$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: KqjFvCxaOXDPVZRbdJqUvd796dpoEyOuEaH4Cj+NlyU= Subject key identifier: E3:3B:E4:D6:81:FB:CF:B8:99:93:E9:38:8D:A2:8B:75:33:EB:BD:63 Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 0664 Signing time: Sat 18 May 2024 23:35:56 +0000 Manifest this update: Sat 18 May 2024 23:35:56 +0000 Manifest next update: Sat 25 May 2024 23:35:56 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: DrXJS4sTdF5CP2bZW+5niJr4sdVFG/X25M2EKVeaMoc=) 2: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (hash: qiBZQI2a1Ynnwr8NZC+JZxXJpm/2uK+g5xqt3jGkNKM=) 3: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: CD2XZGcer+kAB85rmOAMuyU4/KGzzo0Ink+wv2m7taY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: May 18 23:35:56 2024 GMT Not After : May 25 23:35:56 2024 GMT Subject: CN=66493b5c-bc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:8d:8d:d3:3d:c6:e5:b6:20:46:3c:17:61: b3:16:d6:47:1e:10:9b:c1:7f:0d:6d:e7:09:3c:bd: ff:01:ce:29:d9:1e:26:19:cb:c5:9e:b3:05:23:db: 41:11:76:dd:70:7f:93:cb:22:19:72:43:30:d3:9d: bd:11:32:49:36:f4:6e:db:a4:40:e0:d3:e3:37:57: 60:02:ba:50:87:b7:8e:0d:a6:ce:a1:a5:91:1d:a7: 68:2c:b1:2b:27:6b:73:18:dd:ba:44:e4:d1:50:31: 6a:86:b9:d8:06:98:74:00:c0:91:bd:96:25:3b:f0: 21:09:f6:52:95:a9:b5:de:0b:8f:ba:a7:5a:2b:7c: f8:29:19:b5:5e:31:3b:32:78:c8:1e:82:87:8e:80: 64:6b:5b:de:26:bb:ec:2c:b9:c2:90:f9:06:17:e2: fe:d8:25:3f:df:19:f7:b6:24:ea:da:ec:f0:38:15: f2:73:96:88:0b:28:0b:f3:6f:f9:07:29:0b:72:b1: f4:a8:82:5b:86:59:79:c3:61:54:94:a7:56:9e:0d: f1:2b:e9:e3:8e:73:1d:1b:d8:44:10:f9:01:d7:8a: de:56:b0:51:77:e2:fd:67:a5:b4:b2:bf:c3:b2:c3: f6:dd:c7:d0:e9:36:85:fe:71:d5:60:56:40:0f:9e: 2c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3B:E4:D6:81:FB:CF:B8:99:93:E9:38:8D:A2:8B:75:33:EB:BD:63 X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:73:ec:ac:bc:23:fa:ca:4f:1b:6f:78:9c:ce:1c:31:c1:8d: 2c:ae:71:cf:70:86:20:4b:2e:fc:c0:1f:c4:8a:aa:1a:c4:37: 5f:cf:00:b0:2e:4d:54:7c:fd:8a:fc:ea:cb:75:79:d2:0d:38: 44:a3:bf:1d:58:3e:48:a2:38:ce:7a:4a:3c:67:21:43:4e:2a: 33:d7:2a:e2:26:a3:86:30:aa:e7:53:a2:fe:d3:86:a5:9e:55: af:67:5b:a6:99:1b:36:94:a3:7c:fa:97:21:da:b0:ef:f0:e0: 3a:cd:75:2a:f0:2f:e4:3b:b2:b6:9a:ad:d3:5e:c3:16:53:73: d3:4c:ea:be:be:a8:53:10:73:87:e2:a2:d1:89:af:cc:4d:36: c4:c8:35:ca:27:32:fb:94:ec:2e:4c:34:25:d6:26:f1:0f:8c: 51:93:4e:cf:c5:26:59:05:1c:74:8f:78:af:ea:7f:72:78:74: 48:cd:1e:2d:4f:9b:fb:1b:cf:af:e6:05:39:60:16:c3:f9:c6: 63:a8:ad:49:42:8c:6d:fa:66:ee:37:49:22:51:1c:49:8a:dc: e2:c2:d0:94:7d:5d:7e:11:4b:c6:df:3e:9f:16:8a:d9:0a:03: bc:1c:bc:a8:f6:68:74:71:04:a9:46:4c:7f:76:5f:58:27:c5: 93:6a:9c:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjQwNTE4MjMzNTU2WhcNMjQwNTI1MjMzNTU2WjAYMRYwFAYD VQQDEw02NjQ5M2I1Yy1iYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCKNjdM9xuW2IEY8F2GzFtZHHhCbwX8NbecJPL3/Ac4p2R4mGcvFnrMFI9tB EXbdcH+TyyIZckMw0529ETJJNvRu26RA4NPjN1dgArpQh7eODabOoaWRHadoLLEr J2tzGN26ROTRUDFqhrnYBph0AMCRvZYlO/AhCfZSlam13guPuqdaK3z4KRm1XjE7 MnjIHoKHjoBka1veJrvsLLnCkPkGF+L+2CU/3xn3tiTq2uzwOBXyc5aICygL82/5 BykLcrH0qIJbhll5w2FUlKdWng3xK+njjnMdG9hEEPkB14reVrBRd+L9Z6W0sr/D ssP23cfQ6TaF/nHVYFZAD54sqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOM75NaB +8+4mZPpOI2ii3Uz671jMB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhc+ysvCP6yk8bb3iczhwxwY0srnHPcIYgSy78wB/EiqoaxDdfzwCw Lk1UfP2K/OrLdXnSDThEo78dWD5IojjOeko8ZyFDTioz1yriJqOGMKrnU6L+04al nlWvZ1ummRs2lKN8+pch2rDv8OA6zXUq8C/kO7K2mq3TXsMWU3PTTOq+vqhTEHOH 4qLRia/MTTbEyDXKJzL7lOwuTDQl1ibxD4xRk07PxSZZBRx0j3iv6n9yeHRIzR4t T5v7G8+v5gU5YBbD+cZjqK1JQoxt+mbuN0kiURxJitziwtCUfV1+EUvG3z6fForZ CgO8HLyo9mh0cQSpRkx/dl9YJ8WTapzs -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org