$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft File: npKCbPR9rsiFyZgQKH24bmlXaOo.mft (raw, json) Hash identifier: ZQPKOjitzG0g3MpRis83wLhNKA//jpXl8kURiC0leLU= Subject key identifier: 2C:75:BF:EC:2B:74:F4:E3:70:B9:20:1B:74:D6:5A:7D:AD:92:17:5C Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA Certificate serial: 148D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft Manifest number: 1470 Signing time: Sat 18 May 2024 17:23:06 +0000 Manifest this update: Sat 18 May 2024 17:23:06 +0000 Manifest next update: Sat 25 May 2024 17:23:06 +0000 Files and hashes: 1: npKCbPR9rsiFyZgQKH24bmlXaOo.crl (hash: I2J+veihIajNray1hWBQ60HsN8XWAJW9TkymRxVk3FQ=) 2: 08C486D0E47311EBB62C361EC4F9AE02.roa (hash: 3gJZIkLJ+9mgmgUiK167skPEuv58F+GOIHt+4bL6x/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5261 (0x148d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA Validity Not Before: May 18 17:23:06 2024 GMT Not After : May 25 17:23:06 2024 GMT Subject: CN=6648e3fa-58a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:c2:c1:de:8f:14:31:c8:19:d7:11:d1:bf: 46:0c:50:6f:26:48:a5:a7:88:08:4d:14:4e:ae:54: 06:a4:10:96:10:e5:d2:07:a5:5e:e1:d1:92:96:ee: 1b:39:11:c9:9a:2f:e9:13:ee:e6:bc:a0:2b:57:1d: 15:5d:60:be:fe:b7:db:7d:c6:63:97:83:17:41:54: 2d:69:0a:de:b6:99:ae:25:f3:de:6c:30:46:6f:f5: c4:5b:84:80:67:95:d6:b0:19:c4:e3:95:da:e5:82: c1:2e:ae:24:4b:d6:ee:10:00:bd:29:a7:80:07:0a: a6:33:97:a2:fe:7f:55:04:6a:c6:85:95:6a:54:c8: e1:5d:4a:d1:b5:36:68:3a:0d:5d:ba:79:b8:42:4a: eb:4e:64:95:b9:32:4e:93:9d:14:11:de:ea:59:f8: f4:53:08:e4:a5:7d:82:d2:6a:f0:4c:c1:45:42:0b: f8:1e:5d:b9:0c:f1:7b:51:d3:a9:08:2b:f2:2f:54: 38:c7:63:42:f7:22:12:a5:87:3d:ed:13:24:e3:fc: d5:78:d9:75:9b:8c:2d:c6:77:a7:b3:f3:0c:d6:ac: 1d:86:d6:10:49:b6:e1:40:57:73:cc:0d:d4:27:e4: 21:a8:41:d2:02:a8:42:bd:11:59:39:e8:b0:e2:34: 66:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:75:BF:EC:2B:74:F4:E3:70:B9:20:1B:74:D6:5A:7D:AD:92:17:5C X509v3 Authority Key Identifier: keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:24:56:83:98:d3:49:4b:9e:f1:cb:07:ef:3d:76:c1:33:ba: 70:0b:fa:24:bd:fa:94:8a:29:f5:64:9a:96:c8:f2:6d:44:e7: 3f:e7:9b:94:8a:b3:ad:a3:3d:9d:fe:60:e7:fc:a7:ee:b2:26: b9:0a:00:a5:ec:40:5f:58:b1:c7:43:24:a4:56:98:ca:ff:4b: 0e:52:38:42:e4:6a:c0:99:50:92:6b:db:6b:88:15:5a:b5:44: 56:cd:69:c9:83:f6:0d:58:a2:9e:9f:ce:e5:16:aa:8f:5c:75: 4e:65:a5:da:87:54:d8:34:bf:14:4d:97:fe:d3:a3:90:40:36: 3b:1e:44:7d:01:e3:ce:2e:ce:84:71:12:57:00:5f:74:ad:3a: 82:3f:48:1f:f2:88:f5:0f:8d:cb:3c:d5:48:45:de:ff:67:2f: 20:71:7a:20:a8:f0:2f:ba:ad:ea:00:be:39:e0:93:3d:b6:d8: c3:78:51:d2:be:98:c0:d1:6c:e4:eb:da:b9:41:ef:0e:64:88: 82:01:54:8a:c2:27:7b:3a:28:30:fc:2a:7c:07:0c:2b:7e:b0: 8d:4a:17:76:6d:e0:87:b4:4e:e9:cf:79:ae:a1:57:10:aa:a6: 0a:46:a1:1f:1e:b3:47:fc:07:dd:18:22:03:b0:fc:70:e5:8d: 93:b1:f3:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwMDAxMTAvBgNVBAUTKDlFOTI4MjZDRjQ3REFFQzg4NUM5OTgxMDI4N0RCODZF Njk1NzY4RUEwHhcNMjQwNTE4MTcyMzA2WhcNMjQwNTI1MTcyMzA2WjAYMRYwFAYD VQQDEw02NjQ4ZTNmYS01OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVPCwd6PFDHIGdcR0b9GDFBvJkilp4gITRROrlQGpBCWEOXSB6Ve4dGSlu4b ORHJmi/pE+7mvKArVx0VXWC+/rfbfcZjl4MXQVQtaQretpmuJfPebDBGb/XEW4SA Z5XWsBnE45Xa5YLBLq4kS9buEAC9KaeABwqmM5ei/n9VBGrGhZVqVMjhXUrRtTZo Og1dunm4QkrrTmSVuTJOk50UEd7qWfj0UwjkpX2C0mrwTMFFQgv4Hl25DPF7UdOp CCvyL1Q4x2NC9yISpYc97RMk4/zVeNl1m4wtxnens/MM1qwdhtYQSbbhQFdzzA3U J+QhqEHSAqhCvRFZOeiw4jRm4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx1v+wr dPTjcLkgG3TWWn2tkhdcMB8GA1UdIwQYMBaAFJ6Sgmz0fa7IhcmYECh9uG5pV2jq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzAwMC8wNjdENkZBMjQ3 ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBSOXJzaUZ5WmdRS0gyNGJtbFhh T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wS0NiUFI5cnNpRnlaZ1FLSDI0Ym1sWGFPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzAwMC8wNjdENkZBMjQ3ODkxMUU4ODlENURCNDlDNEY5QUUwMi9ucEtDYlBSOXJz aUZ5WmdRS0gyNGJtbFhhT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9JFaDmNNJS57xywfvPXbBM7pwC/okvfqUiin1ZJqWyPJtROc/55uU irOtoz2d/mDn/Kfusia5CgCl7EBfWLHHQySkVpjK/0sOUjhC5GrAmVCSa9triBVa tURWzWnJg/YNWKKen87lFqqPXHVOZaXah1TYNL8UTZf+06OQQDY7HkR9AePOLs6E cRJXAF90rTqCP0gf8oj1D43LPNVIRd7/Zy8gcXogqPAvuq3qAL454JM9ttjDeFHS vpjA0Wzk69q5Qe8OZIiCAVSKwid7Oigw/Cp8BwwrfrCNShd2beCHtE7pz3muoVcQ qqYKRqEfHrNH/AfdGCIDsPxw5Y2TsfOw -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org