$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: 0CZWNRx0nPNjG8sSgFQTc7CxZKUtpuLRM7DqyxQ72WA= Subject key identifier: 24:F2:C4:C2:FE:10:B4:E6:B9:57:24:7E:BE:EB:FB:3A:A1:4D:16:1C Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 0642 Signing time: Sat 18 May 2024 23:41:37 +0000 Manifest this update: Sat 18 May 2024 23:41:36 +0000 Manifest next update: Sat 25 May 2024 23:41:36 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: PBJKTgbln/Cn1qde3LdLh1P1urkAA1md0xKwq6Ck7rM=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: UVWZxjhQwVPDFy3VbmeOiO4yarjkR3sA0bGxj31r7PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: May 18 23:41:36 2024 GMT Not After : May 25 23:41:36 2024 GMT Subject: CN=66493cb0-57cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:2d:56:49:bf:6b:97:85:b5:37:12:fd:a0: 77:65:27:68:82:a3:06:d1:bd:d3:48:4b:92:1a:95: c7:8c:66:37:3c:06:05:38:5e:e2:07:e3:3c:db:22: e0:fb:a8:2a:50:ff:c6:64:51:ec:e4:e4:46:97:18: da:cc:bd:ef:40:b6:65:c5:5c:c9:5f:06:40:c0:57: b9:ac:7e:aa:1b:8a:fd:f7:f0:96:8b:9c:a1:27:c8: b1:f8:61:70:0f:71:3e:72:49:1f:d0:4d:32:8c:5b: 3a:e3:de:1e:0c:ac:e1:12:fd:15:e0:fa:90:dc:fa: ed:8e:c1:81:fc:ca:4d:f7:1c:ce:8f:53:35:e1:58: e9:34:02:a8:1a:91:6b:49:8b:98:78:2e:86:31:ec: 24:0c:fc:0e:c0:b7:9c:0d:cc:b0:41:2d:fd:73:09: ec:a0:8b:7b:52:e3:e9:de:87:50:0a:26:db:3e:05: 86:aa:da:7b:1c:4c:bb:3e:6a:7c:c7:30:24:e8:df: b4:17:e0:bd:a8:dd:01:8a:f2:39:12:54:87:9f:22: f3:8c:33:e8:27:d2:ef:9c:b0:be:8f:fc:de:35:7d: 30:e8:dc:88:7c:7b:5c:03:b6:de:57:60:87:1e:d9: f5:40:3c:2a:99:79:53:6c:e7:9e:a7:47:22:e8:4e: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F2:C4:C2:FE:10:B4:E6:B9:57:24:7E:BE:EB:FB:3A:A1:4D:16:1C X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:03:80:88:46:53:9a:99:17:59:b4:a9:0f:e0:7d:62:89:11: ed:30:d7:4e:77:e6:e9:55:51:e6:e4:74:59:7f:54:08:fc:32: d1:d7:19:c6:09:37:be:97:7f:eb:35:5f:c7:fa:08:49:ce:ac: a3:74:72:c2:73:33:1d:0e:fc:c0:64:12:62:39:a2:b2:07:9d: 7f:53:15:1c:76:94:be:cb:96:42:90:83:de:ff:d0:df:a1:ce: 5c:e6:ac:83:d0:c3:6f:09:7a:8e:38:1b:99:21:d3:63:14:75: 3b:82:7f:b4:69:03:9e:aa:81:8f:83:0a:ab:9b:f6:22:b1:a5: dc:0b:ca:81:43:fc:01:8b:ba:85:0b:bc:b0:28:99:43:84:57: 0c:47:15:4d:61:63:91:08:f1:47:d3:64:07:58:33:de:ab:f6: 14:24:3c:42:01:98:30:de:0b:97:f5:19:14:35:ca:37:55:11: 96:56:1b:93:95:c9:68:9c:e1:6d:9f:c2:6b:dc:c7:31:c7:66: 77:0a:7a:e6:d2:8d:65:e7:8f:74:da:65:93:1c:78:ee:dc:bf: 8e:46:3a:c3:30:1d:00:15:4d:7c:37:d0:b6:c7:b6:37:c1:40: 1e:52:fd:08:59:da:38:be:0b:10:9e:df:45:07:95:91:9e:ee: ef:2e:13:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjQwNTE4MjM0MTM2WhcNMjQwNTI1MjM0MTM2WjAYMRYwFAYD VQQDEw02NjQ5M2NiMC01N2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJstVkm/a5eFtTcS/aB3ZSdogqMG0b3TSEuSGpXHjGY3PAYFOF7iB+M82yLg +6gqUP/GZFHs5ORGlxjazL3vQLZlxVzJXwZAwFe5rH6qG4r99/CWi5yhJ8ix+GFw D3E+ckkf0E0yjFs6494eDKzhEv0V4PqQ3PrtjsGB/MpN9xzOj1M14VjpNAKoGpFr SYuYeC6GMewkDPwOwLecDcywQS39cwnsoIt7UuPp3odQCibbPgWGqtp7HEy7Pmp8 xzAk6N+0F+C9qN0BivI5ElSHnyLzjDPoJ9LvnLC+j/zeNX0w6NyIfHtcA7beV2CH Htn1QDwqmXlTbOeep0ci6E4s5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTyxML+ ELTmuVckfr7r+zqhTRYcMB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLA4CIRlOamRdZtKkP4H1iiRHtMNdOd+bpVVHm5HRZf1QI/DLR1xnG CTe+l3/rNV/H+ghJzqyjdHLCczMdDvzAZBJiOaKyB51/UxUcdpS+y5ZCkIPe/9Df oc5c5qyD0MNvCXqOOBuZIdNjFHU7gn+0aQOeqoGPgwqrm/YisaXcC8qBQ/wBi7qF C7ywKJlDhFcMRxVNYWORCPFH02QHWDPeq/YUJDxCAZgw3guX9RkUNco3VRGWVhuT lclonOFtn8Jr3Mcxx2Z3Cnrm0o1l54902mWTHHju3L+ORjrDMB0AFU18N9C2x7Y3 wUAeUv0IWdo4vgsQnt9FB5WRnu7vLhO6 -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org