$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: Dh/I0DmOy+0moKPvExMlRvsOaWWiONPifA/NJ0DsXdE= Subject key identifier: 79:FC:27:58:41:91:EF:6F:22:0C:69:19:E6:77:A5:79:3A:12:E5:37 Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 06E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 06E4 Signing time: Sat 18 May 2024 22:48:32 +0000 Manifest this update: Sat 18 May 2024 22:48:31 +0000 Manifest next update: Sat 25 May 2024 22:48:31 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: Sf84A+KUGZ5zIUrHLX+Mc8hBiXtxxaG+hQSC6S1pBlY=) 2: 5ABF5FB0026911EBB480261FC4F9AE02.roa (hash: 9aX02VEfMunOMBUH2LvHCcIZVyh/HAUdUMwOncauNcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: May 18 22:48:31 2024 GMT Not After : May 25 22:48:31 2024 GMT Subject: CN=66493040-55a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:97:89:07:a7:e2:78:34:85:77:63:84:bc:d7: c2:02:e1:ad:96:fb:ab:fb:35:b1:4f:05:22:28:93: b5:11:dd:22:93:d8:67:32:0c:cc:20:7c:57:fe:ee: 34:70:7c:f7:76:69:8d:82:b1:0e:9a:5d:f1:7d:70: b3:30:38:d7:21:0c:46:d9:23:34:d0:86:ec:bc:1d: cf:5e:35:5c:1b:8f:24:99:ff:e4:52:cf:0b:13:15: 8e:e3:b7:c2:0c:da:fb:cc:21:70:b6:ea:5f:0c:33: 2e:2c:1a:00:17:c7:d6:9f:24:0e:7c:70:93:70:8c: 23:6f:88:48:9b:6b:3d:17:8e:9a:0d:3d:51:40:57: cc:99:ba:6b:4f:31:5a:4d:2c:a2:4a:69:8c:77:9f: e4:a7:5e:ed:4b:55:dc:36:c5:7e:7e:e6:16:bc:2f: 79:6e:78:ad:42:e9:5f:85:92:d6:77:0d:4f:b0:4d: 0c:18:a5:5b:d1:c3:62:73:41:5c:59:f7:1a:91:03: 3b:87:a3:f4:d1:57:a8:80:05:03:75:82:fd:68:f6: f1:0f:df:5e:7f:01:c2:b1:2d:50:44:13:20:22:f1: 1f:f5:09:ae:12:2c:1c:f8:75:db:72:7e:d9:b0:d7: dd:89:64:cd:19:be:15:3d:89:4e:8c:96:03:71:8e: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FC:27:58:41:91:EF:6F:22:0C:69:19:E6:77:A5:79:3A:12:E5:37 X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f6:22:c5:73:3f:21:e3:19:ed:c8:ce:71:08:04:33:5c:4a: 12:e1:56:23:73:4d:58:81:53:d1:c7:fb:0e:59:ee:f8:1b:cc: f1:2d:45:3b:c0:bb:1e:22:3d:85:fa:ae:a0:f6:04:f7:6f:fa: 78:35:cb:f6:23:60:1e:e8:ba:c5:03:be:5d:cb:29:10:69:7c: 2d:7f:85:08:01:3b:ce:14:5d:e8:a9:2c:7f:4c:25:87:31:47: 43:82:2e:10:9b:31:e9:39:90:b0:3f:98:66:37:02:12:ef:15: 10:b2:bd:8d:3a:77:a8:ae:d0:bc:02:3d:41:d1:ca:21:32:8e: 2c:6f:56:3e:1d:f1:fb:ca:18:0d:60:4a:a1:5b:a2:46:94:e2: 63:fd:8c:e0:35:ee:f6:15:6f:2d:6e:36:37:7b:e6:76:01:40: 70:d9:06:d0:29:dd:af:c9:c8:10:3c:92:32:77:05:d3:89:f4: 27:b1:0b:26:d3:c5:ca:06:f5:e4:c2:27:20:25:8d:30:d9:72: 5e:df:0d:a3:ce:ce:88:b9:4e:14:99:02:fe:af:b5:3f:96:c1: 48:ac:4d:42:95:83:b2:51:91:5f:b3:31:fa:0c:a3:55:c3:2e: 29:d5:01:05:77:48:11:7a:cd:c3:b3:21:4d:f7:b4:44:a7:e4: d6:ca:fe:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjQwNTE4MjI0ODMxWhcNMjQwNTI1MjI0ODMxWjAYMRYwFAYD VQQDEw02NjQ5MzA0MC01NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JeJB6fieDSFd2OEvNfCAuGtlvur+zWxTwUiKJO1Ed0ik9hnMgzMIHxX/u40 cHz3dmmNgrEOml3xfXCzMDjXIQxG2SM00IbsvB3PXjVcG48kmf/kUs8LExWO47fC DNr7zCFwtupfDDMuLBoAF8fWnyQOfHCTcIwjb4hIm2s9F46aDT1RQFfMmbprTzFa TSyiSmmMd5/kp17tS1XcNsV+fuYWvC95bnitQulfhZLWdw1PsE0MGKVb0cNic0Fc WfcakQM7h6P00VeogAUDdYL9aPbxD99efwHCsS1QRBMgIvEf9QmuEiwc+HXbcn7Z sNfdiWTNGb4VPYlOjJYDcY6b9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHn8J1hB ke9vIgxpGeZ3pXk6EuU3MB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF9iLFcz8h4xntyM5xCAQzXEoS4VYjc01YgVPRx/sOWe74G8zxLUU7 wLseIj2F+q6g9gT3b/p4Ncv2I2Ae6LrFA75dyykQaXwtf4UIATvOFF3oqSx/TCWH MUdDgi4QmzHpOZCwP5hmNwIS7xUQsr2NOneortC8Aj1B0cohMo4sb1Y+HfH7yhgN YEqhW6JGlOJj/YzgNe72FW8tbjY3e+Z2AUBw2QbQKd2vycgQPJIydwXTifQnsQsm 08XKBvXkwicgJY0w2XJe3w2jzs6IuU4UmQL+r7U/lsFIrE1ClYOyUZFfszH6DKNV wy4p1QEFd0gRes3DsyFN97REp+TWyv6o -----END CERTIFICATE-----Generated at Sun May 19 00:30:15 2024 by rpki-client on console-ams.rpki-client.org