$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft File: NKEjLqcYRp6tt628TNngDfaoUgY.mft (raw, json) Hash identifier: cRIAXHDZvAHKMCe46zk08//kLglBpFpWjMwz/76nSgU= Subject key identifier: 65:85:7F:8C:56:EF:0D:71:77:8A:FD:6E:7A:CD:CC:E9:45:23:81:9A Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 04D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft Manifest number: 04C9 Signing time: Sun 19 May 2024 01:24:08 +0000 Manifest this update: Sun 19 May 2024 01:24:07 +0000 Manifest next update: Sun 26 May 2024 01:24:07 +0000 Files and hashes: 1: NKEjLqcYRp6tt628TNngDfaoUgY.crl (hash: /Zmic+GBr+tvDuWoO0fNNrriWucyyql805iISb1V93g=) 2: D737BB744B4111ECACAF3B6FC4F9AE02.roa (hash: hnMtbPWtKi74NO/wif331zgnBxUtcdlbA7C0G1Bx5rA=) 3: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (hash: FEik2FFyFpKglgsvSHId9IC+qV/ROgR0GjxQQa8VjW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: May 19 01:24:07 2024 GMT Not After : May 26 01:24:07 2024 GMT Subject: CN=664954b8-dd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1f:56:4f:a1:37:cd:59:ed:cc:f9:b2:2c:4d: ce:12:9d:c1:9f:f7:de:3d:98:28:04:17:bc:e9:52: 1f:47:8d:b4:1a:27:90:90:c6:52:9b:99:62:1a:1e: 9f:21:29:4c:f5:21:15:3e:96:8c:38:8f:24:64:b4: 0b:2c:ae:85:eb:d7:fc:8b:a8:fc:d4:74:ff:95:be: 5f:23:8f:47:55:19:dc:10:22:a1:42:e9:0d:53:de: fd:3e:86:90:3a:df:2c:0b:01:a0:86:b7:74:19:44: 59:ab:e1:8c:01:3f:41:46:81:61:ec:5d:d5:68:26: 9f:2e:fd:c3:fc:7e:1f:cf:83:dc:25:fa:49:68:9f: ab:19:f4:bc:3d:08:60:26:53:b9:b7:c0:18:88:d8: 92:6d:ec:cc:ea:99:67:2e:cb:e4:e0:b8:cd:25:e9: 00:4f:e3:34:f9:7a:6f:c9:6a:54:43:5b:00:50:5c: 35:77:51:8c:a2:78:44:5b:79:eb:64:71:4c:ab:a9: 07:43:2e:ba:64:da:a3:34:1d:53:5a:9e:fd:3e:41: df:1a:2f:be:b8:fe:0b:a1:25:8d:ff:83:b6:b4:00: 8a:00:6f:0d:36:a3:ce:d5:23:e9:b5:c2:19:7a:20: 79:18:bd:10:b6:d0:16:70:da:0c:a9:15:12:39:d3: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:7F:8C:56:EF:0D:71:77:8A:FD:6E:7A:CD:CC:E9:45:23:81:9A X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c6:7b:6d:3c:25:a2:50:93:83:3a:b2:99:e5:ab:dd:3d:4e: 07:7e:5a:9a:53:42:79:46:1b:c5:e5:d5:8a:d6:2a:99:5d:58: a0:97:a6:35:10:2c:29:41:32:9c:84:fe:1e:f7:42:9f:85:fc: 96:9f:ec:64:bc:3d:91:df:d7:60:7b:08:ff:27:25:67:96:6a: dd:0f:23:f0:73:a2:8b:43:1c:9f:72:0d:c7:9c:c7:23:eb:cb: 12:6d:3b:4c:ea:6c:08:50:e6:2a:eb:24:24:c6:7f:5e:f6:b4: 06:13:15:b3:12:3d:3d:19:fe:b2:c8:7b:26:c2:50:2e:6f:3b: df:45:cf:ea:c0:c3:30:72:f5:5e:eb:d8:71:17:89:c6:e2:8e: 5c:76:b8:51:19:de:82:c9:ef:5e:a4:f2:9e:41:27:75:e5:0e: ff:be:57:0b:c3:7e:60:7b:4d:63:1b:26:68:1b:91:d9:1b:47: df:12:15:66:98:e2:32:3e:54:7f:66:2d:d3:c4:e4:33:93:99: c1:e4:68:55:d2:a5:f7:7d:a8:52:f0:c9:eb:dc:d7:4c:91:f7: 4a:fb:cf:be:3d:b5:5e:15:56:16:b9:a4:79:cd:1a:ea:33:be: 6d:a6:12:0b:00:07:83:69:2f:fc:b7:61:d0:34:18:5b:bc:81: ee:6b:f9:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjQwNTE5MDEyNDA3WhcNMjQwNTI2MDEyNDA3WjAYMRYwFAYD VQQDEw02NjQ5NTRiOC1kZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6B9WT6E3zVntzPmyLE3OEp3Bn/fePZgoBBe86VIfR420GieQkMZSm5liGh6f ISlM9SEVPpaMOI8kZLQLLK6F69f8i6j81HT/lb5fI49HVRncECKhQukNU979PoaQ Ot8sCwGghrd0GURZq+GMAT9BRoFh7F3VaCafLv3D/H4fz4PcJfpJaJ+rGfS8PQhg JlO5t8AYiNiSbezM6plnLsvk4LjNJekAT+M0+XpvyWpUQ1sAUFw1d1GMonhEW3nr ZHFMq6kHQy66ZNqjNB1TWp79PkHfGi++uP4LoSWN/4O2tACKAG8NNqPO1SPptcIZ eiB5GL0QttAWcNoMqRUSOdM50wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWFf4xW 7w1xd4r9bnrNzOlFI4GaMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjY4NC8zNkI4NkFEQ0Q4OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJw NnR0NjI4VE5uZ0RmYW9VZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTxnttPCWiUJODOrKZ5avdPU4HflqaU0J5RhvF5dWK1iqZXVigl6Y1 ECwpQTKchP4e90KfhfyWn+xkvD2R39dgewj/JyVnlmrdDyPwc6KLQxyfcg3HnMcj 68sSbTtM6mwIUOYq6yQkxn9e9rQGExWzEj09Gf6yyHsmwlAubzvfRc/qwMMwcvVe 69hxF4nG4o5cdrhRGd6Cye9epPKeQSd15Q7/vlcLw35ge01jGyZoG5HZG0ffEhVm mOIyPlR/Zi3TxOQzk5nB5GhV0qX3fahS8Mnr3NdMkfdK+8++PbVeFVYWuaR5zRrq M75tphILAAeDaS/8t2HQNBhbvIHua/kK -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org