$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: Hg8shJxuzYkNlsKeG07VZ8xwV93/LHkQKLZlmm1398U= Subject key identifier: E3:8B:11:8F:1C:E0:2D:00:7D:03:10:07:18:4C:90:5B:C6:8A:B2:A4 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 0315 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 0312 Signing time: Sun 19 May 2024 03:08:43 +0000 Manifest this update: Sun 19 May 2024 03:08:42 +0000 Manifest next update: Sun 26 May 2024 03:08:42 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: o+CxEHpniB8soG02Nr+99LwQoaZEYGnJrC1NsC8o/Ys=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: G5cP10McaNsWgX++K6VbOwUXyhRQx2zZSuivkEv06WI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: May 19 03:08:42 2024 GMT Not After : May 26 03:08:42 2024 GMT Subject: CN=66496d3b-9cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:fd:e0:7b:28:83:86:47:19:25:db:81:0d: 98:33:eb:87:6f:76:c6:c6:34:e6:ba:d2:fb:82:75: b0:c5:d2:1b:bd:bc:7b:26:1b:e9:93:87:59:af:d9: f9:59:64:83:cf:d9:c2:2a:88:57:03:72:84:61:4f: d5:b3:51:1a:ee:6f:e0:e5:1e:f7:72:64:6f:8e:d7: 88:25:31:15:ff:c6:60:bc:61:74:af:c4:e1:54:f0: ab:fe:f7:c3:25:af:4d:e3:89:fe:12:96:27:19:2f: e1:bf:cc:de:51:6e:f4:25:4a:3f:03:f7:e1:79:59: 24:31:ee:a7:9f:33:d0:03:1a:40:29:97:53:aa:37: 39:ec:ca:11:b8:5c:e3:17:53:fa:e0:98:7d:57:10: f8:e3:af:d3:c1:1c:db:96:9b:87:fe:54:49:76:64: 70:38:43:08:69:b8:0a:36:bb:97:a0:6a:30:cb:ff: 6d:4f:a1:c3:79:7c:88:06:00:f7:d1:ef:86:08:3e: 06:dc:69:bd:dc:b0:54:b5:f4:6d:d8:36:b7:04:95: 8c:27:ff:9c:6e:68:b9:a9:44:1f:c3:33:66:79:64: 1d:50:54:21:ff:69:5b:e1:e8:be:65:fa:8f:b1:9a: 44:ba:c0:f9:03:3a:7a:d2:89:86:6a:6f:02:19:1b: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8B:11:8F:1C:E0:2D:00:7D:03:10:07:18:4C:90:5B:C6:8A:B2:A4 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:21:dc:47:a5:a1:de:c2:cf:75:65:b9:9a:1c:65:04:b1:e7: 6e:ba:d8:fb:2b:07:dd:12:5b:95:c0:38:14:90:42:0d:d4:0a: b9:4f:b9:6e:c3:76:2f:f4:93:f6:81:af:4c:93:a6:07:cc:d4: 00:e9:11:49:7b:15:c9:e5:ab:24:2e:6e:6a:a3:e9:ea:db:c4: 26:b7:c0:25:ea:20:18:68:ae:93:4a:b0:47:9d:4a:73:d0:d8: 98:db:1f:dd:5a:56:83:64:14:1d:8e:7d:ec:fd:a1:13:1e:73: f8:7a:85:b6:5d:7b:8a:4f:3a:4e:36:88:e1:f7:a2:f6:0c:b2: f8:33:76:83:bd:7c:95:0b:15:7c:08:0c:7d:6b:38:a6:df:ba: ef:35:75:1c:e5:5d:fc:ff:4b:a8:67:02:9b:39:29:29:09:e6: 10:1d:14:cd:c0:18:c2:f0:95:78:5a:0c:14:10:a6:84:c0:cf: 90:01:aa:00:0d:30:64:73:0c:ac:85:a9:00:39:24:d8:8d:c2: 42:74:e0:a7:8a:3a:06:c1:6e:66:7b:1c:4b:47:6c:95:09:4e: 9b:83:c9:08:44:2c:3a:96:b4:89:9e:60:8e:cf:60:51:8a:1c: 5e:2f:a8:1f:76:1e:32:51:4d:5b:7e:d5:88:1c:c6:dd:a8:7e: a2:67:34:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjQwNTE5MDMwODQyWhcNMjQwNTI2MDMwODQyWjAYMRYwFAYD VQQDEw02NjQ5NmQzYi05Y2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaP94Hsog4ZHGSXbgQ2YM+uHb3bGxjTmutL7gnWwxdIbvbx7Jhvpk4dZr9n5 WWSDz9nCKohXA3KEYU/Vs1Ea7m/g5R73cmRvjteIJTEV/8ZgvGF0r8ThVPCr/vfD Ja9N44n+EpYnGS/hv8zeUW70JUo/A/fheVkkMe6nnzPQAxpAKZdTqjc57MoRuFzj F1P64Jh9VxD446/TwRzblpuH/lRJdmRwOEMIabgKNruXoGowy/9tT6HDeXyIBgD3 0e+GCD4G3Gm93LBUtfRt2Da3BJWMJ/+cbmi5qUQfwzNmeWQdUFQh/2lb4ei+ZfqP sZpEusD5Azp60omGam8CGRvziwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOLEY8c 4C0AfQMQBxhMkFvGirKkMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLIdxHpaHews91ZbmaHGUEseduutj7KwfdEluVwDgUkEIN1Aq5T7lu w3Yv9JP2ga9Mk6YHzNQA6RFJexXJ5askLm5qo+nq28Qmt8Al6iAYaK6TSrBHnUpz 0NiY2x/dWlaDZBQdjn3s/aETHnP4eoW2XXuKTzpONojh96L2DLL4M3aDvXyVCxV8 CAx9azim37rvNXUc5V38/0uoZwKbOSkpCeYQHRTNwBjC8JV4WgwUEKaEwM+QAaoA DTBkcwyshakAOSTYjcJCdOCnijoGwW5mexxLR2yVCU6bg8kIRCw6lrSJnmCOz2BR ihxeL6gfdh4yUU1bftWIHMbdqH6iZzSu -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org