$ rpki-client -vvf rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft File: NjlSt_QXggYJMArokUgSGEuPw9w.mft (raw, json) Hash identifier: XlLubjyfGLd2Pc8ISoBWglEs+NvZc09Jn5HO+EfWYNo= Subject key identifier: 43:B4:15:6A:B5:7D:D5:9C:24:92:89:19:B0:F7:3A:A4:B3:2E:7E:F3 Authority key identifier: 36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC Certificate issuer: /CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Certificate serial: 1B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft Manifest number: 1B81 Signing time: Sat 18 May 2024 16:37:54 +0000 Manifest this update: Sat 18 May 2024 16:37:53 +0000 Manifest next update: Sat 25 May 2024 16:37:53 +0000 Files and hashes: 1: NjlSt_QXggYJMArokUgSGEuPw9w.crl (hash: QFgbP78c4PNgONbtIdAZwuDh2OqbVpwArsUoxq+i34s=) 2: EC1B43EA393111EAA1873746C4F9AE02.roa (hash: kFVKxbbFT5Rz5CAh15r46L+LqsFg7mETx8eHEj3hmPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7061 (0x1b95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A70FA/serialNumber=363952B7F417820609300AE8914812184B8FC3DC Validity Not Before: May 18 16:37:53 2024 GMT Not After : May 25 16:37:53 2024 GMT Subject: CN=6648d961-fc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:46:a6:bd:78:a9:72:2a:24:30:a1:02:0d:a0: 21:01:4c:6d:39:27:6c:43:77:fd:db:84:b1:fe:0c: 72:3b:66:23:88:12:56:04:5d:68:63:c6:83:88:78: 04:02:71:d5:2d:44:39:f5:cd:64:24:ee:c2:2d:87: a3:2a:df:86:7a:98:d5:45:08:69:de:72:24:62:71: 34:ac:3b:f5:72:98:1c:11:c5:3e:bb:c7:16:a1:d6: 00:45:c8:a5:ff:33:a2:46:85:6e:47:c4:b6:68:b9: a3:5a:61:d7:7e:5c:f3:c2:e0:1b:71:8a:e4:1c:33: 17:5d:c1:f2:d6:31:9a:eb:17:58:9e:8e:1a:12:9d: d1:f0:51:4d:8b:27:af:99:f9:26:54:83:ca:4e:65: 57:16:aa:3f:b2:a0:c7:7f:0e:86:fc:d3:fb:9c:c2: 0a:d9:31:17:1f:aa:a6:2a:49:6e:c6:a0:cd:19:98: d0:b5:1c:69:b5:f5:e2:f5:3a:38:c8:57:3b:c8:d3: 5d:d3:f3:4e:0e:e9:d4:7b:e1:f8:5b:2e:b5:b5:9b: 66:ad:3e:95:43:fe:0c:28:73:91:2f:51:af:6f:16: 79:d0:ee:7c:b7:b1:02:d4:17:2a:f2:05:08:b2:24: f9:93:6e:b5:4a:de:ce:e9:fb:3e:86:2a:b2:17:9c: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B4:15:6A:B5:7D:D5:9C:24:92:89:19:B0:F7:3A:A4:B3:2E:7E:F3 X509v3 Authority Key Identifier: keyid:36:39:52:B7:F4:17:82:06:09:30:0A:E8:91:48:12:18:4B:8F:C3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NjlSt_QXggYJMArokUgSGEuPw9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A70FA/64FB7E1CE3A711E6A5B20178C4F9AE02/NjlSt_QXggYJMArokUgSGEuPw9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:e2:0c:6f:35:68:27:67:c8:a3:4f:37:1b:21:57:10:ee:2a: e5:ed:a5:4b:5e:aa:d3:7f:cf:9a:70:a8:44:3b:fe:93:b2:67: 37:00:82:dd:ca:7d:7f:95:2b:7a:37:1c:40:bb:e1:03:6f:fd: cb:f9:85:16:e9:29:c6:f5:9d:8b:60:26:ff:b3:32:a9:fa:d4: 4e:db:06:00:ca:92:be:d5:2b:c4:fb:c3:60:7d:6f:b3:30:b8: 8c:70:c8:2e:f5:9f:27:84:b3:d3:2f:17:d9:43:d8:2b:c9:96: ea:e9:fc:44:10:3e:98:ae:90:dc:ff:11:1e:bc:ab:a9:98:f1: 2b:4d:4c:a8:73:23:3a:96:8b:c8:96:dc:b0:d4:82:7c:e8:0a: 1d:a5:4f:f6:4d:d3:3c:25:69:81:16:98:0c:cc:a5:87:02:3f: 18:47:e1:a1:32:9d:c3:a4:4c:53:11:cd:4a:4c:52:a1:f8:b9: a8:58:ab:29:2b:6f:5e:39:47:0a:d4:ee:e8:db:03:a0:a2:18: 28:ff:cd:64:a3:a4:2d:fe:75:0b:d8:8f:7a:c1:83:12:02:0f: f7:0d:af:75:b9:f3:37:17:95:ea:73:df:cf:80:bc:4b:ad:e3: c3:85:c2:af:54:56:0f:bb:f9:ce:8a:a8:f2:4f:33:bb:8f:c9: 4a:f9:22:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcwRkExMTAvBgNVBAUTKDM2Mzk1MkI3RjQxNzgyMDYwOTMwMEFFODkxNDgxMjE4 NEI4RkMzREMwHhcNMjQwNTE4MTYzNzUzWhcNMjQwNTI1MTYzNzUzWjAYMRYwFAYD VQQDEw02NjQ4ZDk2MS1mYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40amvXipciokMKECDaAhAUxtOSdsQ3f924Sx/gxyO2YjiBJWBF1oY8aDiHgE AnHVLUQ59c1kJO7CLYejKt+GepjVRQhp3nIkYnE0rDv1cpgcEcU+u8cWodYARcil /zOiRoVuR8S2aLmjWmHXflzzwuAbcYrkHDMXXcHy1jGa6xdYno4aEp3R8FFNiyev mfkmVIPKTmVXFqo/sqDHfw6G/NP7nMIK2TEXH6qmKkluxqDNGZjQtRxptfXi9To4 yFc7yNNd0/NODunUe+H4Wy61tZtmrT6VQ/4MKHORL1GvbxZ50O58t7EC1Bcq8gUI siT5k261St7O6fs+hiqyF5wEoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEO0FWq1 fdWcJJKJGbD3OqSzLn7zMB8GA1UdIwQYMBaAFDY5Urf0F4IGCTAK6JFIEhhLj8Pc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzBGQS82NEZCN0UxQ0Uz QTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdnWUpNQXJva1VnU0dFdVB3 OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05qbFN0X1FYZ2dZSk1Bcm9rVWdTR0V1UHc5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzBGQS82NEZCN0UxQ0UzQTcxMUU2QTVCMjAxNzhDNEY5QUUwMi9OamxTdF9RWGdn WUpNQXJva1VnU0dFdVB3OXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS4gxvNWgnZ8ijTzcbIVcQ7irl7aVLXqrTf8+acKhEO/6Tsmc3AILd yn1/lSt6NxxAu+EDb/3L+YUW6SnG9Z2LYCb/szKp+tRO2wYAypK+1SvE+8NgfW+z MLiMcMgu9Z8nhLPTLxfZQ9gryZbq6fxEED6YrpDc/xEevKupmPErTUyocyM6lovI ltyw1IJ86AodpU/2TdM8JWmBFpgMzKWHAj8YR+GhMp3DpExTEc1KTFKh+LmoWKsp K29eOUcK1O7o2wOgohgo/81ko6Qt/nUL2I96wYMSAg/3Da91ufM3F5Xqc9/PgLxL rePDhcKvVFYPu/nOiqjyTzO7j8lK+SLx -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org