$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json) Hash identifier: p0abfwaRrOf3H4ll9pFlg1OE4A6GpcPY9Cu+w790MhI= Subject key identifier: CD:FA:8A:98:F7:5B:3B:E6:1D:14:26:31:B0:AD:16:CE:FB:0A:CF:40 Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft Manifest number: 84 Signing time: Tue 25 Jun 2024 06:19:58 +0000 Manifest this update: Tue 25 Jun 2024 06:19:58 +0000 Manifest next update: Tue 02 Jul 2024 06:19:58 +0000 Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: t1zOSmX4b8KMVFN5m0lXQiur/mesWMqWKNCN2APAKeg=) 2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: k94xftsmS29G5Ki6l7RDKyar+9tisgQaPG/llPqEy08=) 3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: jJZ2st+CIoJi16FozwjzTqCOp1E/h6RGbAayfoXDVxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jul 2024 06:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Validity Not Before: Jun 25 06:19:58 2024 GMT Not After : Jul 2 06:19:58 2024 GMT Subject: CN=667a618e-cd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:14:b1:27:bf:cf:72:f7:2a:93:54:8c:0b: 47:3e:4c:fb:dc:f6:17:f8:ba:e0:e4:66:1d:b4:7d: fd:74:25:ea:1e:88:13:8c:a0:79:a6:ac:34:ec:dd: 2e:23:44:7f:d3:aa:88:f5:19:2c:47:b2:23:62:ec: 8e:ee:27:ca:41:99:78:b5:e8:75:da:f5:ba:67:00: 1a:ab:7d:d2:5c:59:30:d6:1f:8b:c4:93:4b:00:1d: 8e:a2:99:96:2e:b6:db:11:44:e7:73:14:55:77:b3: 48:50:17:0c:a3:d5:f3:61:ac:a8:f4:21:1c:78:00: b8:40:93:9e:84:25:db:b3:27:f4:37:f1:39:4c:29: 25:2a:fb:d4:bd:6a:e3:63:fa:c0:69:50:d9:28:14: 63:bb:a4:38:48:b5:72:71:b7:70:4c:79:a5:f4:4a: 8a:5c:aa:ca:6b:42:15:9d:f5:06:d1:0b:34:87:89: 1f:01:93:58:87:c6:85:70:aa:f6:2a:00:7c:4b:f0: 57:fd:8f:1d:47:72:da:37:f6:51:19:65:d8:b8:77: a3:77:9a:91:0e:cf:06:22:a4:b1:a9:b6:fd:63:7a: e2:4b:c6:5a:48:4a:08:08:45:ac:f2:f9:5a:0f:a0: ac:02:9a:82:5d:5d:6b:2d:4c:e7:bc:db:f5:38:8e: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FA:8A:98:F7:5B:3B:E6:1D:14:26:31:B0:AD:16:CE:FB:0A:CF:40 X509v3 Authority Key Identifier: keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4d:4b:5e:fc:ce:c7:6b:20:fd:81:81:95:d6:83:7f:b8:bc: 48:22:91:ef:09:2d:ec:5c:eb:a8:28:5d:84:56:22:6a:a1:21: aa:a3:e5:06:a6:82:16:e9:cf:b2:6f:08:28:a9:70:69:e3:0d: 4b:06:04:a7:26:48:02:2d:44:8d:b9:06:c2:f9:24:07:60:d3: e9:eb:43:9b:b2:b2:96:36:b0:42:09:11:3b:5d:75:23:d0:6c: f8:1c:a4:68:37:64:33:cd:8c:5b:f1:28:61:89:82:c7:99:31: 2e:6c:2c:ef:98:33:d3:9b:bb:1e:2c:46:95:e5:52:55:f3:33: c7:91:e6:1d:be:14:60:db:ea:34:74:76:56:40:1b:af:ee:a6: d9:aa:61:01:b6:52:36:9d:29:e0:fb:5b:a9:da:7c:d9:b7:84: 4f:75:02:23:41:90:71:e9:8b:7d:ea:d7:c3:98:3e:ad:c4:7e: bb:b5:4f:c3:9e:21:d2:df:b8:21:5d:fa:36:17:ea:95:3a:e7: a4:5a:d8:22:16:36:d7:2d:02:fb:46:a1:27:92:ff:cf:4f:72: 6d:dc:68:2f:58:8f:ed:8d:1e:96:9a:90:48:a2:c5:cc:3e:cf: 1f:7c:f8:9c:32:ba:80:49:dd:8a:d5:e0:96:d3:38:9a:0c:92: c8:27:10:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3 NjhGMUU5OEYwHhcNMjQwNjI1MDYxOTU4WhcNMjQwNzAyMDYxOTU4WjAYMRYwFAYD VQQDEw02NjdhNjE4ZS1jZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJgUsSe/z3L3KpNUjAtHPkz73PYX+Lrg5GYdtH39dCXqHogTjKB5pqw07N0u I0R/06qI9RksR7IjYuyO7ifKQZl4teh12vW6ZwAaq33SXFkw1h+LxJNLAB2OopmW LrbbEUTncxRVd7NIUBcMo9XzYayo9CEceAC4QJOehCXbsyf0N/E5TCklKvvUvWrj Y/rAaVDZKBRju6Q4SLVycbdwTHml9EqKXKrKa0IVnfUG0Qs0h4kfAZNYh8aFcKr2 KgB8S/BX/Y8dR3LaN/ZRGWXYuHejd5qRDs8GIqSxqbb9Y3riS8ZaSEoICEWs8vla D6CsApqCXV1rLUznvNv1OI6AHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM36ipj3 WzvmHRQmMbCtFs77Cs9AMB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2 WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr WVdnaTN3UF8yQmQyang2WTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUTUte/M7HayD9gYGV1oN/uLxIIpHvCS3sXOuoKF2EViJqoSGqo+UG poIW6c+ybwgoqXBp4w1LBgSnJkgCLUSNuQbC+SQHYNPp60ObsrKWNrBCCRE7XXUj 0Gz4HKRoN2QzzYxb8ShhiYLHmTEubCzvmDPTm7seLEaV5VJV8zPHkeYdvhRg2+o0 dHZWQBuv7qbZqmEBtlI2nSng+1up2nzZt4RPdQIjQZBx6Yt96tfDmD6txH67tU/D niHS37ghXfo2F+qVOuekWtgiFjbXLQL7RqEnkv/PT3Jt3GgvWI/tjR6WmpBIosXM Ps8ffPicMrqASd2K1eCW0ziaDJLIJxAG -----END CERTIFICATE-----Generated at Tue Jun 25 07:05:47 2024 by rpki-client on console-fra.rpki-client.org