$ rpki-client -vvf rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft File: NtqOcqrHflUzc5DvTGHJVAtFldc.mft (raw, json) Hash identifier: hjSBMNGvo7IJZgBui1r09fLwXMUTGRcY3CfYXsu1bGY= Subject key identifier: 37:D4:48:BF:41:DF:3D:49:61:C4:32:B6:8D:BB:2B:74:DA:53:E0:93 Authority key identifier: 36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 Certificate issuer: /CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft Manifest number: 093E Signing time: Sat 18 May 2024 21:10:18 +0000 Manifest this update: Sat 18 May 2024 21:10:17 +0000 Manifest next update: Sat 25 May 2024 21:10:17 +0000 Files and hashes: 1: NtqOcqrHflUzc5DvTGHJVAtFldc.crl (hash: 8EUICZn6tywyMA+YwhjhWCqm/V80hnp7fqaQ65sz8xA=) 2: 6A23E166499211ED879F2D11C4F9AE02.roa (hash: menbjtgG3OL9FP2gHIv3HpKwGpwOaKUkt24pbDLYnNA=) 3: 6B5765BC499211ED879F2D11C4F9AE02.roa (hash: bMJemH5ceUwe7SSoHueO95SQnaFhnEbPA4cUZ9QObys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91577A2/serialNumber=36DA8E72AAC77E55337390EF4C61C9540B4595D7 Validity Not Before: May 18 21:10:17 2024 GMT Not After : May 25 21:10:17 2024 GMT Subject: CN=6649193a-8e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:c0:e0:19:8e:b2:e3:0d:27:26:b6:b9:3e: 13:fa:da:de:d4:c5:3e:9c:c7:1a:40:e1:05:34:d3: a9:04:cb:07:d4:76:ab:f3:ce:39:4b:66:54:78:42: 40:3e:fd:c1:e8:d5:6d:6f:01:5a:c4:f8:5d:22:35: 25:70:f7:9a:73:e8:ac:c7:c8:0d:2f:af:f7:23:44: ca:d9:33:c5:9d:00:38:ee:b6:60:a0:73:46:10:19: 65:d9:c8:c5:03:88:44:17:34:75:37:db:5a:a7:64: 29:d8:79:94:2b:4d:89:14:81:4e:e7:1b:c0:f0:cd: 36:6a:db:de:be:b1:ba:a0:15:96:9c:89:74:55:1e: bd:0d:c1:fc:f5:21:81:46:a6:50:0f:7a:41:7e:a7: 7c:df:50:f6:d2:05:60:3e:bd:ad:d6:e5:70:71:ac: 98:16:20:78:5c:1e:27:bc:f2:5a:69:fb:41:1f:57: 8e:af:b1:9f:db:c7:7f:cb:85:03:89:7b:98:72:8e: 69:99:d4:e7:45:87:5e:24:8e:15:8e:c3:b3:b6:c4: cd:50:69:de:6d:de:40:83:b1:83:3a:35:17:9d:3a: 33:bc:b4:b2:56:61:66:30:9f:ee:b6:9c:8b:f3:fd: c3:ce:52:d5:c3:f8:08:d3:a0:02:5a:3f:dd:74:44: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D4:48:BF:41:DF:3D:49:61:C4:32:B6:8D:BB:2B:74:DA:53:E0:93 X509v3 Authority Key Identifier: keyid:36:DA:8E:72:AA:C7:7E:55:33:73:90:EF:4C:61:C9:54:0B:45:95:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtqOcqrHflUzc5DvTGHJVAtFldc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91577A2/8BC15C407B0411EA9DAAD432C4F9AE02/NtqOcqrHflUzc5DvTGHJVAtFldc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ce:91:98:b4:4d:f3:b7:a3:65:97:8a:eb:57:c3:93:a3:4d: 94:e1:b5:5c:83:ea:a3:6b:d1:3e:99:69:a7:f3:a0:93:91:89: c1:72:44:bd:50:e8:c3:b3:09:cf:9f:97:53:f5:90:94:10:3b: ee:6d:f7:ad:15:fb:d4:05:0b:21:a9:d8:58:42:89:a8:f0:0b: c0:50:4e:2f:ae:e4:ba:60:4c:d8:fd:95:7d:c9:41:11:4b:a4: 08:63:81:61:02:ba:a6:ec:34:5f:8a:ca:2d:90:9a:bc:3c:92: ee:ef:ed:60:0a:1b:ea:9b:f2:fd:e1:d7:4b:6e:14:12:2a:35: 0c:26:50:bf:bf:c1:1a:78:7c:a7:2f:65:5a:6d:4c:f8:23:73: cf:92:e9:92:35:cd:ab:f7:55:9e:51:62:0b:62:19:1a:74:c3: c2:00:7f:d0:25:ac:80:4a:96:de:3c:97:60:ce:e9:35:03:84: b2:f2:2f:13:fb:a4:f9:a6:1d:53:01:b4:d7:a8:b9:d7:66:ca: b4:fe:a1:74:b0:4d:68:10:29:90:3e:9f:fe:cf:4d:8e:fe:5b: c0:28:06:39:24:77:2a:88:96:9f:f4:75:be:1f:37:46:a3:e6: d4:f9:38:ee:91:bf:71:45:1d:67:50:35:77:e6:60:24:7f:d2: 6e:45:dd:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3QTIxMTAvBgNVBAUTKDM2REE4RTcyQUFDNzdFNTUzMzczOTBFRjRDNjFDOTU0 MEI0NTk1RDcwHhcNMjQwNTE4MjExMDE3WhcNMjQwNTI1MjExMDE3WjAYMRYwFAYD VQQDEw02NjQ5MTkzYS04ZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjjA4BmOsuMNJya2uT4T+tre1MU+nMcaQOEFNNOpBMsH1Har8845S2ZUeEJA Pv3B6NVtbwFaxPhdIjUlcPeac+isx8gNL6/3I0TK2TPFnQA47rZgoHNGEBll2cjF A4hEFzR1N9tap2Qp2HmUK02JFIFO5xvA8M02atvevrG6oBWWnIl0VR69DcH89SGB RqZQD3pBfqd831D20gVgPr2t1uVwcayYFiB4XB4nvPJaaftBH1eOr7Gf28d/y4UD iXuYco5pmdTnRYdeJI4VjsOztsTNUGnebd5Ag7GDOjUXnTozvLSyVmFmMJ/utpyL 8/3DzlLVw/gI06ACWj/ddEQOOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfUSL9B 3z1JYcQyto27K3TaU+CTMB8GA1UdIwQYMBaAFDbajnKqx35VM3OQ70xhyVQLRZXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzdBMi84QkMxNUM0MDdC MDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZsVXpjNUR2VEdISlZBdEZs ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050cU9jcXJIZmxVemM1RHZUR0hKVkF0RmxkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzdBMi84QkMxNUM0MDdCMDQxMUVBOURBQUQ0MzJDNEY5QUUwMi9OdHFPY3FySGZs VXpjNUR2VEdISlZBdEZsZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxzpGYtE3zt6Nll4rrV8OTo02U4bVcg+qja9E+mWmn86CTkYnBckS9 UOjDswnPn5dT9ZCUEDvubfetFfvUBQshqdhYQomo8AvAUE4vruS6YEzY/ZV9yUER S6QIY4FhArqm7DRfisotkJq8PJLu7+1gChvqm/L94ddLbhQSKjUMJlC/v8EaeHyn L2VabUz4I3PPkumSNc2r91WeUWILYhkadMPCAH/QJayASpbePJdgzuk1A4Sy8i8T +6T5ph1TAbTXqLnXZsq0/qF0sE1oECmQPp/+z02O/lvAKAY5JHcqiJaf9HW+HzdG o+bU+Tjukb9xRR1nUDV35mAkf9JuRd3l -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org