$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft File: nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json) Hash identifier: UBsj0ogvXZxSme5jYr9iRDPLS1XnCKPmtkNJzxn9xnY= Subject key identifier: 71:42:30:12:21:71:E6:F3:CB:A3:7E:DF:8B:FC:9D:BB:8E:FF:66:E2 Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C Certificate issuer: /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft Manifest number: 042E Signing time: Sun 19 May 2024 01:59:13 +0000 Manifest this update: Sun 19 May 2024 01:59:13 +0000 Manifest next update: Sun 26 May 2024 01:59:13 +0000 Files and hashes: 1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: /75vhlyb2U4TGSu0lwG1RWNLB0d9G+Kf0ITVX7ez0eM=) 2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: rjPTaqBCALBS5ueFZ1eHOMEzETeUStL1WJkcYwwBOe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Validity Not Before: May 19 01:59:13 2024 GMT Not After : May 26 01:59:13 2024 GMT Subject: CN=66495cf1-00fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:86:4f:97:5b:df:09:cf:44:74:e7:5c:7f: 1b:c5:fc:b0:63:cd:2a:f1:88:43:db:8c:a7:71:26: 7a:22:f3:9d:47:64:4d:89:fd:56:8e:90:8e:64:f0: 3c:5c:09:d2:be:ad:fa:a9:ef:15:f6:8e:81:48:0f: 07:05:dc:b4:d3:55:2e:91:e7:d2:73:61:f7:6a:6a: a4:58:f7:c8:62:03:3f:1f:9b:bd:72:d5:89:69:4a: 9b:15:9f:e1:31:82:6d:9c:b1:08:aa:c4:33:84:c6: d9:0e:26:a6:7a:17:fb:0a:79:25:16:e5:42:d4:99: 50:60:1e:49:e3:dc:64:63:4c:2a:c0:ef:87:f7:13: 71:e9:b5:f3:bc:33:19:96:37:76:78:c2:cd:19:5e: 40:fe:1b:2c:5c:aa:4b:f3:ff:0d:22:70:4b:5b:b0: 3c:67:5d:c5:a1:aa:46:d3:b7:f7:92:d8:13:b1:de: c9:31:57:58:cd:27:cd:17:d8:cd:23:c6:70:48:43: 94:f5:c7:76:d4:ff:57:5a:11:79:ef:68:40:b5:7d: 32:94:b0:74:5c:1a:50:af:d4:04:9d:fa:c1:3c:a1: 44:d2:93:be:4d:27:34:20:e8:9a:3e:54:60:f9:97: b7:3b:e6:98:6b:28:29:2a:ad:93:e6:38:63:ef:26: 68:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:42:30:12:21:71:E6:F3:CB:A3:7E:DF:8B:FC:9D:BB:8E:FF:66:E2 X509v3 Authority Key Identifier: keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f3:9d:31:d2:79:99:74:66:10:42:80:8d:d9:25:4e:f6:a2: bf:5e:ce:5a:57:84:6b:db:94:33:e7:c6:17:2b:b7:40:dc:71: 22:27:6a:8f:f3:b6:41:0a:9f:f0:6f:d1:9d:14:45:95:10:9e: 84:c2:19:d7:60:90:19:67:cc:db:78:02:cf:66:55:24:1c:f1: 1b:22:6f:48:07:42:16:26:04:2e:06:02:dc:8e:97:53:07:e7: 34:b3:1b:15:37:eb:16:3a:25:9a:d8:92:bc:69:7f:e7:3e:88: b4:bc:f2:29:b5:13:9f:a4:6d:53:ee:04:d3:52:85:e1:be:c7: a9:fe:18:14:24:9f:d5:b4:13:be:84:e2:ee:01:a4:19:38:ad: c8:b7:d3:24:ee:95:be:d9:74:34:50:1f:e5:e0:1c:5a:18:bf: 1c:8f:07:ad:2a:46:20:50:7b:e1:79:f0:cd:4b:ce:cd:47:43: 36:4d:b8:f4:fd:cf:5a:3f:f8:37:67:45:30:7c:1d:2c:8e:55: 27:f8:cc:b4:20:93:c8:f9:58:30:ed:47:3b:de:e5:98:dc:99: 76:47:04:05:6a:06:71:d1:2a:b1:02:9c:81:fc:73:67:92:df: 06:10:5d:3f:a0:53:35:a7:c6:bc:3d:d5:75:31:75:90:b6:32: 85:3c:d0:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFNzkxMTAvBgNVBAUTKDlDRjMyQ0E1MTE5QTIyRjhBMzMwNTkxMEQ0MDM1RjY4 QjNGQzIxNEMwHhcNMjQwNTE5MDE1OTEzWhcNMjQwNTI2MDE1OTEzWjAYMRYwFAYD VQQDEw02NjQ5NWNmMS0wMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYqGT5db3wnPRHTnXH8bxfywY80q8YhD24yncSZ6IvOdR2RNif1WjpCOZPA8 XAnSvq36qe8V9o6BSA8HBdy001UukefSc2H3amqkWPfIYgM/H5u9ctWJaUqbFZ/h MYJtnLEIqsQzhMbZDiamehf7CnklFuVC1JlQYB5J49xkY0wqwO+H9xNx6bXzvDMZ ljd2eMLNGV5A/hssXKpL8/8NInBLW7A8Z13FoapG07f3ktgTsd7JMVdYzSfNF9jN I8ZwSEOU9cd21P9XWhF572hAtX0ylLB0XBpQr9QEnfrBPKFE0pO+TSc0IOiaPlRg +Ze3O+aYaygpKq2T5jhj7yZoOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFCMBIh cebzy6N+34v8nbuO/2biMB8GA1UdIwQYMBaAFJzzLKURmiL4ozBZENQDX2iz/CFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0U3OS8xMTE1NEREQzEz RTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2aWpNRmtRMUFOZmFMUDhJ VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QTXNwUkdhSXZpak1Ga1ExQU5mYUxQOElVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0U3OS8xMTE1NEREQzEzRTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2 aWpNRmtRMUFOZmFMUDhJVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF850x0nmZdGYQQoCN2SVO9qK/Xs5aV4Rr25Qz58YXK7dA3HEiJ2qP 87ZBCp/wb9GdFEWVEJ6EwhnXYJAZZ8zbeALPZlUkHPEbIm9IB0IWJgQuBgLcjpdT B+c0sxsVN+sWOiWa2JK8aX/nPoi0vPIptROfpG1T7gTTUoXhvsep/hgUJJ/VtBO+ hOLuAaQZOK3It9Mk7pW+2XQ0UB/l4BxaGL8cjwetKkYgUHvhefDNS87NR0M2Tbj0 /c9aP/g3Z0UwfB0sjlUn+My0IJPI+Vgw7Uc73uWY3Jl2RwQFagZx0SqxApyB/HNn kt8GEF0/oFM1p8a8PdV1MXWQtjKFPNCS -----END CERTIFICATE-----Generated at Sun May 19 02:59:04 2024 by rpki-client on console-ams.rpki-client.org