$ rpki-client -vvf rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft File: rNBOSci3K74B41N1Wc9MlHMO1d8.mft (raw, json) Hash identifier: Mum4o+AhiH0SgQTE0bhqyjpW7q3RN3p6khZsN1b5hIw= Subject key identifier: B7:2B:DE:00:26:C1:0F:28:9D:ED:D5:A0:06:9E:D9:07:2B:3A:19:4D Authority key identifier: AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF Certificate issuer: /CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft Manifest number: 0B38 Signing time: Sat 18 May 2024 19:49:51 +0000 Manifest this update: Sat 18 May 2024 19:49:51 +0000 Manifest next update: Sat 25 May 2024 19:49:51 +0000 Files and hashes: 1: rNBOSci3K74B41N1Wc9MlHMO1d8.crl (hash: JNwWJrNxDxOyb2csxxIxljqY7o0v+LJvhVoqTWIi44I=) 2: 4FE2CBA0F74C11EEA9368831C4F9AE02.roa (hash: wUtWWtOblDmN2oZ3l5tp2ZFVmOtLMYWVgUpV6mOP4KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF Validity Not Before: May 18 19:49:51 2024 GMT Not After : May 25 19:49:51 2024 GMT Subject: CN=6649065f-de7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:e2:03:40:1c:b4:5a:eb:a2:4c:da:ff:bd: c3:a3:bd:70:41:e0:ec:94:7b:21:c5:2c:ea:a6:ee: f2:55:52:4a:a8:08:35:b2:40:b7:bc:ef:eb:ee:07: eb:1d:8d:07:aa:d5:84:e1:24:cf:a2:22:7d:be:66: 4d:81:34:42:1a:78:37:4b:e8:76:68:85:52:5b:23: a9:9d:37:20:62:6e:f7:a9:bd:7a:c6:e0:e9:58:3d: 81:b0:46:e0:5a:1d:96:da:1d:eb:e8:02:c6:3a:b2: fc:67:61:3e:57:df:61:b6:7b:f6:ef:26:b8:9c:18: df:ee:fe:54:60:cd:db:0a:3d:9f:53:07:93:6f:1f: cb:ce:b9:b8:17:ca:42:66:ae:f0:ea:2a:df:cf:e5: bf:4b:95:68:b2:38:cd:76:0d:47:da:87:85:7f:8a: 67:d2:a4:9d:63:d5:69:d9:c7:8a:88:73:79:ed:5a: af:66:91:48:9d:ff:00:60:97:a7:6e:e0:0f:3b:28: e3:89:30:06:36:9b:81:44:99:b2:b7:27:f8:f3:ab: 92:71:dd:06:6c:3f:0a:85:34:d8:d9:c7:68:59:c5: 97:86:3a:9b:d2:7b:e8:9f:c9:ef:2b:94:55:1e:af: 91:a9:b0:d2:3d:7f:7a:d8:05:f4:48:90:6d:77:05: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2B:DE:00:26:C1:0F:28:9D:ED:D5:A0:06:9E:D9:07:2B:3A:19:4D X509v3 Authority Key Identifier: keyid:AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:25:13:1f:de:7d:da:08:b1:26:54:3d:39:c8:c1:8f:bf:9f: 3b:f0:97:1b:da:85:84:7e:56:c5:53:af:9f:b6:3f:4e:d3:3d: 2f:34:d0:53:ae:d9:b6:d7:29:63:5b:d1:12:0d:4d:16:0f:7b: 21:f0:61:6e:5c:fc:ea:68:4a:c3:29:47:ea:ea:4a:a4:c8:eb: 97:0a:3e:84:13:07:8a:b9:c0:32:41:86:f6:84:0e:fd:1f:4a: f4:74:4a:ea:2d:dc:c4:7d:18:62:66:eb:e6:62:5c:24:2a:ac: 8f:0a:10:c0:93:4d:55:e7:7c:3e:be:e2:ba:17:15:77:d3:0c: 90:17:56:a9:bd:f2:d9:91:29:fd:84:45:75:0b:ed:b0:52:8b: fc:85:41:4a:5e:ed:c6:a7:ad:ff:41:e3:03:df:cd:9c:e0:3a: ef:2b:42:86:d3:d5:88:95:62:2a:f0:90:86:28:62:cc:c6:fa: 79:30:aa:c7:4f:49:a6:bb:11:f4:ff:f6:b5:d2:2b:68:29:7e: 5c:08:9f:4d:70:d1:f5:4c:38:73:ac:c4:1a:8e:71:18:d1:ae: 7b:be:73:5a:7f:62:68:54:40:2c:61:4b:40:5e:24:9d:ec:a0: 1b:7f:33:a7:e7:9f:4d:e0:11:83:be:9f:de:92:96:0c:a1:b6: 2f:e0:7f:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQjMxMTAvBgNVBAUTKEFDRDA0RTQ5QzhCNzJCQkUwMUUzNTM3NTU5Q0Y0Qzk0 NzMwRUQ1REYwHhcNMjQwNTE4MTk0OTUxWhcNMjQwNTI1MTk0OTUxWjAYMRYwFAYD VQQDEw02NjQ5MDY1Zi1kZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wziA0ActFrrokza/73Do71wQeDslHshxSzqpu7yVVJKqAg1skC3vO/r7gfr HY0HqtWE4STPoiJ9vmZNgTRCGng3S+h2aIVSWyOpnTcgYm73qb16xuDpWD2BsEbg Wh2W2h3r6ALGOrL8Z2E+V99htnv27ya4nBjf7v5UYM3bCj2fUweTbx/Lzrm4F8pC Zq7w6irfz+W/S5VosjjNdg1H2oeFf4pn0qSdY9Vp2ceKiHN57VqvZpFInf8AYJen buAPOyjjiTAGNpuBRJmytyf486uScd0GbD8KhTTY2cdoWcWXhjqb0nvon8nvK5RV Hq+RqbDSPX962AX0SJBtdwWBVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcr3gAm wQ8one3VoAae2QcrOhlNMB8GA1UdIwQYMBaAFKzQTknItyu+AeNTdVnPTJRzDtXf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFCMy9DNkRBMjkyQzE4 NDYxMUVBOUI4NDJGMjdDNEY5QUUwMi9yTkJPU2NpM0s3NEI0MU4xV2M5TWxITU8x ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQk9TY2kzSzc0QjQxTjFXYzlNbEhNTzFkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFCMy9DNkRBMjkyQzE4NDYxMUVBOUI4NDJGMjdDNEY5QUUwMi9yTkJPU2NpM0s3 NEI0MU4xV2M5TWxITU8xZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJJRMf3n3aCLEmVD05yMGPv5878Jcb2oWEflbFU6+ftj9O0z0vNNBT rtm21yljW9ESDU0WD3sh8GFuXPzqaErDKUfq6kqkyOuXCj6EEweKucAyQYb2hA79 H0r0dErqLdzEfRhiZuvmYlwkKqyPChDAk01V53w+vuK6FxV30wyQF1apvfLZkSn9 hEV1C+2wUov8hUFKXu3Gp63/QeMD382c4DrvK0KG09WIlWIq8JCGKGLMxvp5MKrH T0mmuxH0//a10itoKX5cCJ9NcNH1TDhzrMQajnEY0a57vnNaf2JoVEAsYUtAXiSd 7KAbfzOn559N4BGDvp/ekpYMobYv4H+a -----END CERTIFICATE-----Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org