$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft File: nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json) Hash identifier: shxbH0WjKU5ZVQKLz1dttlyx8Q3plKe9KN+Y+IF01xE= Subject key identifier: 1B:6B:E5:B1:2C:51:CC:A3:91:CE:E4:86:AC:B4:95:4A:BC:9A:67:76 Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft Manifest number: 0369 Signing time: Sun 19 May 2024 02:50:10 +0000 Manifest this update: Sun 19 May 2024 02:50:09 +0000 Manifest next update: Sun 26 May 2024 02:50:09 +0000 Files and hashes: 1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: NYHI+S6g/Y66JofsHJDx/UIxvV4EzpgxGKC0ddIRfDY=) 2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: hiz8orQvD2O6/cswN3b9tybf+/qTphdbwHRPLrZEniY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Validity Not Before: May 19 02:50:09 2024 GMT Not After : May 26 02:50:09 2024 GMT Subject: CN=664968e1-964b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:4d:ba:48:04:19:84:9f:a1:e1:38:42:a2: 79:99:52:58:49:d1:6f:22:ae:79:17:11:82:2d:39: 1b:e8:21:8a:72:ad:61:3b:7c:46:92:59:b9:b4:0a: 86:b7:e9:cf:66:ea:38:45:b1:e7:e0:c5:1b:ef:c4: 94:0a:a6:f4:16:fd:a3:d9:1b:4d:b6:10:1f:4d:2a: 76:19:44:ef:a7:e3:cf:c7:b4:07:7d:71:d6:58:85: a2:d0:da:63:96:a1:a8:59:14:d3:8e:d8:f3:da:a5: 9c:22:32:7f:78:50:c6:9b:d8:bb:e3:d9:b9:b0:d5: 87:ea:77:02:1f:6b:8f:a6:5a:ef:d7:b9:7b:86:61: 82:20:ee:d3:8c:cf:6b:15:5c:96:4e:36:4c:b7:6f: c3:6a:bd:f9:7f:40:31:04:87:65:ff:c0:71:82:fb: 1d:90:ef:9d:04:fc:b2:ac:cd:34:2d:36:06:4a:28: 3a:2a:17:28:72:18:8e:75:f3:ab:dc:8e:02:96:00: 26:3f:12:03:c6:78:4b:07:7c:e2:d1:07:ec:a8:c1: e4:a4:24:44:61:53:f0:db:45:4d:b8:9e:54:89:60: 2e:8d:3f:d2:84:66:e7:d7:41:60:04:3d:a4:3a:28: 20:49:a3:32:82:54:3a:9d:e8:47:92:0b:42:fd:bf: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6B:E5:B1:2C:51:CC:A3:91:CE:E4:86:AC:B4:95:4A:BC:9A:67:76 X509v3 Authority Key Identifier: keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:30:da:25:0a:94:e7:f5:5f:e1:57:71:53:96:d5:aa:1e:6b: 53:52:31:02:b6:5d:36:75:f3:40:68:b6:f0:a1:72:97:c2:06: 1b:a5:77:c9:1f:ce:cd:52:6a:74:79:f7:62:9d:87:2c:0a:5e: fe:40:89:95:c5:d6:f1:e1:8a:17:9b:7f:2f:e0:c2:cc:af:b7: 2c:3f:19:6c:bd:f2:53:c8:f2:a2:23:65:86:5d:b7:35:fd:e0: 8c:c4:54:ec:6d:03:fb:2c:33:01:4c:ba:61:10:29:6d:42:41: aa:34:8a:58:9a:6f:8a:c0:b0:b2:cd:1a:91:de:78:b6:1e:8e: 9c:2f:ac:66:91:9d:6e:f0:d1:f5:07:5c:e0:4b:ca:0b:70:91: e3:d1:8a:d8:dc:13:92:8b:e2:3f:10:77:ea:03:10:47:85:07: 5f:38:7d:9e:cc:64:cc:e4:2e:4f:33:98:d6:f3:c8:67:9f:96: 98:07:aa:55:18:d3:da:eb:31:80:b1:54:b1:f0:f2:2f:63:a5: 2b:eb:78:7e:b3:67:b5:7a:75:15:6a:39:e3:0c:4c:e4:bc:91: 5c:f6:62:69:14:f6:d8:dd:27:9d:82:36:e7:87:1f:71:63:69: cc:f9:45:1a:71:1f:03:4c:38:26:83:23:d8:3c:25:50:60:30: 54:35:79:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwM0IxMTAvBgNVBAUTKDlGMzU2NjA5NUMwQjBDMDIzMUQwQkI5NjkyNUUwMzg5 RDFDMjZDNTcwHhcNMjQwNTE5MDI1MDA5WhcNMjQwNTI2MDI1MDA5WjAYMRYwFAYD VQQDEw02NjQ5NjhlMS05NjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RBNukgEGYSfoeE4QqJ5mVJYSdFvIq55FxGCLTkb6CGKcq1hO3xGklm5tAqG t+nPZuo4RbHn4MUb78SUCqb0Fv2j2RtNthAfTSp2GUTvp+PPx7QHfXHWWIWi0Npj lqGoWRTTjtjz2qWcIjJ/eFDGm9i749m5sNWH6ncCH2uPplrv17l7hmGCIO7TjM9r FVyWTjZMt2/Dar35f0AxBIdl/8BxgvsdkO+dBPyyrM00LTYGSig6KhcochiOdfOr 3I4ClgAmPxIDxnhLB3zi0QfsqMHkpCREYVPw20VNuJ5UiWAujT/ShGbn10FgBD2k OiggSaMyglQ6nehHkgtC/b9zKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtr5bEs Ucyjkc7khqy0lUq8mmd2MB8GA1UdIwQYMBaAFJ81ZglcCwwCMdC7lpJeA4nRwmxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDAzQi80QUE3NEI3NDYy REExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERBSXgwTHVXa2w0RGlkSENi RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL256Vm1DVndMREFJeDBMdVdrbDREaWRIQ2JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDAzQi80QUE3NEI3NDYyREExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERB SXgwTHVXa2w0RGlkSENiRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANMNolCpTn9V/hV3FTltWqHmtTUjECtl02dfNAaLbwoXKXwgYbpXfJ H87NUmp0efdinYcsCl7+QImVxdbx4YoXm38v4MLMr7csPxlsvfJTyPKiI2WGXbc1 /eCMxFTsbQP7LDMBTLphECltQkGqNIpYmm+KwLCyzRqR3ni2Ho6cL6xmkZ1u8NH1 B1zgS8oLcJHj0YrY3BOSi+I/EHfqAxBHhQdfOH2ezGTM5C5PM5jW88hnn5aYB6pV GNPa6zGAsVSx8PIvY6Ur63h+s2e1enUVajnjDEzkvJFc9mJpFPbY3Sedgjbnhx9x Y2nM+UUacR8DTDgmgyPYPCVQYDBUNXnF -----END CERTIFICATE-----Generated at Sun May 19 03:38:12 2024 by rpki-client on console-ams.rpki-client.org