$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json) Hash identifier: oS/2grtA7rsCoJg+rtKTqoi1DNYsehXgnYBk7Ha/3a0= Subject key identifier: 95:6D:0D:5C:CB:ED:5E:E6:97:E3:DD:C1:9D:AF:C5:B3:9B:A3:75:C4 Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Certificate serial: 0830 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft Manifest number: 082A Signing time: Sat 18 May 2024 21:46:43 +0000 Manifest this update: Sat 18 May 2024 21:46:43 +0000 Manifest next update: Sat 25 May 2024 21:46:43 +0000 Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: 2o5SxspjRRoTHQRpze/EnCU0GZOH7vChz0NYBKmOx94=) 2: E04ADD7CB2E511EAA94E5634C4F9AE02.roa (hash: 0Vwi3dV76YkUx0RLq3epBcAdHFd1u3zQCBlRnPFM9c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2096 (0x830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Validity Not Before: May 18 21:46:43 2024 GMT Not After : May 25 21:46:43 2024 GMT Subject: CN=664921c3-253c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:60:74:f2:20:00:94:72:54:74:f7:66:6d:97: e5:a4:6e:bb:9b:00:32:41:15:d1:94:34:6d:24:10: 2b:c3:b3:6c:d8:4e:bb:e5:07:35:c2:65:c4:41:02: d9:27:0c:d6:05:31:22:df:4d:77:7c:db:e5:d6:79: 7a:02:26:6d:e5:d3:ff:61:33:43:ed:c6:19:c2:3d: a6:e2:59:80:9b:21:7f:3a:bb:4c:55:80:73:f7:47: 7e:42:50:57:e0:f4:8a:23:50:7f:db:de:a9:29:34: 96:4e:f4:14:7e:f7:4a:10:61:79:1c:b5:02:eb:d4: 1a:d2:2b:8b:18:02:41:37:d1:17:36:c0:c9:08:7a: f0:39:0b:f6:cf:39:f4:0c:29:2d:53:3b:68:7b:46: f1:68:7f:aa:50:a4:eb:19:c0:e0:fa:8f:60:28:22: 77:4e:90:59:a2:ad:c9:75:c6:f5:8d:d8:fa:c5:36: 8d:d9:2e:85:94:5a:8c:70:1d:4b:85:d3:f9:6f:fd: 16:c0:ed:39:c3:51:f9:82:02:c0:5c:03:ed:c6:cd: 9c:f9:24:94:d5:ba:24:6f:19:43:ec:86:d6:5b:8b: d9:09:1c:76:4b:02:95:c9:61:25:bf:a8:79:6b:a1: 2a:ec:e6:85:74:ac:41:08:52:ec:dc:fe:46:b6:98: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6D:0D:5C:CB:ED:5E:E6:97:E3:DD:C1:9D:AF:C5:B3:9B:A3:75:C4 X509v3 Authority Key Identifier: keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:39:8c:56:51:eb:a8:41:1e:47:1f:1d:09:97:6b:ec:b2:26: d7:1f:09:74:32:78:99:bc:1f:7c:33:38:62:10:5d:e0:58:8f: 09:5e:bd:c3:cf:5c:fb:f2:71:a8:ae:da:13:ac:7f:b7:2e:e4: b0:16:10:49:fa:ac:49:8c:1d:f3:a8:44:be:96:52:37:c7:57: 9a:88:47:50:65:e0:06:c5:3a:0c:41:ac:94:6c:d2:f3:80:a2: 1f:7b:ca:c1:44:88:e2:b2:4f:b6:b6:d9:5d:8b:a7:3a:5e:a4: 98:b6:1b:16:36:8a:5a:1c:c0:db:63:cb:08:29:42:fc:7f:70: 64:d3:85:4d:e2:42:26:4b:7f:22:f8:fb:0c:26:12:5b:0d:32: 4f:7d:f9:d3:e7:46:e0:26:49:44:56:1a:56:d5:97:b6:3b:00: c9:95:af:58:7e:4d:c5:ed:f3:2f:9e:d1:37:bd:da:0c:39:fa: 1c:62:42:3c:69:7e:22:7d:64:83:87:2e:3e:b3:bd:d0:68:0e: 40:80:b2:0e:50:a9:ff:3b:17:e1:56:64:f4:81:42:7a:c8:ff: 57:c0:32:47:51:85:b5:29:74:34:68:a9:a3:15:84:e9:4f:a8: b8:68:8d:63:96:85:37:44:9b:c3:2c:ca:c5:77:8b:49:7d:32: f1:7c:84:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBOUMxMTAvBgNVBAUTKDM2N0UxRkFGNzUyQzYzMUZDNDNEODcyMDk4MjQwRTgw MzIxNTc1QzcwHhcNMjQwNTE4MjE0NjQzWhcNMjQwNTI1MjE0NjQzWjAYMRYwFAYD VQQDEw02NjQ5MjFjMy0yNTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmB08iAAlHJUdPdmbZflpG67mwAyQRXRlDRtJBArw7Ns2E675Qc1wmXEQQLZ JwzWBTEi3013fNvl1nl6AiZt5dP/YTND7cYZwj2m4lmAmyF/OrtMVYBz90d+QlBX 4PSKI1B/296pKTSWTvQUfvdKEGF5HLUC69Qa0iuLGAJBN9EXNsDJCHrwOQv2zzn0 DCktUztoe0bxaH+qUKTrGcDg+o9gKCJ3TpBZoq3Jdcb1jdj6xTaN2S6FlFqMcB1L hdP5b/0WwO05w1H5ggLAXAPtxs2c+SSU1bokbxlD7IbWW4vZCRx2SwKVyWElv6h5 a6Eq7OaFdKxBCFLs3P5Gtpix2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVtDVzL 7V7ml+PdwZ2vxbObo3XEMB8GA1UdIwQYMBaAFDZ+H691LGMfxD2HIJgkDoAyFXXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE5Qy8yQTI5NDg0Q0FC QTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4X0VQWWNnbUNRT2dESVZk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05uNGZyM1VzWXhfRVBZY2dtQ1FPZ0RJVmRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4 X0VQWWNnbUNRT2dESVZkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeOYxWUeuoQR5HHx0Jl2vssibXHwl0MniZvB98MzhiEF3gWI8JXr3D z1z78nGortoTrH+3LuSwFhBJ+qxJjB3zqES+llI3x1eaiEdQZeAGxToMQayUbNLz gKIfe8rBRIjisk+2ttldi6c6XqSYthsWNopaHMDbY8sIKUL8f3Bk04VN4kImS38i +PsMJhJbDTJPffnT50bgJklEVhpW1Ze2OwDJla9Yfk3F7fMvntE3vdoMOfocYkI8 aX4ifWSDhy4+s73QaA5AgLIOUKn/OxfhVmT0gUJ6yP9XwDJHUYW1KXQ0aKmjFYTp T6i4aI1jloU3RJvDLMrFd4tJfTLxfITk -----END CERTIFICATE-----Generated at Sat May 18 22:27:54 2024 by rpki-client on console-ams.rpki-client.org