$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft File: nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft (raw, json) Hash identifier: OA3Cf3IG0farmptXupqyFx2zfQZTiY3c6RHxXha5ruM= Subject key identifier: F1:30:CA:4F:95:9F:3E:17:4B:20:91:D9:BF:DE:60:90:A4:5F:9F:F9 Authority key identifier: 9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD Certificate issuer: /CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft Manifest number: 0741 Signing time: Sat 18 May 2024 22:28:15 +0000 Manifest this update: Sat 18 May 2024 22:28:15 +0000 Manifest next update: Sat 25 May 2024 22:28:15 +0000 Files and hashes: 1: nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl (hash: hVRWht3nK7C3h8cFUY1FGSxzEI9PKdF4QzfrZuAw03o=) 2: C1171FCAB1B111ECBA7F614FC4F9AE02.roa (hash: vN/dANQFbTJxxRHMI9ZludqJZ1NmcGlANCvolM21fwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D34/serialNumber=9EC1216D256416403CB5C53E7345530F83272CDD Validity Not Before: May 18 22:28:15 2024 GMT Not After : May 25 22:28:15 2024 GMT Subject: CN=66492b7f-5481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0e:03:2e:d4:23:70:50:a5:9e:e8:15:16:b6: 7c:7c:a6:8a:e9:33:05:35:40:72:a1:2f:24:a7:2e: bb:71:3c:04:b5:f2:ba:5a:b2:35:81:5b:58:19:57: bd:f1:7a:65:d7:c6:cb:c0:9a:5f:07:4b:2d:e6:71: a6:31:66:af:e2:93:43:f3:1e:1c:01:39:f7:31:40: 29:4a:89:91:aa:cd:14:bb:ea:66:c9:26:76:f2:3d: be:83:be:6a:5c:06:52:4f:39:6d:30:e9:be:84:ff: 10:7f:76:c0:f8:b4:38:3f:67:e4:88:50:48:ae:db: af:f7:26:c6:62:23:79:78:ff:92:04:36:e4:a7:ce: a4:6a:bc:29:39:57:3c:3d:8f:48:e9:ee:d6:ef:05: 5c:f5:7e:80:2e:0f:97:31:30:0e:22:cd:64:6b:9c: df:45:68:d2:d4:f8:14:c7:e1:a7:7e:0b:2b:43:ed: bd:93:04:f3:bc:46:68:d1:f8:9b:55:2d:f9:63:08: c9:a6:28:35:a1:a3:fe:24:bc:45:1b:59:93:93:33: 26:82:9f:f9:b2:04:33:bc:70:50:a7:d2:26:97:50: 98:5e:99:03:4a:22:79:80:e7:e7:fd:9e:fb:ea:a9: 98:99:b7:ee:c0:fd:6a:89:8f:1a:9c:77:eb:9f:78: f2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:30:CA:4F:95:9F:3E:17:4B:20:91:D9:BF:DE:60:90:A4:5F:9F:F9 X509v3 Authority Key Identifier: keyid:9E:C1:21:6D:25:64:16:40:3C:B5:C5:3E:73:45:53:0F:83:27:2C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nsEhbSVkFkA8tcU-c0VTD4MnLN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D34/DBA87858E6A011EAA8544B43C4F9AE02/nsEhbSVkFkA8tcU-c0VTD4MnLN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a6:76:14:4d:d0:c1:91:f0:8d:6f:89:2e:ef:56:07:78:86: 23:5c:58:54:12:5b:9b:20:ea:08:0c:90:e7:c7:03:ea:22:5d: 4f:fc:f8:2f:24:42:2f:7c:23:9d:fe:13:f8:34:6b:64:5e:b0: 2b:59:58:c3:ca:47:5e:24:7a:63:3d:3e:fa:9c:42:62:00:9b: 86:4b:38:a8:f7:65:cb:46:48:5e:77:6d:a6:58:f5:08:3c:e2: 8f:61:de:fd:96:43:e1:d7:2c:5c:67:9a:de:73:4f:9c:98:9f: 4f:cf:99:41:05:33:1b:f3:3c:55:87:1e:c2:90:1a:27:6f:a5: 3f:aa:bf:d2:0e:2f:89:df:3f:4d:3f:c4:e2:ec:16:4f:c1:18: bd:92:48:35:fa:58:f4:ab:4d:ca:2a:a9:90:cf:00:6c:9d:8c: c1:c1:bb:4f:85:56:d0:d3:c1:03:07:98:60:2f:ba:1b:0b:fa: 53:b5:60:a5:79:b3:1b:26:b5:d4:67:0f:73:ba:17:fc:b4:23: 94:82:1d:16:fb:8f:d4:56:56:15:99:ac:a3:ff:36:85:e4:b9: 91:f1:b6:d1:a5:0c:68:67:5c:2a:bc:97:1b:e6:ed:de:2c:64: 6e:ba:03:3e:b9:15:5e:b3:f5:20:80:a1:45:36:c3:f1:18:88: ba:44:6e:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVEMzQxMTAvBgNVBAUTKDlFQzEyMTZEMjU2NDE2NDAzQ0I1QzUzRTczNDU1MzBG ODMyNzJDREQwHhcNMjQwNTE4MjIyODE1WhcNMjQwNTI1MjIyODE1WjAYMRYwFAYD VQQDEw02NjQ5MmI3Zi01NDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+w4DLtQjcFClnugVFrZ8fKaK6TMFNUByoS8kpy67cTwEtfK6WrI1gVtYGVe9 8Xpl18bLwJpfB0st5nGmMWav4pND8x4cATn3MUApSomRqs0Uu+pmySZ28j2+g75q XAZSTzltMOm+hP8Qf3bA+LQ4P2fkiFBIrtuv9ybGYiN5eP+SBDbkp86karwpOVc8 PY9I6e7W7wVc9X6ALg+XMTAOIs1ka5zfRWjS1PgUx+GnfgsrQ+29kwTzvEZo0fib VS35YwjJpig1oaP+JLxFG1mTkzMmgp/5sgQzvHBQp9Iml1CYXpkDSiJ5gOfn/Z77 6qmYmbfuwP1qiY8anHfrn3jy1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEwyk+V nz4XSyCR2b/eYJCkX5/5MB8GA1UdIwQYMBaAFJ7BIW0lZBZAPLXFPnNFUw+DJyzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQzNC9EQkE4Nzg1OEU2 QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0ZrQTh0Y1UtYzBWVEQ0TW5M TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zRWhiU1ZrRmtBOHRjVS1jMFZURDRNbkxOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQzNC9EQkE4Nzg1OEU2QTAxMUVBQTg1NDRCNDNDNEY5QUUwMi9uc0VoYlNWa0Zr QTh0Y1UtYzBWVEQ0TW5MTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7pnYUTdDBkfCNb4ku71YHeIYjXFhUElubIOoIDJDnxwPqIl1P/Pgv JEIvfCOd/hP4NGtkXrArWVjDykdeJHpjPT76nEJiAJuGSzio92XLRkhed22mWPUI POKPYd79lkPh1yxcZ5rec0+cmJ9Pz5lBBTMb8zxVhx7CkBonb6U/qr/SDi+J3z9N P8Ti7BZPwRi9kkg1+lj0q03KKqmQzwBsnYzBwbtPhVbQ08EDB5hgL7obC/pTtWCl ebMbJrXUZw9zuhf8tCOUgh0W+4/UVlYVmayj/zaF5LmR8bbRpQxoZ1wqvJcb5u3e LGRuugM+uRVes/UggKFFNsPxGIi6RG6+ -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org