$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json) Hash identifier: UZoUpDVEXW3klZUjY4hmcLePoUXtaiGqsR55u705sXc= Subject key identifier: 37:15:EE:F9:41:8F:17:63:CF:BC:F4:50:0A:E9:D5:54:32:8D:36:C9 Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 16E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft Manifest number: 16CC Signing time: Sat 18 May 2024 17:06:54 +0000 Manifest this update: Sat 18 May 2024 17:06:53 +0000 Manifest next update: Sat 25 May 2024 17:06:53 +0000 Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: /Ln5J1Ed8jfI0j0ouMEczARBn+gHsG/Jb32YRifrAnY=) 2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: hONEtX5lzX/KtDJIUntU5RiFJ8ilZNq+IGe1IpxFklc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5856 (0x16e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: May 18 17:06:53 2024 GMT Not After : May 25 17:06:53 2024 GMT Subject: CN=6648e02d-326f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:77:e1:4d:00:b3:22:e7:35:c0:ae:5f:d4: 4e:b9:76:b6:7e:1f:07:de:22:f9:45:52:84:e9:d7: c1:1e:77:f8:03:01:e9:a9:8f:53:0a:49:0f:a6:e2: ec:b9:05:61:7d:84:17:94:48:c8:1e:28:53:ca:9e: c3:27:b6:4a:b2:f0:38:e9:7d:78:c3:d5:7b:8c:b6: 2e:b9:14:92:92:aa:8a:c7:ac:61:5c:9c:ed:f9:6e: 17:5e:a3:98:73:6e:45:1f:d9:19:51:0c:4d:64:68: 74:b8:23:ed:e3:2d:ba:3b:ad:9f:b2:4d:b8:ce:0f: b9:c6:22:a3:ac:a7:9a:df:24:db:66:f2:3d:f5:98: 53:8c:03:fb:b8:1d:56:ea:50:60:73:e1:e1:9c:c7: 1f:fa:b8:0b:f8:ae:f3:d5:53:7f:27:ce:bd:45:41: c6:a7:1b:09:f8:9d:c1:5f:58:5a:4c:b4:fb:96:54: c0:92:13:4a:2f:e2:c0:13:36:8c:5a:54:b0:a5:24: f9:d0:de:ee:05:2b:24:d0:94:89:01:f9:54:ae:14: f2:9c:d6:43:f5:8a:63:94:87:56:0f:f1:d2:70:d7: 3c:79:2b:d8:01:b2:da:0d:3d:1d:af:7e:3a:ea:98: f0:64:74:59:f3:e8:e5:af:87:bc:63:8f:c0:70:d0: 58:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:15:EE:F9:41:8F:17:63:CF:BC:F4:50:0A:E9:D5:54:32:8D:36:C9 X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:3f:1b:ef:b6:75:29:76:08:da:89:fa:12:b4:74:a4:71:00: 7b:ba:05:85:1c:34:85:cf:d1:ff:c0:fe:60:d8:c4:1b:2d:1b: 84:2d:0c:64:02:14:c6:93:c5:64:2f:03:4f:9f:68:78:6e:65: 83:1e:e9:3e:b0:db:ff:bd:e9:6c:be:68:3f:cc:e6:16:de:5d: ae:81:6c:10:bf:e9:b2:c8:7d:40:48:1a:b6:a1:82:8b:f7:ee: e3:32:e5:43:13:80:d5:81:9c:cd:79:1b:42:50:5b:68:b9:f6: 95:f1:05:40:2b:70:a5:25:d6:af:da:9d:84:63:f2:2e:82:90: 8d:86:ed:81:e8:7e:28:06:79:57:29:73:ad:00:e7:e3:91:da: 6c:43:bd:e0:8f:f8:3d:51:74:24:8f:a2:45:9f:54:79:fe:ae: 63:dc:c7:4a:18:ef:8c:67:7e:0c:27:9e:08:6f:b7:b9:a2:a1: 19:88:51:75:de:cc:fa:8a:f2:81:61:4b:1b:c5:8a:df:7c:8a: d1:e2:e1:0c:37:af:8a:d8:8b:a2:39:f5:dd:7c:c1:aa:90:5e: 2b:71:9e:8f:3e:f0:f4:cf:35:de:21:8d:89:68:aa:97:44:da: 90:9b:36:76:aa:48:d9:79:6c:34:a7:81:15:94:2a:47:5d:3d: b2:70:27:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjQwNTE4MTcwNjUzWhcNMjQwNTI1MTcwNjUzWjAYMRYwFAYD VQQDEw02NjQ4ZTAyZC0zMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYt34U0AsyLnNcCuX9ROuXa2fh8H3iL5RVKE6dfBHnf4AwHpqY9TCkkPpuLs uQVhfYQXlEjIHihTyp7DJ7ZKsvA46X14w9V7jLYuuRSSkqqKx6xhXJzt+W4XXqOY c25FH9kZUQxNZGh0uCPt4y26O62fsk24zg+5xiKjrKea3yTbZvI99ZhTjAP7uB1W 6lBgc+HhnMcf+rgL+K7z1VN/J869RUHGpxsJ+J3BX1haTLT7llTAkhNKL+LAEzaM WlSwpST50N7uBSsk0JSJAflUrhTynNZD9YpjlIdWD/HScNc8eSvYAbLaDT0dr346 6pjwZHRZ8+jlr4e8Y4/AcNBYTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcV7vlB jxdjz7z0UArp1VQyjTbJMB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE3RC8zRDdBNjI4NkNGNTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0 Q0F4NVVoV1c0eXlQQnRpTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEPxvvtnUpdgjaifoStHSkcQB7ugWFHDSFz9H/wP5g2MQbLRuELQxk AhTGk8VkLwNPn2h4bmWDHuk+sNv/velsvmg/zOYW3l2ugWwQv+myyH1ASBq2oYKL 9+7jMuVDE4DVgZzNeRtCUFtoufaV8QVAK3ClJdav2p2EY/IugpCNhu2B6H4oBnlX KXOtAOfjkdpsQ73gj/g9UXQkj6JFn1R5/q5j3MdKGO+MZ34MJ54Ib7e5oqEZiFF1 3sz6ivKBYUsbxYrffIrR4uEMN6+K2IuiOfXdfMGqkF4rcZ6PPvD0zzXeIY2JaKqX RNqQmzZ2qkjZeWw0p4EVlCpHXT2ycCf9 -----END CERTIFICATE-----Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org