$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json) Hash identifier: CqSgjTBrDSGOn2vWLkCKzERm5BWB9ZYoAER+5a6+TjU= Subject key identifier: 56:18:3C:96:FB:50:27:F1:35:18:B8:84:4C:D4:53:D3:B1:32:A2:6E Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft Manifest number: 05E7 Signing time: Sun 19 May 2024 00:01:23 +0000 Manifest this update: Sun 19 May 2024 00:01:23 +0000 Manifest next update: Sun 26 May 2024 00:01:23 +0000 Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: 1PCoVUz/12tlviHMok086JEh4+MGWpGFzRWF/+dvh+A=) 2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: iVNlEEUpkQ4pO3sAlYnoK5SGYjCiJx3jecw+Vffe23I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Validity Not Before: May 19 00:01:23 2024 GMT Not After : May 26 00:01:23 2024 GMT Subject: CN=66494153-5a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:26:14:bf:c1:68:9e:d4:75:40:b0:be:d2: 49:47:cc:9d:e3:1d:96:74:f9:6d:67:82:4c:e3:89: fc:82:5b:3b:72:d1:ac:9c:61:a9:78:f9:28:47:c0: ab:f7:e9:3d:00:ea:19:65:ce:ac:89:04:3c:76:5c: 08:1f:1c:d0:de:02:72:08:d3:f7:1f:a2:90:ef:ab: 0b:8f:59:6f:f7:64:31:0c:43:16:85:ee:95:df:1a: c8:9a:7e:7d:c9:4e:f0:3e:19:f3:bd:78:c1:df:c8: 25:f7:25:ce:ec:45:56:db:0e:a8:9a:13:d2:b6:3f: 99:38:9b:1b:13:8c:f5:f7:36:fe:fb:3b:2e:19:e1: 17:d4:53:c6:9d:67:2c:33:ae:11:75:00:22:98:a3: e0:09:27:d4:d1:0f:19:ce:6d:a5:b0:05:08:cc:05: 91:ba:9d:96:63:bb:47:6d:58:40:4c:e1:3a:31:50: d6:ce:a9:d5:da:83:51:34:be:cc:78:11:7d:2e:2e: 90:b9:ca:6e:b9:93:f1:04:a0:6d:ae:64:7d:00:4e: aa:a7:60:28:14:e9:68:a4:96:e6:5a:e7:ee:53:9e: dc:0b:0c:ae:0d:9f:63:e1:81:81:69:a9:ae:27:c0: ff:32:12:19:b0:4b:cf:77:16:9b:78:29:45:8e:32: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:18:3C:96:FB:50:27:F1:35:18:B8:84:4C:D4:53:D3:B1:32:A2:6E X509v3 Authority Key Identifier: keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c9:a8:cb:83:a9:5f:26:30:ab:14:ad:9d:e0:95:b9:5d:f8: 87:4d:fa:e5:90:0f:df:e6:23:bd:c5:25:3d:35:63:a4:fe:3e: 8c:f5:eb:02:db:e1:5b:06:42:dc:da:4d:4d:2e:13:60:40:90: f8:11:92:71:ea:4d:e6:e8:b6:f9:2e:d8:ab:2b:3d:c2:51:ae: 6f:55:41:02:5f:d0:7d:2e:6e:e6:f3:9c:b7:d6:df:52:42:a4: 17:bc:87:cf:4a:ae:04:0c:ee:31:88:3a:19:7a:66:9b:4f:61: 3f:0a:b4:a7:eb:1d:f9:75:96:ba:59:02:5c:d0:c4:35:dc:65: 3c:5f:c4:03:42:99:2f:f4:ab:30:03:c0:4b:26:29:8a:14:7d: dd:e7:01:64:0c:74:5a:62:13:f7:76:89:7c:16:2f:e3:56:a9: b0:a2:c0:09:cf:3f:f7:9d:55:ac:a9:2f:02:93:fd:75:2d:dd: 35:5c:0c:a6:97:19:e8:e2:3d:24:d7:88:4c:cf:d4:0f:cb:d3: 28:62:43:57:a6:98:fd:e0:85:91:0c:64:72:6a:79:29:c4:9c: 4f:5f:6f:92:02:0c:15:c6:b6:49:58:26:74:8f:26:bd:4e:1b: 2a:c6:57:77:43:9f:a9:49:eb:f1:7a:79:c6:90:3e:8a:ae:9e: 4e:f1:e5:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF OTA5Rjk1NDQwHhcNMjQwNTE5MDAwMTIzWhcNMjQwNTI2MDAwMTIzWjAYMRYwFAYD VQQDEw02NjQ5NDE1My01YTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2wmFL/BaJ7UdUCwvtJJR8yd4x2WdPltZ4JM44n8gls7ctGsnGGpePkoR8Cr 9+k9AOoZZc6siQQ8dlwIHxzQ3gJyCNP3H6KQ76sLj1lv92QxDEMWhe6V3xrImn59 yU7wPhnzvXjB38gl9yXO7EVW2w6omhPStj+ZOJsbE4z19zb++zsuGeEX1FPGnWcs M64RdQAimKPgCSfU0Q8Zzm2lsAUIzAWRup2WY7tHbVhATOE6MVDWzqnV2oNRNL7M eBF9Li6QucpuuZPxBKBtrmR9AE6qp2AoFOlopJbmWufuU57cCwyuDZ9j4YGBaamu J8D/MhIZsEvPdxabeClFjjIonwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYYPJb7 UCfxNRi4hEzUU9OxMqJuMB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2 MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsyajLg6lfJjCrFK2d4JW5XfiHTfrlkA/f5iO9xSU9NWOk/j6M9esC 2+FbBkLc2k1NLhNgQJD4EZJx6k3m6Lb5LtirKz3CUa5vVUECX9B9Lm7m85y31t9S QqQXvIfPSq4EDO4xiDoZemabT2E/CrSn6x35dZa6WQJc0MQ13GU8X8QDQpkv9Ksw A8BLJimKFH3d5wFkDHRaYhP3dol8Fi/jVqmwosAJzz/3nVWsqS8Ck/11Ld01XAym lxno4j0k14hMz9QPy9MoYkNXppj94IWRDGRyankpxJxPX2+SAgwVxrZJWCZ0jya9 Thsqxld3Q5+pSevxennGkD6Krp5O8eWc -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org