJPy5MO1dDfsc JfLNvyyJk8K+Qe+++GGdoXAZ2PsSaIQIIPC++SWWz8LCCEVPu15V/46tHR/wVckE MpiBq+tkl5mZxJet1Rq08rDo1lVOeTxA1lSfbrrLcxDCwoSVnlLWE14MbdUdI8w/ XDh8biCD2SxlKISssrBd/rZB5SSIfACu9uDfL5VLyueqrBhepbvvevZBpGHKfu8y Tl8GbKQ9a2HJy3uzkC1zfr2TIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLE98aR fOUc5znDz9qxvM5XUEVkMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL1mNKVb3Sd53XYYTReaEXer/j4st0Qxn0qAMgGRjkFT4+0IjBXSKb X3CtmvWSaKOZmf1HJrNnudI8Jz9ci97T5i1vIQyOCSrLpgYSyZRS6EyrYfXcC9Op IAAsxMJFTVDdoGxNOgdc8NjfzCTiJaoUG3LlYYbi9LYH/q/ioU99kiheAG9uCr8M WpJ8RU2MSQdt3aMztu+KqCb6qbdrccNsLVN+1k5DtpGsSBgzN3uwqWnftx5oYn8R Ida4sQWIUdoyBdxODD4mCsQwHAQrUtrrwy3gEAc0IRXwudYJI4pvyPCpt6WrPXgl 5QS98nf93dTePYTi3/DS02LnkuVmSg23 -----END CERTIFICATE-----Generated at Sat May 4 17:19:50 2024 by rpki-client on console-fra.rpki-client.org