$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft File: nA6EGePLBsHaXiDY90VQWCUP1-0.mft (raw, json) Hash identifier: MTh7mk0WiEUqhF6OebFeoO+NIEmuScOwWBeZeha7iz0= Subject key identifier: 92:E1:DC:D5:CE:6E:F9:43:53:91:D4:33:46:97:7D:09:18:4D:82:8A Authority key identifier: 9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED Certificate issuer: /CN=A915B3AE/serialNumber=9C0E8419E3CB06C1DA5E20D8F7455058250FD7ED Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft Manifest number: 31 Signing time: Sun 19 May 2024 08:22:02 +0000 Manifest this update: Sun 19 May 2024 08:22:02 +0000 Manifest next update: Sun 26 May 2024 08:22:01 +0000 Files and hashes: 1: nA6EGePLBsHaXiDY90VQWCUP1-0.crl (hash: 0UPn12mroKn8enPlTpVvCSDp+Iomq9MZqbSrAfEIEkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B3AE/serialNumber=9C0E8419E3CB06C1DA5E20D8F7455058250FD7ED Validity Not Before: May 19 08:22:02 2024 GMT Not After : May 26 08:22:01 2024 GMT Subject: CN=6649b6aa-c36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:ba:30:07:c5:23:85:11:2c:77:cc:4b:22: 5b:89:27:d7:bc:f4:a4:13:04:a5:54:b2:92:4d:ca: 1f:df:ab:fc:ed:7d:5c:f1:f6:09:df:0b:6c:ef:16: cf:f4:03:81:c4:91:e4:06:5e:84:ce:11:21:ba:8b: 31:6b:77:a4:eb:3d:2b:d6:36:37:73:64:91:fc:0a: ed:d3:fd:dd:51:33:35:43:a1:d2:c6:68:17:bd:b8: 8f:2e:50:47:7c:15:95:d4:89:39:eb:f7:f8:d0:38: 1e:5b:ed:ac:a6:0f:8f:f8:40:1c:a7:60:e4:f9:c5: 89:4a:0d:18:8d:f2:8b:d6:f5:36:9e:8e:6d:d2:a8: 34:01:4b:c5:08:0d:2f:f0:05:3c:dc:d9:8c:d0:52: d7:ea:40:f8:90:85:2d:c4:4b:b5:68:71:bc:bb:80: 9a:8d:11:00:81:d9:16:f0:d7:65:99:65:51:67:8b: 71:78:f6:b6:18:ed:71:c0:40:3c:12:b0:96:3c:8c: 1c:81:be:d2:16:89:6e:5f:02:76:01:dd:63:8b:fe: 50:b2:5f:de:bd:1d:46:d1:ab:82:14:5a:75:23:48: c6:12:1c:0e:51:20:6e:80:c7:52:c6:fc:e1:ed:f5: 65:cb:40:e0:2e:bd:0b:3a:77:70:49:6e:53:3b:fb: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E1:DC:D5:CE:6E:F9:43:53:91:D4:33:46:97:7D:09:18:4D:82:8A X509v3 Authority Key Identifier: keyid:9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:c9:94:79:4c:d8:ab:e0:1e:54:69:2b:c5:68:53:94:6b:b9: 9c:74:8d:66:23:6f:0d:2a:28:b4:45:1b:7d:e1:47:af:1c:a7: 3c:32:5f:80:6c:7f:ec:a7:19:7b:7d:c9:18:ed:79:03:50:23: b6:18:88:bd:45:1c:ec:9a:24:42:b0:b9:0d:64:b1:55:16:74: a4:a4:3e:eb:51:38:66:b8:15:f4:f3:17:f4:6a:91:22:10:fa: 05:ad:22:93:a1:6b:51:8b:29:e4:cb:db:4e:74:14:f2:ae:df: b3:6e:3d:38:3c:9d:0b:97:f7:ff:8b:e9:7e:4c:ad:d2:a4:fd: 62:6d:b1:d7:94:09:99:16:49:a5:2d:42:c3:9c:82:af:a7:af: f2:d6:7f:41:df:8a:8f:55:1f:dc:2e:b9:c2:44:4f:24:b5:44: d2:e9:fb:f2:62:36:7a:4b:a4:9f:ce:d4:b6:69:11:5a:38:54: fa:08:9d:a4:06:b0:8d:1c:19:96:f9:03:9e:fe:8d:56:f4:41: 67:7e:a2:06:3b:21:f3:f0:0e:b1:77:10:47:09:44:57:e4:ff: 07:1a:0a:c2:9d:df:2c:bd:27:36:57:5d:8c:2d:c4:2e:1f:10: 14:fa:aa:e0:05:ec:10:f2:ac:37:65:6a:a6:6f:20:7b:7d:06: 71:60:99:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjNBRTExMC8GA1UEBRMoOUMwRTg0MTlFM0NCMDZDMURBNUUyMEQ4Rjc0NTUwNTgy NTBGRDdFRDAeFw0yNDA1MTkwODIyMDJaFw0yNDA1MjYwODIyMDFaMBgxFjAUBgNV BAMTDTY2NDliNmFhLWMzNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0ibowB8UjhREsd8xLIluJJ9e89KQTBKVUspJNyh/fq/ztfVzx9gnfC2zvFs/0 A4HEkeQGXoTOESG6izFrd6TrPSvWNjdzZJH8Cu3T/d1RMzVDodLGaBe9uI8uUEd8 FZXUiTnr9/jQOB5b7aymD4/4QBynYOT5xYlKDRiN8ovW9Taejm3SqDQBS8UIDS/w BTzc2YzQUtfqQPiQhS3ES7Vocby7gJqNEQCB2Rbw12WZZVFni3F49rYY7XHAQDwS sJY8jByBvtIWiW5fAnYB3WOL/lCyX969HUbRq4IUWnUjSMYSHA5RIG6Ax1LG/OHt 9WXLQOAuvQs6d3BJblM7+1nXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkuHc1c5u +UNTkdQzRpd9CRhNgoowHwYDVR0jBBgwFoAUnA6EGePLBsHaXiDY90VQWCUP1+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCM0FFL0NDMDJBNzU0Q0E5 MzExRUVBNzI2Q0MwOUM0RjlBRTAyL25BNkVHZVBMQnNIYVhpRFk5MFZRV0NVUDEt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkE2RUdlUExCc0hhWGlEWTkwVlFXQ1VQMS0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC M0FFL0NDMDJBNzU0Q0E5MzExRUVBNzI2Q0MwOUM0RjlBRTAyL25BNkVHZVBMQnNI YVhpRFk5MFZRV0NVUDEtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHXJlHlM2KvgHlRpK8VoU5RruZx0jWYjbw0qKLRFG33hR68cpzwyX4Bs f+ynGXt9yRjteQNQI7YYiL1FHOyaJEKwuQ1ksVUWdKSkPutROGa4FfTzF/RqkSIQ +gWtIpOha1GLKeTL2050FPKu37NuPTg8nQuX9/+L6X5MrdKk/WJtsdeUCZkWSaUt QsOcgq+nr/LWf0Hfio9VH9wuucJETyS1RNLp+/JiNnpLpJ/O1LZpEVo4VPoInaQG sI0cGZb5A57+jVb0QWd+ogY7IfPwDrF3EEcJRFfk/wcaCsKd3yy9JzZXXYwtxC4f EBT6quAF7BDyrDdlaqZvIHt9BnFgma8= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org