$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: 5XJDQGcqmNtL5L42BevVt+YZtNVps0Y3Tm6Kgx9gFSM= Subject key identifier: 9B:C3:D0:36:8B:69:1B:2E:7D:7F:F9:30:85:D6:7B:8E:95:CE:08:75 Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 60 Signing time: Sun 19 May 2024 07:42:18 +0000 Manifest this update: Sun 19 May 2024 07:42:17 +0000 Manifest next update: Sun 26 May 2024 07:42:17 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: j3QtK3tRtg0qHZbmkqqwJEWzzzE4ffzPHJJTpbz5cBc=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: G380Ha8QJtSqiTvn7fBNSb9egYZP9g7joO+n3Qn27+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: May 19 07:42:17 2024 GMT Not After : May 26 07:42:17 2024 GMT Subject: CN=6649ad5a-6b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:04:26:0b:d5:28:a6:a5:20:7a:c9:7d:35: 6a:bb:39:b9:a8:16:1c:af:bd:73:19:d0:04:61:02: fe:57:12:98:f0:04:f6:d8:d8:ca:69:d1:ea:62:b7: c8:1a:97:7b:0d:29:6b:ac:01:ca:78:5f:bc:f6:03: be:25:49:6f:65:1d:25:4e:61:c2:33:bb:54:2f:78: ba:fc:05:20:06:17:39:be:2c:51:5f:8d:d1:59:17: 30:87:4f:cb:ff:a9:68:90:4d:33:9e:f4:27:be:89: f8:98:38:56:ac:bc:90:54:0a:1e:55:19:8b:a1:a8: cd:d3:4d:5e:57:30:3a:3f:7a:b7:0a:c2:01:d6:ee: e9:b4:6a:15:e5:6f:cd:31:8a:ce:10:cd:dc:cb:0a: d9:16:a5:96:77:3c:45:41:6b:03:e4:11:75:4a:d4: b4:fd:03:4a:a8:36:89:57:22:20:23:2c:d5:08:62: fe:83:f3:d0:2f:1f:de:2b:09:1f:c0:ca:a3:6f:f6: 6a:d0:70:a0:71:8e:50:eb:db:c1:39:d0:e4:f2:b8: eb:67:e0:41:5d:19:b5:8e:2d:41:b2:55:1b:1e:30: 2b:98:d6:d0:db:fb:4e:04:03:a1:1d:46:12:4a:f3: 62:a1:5b:70:9d:9d:5b:de:09:2b:5c:36:a5:c5:18: f8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C3:D0:36:8B:69:1B:2E:7D:7F:F9:30:85:D6:7B:8E:95:CE:08:75 X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:35:0b:01:08:76:00:48:ae:ef:36:83:c8:30:ac:c2:f6:a1: 3f:4e:78:e6:bc:01:5b:9d:52:c0:73:d5:da:fc:59:02:dd:e6: ba:a8:a6:c5:1e:58:25:c0:2d:36:e7:e7:c1:b9:73:ca:7a:e3: 30:cb:e3:6c:2c:f5:fd:3f:e0:f4:c2:d1:71:76:01:f7:db:56: b2:45:94:26:5e:ba:58:06:8f:36:3b:18:60:df:90:9f:72:0c: 73:8f:43:f5:c3:cc:9b:bd:ff:69:09:2a:07:67:9b:f6:0f:e8: 00:15:49:28:70:62:b3:fb:ad:39:fe:89:31:9a:7a:26:ec:51: a4:da:99:d3:c9:e0:91:7d:88:d9:3d:5a:f6:3c:ec:c4:ad:ee: 1d:aa:6c:36:64:81:84:73:20:0d:39:86:e1:10:93:00:63:02: 4b:63:b7:a3:dd:ed:81:19:27:65:ae:85:da:a3:db:9f:7e:87: ae:b0:c5:3b:46:44:cf:bb:b5:5b:98:d9:8f:d2:2e:15:b3:2f: c3:57:57:04:69:b2:69:be:79:3d:72:9a:ad:c1:b6:f7:df:6f: 1e:b5:4e:da:dd:ec:5d:88:b3:97:cc:c5:b1:6b:de:01:52:a2: 9c:7c:37:c3:81:00:ea:38:e7:9c:63:bb:e1:08:18:e4:e4:79: b8:81:9d:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkNERDExMC8GA1UEBRMoOUU0MkIxRjY5MTQ2MEUyODQ2RkE3MUYwNkRDODlCRjJD NzQxREI5QTAeFw0yNDA1MTkwNzQyMTdaFw0yNDA1MjYwNzQyMTdaMBgxFjAUBgNV BAMTDTY2NDlhZDVhLTZiMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD4gQmC9UopqUgesl9NWq7ObmoFhyvvXMZ0ARhAv5XEpjwBPbY2Mpp0epit8ga l3sNKWusAcp4X7z2A74lSW9lHSVOYcIzu1QveLr8BSAGFzm+LFFfjdFZFzCHT8v/ qWiQTTOe9Ce+ifiYOFasvJBUCh5VGYuhqM3TTV5XMDo/ercKwgHW7um0ahXlb80x is4QzdzLCtkWpZZ3PEVBawPkEXVK1LT9A0qoNolXIiAjLNUIYv6D89AvH94rCR/A yqNv9mrQcKBxjlDr28E50OTyuOtn4EFdGbWOLUGyVRseMCuY1tDb+04EA6EdRhJK 82KhW3CdnVveCStcNqXFGPhHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm8PQNotp Gy59f/kwhdZ7jpXOCHUwHwYDVR0jBBgwFoAUnkKx9pFGDihG+nHwbcib8sdB25ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCQ0RELzM0OEFEOEFDODYx MzExRUVBOEM5NTA0MkM0RjlBRTAyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmtLeDlwRkdEaWhHLW5Id2JjaWI4c2RCMjVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC Q0RELzM0OEFEOEFDODYxMzExRUVBOEM5NTA0MkM0RjlBRTAyL25rS3g5cEZHRGlo Ry1uSHdiY2liOHNkQjI1by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADE1CwEIdgBIru82g8gwrML2oT9OeOa8AVudUsBz1dr8WQLd5rqopsUe WCXALTbn58G5c8p64zDL42ws9f0/4PTC0XF2AffbVrJFlCZeulgGjzY7GGDfkJ9y DHOPQ/XDzJu9/2kJKgdnm/YP6AAVSShwYrP7rTn+iTGaeibsUaTamdPJ4JF9iNk9 WvY87MSt7h2qbDZkgYRzIA05huEQkwBjAktjt6Pd7YEZJ2Wuhdqj259+h66wxTtG RM+7tVuY2Y/SLhWzL8NXVwRpsmm+eT1ymq3Btvffbx61Ttrd7F2Is5fMxbFr3gFS opx8N8OBAOo455xju+EIGOTkebiBnYQ= -----END CERTIFICATE-----Generated at Sun May 19 08:26:42 2024 by rpki-client on console-fra.rpki-client.org