$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json) Hash identifier: ENxde7JDgLBFxXjJkutSbtRkbxLwbpsgrqKndHwZMEI= Subject key identifier: 65:FF:43:3E:03:9F:06:00:B5:89:B0:AE:9E:8D:6F:A9:5C:9F:6F:14 Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft Manifest number: 41 Signing time: Sun 19 May 2024 08:06:51 +0000 Manifest this update: Sun 19 May 2024 08:06:50 +0000 Manifest next update: Sun 26 May 2024 08:06:50 +0000 Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: G8jySzmFrwkFOergzAUeEfvmlr+qtmyg/YOMHfjxDSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Validity Not Before: May 19 08:06:50 2024 GMT Not After : May 26 08:06:50 2024 GMT Subject: CN=6649b31a-ef85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:9f:8d:b5:bf:5e:45:cf:27:95:1d:83:6a: de:da:00:5d:86:78:54:fc:bb:12:d3:d0:55:64:83: 7f:c4:3a:0d:5f:f2:01:0f:47:9b:69:ec:52:90:e7: 36:d6:af:fc:82:95:c5:2f:0b:6d:a5:b2:a0:e0:f1: f7:3b:a5:06:5a:54:e8:d9:82:2b:45:77:42:a5:c7: 4c:a0:57:96:f4:41:1f:41:56:4b:69:b1:75:f1:78: df:c2:61:b3:5a:0b:cf:5c:08:0e:be:57:f8:0e:76: 3d:61:c0:2e:bf:6f:39:fe:f0:b1:eb:91:e1:3e:41: 1c:c9:b2:ad:4c:0e:70:45:d2:d5:a9:37:f8:03:01: a8:82:d8:f7:e8:25:57:bd:50:dc:04:81:85:0d:ea: b9:44:10:83:e5:a6:48:87:c5:e8:59:2e:71:02:f7: 3d:7e:3d:f2:81:f7:c3:a0:87:6c:31:f7:20:b6:a2: 8e:a9:55:a9:af:fe:4d:0c:a6:d3:e5:c6:08:c1:c2: 91:b6:20:a2:e6:6b:b1:8e:7a:05:ad:11:3f:b7:45: 9d:75:fc:f8:93:54:a5:25:c6:67:16:68:a4:2a:84: f5:c7:81:69:8c:bb:28:d1:d9:71:a2:40:3a:01:68: 91:49:90:d2:3d:74:a8:df:d3:31:23:f0:ea:48:6f: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FF:43:3E:03:9F:06:00:B5:89:B0:AE:9E:8D:6F:A9:5C:9F:6F:14 X509v3 Authority Key Identifier: keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:86:a4:ae:62:35:38:33:04:dc:44:d9:68:52:2d:6f:fc:60: 5a:1e:9f:53:b7:6c:3c:6b:d1:84:7f:d4:1a:3b:b0:6d:64:5b: 18:53:0c:21:e1:ed:ec:5e:10:86:9a:96:a4:6d:1d:0b:eb:3d: f8:74:c4:03:3e:23:06:5c:a1:f3:5f:d7:4c:92:5a:b4:a4:e8: f2:cd:75:b0:e7:00:56:fb:bf:4d:f9:cd:a9:ee:cb:cd:0d:82: a4:ae:6d:60:9b:67:2e:96:42:b1:79:b3:f9:88:64:52:37:e4: e1:8e:8a:36:59:32:ba:e3:18:08:7b:ec:d2:1f:11:44:b4:74: 83:c0:60:8b:61:74:3d:73:de:a7:ec:0a:2f:8f:51:bc:70:16: 27:e9:9f:80:5b:91:29:14:ac:23:8b:48:ab:bf:15:53:7a:06: f6:61:05:ac:d0:19:11:19:d0:a6:56:4a:a8:a1:99:cc:17:dc: 79:b3:fd:91:d2:25:87:44:81:90:f6:71:5e:14:0c:a0:b5:bb: 0e:e0:b6:48:3e:69:e9:5f:26:34:c1:86:57:f6:92:5d:62:3d: 56:19:36:09:a3:87:34:ca:8a:a6:93:fe:30:ef:80:8e:e0:b9: 7b:96:20:00:c6:4e:c5:8a:7a:92:72:58:49:7d:4e:4a:15:c8: 45:d7:89:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QTI2ODExMC8GA1UEBRMoMzRFRkQ3QzRENjZDRkEzNEI4NDU2NkIyNjIzOUQ5MEE4 QzkxRUNCNzAeFw0yNDA1MTkwODA2NTBaFw0yNDA1MjYwODA2NTBaMBgxFjAUBgNV BAMTDTY2NDliMzFhLWVmODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZQp+Ntb9eRc8nlR2Dat7aAF2GeFT8uxLT0FVkg3/EOg1f8gEPR5tp7FKQ5zbW r/yClcUvC22lsqDg8fc7pQZaVOjZgitFd0Klx0ygV5b0QR9BVktpsXXxeN/CYbNa C89cCA6+V/gOdj1hwC6/bzn+8LHrkeE+QRzJsq1MDnBF0tWpN/gDAaiC2PfoJVe9 UNwEgYUN6rlEEIPlpkiHxehZLnEC9z1+PfKB98Ogh2wx9yC2oo6pVamv/k0MptPl xgjBwpG2IKLma7GOegWtET+3RZ11/PiTVKUlxmcWaKQqhPXHgWmMuyjR2XGiQDoB aJFJkNI9dKjf0zEj8OpIb7L3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZf9DPgOf BgC1ibCuno1vqVyfbxQwHwYDVR0jBBgwFoAUNO/XxNZs+jS4RWayYjnZCoyR7Lcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBMjY4LzU0MUYzODg4QjM1 MDExRUU5MjVENzcxQUM0RjlBRTAyL05PX1h4TlpzLWpTNFJXYXlZam5aQ295UjdM Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTk9fWHhOWnMtalM0UldheVlqblpDb3lSN0xjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB MjY4LzU0MUYzODg4QjM1MDExRUU5MjVENzcxQUM0RjlBRTAyL05PX1h4TlpzLWpT NFJXYXlZam5aQ295UjdMYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAqGpK5iNTgzBNxE2WhSLW/8YFoen1O3bDxr0YR/1Bo7sG1kWxhTDCHh 7exeEIaalqRtHQvrPfh0xAM+IwZcofNf10ySWrSk6PLNdbDnAFb7v035zanuy80N gqSubWCbZy6WQrF5s/mIZFI35OGOijZZMrrjGAh77NIfEUS0dIPAYIthdD1z3qfs Ci+PUbxwFifpn4BbkSkUrCOLSKu/FVN6BvZhBazQGREZ0KZWSqihmcwX3Hmz/ZHS JYdEgZD2cV4UDKC1uw7gtkg+aelfJjTBhlf2kl1iPVYZNgmjhzTKiqaT/jDvgI7g uXuWIADGTsWKepJyWEl9TkoVyEXXiVI= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org