$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft File: nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft (raw, json) Hash identifier: udPSfKq7ORcFbrytlQC+9XDTwqcy3rOx8SukWK5rcDY= Subject key identifier: 5A:E3:DB:60:81:10:38:A9:82:6B:44:B2:C5:3A:7C:7D:37:B1:55:F2 Authority key identifier: 9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 Certificate issuer: /CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Certificate serial: 03C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft Manifest number: 03C0 Signing time: Sun 19 May 2024 02:25:12 +0000 Manifest this update: Sun 19 May 2024 02:25:12 +0000 Manifest next update: Sun 26 May 2024 02:25:12 +0000 Files and hashes: 1: nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl (hash: b2+NG4bOc0l8b7QxFUpqXeNhe9+wm4fWV6z3ObWYit8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3/serialNumber=9E29B0F51BBB6D6033C0EF00623CC4BBACEA5841 Validity Not Before: May 19 02:25:12 2024 GMT Not After : May 26 02:25:12 2024 GMT Subject: CN=66496308-00eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:d4:a6:c0:0b:e4:dc:ff:f9:c6:03:10:1f: 7e:a9:53:e4:56:31:c2:3d:24:d4:9a:8f:b8:f9:76: 8a:a1:db:c5:94:f5:00:55:81:ae:f4:c8:e8:3f:b4: 65:b9:d2:c5:25:7e:4d:49:86:f0:f6:75:48:f8:2e: dd:dc:30:26:ec:cf:37:c3:65:48:77:56:94:99:93: e4:a3:39:7e:a8:2f:06:b5:cf:96:00:30:92:6e:66: 2e:85:7b:8c:0a:0a:3a:ad:7f:8c:54:37:3f:69:33: 7a:d6:a4:e6:87:e8:50:af:52:51:08:8b:c6:6d:60: af:7c:71:61:a1:09:10:28:33:c7:e6:27:f1:03:d0: b0:aa:d3:ba:92:bf:0b:2f:51:5a:71:07:4c:3a:e7: 56:98:65:05:8a:6f:82:81:89:0b:61:0a:90:45:57: 97:79:21:1c:85:35:1c:c9:10:c0:9f:6a:58:1a:79: b9:6e:04:78:b7:0c:d8:05:88:8e:68:34:f1:db:fd: 97:06:9d:93:da:b8:0f:0a:54:fa:96:5e:94:90:df: ad:23:f5:6a:cb:65:2a:88:7a:e4:cf:9f:64:54:d1: 28:66:77:e4:d7:6e:80:e9:bc:be:79:d3:7d:fd:10: 70:20:01:f2:4e:b2:80:5a:eb:a3:ca:96:03:2e:8b: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:DB:60:81:10:38:A9:82:6B:44:B2:C5:3A:7C:7D:37:B1:55:F2 X509v3 Authority Key Identifier: keyid:9E:29:B0:F5:1B:BB:6D:60:33:C0:EF:00:62:3C:C4:BB:AC:EA:58:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nimw9Ru7bWAzwO8AYjzEu6zqWEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/6728C4C4405911ECA0AFAA4DC4F9AE02/nimw9Ru7bWAzwO8AYjzEu6zqWEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fe:f2:a9:55:57:3e:69:5f:f5:4f:58:a3:62:4c:65:89:8a: 08:76:a6:95:77:e4:fd:be:b1:29:74:9d:75:33:e4:c4:40:3a: 84:78:82:3e:a8:07:e5:ec:d6:74:bd:cc:b0:d8:5d:eb:3c:81: 37:e5:f2:53:0e:44:b8:c9:65:f6:00:f8:d1:4c:16:11:36:da: 32:f1:73:5c:a1:e1:5f:c7:23:75:de:e8:7c:b4:f1:7f:47:aa: 9d:82:e6:43:86:29:52:19:08:82:bf:79:a9:b7:7f:65:0c:31: 23:42:c0:7e:34:b8:8a:da:c7:b3:bc:5e:d3:90:d6:21:f6:6c: 8a:f0:33:12:20:72:63:74:e5:d6:42:96:95:bf:88:1c:b1:10: 65:27:56:56:00:d9:5b:36:c0:4b:6f:91:ec:4b:4f:4d:82:bd: c0:d6:66:60:4f:1f:06:22:7e:67:6e:c4:49:6c:9d:55:6e:ed: 0a:93:29:1e:45:82:09:63:a5:64:a2:6c:30:df:af:8a:0c:f0: f9:ae:cb:3e:15:0e:24:36:23:76:55:c6:79:91:2e:b3:a7:03: 84:3c:d1:3b:6c:f7:fd:5c:ca:31:e8:34:cc:ec:31:93:b3:89: 62:4b:8e:f5:1f:e7:71:2f:b4:4f:ca:71:e4:4f:59:e1:4e:a1: ca:6c:bd:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKDlFMjlCMEY1MUJCQjZENjAzM0MwRUYwMDYyM0NDNEJC QUNFQTU4NDEwHhcNMjQwNTE5MDIyNTEyWhcNMjQwNTI2MDIyNTEyWjAYMRYwFAYD VQQDEw02NjQ5NjMwOC0wMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu53UpsAL5Nz/+cYDEB9+qVPkVjHCPSTUmo+4+XaKodvFlPUAVYGu9MjoP7Rl udLFJX5NSYbw9nVI+C7d3DAm7M83w2VId1aUmZPkozl+qC8Gtc+WADCSbmYuhXuM Cgo6rX+MVDc/aTN61qTmh+hQr1JRCIvGbWCvfHFhoQkQKDPH5ifxA9CwqtO6kr8L L1FacQdMOudWmGUFim+CgYkLYQqQRVeXeSEchTUcyRDAn2pYGnm5bgR4twzYBYiO aDTx2/2XBp2T2rgPClT6ll6UkN+tI/Vqy2UqiHrkz59kVNEoZnfk126A6by+edN9 /RBwIAHyTrKAWuujypYDLotb/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrj22CB EDipgmtEssU6fH03sVXyMB8GA1UdIwQYMBaAFJ4psPUbu21gM8DvAGI8xLus6lhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy82NzI4QzRDNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JXQXp3TzhBWWp6RXU2enFX RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25pbXc5UnU3YldBendPOEFZanpFdTZ6cVdFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNFMy82NzI4QzRDNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9uaW13OVJ1N2JX QXp3TzhBWWp6RXU2enFXRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP/vKpVVc+aV/1T1ijYkxliYoIdqaVd+T9vrEpdJ11M+TEQDqEeII+ qAfl7NZ0vcyw2F3rPIE35fJTDkS4yWX2APjRTBYRNtoy8XNcoeFfxyN13uh8tPF/ R6qdguZDhilSGQiCv3mpt39lDDEjQsB+NLiK2sezvF7TkNYh9myK8DMSIHJjdOXW QpaVv4gcsRBlJ1ZWANlbNsBLb5HsS09Ngr3A1mZgTx8GIn5nbsRJbJ1Vbu0Kkyke RYIJY6Vkomww36+KDPD5rss+FQ4kNiN2VcZ5kS6zpwOEPNE7bPf9XMox6DTM7DGT s4liS471H+dxL7RPynHkT1nhTqHKbL3H -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org