$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft File: NAlJ7LhXg2NX8QJTxpQnIggZex0.mft (raw, json) Hash identifier: sMxpPdGKCcWbB3nVFL5OQEzwz8LxJQoZD4oIojDEpGk= Subject key identifier: 27:67:1C:C0:A0:D6:3B:55:7D:2D:A3:AF:9F:15:D5:19:F6:B2:20:CB Authority key identifier: 34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D Certificate issuer: /CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D Certificate serial: 046F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft Manifest number: 046B Signing time: Sun 19 May 2024 01:45:53 +0000 Manifest this update: Sun 19 May 2024 01:45:52 +0000 Manifest next update: Sun 26 May 2024 01:45:52 +0000 Files and hashes: 1: NAlJ7LhXg2NX8QJTxpQnIggZex0.crl (hash: DRw7+YESnQbmZUBFkTCjeQJvZm2H4hfA77mTW8rTCTg=) 2: F44B1F40FC1711EBA835010DC4F9AE02.roa (hash: nPFntpiH3e+VxnHZACKr8y86wdGV/j1zFhWwhLBnbJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BC76/serialNumber=340949ECB857836357F10253C694272208197B1D Validity Not Before: May 19 01:45:52 2024 GMT Not After : May 26 01:45:52 2024 GMT Subject: CN=664959d0-441e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:44:df:c7:c3:2b:c4:18:72:21:67:6d:c2: 9a:eb:75:95:1b:e3:10:8f:91:eb:40:e3:7e:e7:04: ee:32:c7:a9:60:f2:d2:56:09:4b:ae:41:cd:7a:25: 4e:e3:f3:9e:fb:2e:aa:33:9b:10:97:86:cf:a9:d1: 47:17:28:9d:64:f6:9e:e9:06:a7:8e:63:1e:5a:fa: 41:8f:4f:02:47:ad:f8:fb:66:16:90:01:85:b8:e8: da:c4:37:33:c8:77:d0:c5:32:c2:dd:31:ca:39:e0: c0:0e:1d:a1:02:30:9f:fe:4b:d2:63:2c:7b:0f:2e: 4c:c0:a5:c1:9f:9a:79:b4:da:10:25:70:a9:a7:c9: f7:60:6e:f4:55:6b:e8:1b:d3:43:a6:97:58:f1:a4: 54:b2:46:88:d8:60:4c:99:76:92:40:f9:1d:5a:e9: a2:b8:d0:fc:d7:be:69:cc:5d:60:8d:76:9f:db:21: a2:d1:63:8f:89:42:60:ec:c7:f7:0b:10:9f:b3:61: b6:c2:95:2c:b6:f1:3e:13:dd:53:6a:92:23:ab:f7: eb:df:fb:7d:84:f2:2a:68:ba:73:46:07:3e:df:8b: 97:23:12:d2:4b:93:aa:31:37:59:8c:15:9a:a9:03: 64:bf:99:f4:44:5e:33:12:d5:63:e1:1c:15:3a:d5: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:67:1C:C0:A0:D6:3B:55:7D:2D:A3:AF:9F:15:D5:19:F6:B2:20:CB X509v3 Authority Key Identifier: keyid:34:09:49:EC:B8:57:83:63:57:F1:02:53:C6:94:27:22:08:19:7B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAlJ7LhXg2NX8QJTxpQnIggZex0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC76/6136A172FC1511EB9E50BC0AC4F9AE02/NAlJ7LhXg2NX8QJTxpQnIggZex0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a8:86:e0:0f:33:28:f7:b7:72:76:e3:4a:ce:ba:93:46:b3: 0a:da:ff:4a:77:8c:b2:fd:45:66:65:b1:6c:0d:04:05:ac:59: e1:c6:f9:17:6d:c2:a8:48:2a:fb:8b:d7:3b:a3:15:cd:0a:bb: fe:e7:00:ab:30:21:a9:68:28:bf:a1:f2:d5:4a:7f:2c:a2:41: 14:aa:af:bc:f1:2d:5b:5c:74:b8:34:e1:e1:bb:07:df:fa:f5: 78:96:7b:ce:d9:18:c6:b9:89:24:c5:22:98:63:1a:63:3b:b2: 8b:c7:4b:19:89:e0:b1:56:f7:67:45:8d:a6:2c:2c:78:43:cb: 31:e0:52:47:74:e5:99:6d:7f:30:a3:e4:78:33:7e:1d:19:c0: 51:15:a7:cf:89:7c:ad:15:f8:81:2f:6a:42:52:a2:2f:8a:c7: f2:a5:0d:96:35:0d:49:0f:24:61:cc:c8:9b:9f:bd:5b:8c:71: 53:e7:1d:12:43:cb:93:fe:b2:e9:d9:88:2f:af:11:3d:cf:f0: 1b:b8:2d:06:e7:a8:91:f1:d1:c0:56:5d:b0:cf:16:98:4c:e4: 1e:1f:f1:6a:be:5f:fe:99:bd:40:c7:69:d2:94:63:92:93:13: 74:7d:8b:29:fa:b2:16:03:86:6a:66:a7:a4:bc:27:ef:f2:6c: 60:78:72:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDNzYxMTAvBgNVBAUTKDM0MDk0OUVDQjg1NzgzNjM1N0YxMDI1M0M2OTQyNzIy MDgxOTdCMUQwHhcNMjQwNTE5MDE0NTUyWhcNMjQwNTI2MDE0NTUyWjAYMRYwFAYD VQQDEw02NjQ5NTlkMC00NDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7NE38fDK8QYciFnbcKa63WVG+MQj5HrQON+5wTuMsepYPLSVglLrkHNeiVO 4/Oe+y6qM5sQl4bPqdFHFyidZPae6QanjmMeWvpBj08CR634+2YWkAGFuOjaxDcz yHfQxTLC3THKOeDADh2hAjCf/kvSYyx7Dy5MwKXBn5p5tNoQJXCpp8n3YG70VWvo G9NDppdY8aRUskaI2GBMmXaSQPkdWumiuND8175pzF1gjXaf2yGi0WOPiUJg7Mf3 CxCfs2G2wpUstvE+E91TapIjq/fr3/t9hPIqaLpzRgc+34uXIxLSS5OqMTdZjBWa qQNkv5n0RF4zEtVj4RwVOtWg5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdnHMCg 1jtVfS2jr58V1Rn2siDLMB8GA1UdIwQYMBaAFDQJSey4V4NjV/ECU8aUJyIIGXsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM3Ni82MTM2QTE3MkZD MTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcyTlg4UUpUeHBRbklnZ1pl eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BbEo3TGhYZzJOWDhRSlR4cFFuSWdnWmV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkM3Ni82MTM2QTE3MkZDMTUxMUVCOUU1MEJDMEFDNEY5QUUwMi9OQWxKN0xoWGcy Tlg4UUpUeHBRbklnZ1pleDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwqIbgDzMo97dyduNKzrqTRrMK2v9Kd4yy/UVmZbFsDQQFrFnhxvkX bcKoSCr7i9c7oxXNCrv+5wCrMCGpaCi/ofLVSn8sokEUqq+88S1bXHS4NOHhuwff +vV4lnvO2RjGuYkkxSKYYxpjO7KLx0sZieCxVvdnRY2mLCx4Q8sx4FJHdOWZbX8w o+R4M34dGcBRFafPiXytFfiBL2pCUqIvisfypQ2WNQ1JDyRhzMibn71bjHFT5x0S Q8uT/rLp2YgvrxE9z/AbuC0G56iR8dHAVl2wzxaYTOQeH/Fqvl/+mb1Ax2nSlGOS kxN0fYsp+rIWA4ZqZqekvCfv8mxgeHJW -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org