$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft File: NkbrHzcLfmPR823rNsJHbJbmuug.mft (raw, json) Hash identifier: /kuHdE7hl9eNB5WEMHANSWNiC4IKoRHl39oly1jMXss= Subject key identifier: 03:99:55:FD:7B:9F:96:4C:D5:24:B5:0B:76:7F:D6:9A:F2:6E:57:4C Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft Manifest number: 020C Signing time: Fri 31 May 2024 04:46:54 +0000 Manifest this update: Fri 31 May 2024 04:46:54 +0000 Manifest next update: Fri 07 Jun 2024 04:46:54 +0000 Files and hashes: 1: NkbrHzcLfmPR823rNsJHbJbmuug.crl (hash: qaCV2xS/xYOrKlpgegGu8DHGmxd+dvb3P8GgAd8nIHQ=) 2: 627A6758DF2A11EEBC440C5EC4F9AE02.roa (hash: T7PvEvH8O0V7Ov1UBl/OKo7NadrxHCZyLLumQSslMUE=) 3: F3B00CD2666C11EEB1B4711CC4F9AE02.roa (hash: OhqDhJNYyh/Ij4by8iVRRpEdPI8QIOFmgsaKvq1JzAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8 Validity Not Before: May 31 04:46:54 2024 GMT Not After : Jun 7 04:46:54 2024 GMT Subject: CN=6659563e-b776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:68:11:3d:90:1b:6c:a7:d1:8a:11:44:c6: 92:e0:1c:03:31:ef:03:ef:10:f9:73:c4:57:38:d8: 3f:2e:69:d6:f4:a0:ae:d0:cd:14:b4:3d:05:57:9b: da:a5:ad:b4:f5:73:8c:96:95:49:79:c6:b8:38:46: da:09:a2:a8:94:81:43:d4:77:bb:36:9d:b3:bb:ba: b4:95:99:f6:85:2b:ca:73:8f:16:08:15:8b:5f:54: 99:66:f9:bd:b9:f9:8b:c4:32:68:3f:a4:a6:25:18: c2:1c:35:c6:26:fd:a1:03:6a:1c:8a:7e:18:4a:66: 54:4b:d2:aa:07:13:09:9c:f7:cd:af:f9:43:1b:b0: ce:5a:af:e8:5e:f6:07:c8:17:00:70:b9:c9:9e:dc: 20:6f:f2:9a:3b:9b:b6:de:a5:b7:86:2e:1f:ad:94: b9:01:03:1a:ba:6a:b2:49:18:8e:85:a8:e2:c2:3c: bd:86:f7:e5:bb:ba:80:63:00:b0:22:fd:72:09:d8: 22:c0:43:c7:f2:46:47:c4:64:3d:05:f5:f8:6a:dd: d3:ad:fe:6f:6f:b5:20:3d:f5:59:f0:78:45:84:ad: 05:3a:cd:f5:2f:65:07:68:d9:6e:11:33:d9:df:f6: 2d:d2:dc:88:93:68:c0:42:91:cb:1c:87:16:cb:7f: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:99:55:FD:7B:9F:96:4C:D5:24:B5:0B:76:7F:D6:9A:F2:6E:57:4C X509v3 Authority Key Identifier: keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:77:6b:0b:12:7c:23:77:35:71:4a:2e:8c:5f:40:94:1c:ab: 91:fd:f0:1a:62:5b:8a:9a:64:87:a4:9c:29:9b:b7:5b:88:d4: d7:b5:fb:62:7d:44:eb:0c:d6:d6:3e:24:2d:3d:4c:1c:d0:89: e0:e6:1c:59:bc:5f:56:08:88:e3:80:2e:f5:e5:75:bc:91:04: 2c:48:e8:9e:bf:8a:57:29:a9:90:9e:16:cd:d0:15:da:bb:d0: 84:dc:c7:64:0c:76:a4:ba:d3:82:62:d0:8a:33:33:f0:e4:99: c2:63:ca:ba:de:b2:b8:6c:ce:4e:2b:8b:96:40:44:ae:8d:13: 15:7a:50:6a:ed:54:ea:80:20:79:a8:99:3a:59:f3:8b:dc:29: e6:0c:7c:5e:2e:f7:a1:35:fb:bb:f7:b1:ea:86:7c:38:5d:ee: 92:02:b7:2f:d4:92:28:cc:4d:7c:9a:ff:86:d4:9e:87:74:97: 7a:b3:5c:5a:7f:9f:1a:14:26:1e:80:fb:8a:65:c7:6c:f5:a1: 63:e7:f2:dc:11:0f:dc:e5:77:80:47:d2:9e:6b:cf:3e:92:83: d8:e0:e1:82:1f:e6:1b:b1:04:60:7f:27:40:aa:a4:c9:86:fd: 80:27:18:e1:3d:6b:53:3e:34:99:10:f6:0a:8d:85:66:6d:50: f0:ed:c9:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCRTUxMTAvBgNVBAUTKDM2NDZFQjFGMzcwQjdFNjNEMUYzNkRFQjM2QzI0NzZD OTZFNkJBRTgwHhcNMjQwNTMxMDQ0NjU0WhcNMjQwNjA3MDQ0NjU0WjAYMRYwFAYD VQQDEw02NjU5NTYzZS1iNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHpoET2QG2yn0YoRRMaS4BwDMe8D7xD5c8RXONg/LmnW9KCu0M0UtD0FV5va pa209XOMlpVJeca4OEbaCaKolIFD1He7Np2zu7q0lZn2hSvKc48WCBWLX1SZZvm9 ufmLxDJoP6SmJRjCHDXGJv2hA2ocin4YSmZUS9KqBxMJnPfNr/lDG7DOWq/oXvYH yBcAcLnJntwgb/KaO5u23qW3hi4frZS5AQMaumqySRiOhajiwjy9hvflu7qAYwCw Iv1yCdgiwEPH8kZHxGQ9BfX4at3Trf5vb7UgPfVZ8HhFhK0FOs31L2UHaNluETPZ 3/Yt0tyIk2jAQpHLHIcWy3+TKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOZVf17 n5ZM1SS1C3Z/1prybldMMB8GA1UdIwQYMBaAFDZG6x83C35j0fNt6zbCR2yW5rro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0JFNS82MTFDNTEyQ0Yw RjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZtUFI4MjNyTnNKSGJKYm11 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rYnJIemNMZm1QUjgyM3JOc0pIYkpibXV1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0JFNS82MTFDNTEyQ0YwRjMxMUVDODRCMjlDODBDNEY5QUUwMi9Oa2JySHpjTGZt UFI4MjNyTnNKSGJKYm11dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSd2sLEnwjdzVxSi6MX0CUHKuR/fAaYluKmmSHpJwpm7dbiNTXtfti fUTrDNbWPiQtPUwc0Ing5hxZvF9WCIjjgC715XW8kQQsSOiev4pXKamQnhbN0BXa u9CE3MdkDHakutOCYtCKMzPw5JnCY8q63rK4bM5OK4uWQESujRMVelBq7VTqgCB5 qJk6WfOL3CnmDHxeLvehNfu797Hqhnw4Xe6SArcv1JIozE18mv+G1J6HdJd6s1xa f58aFCYegPuKZcds9aFj5/LcEQ/c5XeAR9Kea88+koPY4OGCH+YbsQRgfydAqqTJ hv2AJxjhPWtTPjSZEPYKjYVmbVDw7cmx -----END CERTIFICATE-----Generated at Fri May 31 06:49:03 2024 by rpki-client on console-ams.rpki-client.org