$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: egv08mbHzDmTVD0JVf2rwzNvlybW/4ht7P8xql56uBc= Subject key identifier: 17:A3:0F:FA:9A:F0:4E:21:71:1F:1E:E8:46:E0:09:77:20:C4:1C:E2 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 01F2 Signing time: Sun 19 May 2024 04:15:37 +0000 Manifest this update: Sun 19 May 2024 04:15:36 +0000 Manifest next update: Sun 26 May 2024 04:15:36 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: mb1LLqsNj6o5o2ybQqjDJo8fLPdR+ycwQLIYXBs9+jk=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: ohpq6w4FsQ6m2qtbeIH2kHfbJGiR8GKYHoRy8L7uggA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: May 19 04:15:36 2024 GMT Not After : May 26 04:15:36 2024 GMT Subject: CN=66497ce8-9ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:60:8a:f7:ff:3d:e2:08:3a:30:95:85:a5:df: e4:bf:78:dd:71:16:9a:71:c4:11:ce:6b:ba:19:16: 66:29:84:f5:e1:4d:1a:8a:e7:c9:34:1b:71:d9:a9: fb:d0:dd:ad:ab:d0:85:6f:70:00:f2:ce:e6:e9:17: f5:75:04:d2:ec:95:75:5e:d6:06:dc:0d:4a:1a:97: 41:08:63:2a:aa:57:28:c9:ec:57:65:95:93:66:76: fb:f4:86:c8:be:8d:33:99:5c:41:93:51:78:80:e1: fb:be:60:97:19:3a:8c:50:c5:93:5d:23:e8:40:0e: dd:0c:35:aa:df:a2:e4:20:6b:73:78:e3:db:f6:40: d0:5c:99:b0:ad:82:40:42:3f:de:8c:fe:fe:c0:39: 08:d0:22:80:d0:8e:09:74:10:bf:6f:fc:f0:bd:54: 31:19:9c:91:72:45:fb:30:2b:c6:46:0d:96:bb:3b: c1:15:9c:af:f8:82:81:04:69:4e:32:c1:10:6c:f9: fd:ff:3a:6e:2b:c6:69:69:76:05:b6:98:dc:7e:cb: 13:38:65:5c:4a:59:cb:3a:dd:d9:16:92:8f:f0:4e: 9c:e0:e7:17:82:02:8a:45:9b:47:66:04:bb:b6:f3: 54:fd:5c:77:21:4c:65:12:d9:80:b6:4b:6d:f1:c0: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A3:0F:FA:9A:F0:4E:21:71:1F:1E:E8:46:E0:09:77:20:C4:1C:E2 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:68:62:c8:74:ef:3c:55:70:7d:50:84:ce:d2:33:5e:4e:1c: 33:f1:ef:08:60:e6:0b:98:e4:bf:19:77:1f:ca:f7:5c:f6:37: 1d:01:c5:cf:a2:d6:f0:f6:4e:84:c8:80:59:a1:73:4a:be:ad: d6:c7:00:df:f3:83:e1:95:e0:1e:23:ef:4f:18:8c:c4:eb:e0: 31:4f:63:c5:b1:bb:aa:38:18:c2:e3:49:8a:71:a6:ca:05:6d: 8a:72:9a:34:b4:2c:c2:c7:3d:a0:a0:31:63:72:61:3c:97:96: a9:cd:60:04:f3:4c:c4:bb:a7:3f:52:a1:58:81:06:ef:37:c1: 2f:85:c4:3a:7c:a2:56:a6:3e:2e:82:05:9e:b6:1a:cd:e2:de: b0:48:f8:f9:e3:dc:7b:ba:33:99:8a:1b:f3:7f:af:3c:52:e1: 5a:9c:1e:12:af:e6:01:0b:6a:d4:b4:12:6a:30:0e:a4:dc:97: 6e:47:5c:19:28:1b:58:da:23:17:a4:82:17:9d:1f:7d:d9:6f: 24:42:9e:39:2a:37:d0:b6:f7:08:65:70:bd:0a:cb:58:30:85: 99:c3:7e:b5:42:69:4d:b7:1d:38:07:ee:38:75:1b:8c:a0:01: e3:aa:d2:17:51:a2:43:39:b3:fd:8d:ab:27:4c:5a:cc:a4:76: 80:0e:b2:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjQwNTE5MDQxNTM2WhcNMjQwNTI2MDQxNTM2WjAYMRYwFAYD VQQDEw02NjQ5N2NlOC05YWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GCK9/894gg6MJWFpd/kv3jdcRaaccQRzmu6GRZmKYT14U0aiufJNBtx2an7 0N2tq9CFb3AA8s7m6Rf1dQTS7JV1XtYG3A1KGpdBCGMqqlcoyexXZZWTZnb79IbI vo0zmVxBk1F4gOH7vmCXGTqMUMWTXSPoQA7dDDWq36LkIGtzeOPb9kDQXJmwrYJA Qj/ejP7+wDkI0CKA0I4JdBC/b/zwvVQxGZyRckX7MCvGRg2WuzvBFZyv+IKBBGlO MsEQbPn9/zpuK8ZpaXYFtpjcfssTOGVcSlnLOt3ZFpKP8E6c4OcXggKKRZtHZgS7 tvNU/Vx3IUxlEtmAtktt8cA06QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBejD/qa 8E4hcR8e6EbgCXcgxBziMB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWaGLIdO88VXB9UITO0jNeThwz8e8IYOYLmOS/GXcfyvdc9jcdAcXP otbw9k6EyIBZoXNKvq3WxwDf84PhleAeI+9PGIzE6+AxT2PFsbuqOBjC40mKcabK BW2Kcpo0tCzCxz2goDFjcmE8l5apzWAE80zEu6c/UqFYgQbvN8EvhcQ6fKJWpj4u ggWethrN4t6wSPj549x7ujOZihvzf688UuFanB4Sr+YBC2rUtBJqMA6k3JduR1wZ KBtY2iMXpIIXnR992W8kQp45KjfQtvcIZXC9CstYMIWZw361QmlNtx04B+44dRuM oAHjqtIXUaJDObP9jasnTFrMpHaADrKh -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org