$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft File: nQi_OKDTi4yrfP2I9djE7WZ3jME.mft (raw, json) Hash identifier: j2vsOKmsbzFRMcKxh+ov49aytJPDfSYnp7MyoW5V6wE= Subject key identifier: 87:A8:3B:64:33:4B:FE:B3:01:85:CC:57:3C:E7:A0:60:BC:67:7C:80 Authority key identifier: 9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 Certificate issuer: /CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft Manifest number: 54 Signing time: Sun 19 May 2024 07:55:20 +0000 Manifest this update: Sun 19 May 2024 07:55:20 +0000 Manifest next update: Sun 26 May 2024 07:55:20 +0000 Files and hashes: 1: nQi_OKDTi4yrfP2I9djE7WZ3jME.crl (hash: XCLFygEIvY48ZNdWqF267+dUBh5Tj2j246K65Ftu+dU=) 2: 7C7AF8E6E67011EEB76DCB76C4F9AE02.roa (hash: B4/k+AmD/CD5R2XokvVTIdBSD+64BjRA2SWX9Rfb1Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0DF/serialNumber=9D08BF38A0D38B8CAB7CFD88F5D8C4ED66778CC1 Validity Not Before: May 19 07:55:20 2024 GMT Not After : May 26 07:55:20 2024 GMT Subject: CN=6649b068-84d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:37:cb:14:7c:f1:9f:5b:75:95:67:75:a8: dc:7a:03:5d:8d:92:ec:f7:e8:4c:12:fe:0f:8c:db: 81:aa:9e:33:5f:4c:17:09:ff:a8:88:fd:e8:6b:12: 49:cc:bf:4d:13:0f:15:34:d3:d8:96:c2:d2:c3:e5: b1:f0:6d:3e:88:c4:fa:a5:5d:e2:fa:dc:66:49:2b: 0d:ad:b6:70:d3:69:d5:93:5f:37:f6:da:50:6f:8e: 70:e7:22:1c:38:86:31:1a:e0:9e:31:f1:d5:38:45: 77:2a:69:e3:64:0f:52:62:1f:d9:dc:5d:a5:33:09: 16:8d:de:99:f6:a4:9e:ca:8b:64:bd:9f:06:3a:c6: 9f:20:f1:f9:aa:72:d6:6e:18:0d:ae:ba:dd:5c:40: 23:03:aa:c6:8e:2b:9f:2c:b3:b8:f1:c8:89:31:e4: 0d:06:cf:31:fd:f7:e6:75:40:4a:94:1d:6b:96:bb: a8:f0:d4:2a:26:cc:df:76:2f:c8:13:23:cd:69:1f: 8c:63:1d:62:6f:16:78:78:29:39:74:65:a9:ac:d6: e6:ad:c8:7b:01:b3:98:b1:4d:9f:01:20:75:e6:a1: 83:08:ab:be:85:f3:af:e8:1c:6a:c2:27:bb:50:cf: 76:3a:00:04:31:62:e8:86:d7:40:7c:3f:c0:ab:10: 9f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A8:3B:64:33:4B:FE:B3:01:85:CC:57:3C:E7:A0:60:BC:67:7C:80 X509v3 Authority Key Identifier: keyid:9D:08:BF:38:A0:D3:8B:8C:AB:7C:FD:88:F5:D8:C4:ED:66:77:8C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQi_OKDTi4yrfP2I9djE7WZ3jME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0DF/E5083648992811EEBBCAE87AC4F9AE02/nQi_OKDTi4yrfP2I9djE7WZ3jME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:97:e6:9b:1b:8a:25:9e:ca:e5:c0:06:cb:e4:18:37:1c:a6: 4f:67:64:be:81:d1:2e:4f:a7:86:00:44:1d:f0:2e:e3:a1:ea: 79:8f:60:e1:e9:ae:93:dc:1b:cf:ed:e7:7f:7d:f0:37:a5:ff: d5:ff:7e:c3:55:b1:fc:a1:42:33:07:4a:10:af:c4:f0:ec:4b: fa:b5:54:f7:74:fa:9e:1a:04:25:a9:83:01:05:cb:5c:77:e4: ce:4c:76:ca:fa:a1:79:d6:ef:2f:85:b0:92:39:37:0d:28:3c: ed:8c:3d:ea:b8:6a:fc:55:88:c3:f9:f9:86:e2:2b:00:19:39: e9:7b:42:1e:d5:ad:08:c9:98:fc:6d:3b:e8:a9:7f:02:31:41: 5f:f7:1e:2d:66:98:c2:d5:a3:24:1e:db:20:a0:92:a0:26:94: cd:c3:c0:05:5a:fd:46:36:08:d5:15:01:b2:25:39:77:be:e5: 62:7c:ed:4c:bc:71:43:a3:14:49:f1:93:c3:c9:6e:ee:4d:ab: ea:82:f9:80:77:12:2b:96:5f:10:16:02:66:93:be:f3:dc:0a: 26:3c:b1:fd:36:ce:6f:58:b9:e3:77:55:a8:26:06:6b:79:8f: dd:e3:31:38:e7:14:e9:49:3b:22:cb:63:a5:ec:2e:21:95:51: 95:b5:13:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjBERjExMC8GA1UEBRMoOUQwOEJGMzhBMEQzOEI4Q0FCN0NGRDg4RjVEOEM0RUQ2 Njc3OENDMTAeFw0yNDA1MTkwNzU1MjBaFw0yNDA1MjYwNzU1MjBaMBgxFjAUBgNV BAMTDTY2NDliMDY4LTg0ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuoDfLFHzxn1t1lWd1qNx6A12Nkuz36EwS/g+M24GqnjNfTBcJ/6iI/ehrEknM v00TDxU009iWwtLD5bHwbT6IxPqlXeL63GZJKw2ttnDTadWTXzf22lBvjnDnIhw4 hjEa4J4x8dU4RXcqaeNkD1JiH9ncXaUzCRaN3pn2pJ7Ki2S9nwY6xp8g8fmqctZu GA2uut1cQCMDqsaOK58ss7jxyIkx5A0GzzH99+Z1QEqUHWuWu6jw1ComzN92L8gT I81pH4xjHWJvFnh4KTl0Zams1uatyHsBs5ixTZ8BIHXmoYMIq76F86/oHGrCJ7tQ z3Y6AAQxYuiG10B8P8CrEJ+xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh6g7ZDNL /rMBhcxXPOegYLxnfIAwHwYDVR0jBBgwFoAUnQi/OKDTi4yrfP2I9djE7WZ3jMEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGMERGL0U1MDgzNjQ4OTky ODExRUVCQkNBRTg3QUM0RjlBRTAyL25RaV9PS0RUaTR5cmZQMkk5ZGpFN1daM2pN RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvblFpX09LRFRpNHlyZlAySTlkakU3V1ozak1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG MERGL0U1MDgzNjQ4OTkyODExRUVCQkNBRTg3QUM0RjlBRTAyL25RaV9PS0RUaTR5 cmZQMkk5ZGpFN1daM2pNRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE+X5psbiiWeyuXABsvkGDccpk9nZL6B0S5Pp4YARB3wLuOh6nmPYOHp rpPcG8/t53998Del/9X/fsNVsfyhQjMHShCvxPDsS/q1VPd0+p4aBCWpgwEFy1x3 5M5Mdsr6oXnW7y+FsJI5Nw0oPO2MPeq4avxViMP5+YbiKwAZOel7Qh7VrQjJmPxt O+ipfwIxQV/3Hi1mmMLVoyQe2yCgkqAmlM3DwAVa/UY2CNUVAbIlOXe+5WJ87Uy8 cUOjFEnxk8PJbu5Nq+qC+YB3EiuWXxAWAmaTvvPcCiY8sf02zm9YueN3VagmBmt5 j93jMTjnFOlJOyLLY6XsLiGVUZW1Exc= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org