$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft File: nlcX9fFLsp9ntXrX2dXweRWunEM.mft (raw, json) Hash identifier: wmnMXoW4Il+HcrYs/d0bmOyhPLdoWSFU+Pdq9Phafi8= Subject key identifier: FB:3D:E4:1B:AC:52:6E:0D:C1:F1:32:3D:A3:A6:7A:2E:B8:93:FA:CA Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft Manifest number: 02D1 Signing time: Sun 19 May 2024 03:23:36 +0000 Manifest this update: Sun 19 May 2024 03:23:36 +0000 Manifest next update: Sun 26 May 2024 03:23:36 +0000 Files and hashes: 1: nlcX9fFLsp9ntXrX2dXweRWunEM.crl (hash: BblGH5LASNDj7Yk8OFmdLpXTJ5VYdJMjfE5W7Brd2jM=) 2: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (hash: A1a0dPbMqSMo2jhZr8geXRzhFXcgET8jXeb41D5v6i0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: May 19 03:23:36 2024 GMT Not After : May 26 03:23:36 2024 GMT Subject: CN=664970b8-91db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:c8:b3:9d:26:28:60:67:4f:2f:da:8a:75: b9:ff:0a:a9:50:18:50:0e:dc:77:bd:d5:0f:6b:19: 1e:72:de:f5:d1:37:97:56:b7:10:23:d8:2d:6f:fc: 0b:8b:ad:33:68:d4:e3:22:85:1a:d9:55:04:ad:4c: 6e:eb:95:b1:68:7a:a3:f4:b7:f7:3d:db:50:13:07: a9:5c:ea:91:2a:95:34:a4:a3:f0:45:13:ef:f7:70: d9:2f:2b:bc:3e:74:10:65:c9:91:1b:3f:ec:1b:b3: 06:a9:85:34:80:0d:f6:4d:0b:a6:b3:e4:2e:45:0e: 8b:38:39:cf:bc:a6:af:f8:f9:05:15:fe:81:0b:45: eb:0f:a5:7e:21:57:48:1f:4d:65:14:46:e9:ea:7a: af:62:a9:28:6d:52:04:da:5d:10:92:58:b8:7e:0c: 3c:31:74:f0:96:56:ef:28:4e:be:14:b9:56:dc:89: 20:50:b0:b8:1d:57:e1:1e:c6:12:ba:13:c1:49:f9: c4:21:17:62:cd:1b:08:8d:65:60:c0:d3:4c:95:27: 43:f7:f3:b6:63:3d:5f:60:e7:ce:68:51:c6:88:19: b8:f2:97:42:ef:29:09:ff:03:b1:2d:f6:93:dd:7a: 71:cf:00:27:67:d7:f6:ac:6f:88:bb:23:7e:4e:2a: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3D:E4:1B:AC:52:6E:0D:C1:F1:32:3D:A3:A6:7A:2E:B8:93:FA:CA X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f0:2d:a5:53:ea:3b:ef:53:5b:be:5d:e8:d9:a4:3e:4d:ac: e4:4a:08:dc:d7:ea:41:13:43:f9:fd:20:b4:9e:48:f6:e9:35: 6c:23:14:24:6c:bf:ab:19:06:bb:09:f4:4b:af:73:95:e8:df: 24:60:38:b2:31:75:06:46:1a:98:a0:d9:1e:1e:82:80:0c:31: 84:ce:84:2c:36:4c:c4:4a:ce:f8:05:46:66:91:7b:ca:97:76: 09:25:90:b7:89:f1:17:ca:1e:0d:24:ef:14:be:df:e3:4f:fc: 2b:42:5e:4b:27:0c:e4:e7:da:3c:15:82:44:e2:19:ae:c0:fc: c9:28:44:52:f2:8e:bc:48:37:2c:6f:4e:c2:eb:b6:f2:76:d6: 2c:05:17:2e:18:67:7a:77:7e:dd:99:15:c5:c8:ec:4e:20:79: d4:57:13:82:7e:b6:8a:d9:a6:73:2a:c3:b6:d9:e2:a1:8c:e6: bd:1a:7a:22:df:ae:65:ce:c1:f9:b6:7b:2b:e6:6c:e5:ad:4c: 5c:e0:f4:5c:66:d1:6f:22:9c:04:fe:2e:c4:c3:67:ef:9b:8f: a3:01:3c:f3:99:c0:44:4a:dd:02:a5:77:c7:f9:84:71:e4:36: c4:01:76:22:13:42:9d:a2:ab:a8:0c:e1:2c:1c:cc:67:bf:8f: 4a:3a:42:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjQwNTE5MDMyMzM2WhcNMjQwNTI2MDMyMzM2WjAYMRYwFAYD VQQDEw02NjQ5NzBiOC05MWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzF3Is50mKGBnTy/ainW5/wqpUBhQDtx3vdUPaxkect710TeXVrcQI9gtb/wL i60zaNTjIoUa2VUErUxu65WxaHqj9Lf3PdtQEwepXOqRKpU0pKPwRRPv93DZLyu8 PnQQZcmRGz/sG7MGqYU0gA32TQums+QuRQ6LODnPvKav+PkFFf6BC0XrD6V+IVdI H01lFEbp6nqvYqkobVIE2l0Qkli4fgw8MXTwllbvKE6+FLlW3IkgULC4HVfhHsYS uhPBSfnEIRdizRsIjWVgwNNMlSdD9/O2Yz1fYOfOaFHGiBm48pdC7ykJ/wOxLfaT 3XpxzwAnZ9f2rG+IuyN+TiobPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPs95Bus Um4NwfEyPaOmei64k/rKMB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAxRS9DNUM2RjA1RTlFQTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNw OW50WHJYMmRYd2VSV3VuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy8C2lU+o771Nbvl3o2aQ+TazkSgjc1+pBE0P5/SC0nkj26TVsIxQk bL+rGQa7CfRLr3OV6N8kYDiyMXUGRhqYoNkeHoKADDGEzoQsNkzESs74BUZmkXvK l3YJJZC3ifEXyh4NJO8Uvt/jT/wrQl5LJwzk59o8FYJE4hmuwPzJKERS8o68SDcs b07C67bydtYsBRcuGGd6d37dmRXFyOxOIHnUVxOCfraK2aZzKsO22eKhjOa9Gnoi 365lzsH5tnsr5mzlrUxc4PRcZtFvIpwE/i7Ew2fvm4+jATzzmcBESt0CpXfH+YRx 5DbEAXYiE0KdoquoDOEsHMxnv49KOkIK -----END CERTIFICATE-----Generated at Sun May 19 04:20:42 2024 by rpki-client on console-ams.rpki-client.org