$ rpki-client -vvf rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft File: NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft (raw, json) Hash identifier: bzHa6lU4uVuCkvY1GAs9V23XAby6Bv64FpUSNkB7h34= Subject key identifier: C6:35:54:1E:CD:36:3F:48:71:00:FF:87:B7:25:DD:9B:A4:DC:B4:F5 Authority key identifier: 35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B Certificate issuer: /CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft Manifest number: 010E Signing time: Sun 19 May 2024 05:25:27 +0000 Manifest this update: Sun 19 May 2024 05:25:26 +0000 Manifest next update: Sun 26 May 2024 05:25:26 +0000 Files and hashes: 1: NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl (hash: +6rEhhODNrGaodTzUW23v10JMcK9aP48jrv/R2qjZtQ=) 2: 9FD3C9A876CD11ED8D13115FC4F9AE02.roa (hash: 9NOS/qzTtQlZINQzhiSdEH0DxdfVySuxtQS2iMKS2xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833A5/serialNumber=351CEEDC37F805472F1B61BAC643FE54EE01896B Validity Not Before: May 19 05:25:26 2024 GMT Not After : May 26 05:25:26 2024 GMT Subject: CN=66498d47-1837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:0e:02:bf:6a:f4:7c:c3:25:90:18:62:8d: 0c:1d:69:6a:e6:18:29:e1:67:7d:04:88:6e:8d:69: d1:1f:f0:a7:44:be:8a:c9:27:78:02:a4:5a:50:0b: c0:ba:9b:db:fc:bb:62:28:29:e6:9b:a1:0e:80:cb: 1d:35:93:f3:6d:48:d0:96:9e:a7:60:c5:6e:5b:fe: 33:de:3e:55:2d:f9:2f:4b:1a:61:65:0a:56:28:79: f5:54:60:11:48:a1:56:f6:1c:fd:c1:1a:54:cd:6e: ec:2d:98:9e:b3:19:f9:7a:f2:17:9c:a3:18:44:5a: 8d:e0:69:bd:83:55:9c:8b:bd:2e:af:a6:d2:b0:2e: 0f:58:bb:6e:1c:fe:2b:df:01:cc:c3:3d:fc:66:43: c2:ca:e2:14:75:60:60:99:87:06:89:33:0d:00:0a: 60:cd:73:14:31:15:4b:15:73:06:59:08:77:15:cc: 58:ad:8b:e4:e4:b6:22:45:8d:b8:b2:bf:b9:ed:ed: a0:35:aa:fc:bd:d9:ea:29:28:53:b3:44:11:42:73: da:dc:e7:4d:68:48:f2:43:05:9a:d8:9e:9c:64:f3: 69:83:83:15:0c:48:62:cd:9d:0a:1e:2c:5c:86:03: 62:db:a5:00:17:66:3e:a3:94:0a:c5:23:76:48:55: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:35:54:1E:CD:36:3F:48:71:00:FF:87:B7:25:DD:9B:A4:DC:B4:F5 X509v3 Authority Key Identifier: keyid:35:1C:EE:DC:37:F8:05:47:2F:1B:61:BA:C6:43:FE:54:EE:01:89:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzu3Df4BUcvG2G6xkP-VO4BiWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833A5/CB549D2C76C911ED8EDF6E45C4F9AE02/NRzu3Df4BUcvG2G6xkP-VO4BiWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ae:41:9c:cb:b6:4a:c5:20:22:3c:70:1d:d6:9e:70:d5:9f: c5:1a:0f:0c:03:53:dd:86:76:e1:aa:63:67:aa:2e:ab:53:5d: 8a:e6:94:d7:93:e9:ef:46:01:18:ad:f7:e8:c2:b1:a9:1a:d4: a8:f5:19:a7:ac:a4:2a:d2:08:c0:0a:b3:d5:5f:d2:5d:5e:cf: e1:f9:1e:6b:5f:89:a7:c0:49:7d:0c:29:b2:70:6a:db:16:dd: db:fc:08:db:b8:cb:bb:28:23:44:18:d1:da:f8:fc:9f:58:cf: 13:f2:b4:35:f1:93:d5:34:9c:90:a1:e4:71:60:89:f6:ef:ac: 90:50:56:01:bb:36:58:f7:27:60:45:96:ac:dd:47:9f:ce:3e: 73:d8:b1:87:25:b9:a0:07:53:6d:bc:bd:41:2a:85:0c:20:5f: 1f:d5:49:f6:cc:f1:19:f3:3c:38:1b:f8:f3:bf:2b:ca:1f:8c: 0a:c2:60:db:0a:0f:35:19:27:aa:4e:8a:7c:09:72:eb:c1:50: 28:a6:ae:06:ee:43:f3:f5:b3:f6:e6:69:4d:54:40:b6:3c:95: db:28:96:b6:f7:95:89:a0:61:b5:1d:0e:48:24:76:da:4a:f8: 33:bb:93:0b:d8:34:89:97:4b:8a:0f:b4:35:3b:26:b0:a0:03: 69:5e:05:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzQTUxMTAvBgNVBAUTKDM1MUNFRURDMzdGODA1NDcyRjFCNjFCQUM2NDNGRTU0 RUUwMTg5NkIwHhcNMjQwNTE5MDUyNTI2WhcNMjQwNTI2MDUyNTI2WjAYMRYwFAYD VQQDEw02NjQ5OGQ0Ny0xODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygoOAr9q9HzDJZAYYo0MHWlq5hgp4Wd9BIhujWnRH/CnRL6KySd4AqRaUAvA upvb/LtiKCnmm6EOgMsdNZPzbUjQlp6nYMVuW/4z3j5VLfkvSxphZQpWKHn1VGAR SKFW9hz9wRpUzW7sLZiesxn5evIXnKMYRFqN4Gm9g1Wci70ur6bSsC4PWLtuHP4r 3wHMwz38ZkPCyuIUdWBgmYcGiTMNAApgzXMUMRVLFXMGWQh3FcxYrYvk5LYiRY24 sr+57e2gNar8vdnqKShTs0QRQnPa3OdNaEjyQwWa2J6cZPNpg4MVDEhizZ0KHixc hgNi26UAF2Y+o5QKxSN2SFULuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY1VB7N Nj9IcQD/h7cl3Zuk3LT1MB8GA1UdIwQYMBaAFDUc7tw3+AVHLxthusZD/lTuAYlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNBNS9DQjU0OUQyQzc2 QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJVY3ZHMkc2eGtQLVZPNEJp V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05SenUzRGY0QlVjdkcyRzZ4a1AtVk80QmlXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNBNS9DQjU0OUQyQzc2QzkxMUVEOEVERjZFNDVDNEY5QUUwMi9OUnp1M0RmNEJV Y3ZHMkc2eGtQLVZPNEJpV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5rkGcy7ZKxSAiPHAd1p5w1Z/FGg8MA1PdhnbhqmNnqi6rU12K5pTX k+nvRgEYrffowrGpGtSo9RmnrKQq0gjACrPVX9JdXs/h+R5rX4mnwEl9DCmycGrb Ft3b/AjbuMu7KCNEGNHa+PyfWM8T8rQ18ZPVNJyQoeRxYIn276yQUFYBuzZY9ydg RZas3Uefzj5z2LGHJbmgB1NtvL1BKoUMIF8f1Un2zPEZ8zw4G/jzvyvKH4wKwmDb Cg81GSeqTop8CXLrwVAopq4G7kPz9bP25mlNVEC2PJXbKJa295WJoGG1HQ5IJHba Svgzu5ML2DSJl0uKD7Q1OyawoANpXgV5 -----END CERTIFICATE-----Generated at Sun May 19 07:40:40 2024 by rpki-client on console-fra.rpki-client.org