$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json) Hash identifier: sHeCR2LAHh4S/Lqrcs+IJ4+JPDJNxV4stCs6SWNt92M= Subject key identifier: D7:A0:81:92:E3:74:65:07:8E:C6:33:70:3A:9D:27:BB:FB:DD:10:DE Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft Manifest number: 0579 Signing time: Sun 19 May 2024 00:38:41 +0000 Manifest this update: Sun 19 May 2024 00:38:40 +0000 Manifest next update: Sun 26 May 2024 00:38:40 +0000 Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: kwFRjCaGMyOvKG+mtas4tHQIMSsjAz9NzU9WHycDds4=) 2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: XhabguNmfoaoaLydzPCMcINuMUCMOCq7nXAwub1uejA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Validity Not Before: May 19 00:38:40 2024 GMT Not After : May 26 00:38:40 2024 GMT Subject: CN=66494a11-9dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:fa:bc:55:76:0f:9e:18:8a:ae:48:a9:9d: 18:39:7e:2e:1e:da:ee:ba:05:25:c3:e7:53:44:db: cf:d4:6a:94:e4:82:72:d6:83:0a:6c:26:fa:fb:c6: 34:06:2a:0a:a7:ac:4b:59:94:13:e7:2c:83:2f:6c: 8e:a7:89:41:e0:6d:0e:6c:a4:e7:62:8e:d7:a0:af: 5b:aa:66:a2:04:35:07:f8:43:db:ba:67:77:d5:37: a3:f8:53:6b:65:76:af:fe:7a:e8:8d:c6:ae:f1:c3: 13:75:1c:6d:b5:36:50:6e:4f:e6:a1:39:d5:62:c2: a8:8b:b6:b7:bc:c4:91:01:24:b2:d3:28:d9:06:8a: 13:d2:d3:d6:a6:1b:db:6b:db:fd:34:81:94:f3:2b: dc:b8:f8:6e:3f:16:24:d6:1f:25:a5:ea:da:c0:18: cd:dc:a0:24:93:5a:11:9b:f7:31:bb:88:f6:86:20: 97:1b:94:57:67:77:83:8f:1e:9c:f8:cb:f8:83:17: 68:5e:99:ea:54:45:90:60:da:c5:a9:47:b0:81:80: b8:9d:04:19:db:d9:04:f5:20:58:c9:44:6c:b2:f2: eb:f0:02:44:f1:23:69:79:30:63:da:82:db:df:a8: c9:02:46:59:a2:32:c6:d0:5c:69:4c:ff:f3:3c:d4: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A0:81:92:E3:74:65:07:8E:C6:33:70:3A:9D:27:BB:FB:DD:10:DE X509v3 Authority Key Identifier: keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:3b:e0:1a:70:76:ff:79:d5:36:8e:28:7c:9e:e0:e5:05:27: ae:d5:97:61:a5:69:93:82:8f:e3:b2:b4:49:b2:71:d4:75:22: aa:fd:52:26:08:78:a4:e3:80:b2:39:e7:d9:d5:9a:67:04:a8: 42:52:6d:59:f0:b8:35:fc:7d:0f:1e:8e:99:6e:ad:c1:6b:b8: 8b:82:6a:44:06:f4:9b:79:05:4d:58:80:d9:79:23:35:cd:2c: b4:af:a7:7d:5c:63:ef:ad:77:eb:b0:2c:d9:af:1e:72:2a:44: fc:6a:83:4a:c4:94:45:a9:4d:4e:d2:1a:cd:38:cc:a9:93:a9: 21:34:06:d3:93:64:c5:25:20:16:10:06:0a:ff:88:3e:37:f3: 8c:ad:69:22:14:de:57:8b:52:c6:77:05:72:df:41:47:74:3c: 29:37:fb:23:87:59:84:81:61:9b:f4:c6:de:c8:f3:2f:ab:79: 46:ef:5a:6a:75:f0:3d:35:7d:7e:1c:93:62:92:2a:8b:d0:46: 4d:74:29:b9:b7:6c:80:74:95:9e:5c:cf:63:7f:d3:83:29:b5: 36:4d:1a:07:3d:21:b4:64:6e:19:b5:4b:45:af:cc:0f:c4:82: af:d6:55:05:55:95:50:6e:39:0c:db:38:2e:37:a8:56:21:0e: be:5d:ee:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG OUQ2MDFFMEUwHhcNMjQwNTE5MDAzODQwWhcNMjQwNTI2MDAzODQwWjAYMRYwFAYD VQQDEw02NjQ5NGExMS05ZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/j6vFV2D54Yiq5IqZ0YOX4uHtruugUlw+dTRNvP1GqU5IJy1oMKbCb6+8Y0 BioKp6xLWZQT5yyDL2yOp4lB4G0ObKTnYo7XoK9bqmaiBDUH+EPbumd31Tej+FNr ZXav/nrojcau8cMTdRxttTZQbk/moTnVYsKoi7a3vMSRASSy0yjZBooT0tPWphvb a9v9NIGU8yvcuPhuPxYk1h8lperawBjN3KAkk1oRm/cxu4j2hiCXG5RXZ3eDjx6c +Mv4gxdoXpnqVEWQYNrFqUewgYC4nQQZ29kE9SBYyURssvLr8AJE8SNpeTBj2oLb 36jJAkZZojLG0FxpTP/zPNQTNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeggZLj dGUHjsYzcDqdJ7v73RDeMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy VWktdHZ4bFU3bF81MWdIZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxO+AacHb/edU2jih8nuDlBSeu1ZdhpWmTgo/jsrRJsnHUdSKq/VIm CHik44CyOefZ1ZpnBKhCUm1Z8Lg1/H0PHo6Zbq3Ba7iLgmpEBvSbeQVNWIDZeSM1 zSy0r6d9XGPvrXfrsCzZrx5yKkT8aoNKxJRFqU1O0hrNOMypk6khNAbTk2TFJSAW EAYK/4g+N/OMrWkiFN5Xi1LGdwVy30FHdDwpN/sjh1mEgWGb9MbeyPMvq3lG71pq dfA9NX1+HJNikiqL0EZNdCm5t2yAdJWeXM9jf9ODKbU2TRoHPSG0ZG4ZtUtFr8wP xIKv1lUFVZVQbjkM2zguN6hWIQ6+Xe6u -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org