$ rpki-client -vvf rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft File: NdqtT3Wuk43GUzSEzejIF93Csig.mft (raw, json) Hash identifier: lYls9I8AJxbigkeJ4xDg/6ayVIALAtJjtG9o0wtu/DU= Subject key identifier: 35:8B:B5:7A:C5:8C:41:39:C1:89:AC:B6:1F:0D:C7:A6:74:2D:A6:D9 Authority key identifier: 35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 Certificate issuer: /CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft Manifest number: 0335 Signing time: Sun 19 May 2024 02:59:13 +0000 Manifest this update: Sun 19 May 2024 02:59:12 +0000 Manifest next update: Sun 26 May 2024 02:59:12 +0000 Files and hashes: 1: NdqtT3Wuk43GUzSEzejIF93Csig.crl (hash: gI15cPBkrpVMXAW+gPX1bvcUG0edwjEfgZuVub0Ozxc=) 2: E9ED080A785011ECBD2B6A10C4F9AE02.roa (hash: gUq1YbiXljB/vgz+My+3uXVVQGjJZX+vawmC3PqjAu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E351/serialNumber=35DAAD4F75AE938DC6533484CDE8C817DDC2B228 Validity Not Before: May 19 02:59:12 2024 GMT Not After : May 26 02:59:12 2024 GMT Subject: CN=66496b01-594f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:ee:ec:ca:a2:05:03:3b:f2:81:fc:d2:e5: 3c:b6:ab:81:31:f4:4e:2b:d4:ef:4b:0a:fb:29:4f: 8b:06:7c:44:73:a5:d4:d4:b8:4b:f0:0f:68:83:58: ef:20:e1:d1:e4:9c:98:51:8d:a6:c3:26:68:e1:3a: 67:25:ea:49:c8:d9:f1:de:7c:d5:df:ec:88:14:be: fd:b6:3e:af:6f:df:9b:34:84:c9:3f:ca:ab:99:b7: 7d:72:91:c7:a4:5c:7e:64:76:66:c1:3a:b5:59:70: 38:16:30:78:d3:b7:2e:47:2e:f2:8a:bd:38:c7:95: 69:55:20:3c:66:76:a1:10:02:a9:dc:4c:da:d5:d7: 69:df:73:38:b9:c4:73:43:5e:cb:cb:23:43:8e:cb: 36:41:f2:90:a8:27:2a:05:2d:62:4a:a0:70:19:7b: 62:e4:2b:d0:8f:f3:33:ad:7b:c8:9c:10:15:f8:db: 30:cb:53:4d:75:55:9a:b2:43:ca:e2:2c:b1:5e:fb: dc:44:81:10:c6:52:16:98:55:42:44:1b:9b:6f:ea: c2:37:de:d1:0c:9e:b9:b9:b7:f2:93:ad:a7:13:73: 24:4b:6b:20:07:16:ab:34:d3:df:d2:cb:92:19:d6: ef:85:25:54:dd:08:53:16:10:5f:53:c0:c9:b3:0b: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8B:B5:7A:C5:8C:41:39:C1:89:AC:B6:1F:0D:C7:A6:74:2D:A6:D9 X509v3 Authority Key Identifier: keyid:35:DA:AD:4F:75:AE:93:8D:C6:53:34:84:CD:E8:C8:17:DD:C2:B2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NdqtT3Wuk43GUzSEzejIF93Csig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E351/5BCF88A6784E11EC8A44450EC4F9AE02/NdqtT3Wuk43GUzSEzejIF93Csig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1f:a2:9a:b4:1c:61:a7:87:6e:72:6a:27:e0:3a:e7:f9:c1: d5:a1:26:d7:8b:b6:37:24:56:4b:44:d1:5f:0e:87:b6:b7:59: 1c:a1:91:94:08:43:72:cb:0a:df:cc:6e:d2:1e:26:20:d9:47: 8e:8b:de:42:db:b2:14:6c:90:26:da:99:13:8e:7c:c1:9c:fb: e7:f7:60:24:df:e6:5f:92:a6:ea:e3:77:b8:14:2e:cd:a1:fd: 03:ad:27:55:ec:a5:13:65:44:c6:73:f2:dc:1b:fa:84:3d:a1: 27:e4:1d:b0:2a:58:6a:f7:e1:e3:1a:9b:71:5c:93:16:1d:de: 8f:f7:ec:9f:95:19:56:10:85:0a:aa:a5:4a:cc:3b:8d:68:54: c1:26:5c:16:38:3d:5a:bf:11:a4:ef:f5:24:8f:36:e2:88:14: 93:f1:ab:1f:b3:83:0a:8c:f6:ee:29:ad:ba:b3:b4:49:f1:37: a6:e3:06:f7:16:57:3a:39:05:2a:4f:43:ba:f2:1e:85:ee:14: 90:91:f3:fb:6d:82:62:b3:05:4d:02:40:94:ec:1e:98:f9:cb: 88:05:43:97:8c:e5:c9:b0:3d:9e:5a:b5:74:78:db:88:2e:d5: 34:2f:2a:1e:6d:b3:98:83:a8:ad:20:e7:6b:e9:6f:8d:5b:8b: 8c:1d:35:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUzNTExMTAvBgNVBAUTKDM1REFBRDRGNzVBRTkzOERDNjUzMzQ4NENERThDODE3 RERDMkIyMjgwHhcNMjQwNTE5MDI1OTEyWhcNMjQwNTI2MDI1OTEyWjAYMRYwFAYD VQQDEw02NjQ5NmIwMS01OTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFHu7MqiBQM78oH80uU8tquBMfROK9TvSwr7KU+LBnxEc6XU1LhL8A9og1jv IOHR5JyYUY2mwyZo4TpnJepJyNnx3nzV3+yIFL79tj6vb9+bNITJP8qrmbd9cpHH pFx+ZHZmwTq1WXA4FjB407cuRy7yir04x5VpVSA8ZnahEAKp3Eza1ddp33M4ucRz Q17LyyNDjss2QfKQqCcqBS1iSqBwGXti5CvQj/MzrXvInBAV+Nswy1NNdVWaskPK 4iyxXvvcRIEQxlIWmFVCRBubb+rCN97RDJ65ubfyk62nE3MkS2sgBxarNNPf0suS GdbvhSVU3QhTFhBfU8DJswv3ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWLtXrF jEE5wYmsth8Nx6Z0LabZMB8GA1UdIwQYMBaAFDXarU91rpONxlM0hM3oyBfdwrIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTM1MS81QkNGODhBNjc4 NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0M0dVelNFemVqSUY5M0Nz aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05kcXRUM1d1azQzR1V6U0V6ZWpJRjkzQ3NpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTM1MS81QkNGODhBNjc4NEUxMUVDOEE0NDQ1MEVDNEY5QUUwMi9OZHF0VDNXdWs0 M0dVelNFemVqSUY5M0NzaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8H6KatBxhp4ducmon4Drn+cHVoSbXi7Y3JFZLRNFfDoe2t1kcoZGU CENyywrfzG7SHiYg2UeOi95C27IUbJAm2pkTjnzBnPvn92Ak3+Zfkqbq43e4FC7N of0DrSdV7KUTZUTGc/LcG/qEPaEn5B2wKlhq9+HjGptxXJMWHd6P9+yflRlWEIUK qqVKzDuNaFTBJlwWOD1avxGk7/UkjzbiiBST8asfs4MKjPbuKa26s7RJ8Tem4wb3 Flc6OQUqT0O68h6F7hSQkfP7bYJiswVNAkCU7B6Y+cuIBUOXjOXJsD2eWrV0eNuI LtU0LyoebbOYg6itIOdr6W+NW4uMHTXf -----END CERTIFICATE-----Generated at Sun May 19 03:38:12 2024 by rpki-client on console-ams.rpki-client.org