$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft File: NpFTMwCsweAQXuAxcGNQf4e0AS0.mft (raw, json) Hash identifier: /LC2OfGEAxGZROwuoieAQvX3gQDQSEIaIQxIHvn5MeI= Subject key identifier: 55:6E:60:9E:4D:C4:AC:60:8B:57:B4:81:60:8D:1F:CD:4D:C0:09:CD Authority key identifier: 36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D Certificate issuer: /CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft Manifest number: 012E Signing time: Sun 19 May 2024 05:03:45 +0000 Manifest this update: Sun 19 May 2024 05:03:44 +0000 Manifest next update: Sun 26 May 2024 05:03:44 +0000 Files and hashes: 1: NpFTMwCsweAQXuAxcGNQf4e0AS0.crl (hash: j9g6fOg68oK/uyE5NOdQvF3PWv8wJPCyYUTD4yL5f3k=) 2: 397504CA4DD211ED8314A659C4F9AE02.roa (hash: HIZgcNvtl7XXseeo2awaZPyaH+BjS1/nfvVEOdVq/qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACDD/serialNumber=3691533300ACC1E0105EE0317063507F87B4012D Validity Not Before: May 19 05:03:44 2024 GMT Not After : May 26 05:03:44 2024 GMT Subject: CN=66498831-acdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:05:c2:21:0c:d4:02:b9:05:f4:31:63:be: e2:1d:ca:8b:94:0c:d1:2c:53:71:c0:f2:3e:57:58: 80:28:f9:38:f6:e0:de:38:ce:9a:c2:00:f3:d4:66: f4:ac:7d:3c:de:87:ba:53:ce:17:52:01:1d:51:e3: 6f:7c:43:0a:fd:48:06:0a:d7:78:e2:84:41:98:31: ea:b8:6f:6f:88:17:32:66:07:a1:b2:c0:33:fd:17: 47:28:15:47:8d:bd:93:03:38:ba:99:67:9a:19:1b: d7:7b:29:e5:b7:4c:30:37:f9:30:0a:fc:5e:b3:60: 00:69:8c:de:c0:3c:85:5d:e0:49:fd:6c:c3:f5:3d: 7e:e7:bb:83:b6:82:51:c1:3b:4b:96:e6:ba:76:5d: 77:2b:02:73:9f:9e:79:d9:d0:fb:5b:6b:dd:99:12: 04:07:26:8c:4f:0e:42:2b:69:84:80:81:9a:23:c3: ac:c4:c8:e8:a3:ea:1e:db:45:07:84:2e:cb:f8:20: 2b:46:a5:31:78:af:02:a2:36:23:a6:58:f4:49:ed: 04:72:de:5a:ba:41:89:03:66:ef:a1:ca:ab:71:8f: bc:58:a3:ba:5d:21:0b:19:e8:88:d8:09:8c:55:b5: 56:c3:64:d9:4d:82:f2:fb:03:7d:29:6f:84:82:41: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6E:60:9E:4D:C4:AC:60:8B:57:B4:81:60:8D:1F:CD:4D:C0:09:CD X509v3 Authority Key Identifier: keyid:36:91:53:33:00:AC:C1:E0:10:5E:E0:31:70:63:50:7F:87:B4:01:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpFTMwCsweAQXuAxcGNQf4e0AS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACDD/2A2CFC464DCF11EDBF05FA53C4F9AE02/NpFTMwCsweAQXuAxcGNQf4e0AS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c4:df:7f:51:54:e2:21:fc:f1:f2:95:6d:5a:2b:57:28:31: 9a:03:c6:c1:5f:b5:9b:95:50:1f:5c:6f:16:ca:ce:94:62:6c: b5:cc:32:aa:cd:66:43:23:f1:b3:36:4b:f3:d3:b3:a3:ef:fd: ba:ab:8b:f6:2a:06:17:ab:79:48:96:18:46:c9:02:59:db:8e: 96:e1:2b:51:46:72:f2:95:0b:ee:3b:a3:14:56:92:3d:b1:e8: f2:93:3b:f4:09:e1:0f:e6:cd:58:39:8c:50:68:a8:65:b1:f7: a5:79:c1:ec:56:05:12:4f:71:98:cb:52:2d:60:5e:5e:d5:55: 49:e3:bb:a5:86:1e:da:5a:48:2f:01:14:fb:48:a0:b1:35:6f: 82:df:54:66:b7:62:38:3a:76:8a:bb:e4:b0:ae:38:b6:88:81: ee:17:20:a0:9f:a5:e7:db:3d:a0:d8:ee:da:8e:8e:53:61:fc: 9f:00:b8:14:91:73:19:b9:93:9d:7f:65:8d:db:7a:30:b7:2f: ab:74:71:11:c8:d3:63:db:e2:71:1e:66:48:47:5d:1d:5e:70: 31:d5:47:89:33:8a:88:f7:98:42:27:01:cc:c2:16:17:a2:68: a0:e7:ce:94:ff:ea:ed:48:7a:be:f3:46:db:33:59:66:3d:28: 6b:f6:02:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDREQxMTAvBgNVBAUTKDM2OTE1MzMzMDBBQ0MxRTAxMDVFRTAzMTcwNjM1MDdG ODdCNDAxMkQwHhcNMjQwNTE5MDUwMzQ0WhcNMjQwNTI2MDUwMzQ0WjAYMRYwFAYD VQQDEw02NjQ5ODgzMS1hY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8cFwiEM1AK5BfQxY77iHcqLlAzRLFNxwPI+V1iAKPk49uDeOM6awgDz1Gb0 rH083oe6U84XUgEdUeNvfEMK/UgGCtd44oRBmDHquG9viBcyZgehssAz/RdHKBVH jb2TAzi6mWeaGRvXeynlt0wwN/kwCvxes2AAaYzewDyFXeBJ/WzD9T1+57uDtoJR wTtLlua6dl13KwJzn5552dD7W2vdmRIEByaMTw5CK2mEgIGaI8OsxMjoo+oe20UH hC7L+CArRqUxeK8CojYjplj0Se0Ect5aukGJA2bvocqrcY+8WKO6XSELGeiI2AmM VbVWw2TZTYLy+wN9KW+EgkENRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVuYJ5N xKxgi1e0gWCNH81NwAnNMB8GA1UdIwQYMBaAFDaRUzMArMHgEF7gMXBjUH+HtAEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNERC8yQTJDRkM0NjRE Q0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dlQVFYdUF4Y0dOUWY0ZTBB UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wRlRNd0Nzd2VBUVh1QXhjR05RZjRlMEFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNERC8yQTJDRkM0NjREQ0YxMUVEQkYwNUZBNTNDNEY5QUUwMi9OcEZUTXdDc3dl QVFYdUF4Y0dOUWY0ZTBBUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApxN9/UVTiIfzx8pVtWitXKDGaA8bBX7WblVAfXG8Wys6UYmy1zDKq zWZDI/GzNkvz07Oj7/26q4v2KgYXq3lIlhhGyQJZ246W4StRRnLylQvuO6MUVpI9 sejykzv0CeEP5s1YOYxQaKhlsfelecHsVgUST3GYy1ItYF5e1VVJ47ulhh7aWkgv ART7SKCxNW+C31Rmt2I4OnaKu+Swrji2iIHuFyCgn6Xn2z2g2O7ajo5TYfyfALgU kXMZuZOdf2WN23owty+rdHERyNNj2+JxHmZIR10dXnAx1UeJM4qI95hCJwHMwhYX omig586U/+rtSHq+80bbM1lmPShr9gLm -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org