$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: V0aqglZEu+magCzVmfTcrZNQ2NzxlRNwaPRqTnyjHGY= Subject key identifier: 3A:A5:4D:CB:54:54:C8:DF:06:1B:4C:94:E6:C1:3F:82:43:0F:8C:06 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 29CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2992 Signing time: Thu 30 May 2024 15:59:42 +0000 Manifest this update: Thu 30 May 2024 15:59:42 +0000 Manifest next update: Thu 06 Jun 2024 15:59:42 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: XVE4tA+x1eJCjFuGcFW0+R0OfCD2iUrHkJ2HJ1jIwhk=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: 3ztfW4qkk8fdSuI1tpML+BV21ktLaGOQVbvnK7tDfio=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: WrHJMHrfmwXer8MYeRSCkBLBrLygk4/ZZ/f4skJIziE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 15:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10702 (0x29ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: May 30 15:59:42 2024 GMT Not After : Jun 6 15:59:42 2024 GMT Subject: CN=6658a26e-4e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:60:ab:f3:92:2d:61:52:ca:a9:78:b2:4a: 89:f9:d6:75:5c:4d:eb:c7:e6:26:82:3c:86:db:60: 25:cb:14:f2:54:1d:1e:1d:79:e9:50:42:43:31:b1: 69:b8:cb:fa:d2:49:69:e0:75:84:21:dc:3b:89:d3: 52:4f:58:12:cd:07:e7:76:cf:5d:57:db:9d:09:e2: de:5f:10:dc:ec:84:7e:24:21:a5:e6:62:b8:3f:60: bb:77:7b:d1:07:92:86:be:94:17:fc:46:c0:d4:1f: 0d:29:6c:8c:ba:c8:18:b1:b7:09:cf:51:79:53:73: 1a:76:64:91:2d:de:c2:60:7d:b1:d2:b5:fd:0a:46: ad:5a:f3:cb:df:05:63:f2:c2:b9:df:8c:6c:c9:ab: 68:4b:d3:20:cc:f8:43:17:a2:e6:85:f4:89:01:c4: 36:37:ca:a8:1a:35:4d:8c:17:db:39:40:92:aa:fc: 9e:03:53:86:6a:71:09:6b:40:70:71:5a:9d:46:6e: b6:5a:5b:b7:dd:e1:61:dc:e7:90:2c:0c:d9:31:9a: 41:96:d8:20:4a:83:7a:a7:36:e1:24:ff:54:3c:cf: b0:ff:cc:89:5b:21:92:2f:87:1a:fb:b8:89:d0:a1: 01:1a:7d:a7:81:c4:64:a1:df:1a:2b:19:20:8e:73: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:4D:CB:54:54:C8:DF:06:1B:4C:94:E6:C1:3F:82:43:0F:8C:06 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c5:f1:a1:47:7b:11:01:9f:c4:ff:c2:54:ed:10:39:ed:78: 2d:6c:13:96:b2:8f:a9:52:3d:8b:ac:c5:2f:94:b4:c7:21:bf: 48:e3:4d:b2:97:00:e8:bd:88:db:a8:70:92:af:21:88:88:46: 08:a3:cd:86:54:b2:b3:eb:7e:02:99:cc:0a:80:24:6e:b0:02: 1d:87:df:3d:eb:43:2b:b8:c7:b4:a1:ae:c9:89:6f:c3:84:3b: 9d:f7:b8:0b:56:e3:24:1e:12:ca:32:dd:3e:62:4a:25:41:dd: 25:6e:02:f3:1f:f3:61:d1:c6:f8:df:13:a9:8f:06:99:9b:44: 3b:52:2d:61:1b:84:9d:06:e2:a4:a4:58:d6:ca:e6:c4:a4:7f: 72:13:c7:81:86:62:40:3e:ad:d2:e2:5e:47:fb:d8:c8:ab:b9: 4d:22:e0:61:ac:8f:80:6e:fe:9b:8b:dd:df:3a:3b:70:01:f3: 32:8a:4d:75:d6:85:5f:b8:29:5b:f1:7b:e5:f0:f3:05:a5:d4: 07:1a:7f:d2:7e:b6:b9:62:6d:32:0e:52:49:66:81:e2:ed:23: 2f:62:e3:aa:f2:e5:ec:e3:40:a6:5f:90:81:8c:49:5d:bd:83: 95:bb:5f:5c:33:e8:ce:87:1b:98:b1:30:ae:f9:b2:39:12:9f: 56:1d:31:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjQwNTMwMTU1OTQyWhcNMjQwNjA2MTU1OTQyWjAYMRYwFAYD VQQDEw02NjU4YTI2ZS00ZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZhgq/OSLWFSyql4skqJ+dZ1XE3rx+YmgjyG22AlyxTyVB0eHXnpUEJDMbFp uMv60klp4HWEIdw7idNST1gSzQfnds9dV9udCeLeXxDc7IR+JCGl5mK4P2C7d3vR B5KGvpQX/EbA1B8NKWyMusgYsbcJz1F5U3MadmSRLd7CYH2x0rX9CkatWvPL3wVj 8sK534xsyatoS9MgzPhDF6LmhfSJAcQ2N8qoGjVNjBfbOUCSqvyeA1OGanEJa0Bw cVqdRm62Wlu33eFh3OeQLAzZMZpBltggSoN6pzbhJP9UPM+w/8yJWyGSL4ca+7iJ 0KEBGn2ngcRkod8aKxkgjnNR1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqlTctU VMjfBhtMlObBP4JDD4wGMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwxfGhR3sRAZ/E/8JU7RA57XgtbBOWso+pUj2LrMUvlLTHIb9I402y lwDovYjbqHCSryGIiEYIo82GVLKz634CmcwKgCRusAIdh98960MruMe0oa7JiW/D hDud97gLVuMkHhLKMt0+YkolQd0lbgLzH/Nh0cb43xOpjwaZm0Q7Ui1hG4SdBuKk pFjWyubEpH9yE8eBhmJAPq3S4l5H+9jIq7lNIuBhrI+Abv6bi93fOjtwAfMyik11 1oVfuClb8Xvl8PMFpdQHGn/Sfra5Ym0yDlJJZoHi7SMvYuOq8uXs40CmX5CBjEld vYOVu19cM+jOhxuYsTCu+bI5Ep9WHTHY -----END CERTIFICATE-----Generated at Thu May 30 18:45:57 2024 by rpki-client on console-ams.rpki-client.org