$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: IpI/c00k40/9BqDkERHgDqod/o/WzMFu7DfwMhZYLgs= Subject key identifier: A4:E4:58:64:5E:9D:2F:E4:CD:51:A2:F6:5F:6A:72:4B:3C:DF:F7:69 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 018C Signing time: Sun 19 May 2024 04:44:23 +0000 Manifest this update: Sun 19 May 2024 04:44:23 +0000 Manifest next update: Sun 26 May 2024 04:44:23 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: EMFDkkM5l6B1Z2N588Jsgt5yfUV1wA7+T+gXyUrJ4LY=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: R6cxuKyJt5TX4itbVsaYIcRMQZ4Yj3JH6cPeKm7IwwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: May 19 04:44:23 2024 GMT Not After : May 26 04:44:23 2024 GMT Subject: CN=664983a7-c578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b5:b9:a9:52:21:9d:e5:c5:ab:8d:6b:80:91: c4:4e:67:9f:be:a4:cd:aa:46:7c:3a:b9:f5:72:1a: 6d:75:a8:2b:0f:db:99:7e:88:9b:e9:99:d3:f6:3d: d8:e1:1c:a1:49:da:83:27:72:53:ae:b6:ee:ee:10: 1f:a1:2c:0a:7d:18:81:1b:11:db:d7:6f:5f:75:6b: 85:92:b9:91:79:c3:41:2f:cb:2a:42:37:ff:b9:1d: 2b:31:dc:8a:2f:b9:1f:fc:70:a4:2c:40:a8:f9:6a: b3:4d:a0:ee:91:93:be:a7:d6:0a:03:9d:7e:ab:95: a0:a9:15:a4:ee:0d:ba:f4:17:0a:45:05:03:89:6d: a3:dc:6e:9b:99:03:56:fb:5e:e1:45:e9:18:75:2d: 18:96:e5:c9:2a:a7:74:7c:8e:97:63:b9:25:7a:ab: cb:4f:c2:1c:9b:c5:16:81:a2:8f:a2:be:4c:02:68: de:0d:a6:c1:bf:70:41:0e:65:0e:49:5b:ca:a3:6d: df:45:34:d1:8c:0d:46:7d:7c:5b:91:c2:18:7e:b4: 93:75:0d:3b:b3:8d:0e:85:df:f0:4c:a1:e0:4a:36: d1:92:ce:01:5a:a4:39:e4:7e:bb:80:57:55:e7:d4: 90:d2:4c:6d:66:8f:cb:b3:98:ed:71:dd:ee:5b:0a: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E4:58:64:5E:9D:2F:E4:CD:51:A2:F6:5F:6A:72:4B:3C:DF:F7:69 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:03:4b:38:30:28:ac:0e:8b:73:46:c3:ff:69:4c:a2:71:58: 85:eb:41:ba:60:fe:11:69:14:93:9b:e9:b9:48:35:20:f3:1f: 67:e1:4b:85:1d:55:11:0c:c6:b0:0e:0b:e2:30:33:65:de:13: 46:92:f2:e8:7b:c4:82:2f:33:a1:6e:68:01:d7:f2:f0:52:81: 46:30:2d:e6:9c:31:93:2c:84:29:9b:38:b4:96:0e:cb:a6:bd: 42:e9:fa:48:0e:27:ec:85:46:ea:60:fc:05:4e:a9:ba:db:f8: b4:d3:03:72:1b:fd:66:bf:e5:f9:7f:3b:29:ba:87:17:62:24: b7:e1:ce:f7:49:4e:d0:02:16:75:5c:b5:d9:81:dd:8a:a6:0b: ad:ef:ff:63:e5:02:ab:d4:b7:89:e4:e2:09:ec:6c:81:80:96: ad:ce:70:5f:ae:9a:0d:cb:83:c6:44:f6:b4:67:f9:60:c1:79: 11:7d:76:7d:d4:33:ad:62:11:fd:e5:2c:5f:a6:fe:35:a8:a2: cf:3b:9e:7a:3c:64:74:a9:59:d9:02:ac:b5:9c:8c:0e:7c:4d: 58:74:6a:14:10:81:7a:a3:4a:98:c1:d9:1d:b1:f3:2e:bc:c4: 78:96:4c:2f:06:f9:f8:eb:58:8c:cd:6a:53:4b:ea:10:80:a8: cc:2c:a3:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjQwNTE5MDQ0NDIzWhcNMjQwNTI2MDQ0NDIzWjAYMRYwFAYD VQQDEw02NjQ5ODNhNy1jNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA97W5qVIhneXFq41rgJHETmefvqTNqkZ8Orn1chptdagrD9uZfoib6ZnT9j3Y 4RyhSdqDJ3JTrrbu7hAfoSwKfRiBGxHb129fdWuFkrmRecNBL8sqQjf/uR0rMdyK L7kf/HCkLECo+WqzTaDukZO+p9YKA51+q5WgqRWk7g269BcKRQUDiW2j3G6bmQNW +17hRekYdS0YluXJKqd0fI6XY7kleqvLT8Icm8UWgaKPor5MAmjeDabBv3BBDmUO SVvKo23fRTTRjA1GfXxbkcIYfrSTdQ07s40Ohd/wTKHgSjbRks4BWqQ55H67gFdV 59SQ0kxtZo/Ls5jtcd3uWwo3uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTkWGRe nS/kzVGi9l9qcks83/dpMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuA0s4MCisDotzRsP/aUyicViF60G6YP4RaRSTm+m5SDUg8x9n4UuF HVURDMawDgviMDNl3hNGkvLoe8SCLzOhbmgB1/LwUoFGMC3mnDGTLIQpmzi0lg7L pr1C6fpIDifshUbqYPwFTqm62/i00wNyG/1mv+X5fzspuocXYiS34c73SU7QAhZ1 XLXZgd2Kpgut7/9j5QKr1LeJ5OIJ7GyBgJatznBfrpoNy4PGRPa0Z/lgwXkRfXZ9 1DOtYhH95Sxfpv41qKLPO556PGR0qVnZAqy1nIwOfE1YdGoUEIF6o0qYwdkdsfMu vMR4lkwvBvn461iMzWpTS+oQgKjMLKOe -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org