$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: bMjVzCVOduvrAxdxbLNYwUZLVp5eI3HBmQEx0z/h/PQ= Subject key identifier: BF:56:33:49:19:89:41:F1:05:C5:C4:E2:9F:C6:93:95:BC:EA:68:59 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1D35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1D28 Signing time: Sat 18 May 2024 16:30:27 +0000 Manifest this update: Sat 18 May 2024 16:30:27 +0000 Manifest next update: Sat 25 May 2024 16:30:27 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: V7JIodGq6H4kIyWl4b7F9fhl1/zx8GjSDknVF2OgMXM=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: UJv8BcXFWdkDpS4Pf9wPcj0noM0eUuyaFyqSYilIOoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7477 (0x1d35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: May 18 16:30:27 2024 GMT Not After : May 25 16:30:27 2024 GMT Subject: CN=6648d7a3-10ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:e2:f1:ae:e5:c3:f5:03:23:4c:84:59:03: d9:8a:2b:06:74:f7:77:ce:02:f1:85:4c:9e:fc:46: 6b:02:0a:34:27:ba:ce:8f:89:69:d3:ec:17:02:81: 3c:f4:83:94:6a:77:3a:2e:e7:2b:bd:4c:13:ae:57: 12:c1:17:13:55:9e:01:9b:5d:87:5f:4f:fb:d8:4f: 78:3f:21:ff:50:31:c6:b4:8b:18:c9:60:82:31:33: bd:1c:1f:74:6e:c4:22:04:41:b0:fc:24:cf:0b:14: 88:3e:e2:ea:84:ee:be:06:fb:de:3b:26:ee:ba:31: b9:44:a3:da:cf:e4:cf:3e:58:c1:1e:18:f3:ab:17: 19:2c:1e:24:bd:3f:85:08:6e:a5:40:e8:d4:57:8a: f7:a0:5b:fb:e1:fc:ba:6d:40:53:0b:be:8f:2f:00: de:fa:de:d4:29:6c:f5:de:d9:3e:81:c7:58:b4:cf: 74:bc:eb:08:95:38:61:50:a6:af:c1:68:de:4e:18: d3:00:fd:d8:0e:7b:ad:e6:d4:fa:34:32:48:0c:bd: c5:4b:ac:36:75:d2:17:9f:6e:e7:63:86:c0:35:95: 44:83:bc:66:bd:5e:2f:ce:e7:fa:57:99:8d:c3:ac: b4:54:e1:6f:74:09:52:3f:4a:8f:e8:f2:6a:c9:de: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:56:33:49:19:89:41:F1:05:C5:C4:E2:9F:C6:93:95:BC:EA:68:59 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:3c:77:37:9b:74:60:8c:8c:dc:62:1e:cd:b9:54:d4:8e:3a: f0:2d:c4:e8:0b:3a:2b:bb:f0:37:7f:94:a9:04:36:41:64:06: 97:7d:b5:4d:9f:2b:a0:5c:8c:3c:df:53:68:10:33:37:7b:30: 90:f7:ab:b4:99:9e:30:ab:20:3a:f6:ae:1f:eb:15:8e:43:64: 25:67:c9:8a:a8:fd:c9:cc:99:b8:2a:fb:78:36:bf:cc:97:7f: 0c:fa:35:bd:1e:f3:d8:e0:3d:ab:51:60:c2:ab:aa:04:1d:d5: 84:4a:1a:e6:57:cd:d3:8f:19:6e:13:60:73:23:ff:35:d5:2b: b4:be:e1:5f:ab:b8:a0:bb:a4:af:4d:62:46:52:c4:43:33:bd: 84:1a:f8:3d:b7:96:b2:5d:fa:83:51:8d:32:dd:9c:14:a9:ee: 5f:3a:4e:6b:d5:90:66:9d:6c:31:4d:49:7d:79:76:49:16:5a: ce:67:fb:4d:93:db:47:5e:2e:90:0d:69:1e:c7:cd:16:7d:26: 1e:65:88:80:c9:53:38:72:30:d5:13:cc:70:2b:47:50:94:ff: 68:c5:38:f1:5c:84:24:2c:76:46:98:1e:1e:e6:ab:c4:48:8c: d1:f9:05:dd:73:e9:f7:cf:2f:f2:c9:43:82:69:00:10:10:e6: 5b:6e:4f:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjQwNTE4MTYzMDI3WhcNMjQwNTI1MTYzMDI3WjAYMRYwFAYD VQQDEw02NjQ4ZDdhMy0xMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD3i8a7lw/UDI0yEWQPZiisGdPd3zgLxhUye/EZrAgo0J7rOj4lp0+wXAoE8 9IOUanc6LucrvUwTrlcSwRcTVZ4Bm12HX0/72E94PyH/UDHGtIsYyWCCMTO9HB90 bsQiBEGw/CTPCxSIPuLqhO6+BvveOybuujG5RKPaz+TPPljBHhjzqxcZLB4kvT+F CG6lQOjUV4r3oFv74fy6bUBTC76PLwDe+t7UKWz13tk+gcdYtM90vOsIlThhUKav wWjeThjTAP3YDnut5tT6NDJIDL3FS6w2ddIXn27nY4bANZVEg7xmvV4vzuf6V5mN w6y0VOFvdAlSP0qP6PJqyd6g+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9WM0kZ iUHxBcXE4p/Gk5W86mhZMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCPHc3m3RgjIzcYh7NuVTUjjrwLcToCzoru/A3f5SpBDZBZAaXfbVN nyugXIw831NoEDM3ezCQ96u0mZ4wqyA69q4f6xWOQ2QlZ8mKqP3JzJm4Kvt4Nr/M l38M+jW9HvPY4D2rUWDCq6oEHdWEShrmV83TjxluE2BzI/811Su0vuFfq7igu6Sv TWJGUsRDM72EGvg9t5ayXfqDUY0y3ZwUqe5fOk5r1ZBmnWwxTUl9eXZJFlrOZ/tN k9tHXi6QDWkex80WfSYeZYiAyVM4cjDVE8xwK0dQlP9oxTjxXIQkLHZGmB4e5qvE SIzR+QXdc+n3zy/yyUOCaQAQEOZbbk+f -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org