$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft File: ng7u9_yIBOBDfomd7TGYizxgLQI.mft (raw, json) Hash identifier: YC90HaCdwmBnGmFEPXXNBl270CpYmM3y2k1rGkNPG7k= Subject key identifier: C9:7A:98:54:F1:6B:F0:81:38:5B:AA:6A:5E:73:18:28:F2:56:F2:E7 Authority key identifier: 9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 Certificate issuer: /CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Certificate serial: 0B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft Manifest number: 0B8C Signing time: Sat 18 May 2024 19:57:19 +0000 Manifest this update: Sat 18 May 2024 19:57:19 +0000 Manifest next update: Sat 25 May 2024 19:57:19 +0000 Files and hashes: 1: ng7u9_yIBOBDfomd7TGYizxgLQI.crl (hash: RzGMM4qx06qsv7yxRBIMG68h/PTzz4NEcBgiEKgFr6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Validity Not Before: May 18 19:57:19 2024 GMT Not After : May 25 19:57:19 2024 GMT Subject: CN=6649081f-c442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:ba:d9:46:25:a4:1a:1c:1a:4e:98:bc:49: ad:a7:e9:b1:ed:a6:9c:2c:23:c8:02:6f:4b:68:29: 6c:f3:1a:6a:24:d7:7c:95:bf:ce:81:e2:c0:9c:d9: f0:48:e8:2e:91:f3:9e:6a:a9:d0:ed:47:5f:e4:df: 47:7f:ee:cc:30:c5:3b:72:d6:c0:51:4a:bd:a0:fa: 59:19:b7:e6:e0:cc:9e:31:d2:78:4c:93:32:07:89: 6f:90:81:05:65:36:e6:59:55:48:dd:b1:6c:e1:7c: ba:b1:79:5e:e9:0f:14:ed:12:a0:7b:80:15:3f:8a: 6a:4b:8c:67:3d:21:17:92:34:bc:ee:30:59:ca:50: fc:77:9b:94:ad:69:d5:c8:a5:5c:98:f8:38:1f:8b: 06:cb:8e:4c:20:31:10:3a:51:79:cd:bf:66:4c:72: e1:34:56:b4:4e:27:f4:7e:f4:98:18:86:b2:d1:42: fa:c3:57:88:76:df:99:97:7f:a4:ca:da:b9:79:af: e7:2b:c6:05:00:53:59:a2:51:a7:e8:88:1c:16:6c: 6a:93:a1:97:40:36:b3:46:42:2f:38:e7:32:86:e3: b5:a2:a9:8a:6f:a1:91:5e:40:88:98:f8:69:8b:a0: 07:2e:da:96:fb:b6:f0:64:52:c8:6a:4e:a4:0c:2b: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7A:98:54:F1:6B:F0:81:38:5B:AA:6A:5E:73:18:28:F2:56:F2:E7 X509v3 Authority Key Identifier: keyid:9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c0:1f:f9:11:03:2a:97:84:4f:97:b2:27:74:62:6e:ab:84: c2:dd:6f:5f:19:21:bb:f5:ca:2f:ec:5a:64:d4:1a:4d:85:c1: c2:01:e4:c3:5e:88:45:70:9e:08:0d:19:77:a6:97:45:bf:05: bb:cb:df:3d:77:70:63:00:87:79:70:6e:07:69:c8:e2:0a:b7: fc:8f:2d:02:5a:26:f2:8b:67:9b:e8:5f:d0:92:c3:a7:c9:8a: c4:7b:ab:53:87:32:17:08:ae:38:93:fe:fc:7a:5e:b7:1a:be: ae:e3:96:af:bf:3b:c7:32:eb:23:60:ab:ca:94:1e:5d:47:63: 1d:c9:ca:8a:5d:29:7f:22:14:8f:04:a2:06:16:a7:61:84:6a: 28:a4:e1:fd:2f:73:bc:b5:e2:97:70:cc:2f:a4:7d:f5:d3:be: 59:12:cb:77:47:6b:2a:28:ae:60:e9:b8:2b:1c:e9:9e:6f:f5: 2a:5d:26:29:1b:02:56:02:f8:20:7a:12:7e:e0:11:a7:5e:49: 08:31:e3:e9:11:2f:5f:d1:a9:78:f1:4e:59:c3:3d:9f:29:c7: 89:50:f0:e1:5e:36:11:50:60:2e:ee:e2:8a:a8:4b:32:8a:92: 3c:d6:9a:29:97:1b:1c:d3:4a:f1:02:7b:f8:8a:25:0b:09:c6: c7:f0:e3:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDlFMEVFRUY3RkM4ODA0RTA0MzdFODk5REVEMzE5ODhC M0M2MDJEMDIwHhcNMjQwNTE4MTk1NzE5WhcNMjQwNTI1MTk1NzE5WjAYMRYwFAYD VQQDEw02NjQ5MDgxZi1jNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s662UYlpBocGk6YvEmtp+mx7aacLCPIAm9LaCls8xpqJNd8lb/OgeLAnNnw SOgukfOeaqnQ7Udf5N9Hf+7MMMU7ctbAUUq9oPpZGbfm4MyeMdJ4TJMyB4lvkIEF ZTbmWVVI3bFs4Xy6sXle6Q8U7RKge4AVP4pqS4xnPSEXkjS87jBZylD8d5uUrWnV yKVcmPg4H4sGy45MIDEQOlF5zb9mTHLhNFa0Tif0fvSYGIay0UL6w1eIdt+Zl3+k ytq5ea/nK8YFAFNZolGn6IgcFmxqk6GXQDazRkIvOOcyhuO1oqmKb6GRXkCImPhp i6AHLtqW+7bwZFLIak6kDCsHJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl6mFTx a/CBOFuqal5zGCjyVvLnMB8GA1UdIwQYMBaAFJ4O7vf8iATgQ36Jne0xmIs8YC0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJPQkRmb21kN1RHWWl6eGdM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nN3U5X3lJQk9CRGZvbWQ3VEdZaXp4Z0xRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJP QkRmb21kN1RHWWl6eGdMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzwB/5EQMql4RPl7IndGJuq4TC3W9fGSG79cov7Fpk1BpNhcHCAeTD XohFcJ4IDRl3ppdFvwW7y989d3BjAId5cG4HacjiCrf8jy0CWibyi2eb6F/QksOn yYrEe6tThzIXCK44k/78el63Gr6u45avvzvHMusjYKvKlB5dR2MdycqKXSl/IhSP BKIGFqdhhGoopOH9L3O8teKXcMwvpH31075ZEst3R2sqKK5g6bgrHOmeb/UqXSYp GwJWAvggehJ+4BGnXkkIMePpES9f0al48U5Zwz2fKceJUPDhXjYRUGAu7uKKqEsy ipI81poplxsc00rxAnv4iiULCcbH8OOi -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org