$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.mft File: nPXCdbezFi0VcUEx4lSTsJON9vw.mft (raw, json) Hash identifier: 7szHeZIomtZ+SduiPmukUDq4bNe9pQ3Q5rdvOulgdFA= Subject key identifier: 94:57:CC:21:8C:9A:8B:C8:4C:EC:D7:D8:41:3B:EC:DF:7D:B2:0D:25 Authority key identifier: 9C:F5:C2:75:B7:B3:16:2D:15:71:41:31:E2:54:93:B0:93:8D:F6:FC Certificate issuer: /CN=A911CE40/serialNumber=9CF5C275B7B3162D15714131E25493B0938DF6FC Certificate serial: 0BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPXCdbezFi0VcUEx4lSTsJON9vw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.mft Manifest number: 0BB0 Signing time: Sat 18 May 2024 19:23:28 +0000 Manifest this update: Sat 18 May 2024 19:23:27 +0000 Manifest next update: Sat 25 May 2024 19:23:27 +0000 Files and hashes: 1: nPXCdbezFi0VcUEx4lSTsJON9vw.crl (hash: 7s1RWcg7BInxwSHANxPTcK/igTkltKhd3KgWsojOXYw=) 2: 9D53699EFB2B11ED95D51E34C4F9AE02.roa (hash: cZhlJly2ui+vANoaiXdXwEsrCKIMJDzJscGKVCKF7mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.crl rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPXCdbezFi0VcUEx4lSTsJON9vw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CE40/serialNumber=9CF5C275B7B3162D15714131E25493B0938DF6FC Validity Not Before: May 18 19:23:27 2024 GMT Not After : May 25 19:23:27 2024 GMT Subject: CN=66490030-c22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:89:4f:cf:3f:e6:1a:fa:42:bd:49:fe:ff: 72:75:3d:88:d3:4e:c7:72:e7:a0:8b:1b:16:7a:13: e3:35:80:78:97:a9:08:3b:d7:c1:92:88:39:b1:19: bf:f2:58:82:5a:f1:35:a8:37:6c:bc:0b:6e:f8:a0: c5:62:d3:fa:cc:5e:c1:81:02:90:90:64:96:53:21: 69:08:71:ca:a0:34:12:ff:47:a8:ab:58:82:1b:4d: d7:11:b3:50:9e:96:7a:4e:42:5a:5e:86:b2:2b:ad: aa:49:a1:4e:8c:72:5a:96:2b:ba:13:5a:d5:9b:c1: 74:0e:e7:30:05:7e:8a:c8:5d:50:db:34:e5:77:78: 55:ae:34:52:96:ed:e0:04:37:a2:c2:1a:9f:20:db: 9c:07:07:cc:c5:00:c3:68:d4:4f:84:fe:94:9a:01: 6d:6e:f7:5d:3a:7a:a7:be:09:c3:7a:f4:70:31:5c: 28:6d:77:f4:9b:6f:61:f2:d5:3d:10:b6:08:b8:63: bc:e8:de:2c:48:6e:7d:97:08:51:27:b6:f5:eb:ec: f4:2f:0a:00:6a:34:72:4c:37:75:fe:09:2f:b8:95: 9f:6d:00:f3:56:1b:0c:ea:f9:7d:fb:eb:d4:b5:3e: 86:85:c0:7f:8b:b6:ac:d8:6c:95:72:23:26:d4:0e: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:CC:21:8C:9A:8B:C8:4C:EC:D7:D8:41:3B:EC:DF:7D:B2:0D:25 X509v3 Authority Key Identifier: keyid:9C:F5:C2:75:B7:B3:16:2D:15:71:41:31:E2:54:93:B0:93:8D:F6:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPXCdbezFi0VcUEx4lSTsJON9vw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:7e:dc:64:56:40:ab:5c:ec:ce:83:4d:c2:36:d5:18:86:ad: 40:8c:24:17:21:9f:f1:d1:d1:37:b1:16:fd:7a:ab:cc:93:68: fb:97:68:ab:99:5b:82:2d:45:82:5c:7f:db:83:a2:e0:a0:0a: a2:b1:40:03:c9:d8:66:88:46:0f:9d:ac:d2:ed:91:83:2e:ae: 3c:f3:45:ce:8e:c5:ee:86:4c:98:4e:fa:0b:e0:35:28:e2:97: ec:f5:3e:8b:fe:28:30:d9:fb:e1:0f:8d:18:a4:73:2f:26:82: 3f:0a:29:82:1d:59:a4:90:d2:2d:27:a0:4f:d5:81:a2:84:ce: 6b:07:13:73:d4:f5:2d:d7:00:36:8a:bf:c3:dd:8e:87:6b:ec: 4a:f6:d1:d5:c3:3b:f4:77:d6:3e:82:8e:12:52:62:1a:cf:34: 71:7a:5f:0e:fe:1e:97:67:48:b9:6a:8a:bc:16:0e:bb:90:82: a7:ab:fe:77:ef:01:49:16:c1:4f:4f:b3:8f:3b:a5:3e:2f:51: d8:fa:d9:dd:9e:15:86:fe:b9:73:c3:59:f0:71:f4:22:23:c0: c8:90:a0:42:0e:ed:d0:92:d7:a2:df:ff:c7:a8:66:a6:6b:85: ec:6d:2b:3a:c1:d1:bb:85:3c:39:6f:78:34:d6:3e:a0:fb:a1: 3e:ff:e2:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNFNDAxMTAvBgNVBAUTKDlDRjVDMjc1QjdCMzE2MkQxNTcxNDEzMUUyNTQ5M0Iw OTM4REY2RkMwHhcNMjQwNTE4MTkyMzI3WhcNMjQwNTI1MTkyMzI3WjAYMRYwFAYD VQQDEw02NjQ5MDAzMC1jMjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGuJT88/5hr6Qr1J/v9ydT2I007HcuegixsWehPjNYB4l6kIO9fBkog5sRm/ 8liCWvE1qDdsvAtu+KDFYtP6zF7BgQKQkGSWUyFpCHHKoDQS/0eoq1iCG03XEbNQ npZ6TkJaXoayK62qSaFOjHJaliu6E1rVm8F0DucwBX6KyF1Q2zTld3hVrjRSlu3g BDeiwhqfINucBwfMxQDDaNRPhP6UmgFtbvddOnqnvgnDevRwMVwobXf0m29h8tU9 ELYIuGO86N4sSG59lwhRJ7b16+z0LwoAajRyTDd1/gkvuJWfbQDzVhsM6vl9++vU tT6GhcB/i7as2GyVciMm1A7T4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRXzCGM movITOzX2EE77N99sg0lMB8GA1UdIwQYMBaAFJz1wnW3sxYtFXFBMeJUk7CTjfb8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0U0MC8wMDQyQUQ2QTA1 MzIxMUVBOTU3NzY4NTFDNEY5QUUwMi9uUFhDZGJlekZpMFZjVUV4NGxTVHNKT045 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QWENkYmV6RmkwVmNVRXg0bFNUc0pPTjl2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0U0MC8wMDQyQUQ2QTA1MzIxMUVBOTU3NzY4NTFDNEY5QUUwMi9uUFhDZGJlekZp MFZjVUV4NGxTVHNKT045dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZftxkVkCrXOzOg03CNtUYhq1AjCQXIZ/x0dE3sRb9eqvMk2j7l2ir mVuCLUWCXH/bg6LgoAqisUADydhmiEYPnazS7ZGDLq4880XOjsXuhkyYTvoL4DUo 4pfs9T6L/igw2fvhD40YpHMvJoI/CimCHVmkkNItJ6BP1YGihM5rBxNz1PUt1wA2 ir/D3Y6Ha+xK9tHVwzv0d9Y+go4SUmIazzRxel8O/h6XZ0i5aoq8Fg67kIKnq/53 7wFJFsFPT7OPO6U+L1HY+tndnhWG/rlzw1nwcfQiI8DIkKBCDu3Qktei3//HqGam a4XsbSs6wdG7hTw5b3g01j6g+6E+/+Ib -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org