$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: NYRB+TGUf38XsEsuH2s9cA27O70EFFQpEyRGcnJmYQc= Subject key identifier: 8D:C8:38:80:6F:76:9B:57:D8:B1:79:37:7C:6F:09:B3:0C:38:5F:E7 Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0BC1 Signing time: Fri 31 May 2024 19:41:51 +0000 Manifest this update: Fri 31 May 2024 19:41:51 +0000 Manifest next update: Fri 07 Jun 2024 19:41:51 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: 29c7D/U192Zf7WUx6JDl6p8aT4sWHjRTAF3INiIZeGE=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: 6gIjrF99/wAv0IJmO9Ky10oDg62lrui5eFj9go2VtnY=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: nC5w9TCzp4SV3Db1Ys8xIWCRbyZvrHjrm8RrtnxmKcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: May 31 19:41:51 2024 GMT Not After : Jun 7 19:41:51 2024 GMT Subject: CN=665a27ff-d5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:25:af:f1:7a:f7:fb:1b:85:9e:93:b8:ce: 88:f1:91:4d:1c:62:70:89:92:b7:42:d4:cd:c0:fd: ec:dd:e9:64:fd:e6:b4:d1:fc:bc:1c:be:50:c7:0f: e9:73:9f:37:34:1e:19:a4:07:57:cb:1d:95:61:ca: f6:67:e3:eb:75:7b:b1:98:c2:ed:74:b4:a4:1e:28: a5:24:da:85:c0:87:c2:b7:6d:e1:70:c3:0e:77:32: 4a:6e:9f:d5:93:d5:28:20:78:b3:4b:90:5f:80:7b: d8:3c:28:bf:02:46:8e:ad:29:0c:83:a1:5c:15:87: ad:76:be:52:80:f2:8b:1b:98:f0:41:53:77:96:e1: c0:82:12:78:0c:f8:fa:4e:a7:94:f9:32:28:7a:6f: c9:65:f2:5f:b8:dd:c4:fd:d3:6a:07:6b:8f:4b:af: fc:1a:71:e1:69:ba:23:6f:de:71:09:50:10:81:3b: 0f:d6:54:83:69:14:13:2e:a8:14:36:11:ef:5f:7d: 2c:de:f4:2c:32:db:55:12:51:69:98:6a:2e:2f:76: 0f:9d:86:bc:95:1a:86:a2:1f:58:9a:8d:cf:bb:20: e6:28:97:c1:2b:e6:da:2c:a5:8f:8c:3d:49:b9:70: 21:07:31:06:73:db:92:df:12:30:60:85:73:1c:cc: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C8:38:80:6F:76:9B:57:D8:B1:79:37:7C:6F:09:B3:0C:38:5F:E7 X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d0:ad:2e:01:b3:67:0c:f5:37:c1:30:a9:85:78:03:9b:62: a3:45:ee:f4:e0:2c:33:4b:2c:7c:a0:f9:f3:02:bd:38:70:0a: 8f:5c:18:e8:c7:59:13:2d:e6:cd:4a:8e:7f:7b:c1:ff:80:9d: d1:a1:26:7b:7b:99:0f:58:dd:d4:da:63:a6:a4:6e:3a:7b:5c: 5e:d7:8d:93:ea:4e:67:33:e0:00:f7:6f:cf:3f:ab:7f:58:19: 17:d7:15:90:02:a9:78:9e:cf:33:77:8d:8e:f4:ea:ad:33:08: 30:f9:74:d5:48:d7:e5:ea:01:e9:2b:66:14:ad:07:5d:4e:c7: 2f:a7:73:79:65:74:ca:c8:81:b7:85:9e:f3:4f:e9:8f:c6:aa: 1a:85:cd:b9:0d:b9:0b:85:96:8b:2e:e9:3c:f3:60:2a:9e:a7: 3c:24:9a:db:cc:b8:c5:83:ef:b7:7b:93:9c:9d:fa:6e:f9:92: 11:d1:cf:e1:ed:78:d2:21:f9:6d:f9:fe:6b:8b:22:e1:54:14: 04:c2:76:23:37:1b:32:9a:e1:50:be:63:92:d5:75:c5:2f:4f: 8a:14:4d:be:f1:5a:2e:02:c2:a5:d5:cb:cb:38:48:7a:a7:b5: 7e:19:f5:57:7c:ac:04:1f:89:76:f2:21:82:4b:75:ef:59:70: 1c:e0:3e:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjQwNTMxMTk0MTUxWhcNMjQwNjA3MTk0MTUxWjAYMRYwFAYD VQQDEw02NjVhMjdmZi1kNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlMlr/F69/sbhZ6TuM6I8ZFNHGJwiZK3QtTNwP3s3elk/ea00fy8HL5Qxw/p c583NB4ZpAdXyx2VYcr2Z+PrdXuxmMLtdLSkHiilJNqFwIfCt23hcMMOdzJKbp/V k9UoIHizS5BfgHvYPCi/AkaOrSkMg6FcFYetdr5SgPKLG5jwQVN3luHAghJ4DPj6 TqeU+TIoem/JZfJfuN3E/dNqB2uPS6/8GnHhabojb95xCVAQgTsP1lSDaRQTLqgU NhHvX30s3vQsMttVElFpmGouL3YPnYa8lRqGoh9Ymo3PuyDmKJfBK+baLKWPjD1J uXAhBzEGc9uS3xIwYIVzHMwBTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3IOIBv dptX2LF5N3xvCbMMOF/nMB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK0K0uAbNnDPU3wTCphXgDm2KjRe704CwzSyx8oPnzAr04cAqPXBjo x1kTLebNSo5/e8H/gJ3RoSZ7e5kPWN3U2mOmpG46e1xe142T6k5nM+AA92/PP6t/ WBkX1xWQAql4ns8zd42O9OqtMwgw+XTVSNfl6gHpK2YUrQddTscvp3N5ZXTKyIG3 hZ7zT+mPxqoahc25DbkLhZaLLuk882Aqnqc8JJrbzLjFg++3e5Ocnfpu+ZIR0c/h 7XjSIflt+f5riyLhVBQEwnYjNxsymuFQvmOS1XXFL0+KFE2+8VouAsKl1cvLOEh6 p7V+GfVXfKwEH4l28iGCS3XvWXAc4D6k -----END CERTIFICATE-----Generated at Fri May 31 20:34:12 2024 by rpki-client on console-ams.rpki-client.org