$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json) Hash identifier: UX6wTJ5ntnCljoEAxzsmaoq7RQ9tQFWTPtb5yLUnz38= Subject key identifier: 43:DE:9E:97:8B:2F:AC:3F:DB:28:9A:79:C1:A8:3A:91:3E:02:68:F5 Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 103E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft Manifest number: 0FDC Signing time: Sat 18 May 2024 18:02:57 +0000 Manifest this update: Sat 18 May 2024 18:02:56 +0000 Manifest next update: Sat 25 May 2024 18:02:56 +0000 Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: 1l4rM/V9x0pax5l4JCQM/3sDAYxxq5IAy5HQEtRU4p8=) 2: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: 6F8MZepb4YKIzRX/VIlir5UqD3bAL/MGaiUqh38H4VM=) 3: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: pa1Fyj4rJ9wsQhHKUYwleZnXaMszFSBEcPoalFBKpsk=) 4: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: pFWyJjF088oOGw4nNl0g4YWTqxbuE3QpkV5M07utSjo=) 5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: nCG2ItoYRYsNw2ltluT/NhcDchTRJwPgu00JBArVHNU=) 6: 52685F222E9111E999636910C4F9AE02.roa (hash: syk5eLA6QE1f9vtOv8vWj023d03Vzooyr78RlQmdrWU=) 7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: bboRKjRgAmNIyMUD8F0R6YlK8KxKhJJ94gWMf5xkK7c=) 8: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: qkUQDs49KFim2MLHAjsJwTxoBoVgmCtXt1u3Zkv+Xtw=) 9: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: qlkxrtDkdB7rHBdwPP73Uk43WLSuezxmGhVTKZPNFac=) 10: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: uqBg3EfYSkP8xrpkIoXRk79rOz8VHiKa+sc7sMHbX+4=) 11: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: 7HqOnLpZm+A/vwRmSQHLC5scxprHPl3diogTB/9e/W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4158 (0x103e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: May 18 18:02:56 2024 GMT Not After : May 25 18:02:56 2024 GMT Subject: CN=6648ed51-fe8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:87:0f:f3:aa:f6:d7:54:47:00:9e:60:cd: cb:25:7a:13:36:53:35:b8:d7:71:68:ee:c8:b1:0a: ba:13:ff:d7:a2:e8:61:be:55:25:90:27:2e:77:e6: 41:57:2c:2a:fb:79:55:8a:2f:f3:fa:62:2a:f5:4f: e7:a5:0c:48:55:95:3d:26:ca:0d:51:b4:f2:fc:32: 06:42:cb:d1:ba:2a:24:97:f1:71:a8:8b:c7:af:f0: 89:53:ad:ea:5a:88:43:a2:ae:24:5a:ef:1c:12:5b: 13:7a:48:ac:32:6b:20:d4:5c:22:b0:52:a0:a3:98: 9b:09:3b:4a:4e:d9:bc:26:25:c2:31:b6:39:c5:d4: 6d:83:d8:45:08:9d:b7:ea:1b:1c:a8:4d:63:de:7e: 00:ea:72:cc:ec:20:8d:58:47:b0:86:57:86:09:6a: ca:f3:0f:60:3e:fc:c2:42:ed:bb:c2:21:b4:7b:f5: 06:24:ca:a9:5c:21:28:13:df:72:c6:1b:16:2c:49: 6b:8b:8d:08:38:92:3f:26:61:52:f4:1b:73:7d:7a: df:f1:44:5e:54:46:c1:5c:1e:6e:b5:74:93:e8:ac: 94:df:28:e5:fb:fd:6c:b9:a8:e8:c2:a4:55:95:f9: b5:14:af:59:18:0a:be:19:85:fd:7d:8e:30:96:9c: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DE:9E:97:8B:2F:AC:3F:DB:28:9A:79:C1:A8:3A:91:3E:02:68:F5 X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:a1:ee:76:c5:8e:e8:71:b9:2b:92:a6:73:20:61:e6:0f:ef: 82:8b:13:cd:44:43:b0:95:c9:bf:fd:4c:21:39:b3:11:db:15: 9e:9e:d2:31:ef:2e:35:95:b2:48:8d:16:e0:f0:b4:08:cf:a5: 6a:a4:2c:b9:50:90:a9:9c:05:c2:04:1d:3b:7c:c2:6e:70:11: ec:ef:b0:7a:a5:ad:b7:63:a4:52:cb:9e:5b:41:7e:10:70:3e: 43:da:50:4d:b4:85:d0:ae:b3:2c:88:4c:71:55:cc:84:c7:74: 00:38:da:03:c1:a8:61:9b:d0:86:91:3e:82:6b:81:d5:6a:7c: 43:c5:ad:90:88:c0:4c:f6:18:ac:12:10:56:f9:1a:82:05:cb: 48:fb:f4:ef:51:62:80:60:66:19:a4:38:5b:0c:19:76:2d:49: 1c:48:45:54:ef:ea:7a:25:dd:96:96:f7:fe:de:5e:77:da:4b: b9:79:71:67:67:72:e5:32:c7:0c:63:48:5a:64:08:9d:a6:e3: c9:7d:b3:df:3b:0a:29:7a:f9:c2:8c:3a:1f:27:0c:c6:bc:11: 5a:98:95:05:c5:20:0d:d2:c3:b1:a4:d0:19:a5:65:38:d4:0d: d0:d9:b1:76:85:c3:b6:c0:ca:b5:7d:a8:eb:c1:dd:11:35:ce: 07:3a:f3:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICED4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjQwNTE4MTgwMjU2WhcNMjQwNTI1MTgwMjU2WjAYMRYwFAYD VQQDEw02NjQ4ZWQ1MS1mZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UaHD/Oq9tdURwCeYM3LJXoTNlM1uNdxaO7IsQq6E//XouhhvlUlkCcud+ZB Vywq+3lVii/z+mIq9U/npQxIVZU9JsoNUbTy/DIGQsvRuiokl/FxqIvHr/CJU63q WohDoq4kWu8cElsTekisMmsg1FwisFKgo5ibCTtKTtm8JiXCMbY5xdRtg9hFCJ23 6hscqE1j3n4A6nLM7CCNWEewhleGCWrK8w9gPvzCQu27wiG0e/UGJMqpXCEoE99y xhsWLElri40IOJI/JmFS9BtzfXrf8UReVEbBXB5utXST6KyU3yjl+/1suajowqRV lfm1FK9ZGAq+GYX9fY4wlpwosQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPenpeL L6w/2yiaecGoOpE+Amj1MB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlCQy84OTI4OTczMDJFOTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6 amlqWWFsMjM5MktLcTM0azgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7oe52xY7ocbkrkqZzIGHmD++CixPNREOwlcm//UwhObMR2xWentIx 7y41lbJIjRbg8LQIz6VqpCy5UJCpnAXCBB07fMJucBHs77B6pa23Y6RSy55bQX4Q cD5D2lBNtIXQrrMsiExxVcyEx3QAONoDwahhm9CGkT6Ca4HVanxDxa2QiMBM9his EhBW+RqCBctI+/TvUWKAYGYZpDhbDBl2LUkcSEVU7+p6Jd2Wlvf+3l532ku5eXFn Z3LlMscMY0haZAidpuPJfbPfOwopevnCjDofJwzGvBFamJUFxSAN0sOxpNAZpWU4 1A3Q2bF2hcO2wMq1fajrwd0RNc4HOvN+ -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org