$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft File: nLnwNCujTijkVM2SOEk0ZgWxxjI.mft (raw, json) Hash identifier: Nq1qVn3/clgj1meBCTrn+hbRg/bWuzUpPL7gAReFPX4= Subject key identifier: 26:7E:27:96:AC:20:4E:9D:30:8A:7B:44:AA:62:AD:6E:71:FC:06:29 Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32 Certificate issuer: /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632 Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft Manifest number: 047A Signing time: Sun 19 May 2024 01:41:49 +0000 Manifest this update: Sun 19 May 2024 01:41:48 +0000 Manifest next update: Sun 26 May 2024 01:41:48 +0000 Files and hashes: 1: nLnwNCujTijkVM2SOEk0ZgWxxjI.crl (hash: HhsZ6JHFpWfGgY4o3sdnHnDAEP7BXuMYCPgnjWpzGD4=) 2: 77465F12874511EEBEA58225C4F9AE02.roa (hash: jd8h3qfSfb7yBPDyyETIHrIlzzkiLkKJgmfMYV76Qls=) 3: A4331EC89E4911EEA1F8471AC4F9AE02.roa (hash: b9I7OzIezGf+mjGpwP/VDBXDZ9xUvJwuB2+iHIHloV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632 Validity Not Before: May 19 01:41:48 2024 GMT Not After : May 26 01:41:48 2024 GMT Subject: CN=664958dc-1324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:da:5c:bc:ea:0a:c5:af:64:8d:da:63:fe: 21:94:72:3f:b8:96:1d:ea:d7:45:41:4b:ab:d7:4c: e7:44:b0:f1:01:7f:ce:1b:73:ca:06:05:40:44:aa: 68:6c:43:da:35:04:19:d9:09:33:82:c8:0e:e7:37: cb:b7:42:16:0e:c8:01:37:cf:9c:15:6c:a4:61:18: 8d:59:90:ad:55:f9:01:91:f3:cd:6c:1b:f0:e8:6c: b9:e8:6f:1f:a5:f0:bd:bf:28:04:d4:0a:e6:44:5d: 00:02:13:42:e9:45:ae:03:f3:5f:be:54:6b:fd:9a: 31:fc:52:12:91:77:04:eb:1f:f6:7d:7a:41:f6:98: 42:b4:6c:7c:b7:d5:99:96:8b:80:14:49:86:25:d2: 3a:e2:b7:c2:37:05:81:03:07:53:ef:5a:78:1a:49: 26:a9:96:d7:02:db:8d:4e:51:18:9a:51:fe:3a:ec: ec:ef:d1:e9:8b:f8:38:41:1c:45:3e:18:52:8b:a6: 95:86:3a:92:59:e9:60:2b:ce:a2:e3:e9:8d:93:d5: 15:d5:69:44:44:fd:a6:1e:75:15:59:38:23:d6:33: be:cb:ca:81:f5:37:36:1b:ec:ae:2e:e4:dd:2f:b1: ec:f3:76:f8:20:5a:cc:06:0a:f3:04:d6:e8:3b:cb: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7E:27:96:AC:20:4E:9D:30:8A:7B:44:AA:62:AD:6E:71:FC:06:29 X509v3 Authority Key Identifier: keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:81:5b:74:f4:95:cf:82:d6:f1:1a:d3:0c:30:e7:6c:c0:68: 7c:47:04:23:94:c1:41:58:03:3f:28:ad:84:00:d2:1e:43:94: 11:a0:98:67:8a:f2:39:91:a5:c2:36:1f:a1:70:d7:78:03:32: f7:9d:b9:f4:06:a2:e7:b7:3f:21:09:63:78:43:3b:66:63:49: a7:f6:e2:d4:5d:fc:96:ef:3e:35:8c:4d:48:1f:61:32:d7:f0: a2:41:b8:51:06:1e:00:4b:14:88:d5:7f:d2:45:9e:12:f4:63: 1c:1f:3d:34:87:58:09:ad:fa:c3:71:c0:21:c9:37:13:e0:c5: 08:e6:ae:66:24:33:69:14:80:a1:5b:00:6e:e0:4b:16:2f:39: df:5d:5b:ad:ee:da:db:be:4a:d1:f1:1f:7b:4b:da:6c:70:a8: 01:aa:f7:ef:ae:17:20:52:35:a6:ce:d4:86:a0:c8:14:fa:22: e5:86:f5:37:44:bc:c5:95:a1:2d:84:45:db:4b:f6:f3:f1:b3: 75:70:bd:c1:af:80:83:56:61:9d:42:75:f2:01:24:34:8b:45: f2:c8:67:78:92:9e:a7:5a:2b:18:db:ee:ae:d3:bb:73:36:c8: 81:67:f6:88:64:31:29:94:d8:f9:f5:b4:8b:56:ff:ce:29:34: 83:43:15:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg5OUQxMTAvBgNVBAUTKDlDQjlGMDM0MkJBMzRFMjhFNDU0Q0Q5MjM4NDkzNDY2 MDVCMUM2MzIwHhcNMjQwNTE5MDE0MTQ4WhcNMjQwNTI2MDE0MTQ4WjAYMRYwFAYD VQQDEw02NjQ5NThkYy0xMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn67aXLzqCsWvZI3aY/4hlHI/uJYd6tdFQUur10znRLDxAX/OG3PKBgVARKpo bEPaNQQZ2QkzgsgO5zfLt0IWDsgBN8+cFWykYRiNWZCtVfkBkfPNbBvw6Gy56G8f pfC9vygE1ArmRF0AAhNC6UWuA/NfvlRr/Zox/FISkXcE6x/2fXpB9phCtGx8t9WZ louAFEmGJdI64rfCNwWBAwdT71p4GkkmqZbXAtuNTlEYmlH+Ouzs79Hpi/g4QRxF PhhSi6aVhjqSWelgK86i4+mNk9UV1WlERP2mHnUVWTgj1jO+y8qB9Tc2G+yuLuTd L7Hs83b4IFrMBgrzBNboO8vjXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZ+J5as IE6dMIp7RKpirW5x/AYpMB8GA1UdIwQYMBaAFJy58DQro04o5FTNkjhJNGYFscYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5RC9GMTU3ODdCNEY2 ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRpamtWTTJTT0VrMFpnV3h4 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MbndOQ3VqVGlqa1ZNMlNPRWswWmdXeHhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODk5RC9GMTU3ODdCNEY2ODIxMUVCOEUwMzdGN0VDNEY5QUUwMi9uTG53TkN1alRp amtWTTJTT0VrMFpnV3h4akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZgVt09JXPgtbxGtMMMOdswGh8RwQjlMFBWAM/KK2EANIeQ5QRoJhn ivI5kaXCNh+hcNd4AzL3nbn0BqLntz8hCWN4QztmY0mn9uLUXfyW7z41jE1IH2Ey 1/CiQbhRBh4ASxSI1X/SRZ4S9GMcHz00h1gJrfrDccAhyTcT4MUI5q5mJDNpFICh WwBu4EsWLznfXVut7trbvkrR8R97S9pscKgBqvfvrhcgUjWmztSGoMgU+iLlhvU3 RLzFlaEthEXbS/bz8bN1cL3Br4CDVmGdQnXyASQ0i0XyyGd4kp6nWisY2+6u07tz NsiBZ/aIZDEplNj59bSLVv/OKTSDQxXj -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org