$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: 9StPGp0UxzZ1s8THXufk4+/1N0SIDtUyIkVSdvVGtoQ= Subject key identifier: FB:EC:6C:F4:7B:4C:08:33:BC:2B:6E:80:2E:97:00:12:4B:B4:D9:11 Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: ED Signing time: Sun 19 May 2024 05:48:55 +0000 Manifest this update: Sun 19 May 2024 05:48:55 +0000 Manifest next update: Sun 26 May 2024 05:48:55 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: dKU3XLIVyuY0fKK2b21my5GcPruQI4XjSSZLuf4A0AU=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: XONGVvjvwqUG2k0rcMxU+8QUhjI2+qT2DM4JudN4zmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: May 19 05:48:55 2024 GMT Not After : May 26 05:48:55 2024 GMT Subject: CN=664992c7-ce19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:2f:c8:36:58:33:01:0d:ae:db:71:4d:b5: 11:9b:52:a7:ab:e3:1e:3a:bd:18:94:ff:fc:b5:c7: 86:a9:6d:e1:e3:76:a6:4d:85:d0:0e:e6:94:7e:a0: be:6d:5a:e7:88:73:85:a6:72:5d:d1:99:a0:e8:c3: c7:92:e0:ca:73:da:09:14:25:87:42:7b:78:68:46: 70:7a:be:ac:f0:e9:2c:be:d7:0c:a6:03:fa:0b:c0: f0:ee:82:0a:9e:32:62:35:06:94:ab:fb:8b:2f:5a: f0:9d:25:23:7f:c3:14:1b:d2:5b:3b:3a:ab:f6:ca: 68:7a:ab:e4:ad:71:4e:eb:1d:8e:ef:3c:bb:db:7e: 7c:23:bd:4c:a9:82:3d:8c:2a:00:dd:af:03:bd:1b: 61:0d:49:56:b2:85:3d:72:a1:bd:d4:d0:ed:7b:38: 67:bd:e9:24:b6:c3:17:6a:7d:b1:a2:de:ed:4d:93: 60:f6:61:1f:73:46:1d:ff:41:1e:11:db:ce:4a:bb: 54:e9:3f:a9:5c:bf:04:93:6c:da:77:eb:16:d9:57: 1f:af:3b:b8:4a:fc:39:17:bd:a2:1a:c3:38:9b:a0: 6a:25:51:de:bb:89:1e:68:9a:b3:c9:ae:8b:5a:00: cb:fd:48:b9:6b:2f:58:e5:2b:39:fd:49:a0:78:e2: ed:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EC:6C:F4:7B:4C:08:33:BC:2B:6E:80:2E:97:00:12:4B:B4:D9:11 X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:28:f8:e3:cf:15:01:1f:d7:54:06:21:03:ed:63:48:ca:94: e1:49:03:f4:ef:a5:ae:e4:8e:33:3c:32:a9:e7:76:cb:71:8a: b6:86:2f:ed:a1:20:de:d0:00:48:56:2c:7e:cc:9a:ef:37:e7: a4:43:b8:e3:a4:51:2e:0b:20:f9:e1:cb:e1:11:b2:3a:3c:42: c6:72:0f:17:cf:cf:23:54:e3:55:1d:3b:39:79:42:1b:55:85: a0:4f:0d:d4:4a:96:5a:b3:c8:3d:e6:69:3d:a0:c8:51:a2:93: 77:2c:3f:a2:42:bd:4c:84:9a:48:52:9e:ce:08:06:81:21:e0: 33:83:e9:bd:b6:0e:05:65:e7:b6:72:1c:87:6f:67:e9:2c:0b: ec:a1:de:f0:7c:e6:46:01:5a:14:62:6b:b8:8f:ba:fb:01:29: c1:9b:44:ec:1c:8d:1e:a8:ad:34:ed:ff:a4:9d:4e:a5:32:bf: 40:cd:00:22:d7:76:70:f9:12:77:c3:24:8e:ea:62:fa:42:d4: 3e:ee:4d:5b:e8:d2:94:9c:d1:b6:63:9b:a5:06:32:88:64:0d: 22:b4:49:8d:6e:ba:2d:e7:f5:da:ed:dc:f3:16:6c:0b:fc:ae: 14:11:7f:fb:10:dd:c6:09:6a:f4:db:e5:e6:ea:f0:6b:66:2b: 3c:71:4c:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjQwNTE5MDU0ODU1WhcNMjQwNTI2MDU0ODU1WjAYMRYwFAYD VQQDEw02NjQ5OTJjNy1jZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNcvyDZYMwENrttxTbURm1Knq+MeOr0YlP/8tceGqW3h43amTYXQDuaUfqC+ bVrniHOFpnJd0Zmg6MPHkuDKc9oJFCWHQnt4aEZwer6s8OksvtcMpgP6C8Dw7oIK njJiNQaUq/uLL1rwnSUjf8MUG9JbOzqr9spoeqvkrXFO6x2O7zy72358I71MqYI9 jCoA3a8DvRthDUlWsoU9cqG91NDtezhnvekktsMXan2xot7tTZNg9mEfc0Yd/0Ee EdvOSrtU6T+pXL8Ek2zad+sW2Vcfrzu4Svw5F72iGsM4m6BqJVHeu4keaJqzya6L WgDL/Ui5ay9Y5Ss5/UmgeOLtZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvsbPR7 TAgzvCtugC6XABJLtNkRMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOKPjjzxUBH9dUBiED7WNIypThSQP076Wu5I4zPDKp53bLcYq2hi/t oSDe0ABIVix+zJrvN+ekQ7jjpFEuCyD54cvhEbI6PELGcg8Xz88jVONVHTs5eUIb VYWgTw3USpZas8g95mk9oMhRopN3LD+iQr1MhJpIUp7OCAaBIeAzg+m9tg4FZee2 chyHb2fpLAvsod7wfOZGAVoUYmu4j7r7ASnBm0TsHI0eqK007f+knU6lMr9AzQAi 13Zw+RJ3wySO6mL6QtQ+7k1b6NKUnNG2Y5ulBjKIZA0itEmNbrot5/Xa7dzzFmwL /K4UEX/7EN3GCWr02+Xm6vBrZis8cUyX -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org