$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: 8iE6CghI3yu8m+3w9se+qWS3/aDrgNNT4wHX1r5FDgo= Subject key identifier: 50:7F:A7:D5:58:21:71:23:93:4E:43:00:A3:FC:D4:F5:C1:D9:FA:ED Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 5A Signing time: Fri 17 May 2024 08:02:44 +0000 Manifest this update: Fri 17 May 2024 08:02:44 +0000 Manifest next update: Fri 24 May 2024 08:02:44 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: wkOeH3FKrbK6wNhi191CmwBLW0BK6D6aJro3XsWwjq8=) 2: 4990DE3AB79C11EE98F9562DC4F9AE02.roa (hash: OARF2Tbwk2edG/VpMR53vDLXWHte5HMFyrQr35ljyts=) 3: 65C7CE029BBC11EEB0288751C4F9AE02.roa (hash: mER927iy7vQUHvDhVMcHoQ3Dv/heW/oKTmk4fsQvNrc=) 4: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: 5sOO/jQ4O74yVLIuI+2i0LD1Cyn9b+LANWHRpepKL7M=) 5: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: 0e05LN2SDiZX/SSemFkZCiPIBxRNvjcncCXU0klfz00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: May 17 08:02:44 2024 GMT Not After : May 24 08:02:44 2024 GMT Subject: CN=66470f24-e8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:cb:21:80:27:a7:ce:f7:30:52:2a:b0:75: 1d:67:54:fd:61:e3:79:b5:a4:c1:2d:d4:69:57:75: 69:9d:17:5d:4c:3c:a8:12:4a:0c:54:d6:de:d5:9d: af:6c:cc:8b:ef:64:59:ee:2f:90:b9:8d:e7:e7:b0: cc:dd:82:85:15:93:4f:1f:89:fc:99:57:ef:bc:05: 24:8d:30:7e:53:60:36:ba:4d:a4:81:01:a7:c0:11: c9:36:c7:0d:71:3a:91:81:89:e9:49:0f:76:d9:75: de:3f:cc:5d:21:fb:4c:0d:9d:5d:9a:97:4d:17:a1: 6b:86:e7:64:96:d1:b2:4e:03:c5:06:db:e2:f7:01: 0d:d0:5a:7f:77:88:ee:43:8d:5a:60:20:1d:10:25: 51:54:49:0a:4f:f0:21:08:97:48:50:10:4b:a3:96: 1a:e9:34:ff:d6:52:c6:f6:e7:38:5d:96:1b:c3:21: 8a:eb:28:57:72:99:90:f9:a3:99:1d:8b:0a:83:70: 3a:63:d7:29:ca:b6:53:e9:1f:91:a7:de:1a:75:02: 54:e4:da:58:3d:e2:94:e9:8c:d0:0b:70:05:3d:6d: 1d:9d:94:f4:1b:e8:4b:0e:1e:7e:ce:b2:9b:6c:26: 74:46:32:8f:2a:6b:c9:05:60:51:dc:c6:43:1e:7b: 69:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7F:A7:D5:58:21:71:23:93:4E:43:00:A3:FC:D4:F5:C1:D9:FA:ED X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7f:1f:be:d0:8b:fe:b4:49:27:b7:88:95:f0:97:3f:fb:f2: 75:84:41:60:41:3c:35:04:e5:42:b2:32:87:e7:f5:02:6e:81: 88:43:79:4a:b0:b4:c2:00:75:5b:ed:84:e6:61:12:3b:3f:98: ac:21:1c:a9:b5:b0:e2:94:4b:1c:fb:28:2f:2c:1a:91:cf:9d: 0b:70:cd:e6:d3:e6:b7:69:86:00:0d:f2:b6:6c:78:91:91:1d: 18:72:c4:6f:35:ba:94:31:32:15:cb:27:61:03:dd:d6:3f:9f: a7:ab:cd:5b:15:a2:4f:a7:88:02:12:88:60:f6:49:dc:bf:9d: f9:d2:d3:8c:b8:be:97:5f:9f:42:ce:e1:a8:8a:64:60:0b:6e: 55:a5:84:8b:d1:e7:ac:06:8e:51:82:26:88:13:85:7c:c2:2a: d9:9d:69:8f:43:10:20:f5:ba:21:08:15:e6:81:f8:b4:e9:ba: cf:52:b6:1c:e9:17:e9:84:86:93:db:ca:19:7a:1d:98:5f:25: 90:cf:b3:4c:0d:1e:83:6d:fc:0d:a1:aa:f2:24:a4:6c:a4:87: 14:90:dd:05:2e:44:07:55:18:73:d9:1f:d0:6f:88:39:8b:15: 0e:07:af:51:c7:bf:99:7b:6e:f2:d2:47:b6:ee:24:32:06:eb: 38:fb:8c:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUQyQzExMC8GA1UEBRMoOUQzNDE0MjgzQjIyN0I4RjUxMkYzMDVGMkFDREI0M0NE RTlFNEQxMjAeFw0yNDA1MTcwODAyNDRaFw0yNDA1MjQwODAyNDRaMBgxFjAUBgNV BAMTDTY2NDcwZjI0LWU4ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBx8shgCenzvcwUiqwdR1nVP1h43m1pMEt1GlXdWmdF11MPKgSSgxU1t7Vna9s zIvvZFnuL5C5jefnsMzdgoUVk08fifyZV++8BSSNMH5TYDa6TaSBAafAEck2xw1x OpGBielJD3bZdd4/zF0h+0wNnV2al00XoWuG52SW0bJOA8UG2+L3AQ3QWn93iO5D jVpgIB0QJVFUSQpP8CEIl0hQEEujlhrpNP/WUsb25zhdlhvDIYrrKFdymZD5o5kd iwqDcDpj1ynKtlPpH5Gn3hp1AlTk2lg94pTpjNALcAU9bR2dlPQb6EsOHn7Ospts JnRGMo8qa8kFYFHcxkMee2lLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUH+n1Vgh cSOTTkMAo/zU9cHZ+u0wHwYDVR0jBBgwFoAUnTQUKDsie49RLzBfKs20PN6eTRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRDJDLzAwMzczQzZDOUJC QzExRUU4NTFBREQ1MEM0RjlBRTAyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvblRRVUtEc2llNDlSTHpCZktzMjBQTjZlVFJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF RDJDLzAwMzczQzZDOUJCQzExRUU4NTFBREQ1MEM0RjlBRTAyL25UUVVLRHNpZTQ5 Ukx6QmZLczIwUE42ZVRSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG9/H77Qi/60SSe3iJXwlz/78nWEQWBBPDUE5UKyMofn9QJugYhDeUqw tMIAdVvthOZhEjs/mKwhHKm1sOKUSxz7KC8sGpHPnQtwzebT5rdphgAN8rZseJGR HRhyxG81upQxMhXLJ2ED3dY/n6erzVsVok+niAISiGD2Sdy/nfnS04y4vpdfn0LO 4aiKZGALblWlhIvR56wGjlGCJogThXzCKtmdaY9DECD1uiEIFeaB+LTpus9Sthzp F+mEhpPbyhl6HZhfJZDPs0wNHoNt/A2hqvIkpGykhxSQ3QUuRAdVGHPZH9BviDmL FQ4Hr1HHv5l7bvLSR7buJDIG6zj7jMY= -----END CERTIFICATE-----Generated at Fri May 17 08:52:45 2024 by rpki-client on console-ams.rpki-client.org