$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: jrilo84VpGWfw1k6YCSmC4p0VJf/3wYvOcfYGFNMnzA= Subject key identifier: DE:8C:77:90:95:ED:24:CC:37:8E:41:DD:F9:D2:18:25:42:CD:8A:9A Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 135F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 1359 Signing time: Thu 30 May 2024 17:51:24 +0000 Manifest this update: Thu 30 May 2024 17:51:23 +0000 Manifest next update: Thu 06 Jun 2024 17:51:23 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: jf0+IKqi2bHFdV8wKmuXocqBRSrxNWnRL6cSgu8d5xs=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: RbWc65w76hgApJn/zSzNRULwCLJ74DEt3IiLq2m4t4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 17:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4959 (0x135f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: May 30 17:51:23 2024 GMT Not After : Jun 6 17:51:23 2024 GMT Subject: CN=6658bc9c-bae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4d:e2:aa:5b:83:0a:6a:0f:d5:e4:c2:30:02: 2b:4b:32:68:fc:cf:b6:61:65:7d:6d:40:f3:cc:37: 3d:6f:60:d1:44:c7:18:66:27:64:4b:74:3e:12:ab: eb:9b:8f:e6:73:b3:5b:f6:60:51:c3:6b:03:54:3d: d0:2a:7c:b2:cd:8e:92:9d:95:b5:dd:18:28:cd:cb: 2e:b2:68:ad:cd:f5:cf:29:0b:0d:fc:7e:e5:e0:03: 12:55:b6:c1:e3:d8:97:5f:6b:d6:ad:3c:ec:ab:df: 0b:26:9a:b3:53:fa:4c:53:b6:8c:d4:6b:a4:1c:18: ab:65:3c:f0:05:77:d5:cb:31:21:20:9e:09:49:78: c1:52:f7:e7:8b:1a:78:86:e2:6b:5e:ee:92:5f:7d: 2c:af:75:dd:3e:59:86:60:22:e0:32:ae:5e:c4:56: e8:5e:39:0b:c3:27:bc:cf:11:bd:04:1e:ae:43:2d: aa:df:b3:73:e3:05:bd:81:35:d9:36:a1:fc:93:0e: 92:09:e1:57:f5:17:76:5e:a4:0f:1e:a3:60:36:a7: d8:fc:49:43:8e:34:33:90:ea:4b:3d:11:27:a4:26: f7:4e:e1:f0:8c:ba:ea:59:fa:8f:aa:c3:33:b3:67: 1f:27:ef:07:29:f8:68:b8:33:16:0a:c1:47:bf:e4: 8c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8C:77:90:95:ED:24:CC:37:8E:41:DD:F9:D2:18:25:42:CD:8A:9A X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1b:ff:bb:01:57:7b:59:b8:5f:e4:4a:99:e4:0e:2b:c1:90: 99:d0:b6:73:b1:bf:ed:68:af:b2:b8:78:06:d5:43:d5:cc:98: bd:d7:f5:00:98:b0:40:9a:70:3b:da:5e:14:f0:da:53:6c:82: 84:78:90:48:9e:62:5c:92:15:8f:bb:45:16:36:95:9c:3d:f0: 81:14:ca:63:f5:87:9f:5a:49:1b:a6:0f:a6:61:3b:ff:75:36: 49:fb:51:67:14:f8:02:c8:c2:2b:86:09:fe:3e:5e:66:23:fb: 0c:e6:f0:7f:94:d4:da:b2:73:95:d3:d6:6d:41:4d:f6:66:22: ec:a2:1e:4c:07:3b:0f:d9:75:4f:96:6c:1f:54:44:7f:bf:00: af:98:2c:de:4b:01:8a:1e:f7:1d:5c:9d:60:ec:9e:64:f5:5a: be:a4:c1:dc:3f:5b:42:60:d1:b5:4f:9d:5a:ba:ab:d1:e8:50: c3:8a:a9:6f:21:89:db:86:88:e6:e1:9e:25:7b:fa:da:c5:74: b4:fe:af:d1:40:2b:d8:09:ce:7c:d6:61:88:02:77:5e:a0:9c: e1:31:c3:a6:6b:ec:ac:9e:24:d4:82:cb:82:42:53:18:53:45: 6e:37:2b:b7:77:4d:bc:f4:63:9c:1f:bd:e4:ee:95:1c:7d:f6: fd:41:8d:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjQwNTMwMTc1MTIzWhcNMjQwNjA2MTc1MTIzWjAYMRYwFAYD VQQDEw02NjU4YmM5Yy1iYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk3iqluDCmoP1eTCMAIrSzJo/M+2YWV9bUDzzDc9b2DRRMcYZidkS3Q+Eqvr m4/mc7Nb9mBRw2sDVD3QKnyyzY6SnZW13RgozcsusmitzfXPKQsN/H7l4AMSVbbB 49iXX2vWrTzsq98LJpqzU/pMU7aM1GukHBirZTzwBXfVyzEhIJ4JSXjBUvfnixp4 huJrXu6SX30sr3XdPlmGYCLgMq5exFboXjkLwye8zxG9BB6uQy2q37Nz4wW9gTXZ NqH8kw6SCeFX9Rd2XqQPHqNgNqfY/ElDjjQzkOpLPREnpCb3TuHwjLrqWfqPqsMz s2cfJ+8HKfhouDMWCsFHv+SM/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6Md5CV 7STMN45B3fnSGCVCzYqaMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaG/+7AVd7Wbhf5EqZ5A4rwZCZ0LZzsb/taK+yuHgG1UPVzJi91/UA mLBAmnA72l4U8NpTbIKEeJBInmJckhWPu0UWNpWcPfCBFMpj9YefWkkbpg+mYTv/ dTZJ+1FnFPgCyMIrhgn+Pl5mI/sM5vB/lNTasnOV09ZtQU32ZiLsoh5MBzsP2XVP lmwfVER/vwCvmCzeSwGKHvcdXJ1g7J5k9Vq+pMHcP1tCYNG1T51auqvR6FDDiqlv IYnbhojm4Z4le/raxXS0/q/RQCvYCc581mGIAndeoJzhMcOma+ysniTUgsuCQlMY U0VuNyu3d0289GOcH73k7pUcffb9QY2a -----END CERTIFICATE-----Generated at Thu May 30 18:46:03 2024 by rpki-client on console-ams.rpki-client.org