$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft File: Nps-m3tm6PW7l5puLy56rPUA0_E.mft (raw, json) Hash identifier: EJJZWgTy2MFJCMqmLJzpQhSLyMFAJ7RrHOD8bgk8Vdw= Subject key identifier: 45:72:89:46:C6:BD:9C:C6:BB:7A:98:2C:2D:85:B1:C4:0D:D0:B2:34 Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft Manifest number: 56 Signing time: Wed 15 May 2024 07:53:18 +0000 Manifest this update: Wed 15 May 2024 07:53:17 +0000 Manifest next update: Wed 22 May 2024 07:53:17 +0000 Files and hashes: 1: Nps-m3tm6PW7l5puLy56rPUA0_E.crl (hash: CsIqh31BGXmlHjGBxGJeI32okK/w6L01rcKf8n4P3/o=) 2: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (hash: sSUygvO4tgmOpRgBbCAQ01iCPpNPh5y2xYEsG36MtWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Validity Not Before: May 15 07:53:17 2024 GMT Not After : May 22 07:53:17 2024 GMT Subject: CN=664469ed-81b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:12:83:89:fa:13:5a:64:31:42:01:5d:0e: 43:b3:5d:17:d5:e9:8b:65:16:81:4e:d4:f6:79:eb: c5:40:2a:30:66:03:86:b2:e6:fb:b0:c0:f5:f7:88: f8:44:ea:98:d5:4a:71:19:eb:06:38:68:80:21:0a: 6f:45:32:a3:e7:c8:2e:ff:48:94:8d:96:fc:e8:08: 5e:60:6a:2f:b8:b3:5b:57:a2:a5:f0:f0:ef:a9:69: 1d:4a:2d:b8:c2:2f:21:8e:cd:7b:0d:d0:0e:84:6c: cc:cc:7e:a8:33:6d:20:4a:0e:84:d8:d2:dd:bb:44: 69:e4:a5:c4:d8:b3:a2:f0:f7:53:77:b8:5d:48:74: 92:04:88:cd:42:95:17:79:22:47:9f:07:24:9a:49: 9b:d4:61:88:f9:53:24:fa:e3:81:c9:29:1a:7f:84: ab:46:63:1a:e3:d8:24:f7:6e:5f:8c:54:4c:43:d8: df:29:8f:bd:07:0c:e7:80:3b:65:c3:43:89:b0:dc: e9:2d:7f:92:1b:96:3f:2f:65:1b:e2:14:c5:f2:50: 04:e2:95:1c:25:a3:a2:af:82:a5:51:01:99:bf:cc: d5:0e:5f:af:e1:1f:79:df:3a:12:3c:93:7b:39:33: c1:ca:88:ec:ba:ff:12:d1:20:23:c4:05:6c:75:ce: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:72:89:46:C6:BD:9C:C6:BB:7A:98:2C:2D:85:B1:C4:0D:D0:B2:34 X509v3 Authority Key Identifier: keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:25:35:63:3d:65:3d:f9:f5:e9:0f:aa:1f:de:b7:af:23:d4: 4d:9a:5e:70:72:63:89:4e:03:e0:2e:75:68:95:d4:5f:46:57: c2:f7:0d:ba:c0:35:55:78:3a:8a:65:50:8a:54:7b:21:dc:07: 34:be:ca:98:62:97:81:fd:00:3e:c8:49:f1:6c:a3:86:64:f7: 7d:aa:f0:26:55:4a:74:cd:17:2d:a3:11:c1:76:0a:f4:ba:33: 10:31:a7:b4:91:46:d2:b0:05:55:a5:67:d0:f4:49:a9:2c:99: dc:ad:cd:27:a0:49:2a:48:d7:08:f3:c1:86:41:fe:b1:0a:7d: 9e:39:08:0e:98:3f:b3:34:64:24:5d:83:8e:82:a7:69:a1:0f: a8:93:60:0c:e6:a0:d8:c5:10:c6:81:bf:a8:a7:4e:9e:c1:50: 85:aa:9f:0f:e7:d1:39:7f:f8:ac:93:20:fa:f4:49:5b:6f:dd: 46:4f:f8:02:5b:64:1f:5a:ee:00:4d:e2:95:27:82:27:64:77: b5:c2:22:2f:bf:e7:11:f1:d9:fd:e6:4a:18:18:69:c7:1f:fc: 78:ef:11:42:9f:d0:90:10:ad:25:70:f6:d5:1a:b4:3f:ba:d3: 27:ab:f8:f0:d8:f1:ad:3e:68:24:ec:4e:b7:b3:ff:30:46:22: f0:1e:06:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjhDODExMC8GA1UEBRMoMzY5QjNFOUI3QjY2RThGNUJCOTc5QTZFMkYyRTdBQUNG NTAwRDNGMTAeFw0yNDA1MTUwNzUzMTdaFw0yNDA1MjIwNzUzMTdaMBgxFjAUBgNV BAMTDTY2NDQ2OWVkLTgxYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvgxKDifoTWmQxQgFdDkOzXRfV6YtlFoFO1PZ568VAKjBmA4ay5vuwwPX3iPhE 6pjVSnEZ6wY4aIAhCm9FMqPnyC7/SJSNlvzoCF5gai+4s1tXoqXw8O+paR1KLbjC LyGOzXsN0A6EbMzMfqgzbSBKDoTY0t27RGnkpcTYs6Lw91N3uF1IdJIEiM1ClRd5 IkefBySaSZvUYYj5UyT644HJKRp/hKtGYxrj2CT3bl+MVExD2N8pj70HDOeAO2XD Q4mw3Oktf5Iblj8vZRviFMXyUATilRwlo6KvgqVRAZm/zNUOX6/hH3nfOhI8k3s5 M8HKiOy6/xLRICPEBWx1znddAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURXKJRsa9 nMa7epgsLYWxxA3QsjQwHwYDVR0jBBgwFoAUNps+m3tm6PW7l5puLy56rPUA0/Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCOEM4L0M0NEMwNDUyOEVD OTExRUU5RjhFNDQ3RkM0RjlBRTAyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBf RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnBzLW0zdG02UFc3bDVwdUx5NTZyUFVBMF9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC OEM4L0M0NEMwNDUyOEVDOTExRUU5RjhFNDQ3RkM0RjlBRTAyL05wcy1tM3RtNlBX N2w1cHVMeTU2clBVQTBfRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIMlNWM9ZT359ekPqh/et68j1E2aXnByY4lOA+AudWiV1F9GV8L3DbrA NVV4OoplUIpUeyHcBzS+yphil4H9AD7ISfFso4Zk932q8CZVSnTNFy2jEcF2CvS6 MxAxp7SRRtKwBVWlZ9D0SaksmdytzSegSSpI1wjzwYZB/rEKfZ45CA6YP7M0ZCRd g46Cp2mhD6iTYAzmoNjFEMaBv6inTp7BUIWqnw/n0Tl/+KyTIPr0SVtv3UZP+AJb ZB9a7gBN4pUngidkd7XCIi+/5xHx2f3mShgYaccf/HjvEUKf0JAQrSVw9tUatD+6 0yer+PDY8a0+aCTsTrez/zBGIvAeBpg= -----END CERTIFICATE-----Generated at Wed May 15 09:28:19 2024 by rpki-client on console-fra.rpki-client.org