$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json) Hash identifier: T2VqCluppLJ7uhSU8Y0dCjGAPy9AA6TOHAqafvPMHXU= Subject key identifier: 71:0F:32:F2:4C:92:08:76:85:E3:BB:A0:22:F0:FD:14:89:28:6F:31 Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft Manifest number: 04B9 Signing time: Sun 19 May 2024 01:29:25 +0000 Manifest this update: Sun 19 May 2024 01:29:25 +0000 Manifest next update: Sun 26 May 2024 01:29:25 +0000 Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: XznY5E+4fxHOT617wKbKmE92mNV/Nb67+qKEJLwRtok=) 2: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: EwAHmdHod0iG7T80l+bvci9OeqNSd2WF84YWFte37kw=) 3: A833D0F2E1AE11EC87A73482C4F9AE02.roa (hash: 5yvpOkAEyUI+rH4Qj2bjhfkH4l8Iq24fANOGg+K5HRw=) 4: A7153AC6E1AE11EC87A73482C4F9AE02.roa (hash: CULEAxRk/cOOT8TNNDoPeowBShxc+lwOcJsw6aNB1dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: May 19 01:29:25 2024 GMT Not After : May 26 01:29:25 2024 GMT Subject: CN=664955f5-42be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:17:85:1c:38:8b:d4:69:24:6a:e2:0c:d1:87: 1b:0c:0f:1f:54:c1:c1:f4:f0:b7:ac:13:e9:7d:d1: fe:87:9d:c3:82:4f:3a:c8:f0:77:c5:1e:21:a0:c0: 84:fe:8d:3d:38:87:6d:62:07:ee:5f:d6:68:63:a3: b9:fc:50:ba:14:f3:21:e5:cb:1e:1a:86:03:04:74: 94:63:d6:d5:ab:af:fd:75:7d:68:19:99:26:4b:e7: 26:e9:a2:1b:84:d8:3c:07:7b:82:c9:ae:22:54:f8: 25:a0:a9:a4:65:a6:91:8b:03:cb:54:37:6c:5f:1b: a5:c4:ee:2b:f7:14:2c:cb:5e:41:45:45:7a:b3:34: 66:2c:ee:d5:bf:56:83:8b:c9:e1:32:a8:62:e4:0b: 14:f8:f4:35:ac:17:bc:c9:ae:f7:3b:42:8e:55:ae: 29:20:72:cc:ba:89:7e:41:03:52:84:0b:fd:7c:c9: 0d:2a:0c:4a:91:e2:a1:02:e6:1a:37:7d:42:e1:e5: 3e:f4:49:87:bb:c3:7e:f2:76:9d:17:98:4c:87:d1: 6f:23:86:b9:e4:05:cf:d7:69:72:47:18:ca:a5:46: aa:3b:1a:7a:ed:4e:1e:a9:15:0e:83:17:cf:ee:1b: 35:42:6e:35:50:31:21:14:e0:5b:18:7f:13:a4:92: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0F:32:F2:4C:92:08:76:85:E3:BB:A0:22:F0:FD:14:89:28:6F:31 X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b5:b4:21:79:0f:e9:73:f6:c7:42:12:3c:ea:d5:3f:d4:90: 58:fb:cd:95:a3:66:d6:0d:1d:80:e2:6a:d0:fe:74:ab:37:7e: 0f:e5:40:2d:47:83:c9:db:51:ae:6c:2f:c0:ce:b6:f7:3e:24: 61:6a:b9:81:d1:60:ac:74:a9:e9:d4:6b:5a:58:fa:c4:56:91: d5:d3:4c:81:f6:b5:c5:a0:9d:9d:1a:dd:e9:52:51:f4:56:17: 0e:5a:b5:4c:0a:65:20:a0:18:f8:73:15:be:a7:89:a1:82:62: 5a:97:1f:5c:95:81:fa:fe:1c:2e:97:58:b0:2b:e7:20:04:30: 71:40:7a:a6:c8:bd:af:4b:1a:34:55:5b:40:71:a3:42:34:27: 83:27:65:b8:04:65:e0:c3:55:ce:62:a8:67:14:ff:b9:59:63: d8:37:9c:53:ad:14:1a:9d:4d:12:7c:99:85:ea:df:2a:06:a0: e5:34:8f:9f:0a:76:73:a5:37:97:19:8c:17:c2:46:6b:6d:5f: 55:92:ea:96:bc:7b:42:ba:ff:f2:42:7a:be:55:2a:ae:f1:a1: 66:12:2e:2c:da:dd:6d:f0:54:f1:8e:0a:1a:00:ff:bf:f2:a1: 0c:9e:01:aa:de:24:46:4a:ea:76:cb:81:e6:40:eb:fe:1b:2b: 04:84:76:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjQwNTE5MDEyOTI1WhcNMjQwNTI2MDEyOTI1WjAYMRYwFAYD VQQDEw02NjQ5NTVmNS00MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+BeFHDiL1GkkauIM0YcbDA8fVMHB9PC3rBPpfdH+h53Dgk86yPB3xR4hoMCE /o09OIdtYgfuX9ZoY6O5/FC6FPMh5cseGoYDBHSUY9bVq6/9dX1oGZkmS+cm6aIb hNg8B3uCya4iVPgloKmkZaaRiwPLVDdsXxulxO4r9xQsy15BRUV6szRmLO7Vv1aD i8nhMqhi5AsU+PQ1rBe8ya73O0KOVa4pIHLMuol+QQNShAv9fMkNKgxKkeKhAuYa N31C4eU+9EmHu8N+8nadF5hMh9FvI4a55AXP12lyRxjKpUaqOxp67U4eqRUOgxfP 7hs1Qm41UDEhFOBbGH8TpJKFkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEPMvJM kgh2heO7oCLw/RSJKG8xMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4 MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5tbQheQ/pc/bHQhI86tU/1JBY+82Vo2bWDR2A4mrQ/nSrN34P5UAt R4PJ21GubC/Azrb3PiRharmB0WCsdKnp1GtaWPrEVpHV00yB9rXFoJ2dGt3pUlH0 VhcOWrVMCmUgoBj4cxW+p4mhgmJalx9clYH6/hwul1iwK+cgBDBxQHqmyL2vSxo0 VVtAcaNCNCeDJ2W4BGXgw1XOYqhnFP+5WWPYN5xTrRQanU0SfJmF6t8qBqDlNI+f CnZzpTeXGYwXwkZrbV9VkuqWvHtCuv/yQnq+VSqu8aFmEi4s2t1t8FTxjgoaAP+/ 8qEMngGq3iRGSup2y4HmQOv+GysEhHan -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org