$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: zGe1FF+VRQS/7rNszPf19z6Lh7+vUKWxJ98QWcrPb58= Subject key identifier: 78:C5:E7:31:67:16:0D:B2:52:23:F6:83:48:8D:BE:8B:E2:A6:14:7F Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1D0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1D02 Signing time: Sat 18 May 2024 16:31:47 +0000 Manifest this update: Sat 18 May 2024 16:31:46 +0000 Manifest next update: Sat 25 May 2024 16:31:46 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: UKNRWdXhDQ/LQV05an3oqogI33br3D65s/oKvgosFwg=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: zl57w1TNg6NspawbNa3tDP7qcbUoMTlpy31DBaau4ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7438 (0x1d0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: May 18 16:31:46 2024 GMT Not After : May 25 16:31:46 2024 GMT Subject: CN=6648d7f2-1aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:2e:91:32:0e:b6:79:65:fa:9a:83:41:9d: ee:fb:dd:d5:e7:87:ec:2e:fc:a7:4e:66:82:72:1a: 5c:37:89:2e:26:68:33:a5:52:57:b9:4b:69:2f:fc: fb:e3:58:e0:f9:2a:fc:b8:ed:03:0a:73:28:c7:22: 1e:28:96:23:b3:fc:82:02:d4:eb:82:bf:88:7f:a1: a3:cb:c0:d3:9c:c9:6f:26:19:0f:8c:9e:19:7f:08: 9e:c8:03:02:c3:1e:67:85:97:f6:e8:f0:66:b2:d9: 7b:7a:03:50:0d:97:81:73:52:3a:dd:1f:cd:b0:9c: c0:a2:d0:b6:18:3b:f6:25:78:b7:5a:82:53:d1:d0: 03:c3:f3:74:b6:cf:92:9c:af:c6:6d:e6:39:a1:8c: 45:9d:c1:70:89:ed:11:5a:48:fd:4b:c8:32:76:76: ec:f7:03:24:65:54:b6:ae:54:e8:d0:b8:10:57:94: 45:82:93:9e:a8:75:9b:54:a6:aa:d9:9a:51:a5:fa: 83:1b:4b:d0:9d:dc:64:3d:b0:73:28:2b:10:85:f3: ff:36:f5:4c:70:e3:74:ab:df:a1:c5:ad:a9:d5:e8: 72:c6:c3:14:7f:d3:b1:0a:bf:9b:e7:7f:03:63:df: 07:40:75:4b:76:2e:5f:9d:40:16:1f:a4:75:e2:ff: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C5:E7:31:67:16:0D:B2:52:23:F6:83:48:8D:BE:8B:E2:A6:14:7F X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:56:a9:c9:4e:ab:50:7e:0c:87:e5:f5:64:92:4e:59:3c:3f: 20:85:86:cb:da:12:34:a0:84:ef:89:c4:a0:77:e8:e0:ad:54: aa:51:fd:59:f9:70:9f:d5:ca:1b:99:38:9e:9a:47:3f:94:60: 55:c9:f6:1e:47:88:a6:20:c1:8c:85:06:34:05:b4:f8:38:82: 05:10:bb:36:6b:7b:ad:13:3b:f8:c9:66:30:2f:13:44:e5:0f: 8c:bd:50:1c:03:ca:6f:ca:1f:00:1e:e7:c9:f7:0b:0f:d9:e7: 13:d9:af:bf:6d:be:c5:df:d4:22:17:3e:4b:22:1c:4d:73:6f: d8:ef:e2:fd:6a:d5:3e:e0:62:62:3a:95:78:73:8f:36:ec:79: fd:59:c8:4d:cd:c9:1c:e5:58:0a:6d:03:ae:3c:0e:0a:12:ba: 7e:87:ed:db:59:c7:3b:00:33:36:46:95:f3:d5:41:7e:fd:71: 99:2e:a1:26:3c:59:3b:e3:73:0a:fd:f6:42:49:7f:7b:28:a4: 62:36:b6:4b:e5:57:a7:ff:2e:54:24:28:65:23:a0:bf:38:ee: 4a:4e:e7:60:52:61:bb:32:1c:6f:15:c6:4a:02:d5:f8:45:dc: 2b:fe:30:83:3e:9d:a4:bf:aa:37:d3:e1:11:4e:cd:fa:2f:d7: 69:fc:e1:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjQwNTE4MTYzMTQ2WhcNMjQwNTI1MTYzMTQ2WjAYMRYwFAYD VQQDEw02NjQ4ZDdmMi0xYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KMukTIOtnll+pqDQZ3u+93V54fsLvynTmaCchpcN4kuJmgzpVJXuUtpL/z7 41jg+Sr8uO0DCnMoxyIeKJYjs/yCAtTrgr+If6Gjy8DTnMlvJhkPjJ4ZfwieyAMC wx5nhZf26PBmstl7egNQDZeBc1I63R/NsJzAotC2GDv2JXi3WoJT0dADw/N0ts+S nK/GbeY5oYxFncFwie0RWkj9S8gydnbs9wMkZVS2rlTo0LgQV5RFgpOeqHWbVKaq 2ZpRpfqDG0vQndxkPbBzKCsQhfP/NvVMcON0q9+hxa2p1ehyxsMUf9OxCr+b538D Y98HQHVLdi5fnUAWH6R14v/NYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjF5zFn Fg2yUiP2g0iNvoviphR/MB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1VqnJTqtQfgyH5fVkkk5ZPD8ghYbL2hI0oITvicSgd+jgrVSqUf1Z +XCf1cobmTiemkc/lGBVyfYeR4imIMGMhQY0BbT4OIIFELs2a3utEzv4yWYwLxNE 5Q+MvVAcA8pvyh8AHufJ9wsP2ecT2a+/bb7F39QiFz5LIhxNc2/Y7+L9atU+4GJi OpV4c4827Hn9WchNzckc5VgKbQOuPA4KErp+h+3bWcc7ADM2RpXz1UF+/XGZLqEm PFk743MK/fZCSX97KKRiNrZL5Ven/y5UJChlI6C/OO5KTudgUmG7MhxvFcZKAtX4 Rdwr/jCDPp2kv6o30+ERTs36L9dp/OEG -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org