$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json) Hash identifier: 4M+wRFNiQZevc4ZX75hC3kyuAZG3kQ+E7wkHI3cpQyk= Subject key identifier: 8D:82:6A:C8:94:C6:25:17:09:2A:B0:93:A9:F8:AC:35:FA:07:28:C3 Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Certificate serial: 04B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft Manifest number: 04B0 Signing time: Sun 19 May 2024 01:30:45 +0000 Manifest this update: Sun 19 May 2024 01:30:45 +0000 Manifest next update: Sun 26 May 2024 01:30:45 +0000 Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: 2G6DuiQ11uhPiMsrl5yz57i6qcRgbssFqfG53M+8720=) 2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: V5f/gqxIr+r1tPh/3c5+lIBvIH0Ic1ylS/ajbHsbw4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877 Validity Not Before: May 19 01:30:45 2024 GMT Not After : May 26 01:30:45 2024 GMT Subject: CN=66495645-a8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:9b:00:ff:23:f5:1a:88:d8:27:bc:3a:54: 3b:aa:28:b5:4f:df:f4:62:af:5a:86:61:73:15:8a: 37:b0:c6:1d:6e:47:6f:5a:ab:18:cd:71:c5:13:23: f1:73:81:1d:18:c2:43:8e:6f:63:91:ae:44:3f:8f: b6:e6:38:d1:36:e8:e9:73:04:b6:a5:2b:fe:d3:1c: 89:28:03:e2:c1:d2:b0:c1:f0:21:4f:00:99:54:88: 34:1d:9c:dd:ea:4c:4d:5e:98:42:41:b5:4c:03:7a: 75:2d:af:34:04:3a:a2:47:87:9f:35:79:61:dc:10: 5c:2c:8a:fd:63:66:67:a3:51:7c:c2:ae:80:6a:f4: 22:ff:bd:08:05:ad:6b:c8:25:a8:c5:07:92:2c:28: c6:72:c4:90:d2:d4:50:93:c4:d2:4f:f2:5b:a8:9f: e2:af:6a:06:70:a0:28:3a:c8:8c:a5:f7:4e:d2:63: 4c:49:3e:6c:71:9c:4e:3f:f1:e4:47:8a:27:3f:a6: 40:e2:bd:13:ac:44:dc:e9:af:5a:e6:33:78:83:67: 64:3a:a0:23:5e:0a:7d:a3:1f:dc:0d:13:52:51:64: bc:73:8c:37:2b:ec:6b:02:f1:0b:35:0b:f9:48:74: 7b:79:e9:97:8b:85:86:1d:1a:ce:05:e7:c6:ac:6d: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:82:6A:C8:94:C6:25:17:09:2A:B0:93:A9:F8:AC:35:FA:07:28:C3 X509v3 Authority Key Identifier: keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fe:1f:fe:a3:5a:81:c3:ab:22:9e:90:f5:2f:4c:d1:81:0d: c9:46:b1:2f:52:2f:af:1f:0f:86:b8:c2:0c:6d:28:a0:37:72: d6:91:d2:4d:62:e3:1c:73:b2:6a:3a:7a:4d:02:d2:db:9d:e9: ce:ba:b8:0b:f5:cc:6a:34:04:b9:76:71:9d:4c:71:f6:dd:c4: 09:8d:65:a2:25:a6:b1:70:a4:7e:3e:a4:06:f4:33:e7:84:bd: 9f:42:d2:fd:2c:f9:9b:85:65:d7:ce:be:66:c1:c0:fa:04:c0: 3b:20:07:f3:6d:fc:03:4d:c2:94:21:69:ab:ca:8f:ba:7f:71: 01:3c:dd:24:21:d3:81:13:40:ac:84:14:3f:60:15:98:84:e0: 3f:35:98:7b:c1:a3:68:c8:ab:d9:df:b2:85:3c:89:28:5b:43: 2e:9c:42:d2:15:49:07:32:d4:98:2e:2c:54:46:10:9c:2f:0f: bb:f1:3a:f2:fa:a8:3b:8d:56:4e:c5:3a:3d:1d:4c:0b:b1:82: a5:b4:14:97:cd:8b:df:06:11:87:4b:a4:0e:e5:56:00:14:b4: 57:87:3e:77:6f:2b:29:6d:11:b1:46:7a:fe:f1:54:46:c5:12: de:3f:8c:f2:71:70:fd:b1:a2:00:2d:8d:fc:97:05:2b:4b:a5: ac:cf:49:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4 Qzk0NTY4NzcwHhcNMjQwNTE5MDEzMDQ1WhcNMjQwNTI2MDEzMDQ1WjAYMRYwFAYD VQQDEw02NjQ5NTY0NS1hOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsibAP8j9RqI2Ce8OlQ7qii1T9/0Yq9ahmFzFYo3sMYdbkdvWqsYzXHFEyPx c4EdGMJDjm9jka5EP4+25jjRNujpcwS2pSv+0xyJKAPiwdKwwfAhTwCZVIg0HZzd 6kxNXphCQbVMA3p1La80BDqiR4efNXlh3BBcLIr9Y2Zno1F8wq6AavQi/70IBa1r yCWoxQeSLCjGcsSQ0tRQk8TST/JbqJ/ir2oGcKAoOsiMpfdO0mNMST5scZxOP/Hk R4onP6ZA4r0TrETc6a9a5jN4g2dkOqAjXgp9ox/cDRNSUWS8c4w3K+xrAvELNQv5 SHR7eemXi4WGHRrOBefGrG1USQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2CasiU xiUXCSqwk6n4rDX6ByjDMB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0 dVg0MEpqWmN4X0dNbEZhSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf/h/+o1qBw6sinpD1L0zRgQ3JRrEvUi+vHw+GuMIMbSigN3LWkdJN YuMcc7JqOnpNAtLbnenOurgL9cxqNAS5dnGdTHH23cQJjWWiJaaxcKR+PqQG9DPn hL2fQtL9LPmbhWXXzr5mwcD6BMA7IAfzbfwDTcKUIWmryo+6f3EBPN0kIdOBE0Cs hBQ/YBWYhOA/NZh7waNoyKvZ37KFPIkoW0MunELSFUkHMtSYLixURhCcLw+78Try +qg7jVZOxTo9HUwLsYKltBSXzYvfBhGHS6QO5VYAFLRXhz53byspbRGxRnr+8VRG xRLeP4zycXD9saIALY38lwUrS6Wsz0ka -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org