$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json) Hash identifier: etBpiO/u1BOYuZIAFob/QvXIUeL7oGCXfWPqD+E9YO0= Subject key identifier: 8C:12:21:6D:FD:B2:0C:2D:A5:25:CC:01:DB:CA:BE:45:11:C1:B4:90 Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Certificate serial: 097F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft Manifest number: 0FA1 Signing time: Sat 18 May 2024 20:57:19 +0000 Manifest this update: Sat 18 May 2024 20:57:18 +0000 Manifest next update: Sat 25 May 2024 20:57:18 +0000 Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: VmBLk2XRHvUjRQC50LHez75v483Ubl85UFZrxAx03pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Validity Not Before: May 18 20:57:18 2024 GMT Not After : May 25 20:57:18 2024 GMT Subject: CN=6649162f-c232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:d6:8f:ec:f3:34:1d:ac:e0:c6:99:9d:8a: d0:34:0e:6c:94:de:83:0f:94:57:5d:4d:3a:37:85: e0:92:ae:e8:62:47:a1:e0:d0:dd:3c:bb:62:17:45: a0:07:f3:35:2f:ca:53:26:7f:3c:17:fb:26:39:ef: 01:10:e2:4b:bf:0c:8b:3f:61:83:ec:b0:3e:5e:70: 59:7b:32:45:a4:d6:22:79:e9:78:2a:f6:e8:f5:73: be:20:da:b8:26:18:d2:80:0b:00:9b:39:71:59:e6: 15:15:40:e7:e3:70:0b:95:e7:21:15:8d:8f:c3:5c: 84:eb:c4:ab:83:b7:b1:96:9b:5d:64:76:48:b7:d7: a3:c0:04:0d:8d:01:c2:51:08:14:20:4f:bc:73:87: f9:2b:20:3d:07:af:2c:cb:d6:ac:69:8d:49:59:b7: 62:4a:97:55:63:c1:4d:ef:c4:ac:33:13:39:5f:0c: 92:0c:9d:97:63:6e:36:53:e7:f6:c3:03:9a:97:0a: a6:b0:7e:9b:6e:dd:e6:cf:59:98:ae:c7:34:6a:80: 19:28:45:9e:80:c3:fd:9b:77:7e:48:6b:91:f5:68: 62:9c:d7:bc:93:e8:e6:77:b3:9d:7f:0a:48:df:8d: a7:95:8c:db:1d:50:17:5b:fb:eb:94:35:b6:c5:85: 1f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:12:21:6D:FD:B2:0C:2D:A5:25:CC:01:DB:CA:BE:45:11:C1:B4:90 X509v3 Authority Key Identifier: keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6d:c6:78:28:35:c7:41:fe:35:a8:45:b3:ae:8b:a1:50:c6: 49:d2:1f:df:2e:46:b7:e2:f2:01:02:4f:cc:ce:73:cc:0f:53: 5a:ef:b9:83:ca:bd:a7:b7:f4:af:4e:1c:a9:f9:d0:7c:2a:8f: b0:87:66:a4:af:e8:41:62:fe:33:32:c9:c6:6c:f6:b5:81:0a: 14:31:99:96:71:9b:17:35:13:f5:9c:93:07:bd:32:aa:3a:a3: 63:25:1a:91:ac:04:74:8c:cc:58:b6:77:98:99:ac:da:91:31: bb:2e:f7:07:1e:5f:96:d7:82:e1:78:91:8b:9b:29:29:03:cf: b5:e5:ec:82:8b:4a:c1:a5:3f:2f:7d:8e:91:d8:c5:eb:a5:91: 75:cf:d4:55:b6:0f:20:bd:82:67:8e:5b:67:20:1e:60:52:e7: 45:0f:cd:59:79:e6:f6:44:cc:28:d8:80:ac:a9:3a:24:ba:69: df:09:2e:09:1b:0f:b1:4d:14:99:23:49:08:68:07:66:c1:5c: 98:ba:d2:3c:5f:4e:ae:6d:1a:af:09:18:52:64:b8:e8:cb:71: 0a:b3:ce:f1:ef:42:09:04:ee:95:dc:5d:69:82:f4:9b:6d:76: 5c:d6:18:a7:4d:38:34:21:f8:b4:a4:50:56:0d:69:b8:4e:d2: dc:07:ee:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDM0NkRGMEVGNEQ4QkM2M0MzODI0RDZFNDkwMDY3NDYz MjU0N0IwOEEwHhcNMjQwNTE4MjA1NzE4WhcNMjQwNTI1MjA1NzE4WjAYMRYwFAYD VQQDEw02NjQ5MTYyZi1jMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXDWj+zzNB2s4MaZnYrQNA5slN6DD5RXXU06N4Xgkq7oYkeh4NDdPLtiF0Wg B/M1L8pTJn88F/smOe8BEOJLvwyLP2GD7LA+XnBZezJFpNYieel4Kvbo9XO+INq4 JhjSgAsAmzlxWeYVFUDn43ALlechFY2Pw1yE68Srg7exlptdZHZIt9ejwAQNjQHC UQgUIE+8c4f5KyA9B68sy9asaY1JWbdiSpdVY8FN78SsMxM5XwySDJ2XY242U+f2 wwOalwqmsH6bbt3mz1mYrsc0aoAZKEWegMP9m3d+SGuR9WhinNe8k+jmd7OdfwpI 342nlYzbHVAXW/vrlDW2xYUfBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwSIW39 sgwtpSXMAdvKvkURwbSQMB8GA1UdIwQYMBaAFDRt8O9Ni8Y8OCTW5JAGdGMlR7CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhqdzRKTmJra0FaMFl5Vkhz SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05HM3c3MDJMeGp3NEpOYmtrQVowWXlWSHNJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhq dzRKTmJra0FaMFl5VkhzSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHbcZ4KDXHQf41qEWzrouhUMZJ0h/fLka34vIBAk/MznPMD1Na77mD yr2nt/SvThyp+dB8Ko+wh2akr+hBYv4zMsnGbPa1gQoUMZmWcZsXNRP1nJMHvTKq OqNjJRqRrAR0jMxYtneYmazakTG7LvcHHl+W14LheJGLmykpA8+15eyCi0rBpT8v fY6R2MXrpZF1z9RVtg8gvYJnjltnIB5gUudFD81Zeeb2RMwo2ICsqTokumnfCS4J Gw+xTRSZI0kIaAdmwVyYutI8X06ubRqvCRhSZLjoy3EKs87x70IJBO6V3F1pgvSb bXZc1hinTTg0Ifi0pFBWDWm4TtLcB+5O -----END CERTIFICATE-----Generated at Sat May 18 21:31:30 2024 by rpki-client on console-ams.rpki-client.org