$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json) Hash identifier: ON4jI1BH0okXOJguw6YSaYLFRYBuXIpaoRbjwpyiKQ0= Subject key identifier: AC:E9:BC:5E:1D:59:D9:98:61:12:B5:5A:C3:21:64:CD:BF:65:79:85 Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft Manifest number: 0119 Signing time: Sun 19 May 2024 05:17:05 +0000 Manifest this update: Sun 19 May 2024 05:17:05 +0000 Manifest next update: Sun 26 May 2024 05:17:05 +0000 Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: 0A6nNT2FVxV/Xd0TVcMGNr4PY2LISdgiiycOYDEllxI=) 2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: UytTVbn+GmtsdqIXrrUez63jh7jlht91a3RnL3DihwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Validity Not Before: May 19 05:17:05 2024 GMT Not After : May 26 05:17:05 2024 GMT Subject: CN=66498b51-4a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:cc:7b:db:ee:bd:f1:3b:c4:bb:cd:bc:3e: e7:4b:a4:8f:6b:a9:c5:f8:24:00:2d:69:1e:71:b7: 4f:44:9f:7c:51:ae:6d:8b:94:dc:9d:3d:55:ba:52: 01:a5:11:e1:d1:7b:4f:f0:0a:63:f7:b7:83:2e:42: fc:87:57:d2:d1:70:8e:e8:24:29:a8:c5:70:6e:34: 09:83:16:0b:9a:2e:77:8c:10:f1:51:07:eb:0e:33: f8:d5:7f:c6:23:0c:08:86:69:13:3c:49:53:50:3e: 23:6f:e1:56:e3:8a:26:28:56:a4:bf:df:98:c4:66: df:e8:95:20:cd:13:a2:8f:05:f0:d6:4f:19:fd:f9: 5d:01:89:fe:63:5e:78:21:4c:8e:8c:65:f3:63:53: b4:0f:a7:79:cd:0a:15:39:8b:0f:c4:02:d2:a5:cd: d5:fd:ef:9c:05:02:a4:ce:5c:62:f9:33:b9:c7:2a: f0:e4:cd:fc:28:03:3d:86:51:83:fc:6a:ac:b6:ad: f4:e6:5a:c7:22:ee:86:5f:49:9f:ce:16:c9:73:59: 8d:36:01:d9:cd:d3:49:9f:96:b3:65:67:f6:39:fb: 37:d8:ef:b8:1d:93:a0:fb:9d:e1:28:42:1c:88:15: 94:67:d3:b2:b0:2e:d9:1f:4c:cb:83:df:54:5b:90: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E9:BC:5E:1D:59:D9:98:61:12:B5:5A:C3:21:64:CD:BF:65:79:85 X509v3 Authority Key Identifier: keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ee:96:a9:2a:ec:5e:4d:c7:89:0d:fd:14:64:c3:48:22:79: f9:75:5c:75:04:21:3f:49:56:e9:44:6e:bf:cb:51:62:9d:36: 4f:fc:56:7e:1e:55:02:ab:54:91:8d:ad:ca:a2:45:e7:9d:8e: 3d:1d:f6:a3:96:d1:2f:f8:e7:e3:7d:9a:b6:04:fe:5b:58:12: 40:78:92:88:71:30:ce:77:34:a2:d2:19:4a:55:cd:4d:b0:2a: c7:b3:c9:ec:c2:b4:d9:66:22:50:20:a8:7c:d5:02:86:71:c7: 1a:7a:b6:99:fe:75:71:80:62:90:db:11:11:14:8c:20:a1:40: 78:7c:b4:e1:64:fd:16:86:7a:fc:5c:66:a4:0c:75:69:16:e3: d4:89:c4:93:ef:bc:61:62:51:d5:2f:f7:d4:c7:52:ea:45:e7: bf:61:5e:b5:7b:60:2b:3c:a4:89:47:47:3d:bd:60:23:ca:c5: fe:5a:33:49:19:fe:a7:50:64:7d:af:5b:f6:f7:11:b3:2c:19: 90:fb:5f:3d:80:46:d3:fa:52:8f:fc:ed:64:5b:74:88:17:ee: 33:95:37:4e:82:89:31:e7:2b:38:3f:6e:cf:76:b1:b4:90:dc: de:ae:53:38:d8:5f:4d:d2:79:6e:0a:ec:ae:dc:48:d0:9c:e9: bf:95:5c:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3 OUJCQkEzM0YwHhcNMjQwNTE5MDUxNzA1WhcNMjQwNTI2MDUxNzA1WjAYMRYwFAYD VQQDEw02NjQ5OGI1MS00YTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurrMe9vuvfE7xLvNvD7nS6SPa6nF+CQALWkecbdPRJ98Ua5ti5TcnT1VulIB pRHh0XtP8Apj97eDLkL8h1fS0XCO6CQpqMVwbjQJgxYLmi53jBDxUQfrDjP41X/G IwwIhmkTPElTUD4jb+FW44omKFakv9+YxGbf6JUgzROijwXw1k8Z/fldAYn+Y154 IUyOjGXzY1O0D6d5zQoVOYsPxALSpc3V/e+cBQKkzlxi+TO5xyrw5M38KAM9hlGD /Gqstq305lrHIu6GX0mfzhbJc1mNNgHZzdNJn5azZWf2Ofs32O+4HZOg+53hKEIc iBWUZ9OysC7ZH0zLg99UW5C1SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzpvF4d WdmYYRK1WsMhZM2/ZXmFMB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD7papKuxeTceJDf0UZMNIInn5dVx1BCE/SVbpRG6/y1FinTZP/FZ+ HlUCq1SRja3KokXnnY49HfajltEv+OfjfZq2BP5bWBJAeJKIcTDOdzSi0hlKVc1N sCrHs8nswrTZZiJQIKh81QKGcccaeraZ/nVxgGKQ2xERFIwgoUB4fLThZP0Whnr8 XGakDHVpFuPUicST77xhYlHVL/fUx1LqRee/YV61e2ArPKSJR0c9vWAjysX+WjNJ Gf6nUGR9r1v29xGzLBmQ+189gEbT+lKP/O1kW3SIF+4zlTdOgokx5ys4P27PdrG0 kNzerlM42F9N0nluCuyu3EjQnOm/lVzQ -----END CERTIFICATE-----Generated at Sun May 19 06:14:35 2024 by rpki-client on console-ams.rpki-client.org