$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: zkW4sMxF/SCFHt+xULUottO38ZKmxDAklAUwEZBBreI= Subject key identifier: BB:88:4A:7C:E8:60:AB:0C:77:14:29:3C:8A:3B:99:4D:54:E2:76:FC Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 1046 Signing time: Sat 18 May 2024 20:29:44 +0000 Manifest this update: Sat 18 May 2024 20:29:44 +0000 Manifest next update: Sat 25 May 2024 20:29:44 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: bcKoawRwwBRRPCiepYRLVIgDQQe8z6/FvxPVdkeFamQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: May 18 20:29:44 2024 GMT Not After : May 25 20:29:44 2024 GMT Subject: CN=66490fb8-a755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:bb:39:a3:f4:4b:fa:16:e0:de:f7:28:70: 32:d5:c4:b1:23:6a:20:ca:2d:e4:52:fa:1a:46:a1: 56:2d:32:bf:f3:2f:74:d3:ec:1f:c0:98:ce:de:8f: 5a:23:38:05:d5:6d:5b:ca:48:8b:a9:81:0a:63:39: 51:3b:65:c3:ec:b1:72:89:c3:c8:34:54:35:b0:31: 0c:83:5d:00:0c:85:14:14:40:c8:f6:b1:05:e7:91: de:aa:4d:39:1a:5b:04:d1:48:f9:07:54:2f:f4:ca: d4:32:69:ff:8c:f4:3e:2d:bd:73:6f:12:87:11:63: e2:a0:6e:a2:74:03:43:9d:3d:78:f2:2a:01:f3:6d: d2:3b:be:56:fb:54:a2:92:b6:dd:81:af:5c:70:be: dc:54:10:07:13:01:be:b9:22:06:12:8d:5a:fc:99: dc:e2:e7:77:fc:46:21:d0:da:3b:e9:24:92:bd:46: ff:d7:90:2a:26:b0:26:c5:f3:00:12:39:07:7d:22: 86:3b:fc:8b:5a:14:0a:49:c4:da:6c:ac:62:3a:41: 18:e7:5a:a9:99:fc:b6:0b:cc:0d:10:73:d7:90:e5: 1e:1d:11:06:e6:f2:8c:43:ac:1a:62:b5:ea:58:29: 46:c9:29:57:00:01:f3:b9:84:89:c1:bf:b8:cf:81: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:4A:7C:E8:60:AB:0C:77:14:29:3C:8A:3B:99:4D:54:E2:76:FC X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a9:5f:8f:4c:bb:1d:f6:52:95:61:bf:8c:3a:25:b3:04:66: 53:30:da:f0:52:48:05:28:cb:09:12:71:83:1f:a3:8c:a1:13: 8d:59:f8:85:af:08:0e:38:7b:0e:e0:7c:6f:56:74:25:87:bd: 92:a5:4d:16:6d:ef:1e:d6:be:9c:e5:84:34:ed:e6:c2:93:12: 03:7f:b3:68:e1:0f:6f:fe:c0:70:3c:75:d1:d6:a4:f9:e5:df: c1:eb:62:75:5c:f8:2e:6a:6b:19:af:14:48:f7:06:2b:2c:9b: 32:20:05:23:ab:4f:ac:5f:04:46:63:0c:b2:f8:43:16:f6:79: e5:4c:2e:0a:e9:aa:49:44:62:25:81:d2:76:bc:5f:06:dd:36: 32:fe:6d:26:65:0e:5f:60:04:22:00:30:b5:02:d2:7f:c3:b1: 38:b0:3b:ae:21:3f:ec:24:88:de:ce:3f:87:74:f9:4c:5c:04: d0:ee:46:32:df:79:cf:58:4c:33:c8:ca:d2:f7:c7:67:c1:1c: 5d:e7:0f:45:41:1c:7e:5f:d7:c8:5f:de:58:85:b2:1b:6f:cf: 29:c9:2b:05:d6:8c:74:0b:43:62:8c:80:37:62:d4:8f:36:b7: cd:0f:af:5e:4c:f9:53:6c:46:3f:9f:22:db:50:28:c7:41:f6: dc:bc:45:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjQwNTE4MjAyOTQ0WhcNMjQwNTI1MjAyOTQ0WjAYMRYwFAYD VQQDEw02NjQ5MGZiOC1hNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NO7OaP0S/oW4N73KHAy1cSxI2ogyi3kUvoaRqFWLTK/8y900+wfwJjO3o9a IzgF1W1bykiLqYEKYzlRO2XD7LFyicPINFQ1sDEMg10ADIUUFEDI9rEF55Heqk05 GlsE0Uj5B1Qv9MrUMmn/jPQ+Lb1zbxKHEWPioG6idANDnT148ioB823SO75W+1Si krbdga9ccL7cVBAHEwG+uSIGEo1a/Jnc4ud3/EYh0No76SSSvUb/15AqJrAmxfMA EjkHfSKGO/yLWhQKScTabKxiOkEY51qpmfy2C8wNEHPXkOUeHREG5vKMQ6waYrXq WClGySlXAAHzuYSJwb+4z4EhAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuISnzo YKsMdxQpPIo7mU1U4nb8MB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjqV+PTLsd9lKVYb+MOiWzBGZTMNrwUkgFKMsJEnGDH6OMoRONWfiF rwgOOHsO4HxvVnQlh72SpU0Wbe8e1r6c5YQ07ebCkxIDf7No4Q9v/sBwPHXR1qT5 5d/B62J1XPguamsZrxRI9wYrLJsyIAUjq0+sXwRGYwyy+EMW9nnlTC4K6apJRGIl gdJ2vF8G3TYy/m0mZQ5fYAQiADC1AtJ/w7E4sDuuIT/sJIjezj+HdPlMXATQ7kYy 33nPWEwzyMrS98dnwRxd5w9FQRx+X9fIX95YhbIbb88pySsF1ox0C0NijIA3YtSP NrfND69eTPlTbEY/nyLbUCjHQfbcvEXK -----END CERTIFICATE-----Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org