$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: g/z6qtCEs0RDKZNh+0zgKOVZlyqAX/VyZX0NyIxSw38= Subject key identifier: 82:00:3A:0C:B8:6B:A1:AC:EA:5C:EE:F5:8D:EF:0B:CB:DC:47:17:2C Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1B2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1B13 Signing time: Thu 30 May 2024 16:57:52 +0000 Manifest this update: Thu 30 May 2024 16:57:51 +0000 Manifest next update: Thu 06 Jun 2024 16:57:51 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: 4FuRWu9bHkf6vTTBSNtCazRHMUAj1y3H/j1VRZifuk0=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: Pqm+kfFVeVJJT52PIyCw8FkJYkhG46t2Pk315FyyFs4=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: iHpjkKgrM/aDV1pos/dM1mkPjodoRGQzW79P/+DhQv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 16:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6958 (0x1b2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: May 30 16:57:51 2024 GMT Not After : Jun 6 16:57:51 2024 GMT Subject: CN=6658b00f-a163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:43:f9:06:23:d1:6f:21:90:39:82:c7:e6:8c: 94:c3:20:01:88:0c:66:29:6c:c1:f1:f0:e9:4d:d8: 5e:fb:6b:32:4a:ff:d8:bd:1a:c8:51:02:27:98:c2: 3d:40:97:c5:18:90:ae:3a:b7:a5:c3:a8:12:a2:03: cb:94:2c:55:0e:9b:ac:1c:e8:22:e2:d7:3e:d2:42: eb:b8:86:b4:58:8e:b3:c4:41:a9:64:df:a9:49:75: e3:35:c4:79:bc:c3:11:f8:b9:09:ef:a0:99:a7:28: 9c:7f:18:19:bf:bf:c9:94:44:ac:38:07:3d:a2:f4: c4:17:e5:21:45:0c:01:a9:75:56:b3:08:c4:bc:64: a8:e4:a4:14:64:5a:50:3e:99:7c:25:d8:08:91:90: 40:ac:ac:ff:fb:63:96:5b:a3:cd:c2:9a:ab:f3:ee: 31:d8:b3:8c:d7:92:10:ae:25:45:7d:6a:dc:62:8a: 45:7e:ae:43:2f:ab:b3:3b:c7:c5:8f:c7:ba:01:ef: f6:b1:ae:d3:18:82:13:ab:a0:2d:2a:8f:5e:72:2f: a1:ed:6a:cc:4a:52:c8:c2:9e:10:8d:9e:d7:4c:76: 27:d4:23:61:9f:a4:9f:b2:ee:f8:89:e9:f4:22:69: ce:88:2c:58:a2:4c:5d:3f:3b:d8:cb:00:df:b1:62: b2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:00:3A:0C:B8:6B:A1:AC:EA:5C:EE:F5:8D:EF:0B:CB:DC:47:17:2C X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:25:b7:31:1f:65:2c:df:a5:6c:1a:73:4b:c2:36:dc:a0:79: a7:3b:79:30:a8:f6:01:2c:2b:04:85:66:06:d6:5b:57:31:98: a9:ba:e6:54:f3:67:6a:76:8c:d4:75:d5:27:91:67:2b:3c:12: 4c:62:a6:81:ec:c2:ec:62:a0:ed:b4:8a:e5:02:44:d3:a3:98: 9b:af:9d:f7:c1:92:3f:8e:50:bf:02:10:f3:3e:89:b7:c9:8d: 1d:ff:b4:43:18:62:14:b7:5c:e8:39:7b:26:31:a7:a3:10:ba: 7a:06:f7:36:62:0c:f9:5f:50:c4:0f:c4:1d:b5:df:22:a5:85: 98:1a:a2:eb:a5:d9:2c:47:d0:15:30:0f:09:fa:80:9c:c4:a1: 20:b0:e0:e2:a1:ae:21:c9:cc:d0:2d:54:00:b0:59:8f:50:a6: df:5d:49:b1:2f:51:08:29:f7:84:11:e0:42:2f:34:e7:a7:e2: db:60:d9:0c:91:5a:96:42:90:72:b5:8c:16:06:14:d6:08:79: 84:8b:4c:a4:af:08:3c:e0:5e:af:1d:8a:6a:2c:d9:2d:e3:d8: cb:a0:8e:ec:a8:a9:ef:48:f0:9f:fd:18:95:f3:d3:03:1a:cd: b7:4c:0f:22:ef:a5:57:82:ca:4c:77:3f:1e:2b:ca:aa:fe:ca: e1:cb:1a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjQwNTMwMTY1NzUxWhcNMjQwNjA2MTY1NzUxWjAYMRYwFAYD VQQDEw02NjU4YjAwZi1hMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30P5BiPRbyGQOYLH5oyUwyABiAxmKWzB8fDpTdhe+2sySv/YvRrIUQInmMI9 QJfFGJCuOrelw6gSogPLlCxVDpusHOgi4tc+0kLruIa0WI6zxEGpZN+pSXXjNcR5 vMMR+LkJ76CZpyicfxgZv7/JlESsOAc9ovTEF+UhRQwBqXVWswjEvGSo5KQUZFpQ Ppl8JdgIkZBArKz/+2OWW6PNwpqr8+4x2LOM15IQriVFfWrcYopFfq5DL6uzO8fF j8e6Ae/2sa7TGIITq6AtKo9eci+h7WrMSlLIwp4QjZ7XTHYn1CNhn6Sfsu74ien0 ImnOiCxYokxdPzvYywDfsWKyZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIAOgy4 a6Gs6lzu9Y3vC8vcRxcsMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHJbcxH2Us36VsGnNLwjbcoHmnO3kwqPYBLCsEhWYG1ltXMZipuuZU 82dqdozUddUnkWcrPBJMYqaB7MLsYqDttIrlAkTTo5ibr533wZI/jlC/AhDzPom3 yY0d/7RDGGIUt1zoOXsmMaejELp6Bvc2Ygz5X1DED8Qdtd8ipYWYGqLrpdksR9AV MA8J+oCcxKEgsODioa4hyczQLVQAsFmPUKbfXUmxL1EIKfeEEeBCLzTnp+LbYNkM kVqWQpBytYwWBhTWCHmEi0ykrwg84F6vHYpqLNkt49jLoI7sqKnvSPCf/RiV89MD Gs23TA8i76VXgspMdz8eK8qq/srhyxr5 -----END CERTIFICATE-----Generated at Thu May 30 18:46:41 2024 by rpki-client on console-ams.rpki-client.org