$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft File: NFMkWvnnaQX2mpDxzs2F6og_6hY.mft (raw, json) Hash identifier: Rfz9PX8+2qJ1TOSPPSyMEbZQOzUyQk9BAsLVssmCQdA= Subject key identifier: D4:CD:F7:CC:62:BC:92:09:14:42:64:E8:33:9C:47:D7:49:29:0C:3F Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 Certificate issuer: /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft Manifest number: 0683 Signing time: Sat 18 May 2024 23:24:30 +0000 Manifest this update: Sat 18 May 2024 23:24:30 +0000 Manifest next update: Sat 25 May 2024 23:24:30 +0000 Files and hashes: 1: NFMkWvnnaQX2mpDxzs2F6og_6hY.crl (hash: h2gOi3AMlnvk0CcOafg2VeTFWvBmRd+70CkeM0v/YkU=) 2: 0BAA4608297211EB99ECF956C4F9AE02.roa (hash: lB5dS1VV7UZfIhdEdU+bZY5kRh1nb3BBgOSam6DnTbk=) 3: E9D321CEF2F611EE95E10935C4F9AE02.roa (hash: MN1NHzYrto+vfPwzlsmAiHiZZmIEn76ERQvGoLIuaqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16 Validity Not Before: May 18 23:24:30 2024 GMT Not After : May 25 23:24:30 2024 GMT Subject: CN=664938ae-90af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:dd:bf:c5:bf:51:73:1f:33:71:ae:20:c3: b4:cb:fa:52:e6:12:d8:ff:af:8a:73:46:b6:79:b5: 54:f9:a6:05:35:6f:6c:77:c8:14:b6:37:49:9c:04: 10:ab:20:0c:1e:4d:1e:9f:6e:30:61:b1:1e:f7:f9: f9:f6:8d:3d:2d:f4:e5:c8:9b:d9:50:59:9e:a7:eb: 0d:40:fb:39:ec:6f:38:c5:0a:e5:e7:0e:27:6a:32: e0:a5:09:4a:90:62:3a:b9:b7:a2:94:18:c5:0e:d8: a1:18:d1:d7:3d:27:37:5f:7e:8d:51:b1:1f:2e:81: c1:ea:62:3c:01:e9:a2:a7:f2:42:7a:12:d9:46:e9: b3:75:10:af:bf:0a:c2:41:ec:fd:b6:dc:b7:40:35: ca:1c:8d:09:6b:15:07:92:d9:fc:5e:1b:9d:0c:9a: 74:5a:e8:b6:68:31:95:7e:a4:24:f1:56:31:ab:84: 8c:7c:c8:01:01:65:0b:92:8e:df:e1:7b:4c:29:5d: f4:d7:71:00:f3:65:0c:69:4d:86:9f:b1:d6:ce:c7: 30:0d:3f:7e:5e:55:ad:25:9e:c3:8a:61:50:a3:72: 6e:a8:67:ca:61:89:68:40:4b:49:e7:d8:2e:a2:f9: 5f:06:6e:68:d4:ae:69:fb:31:57:99:81:c0:5b:5e: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CD:F7:CC:62:BC:92:09:14:42:64:E8:33:9C:47:D7:49:29:0C:3F X509v3 Authority Key Identifier: keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1d:40:10:47:59:e6:9c:6e:5a:1d:c0:c8:6f:d2:60:22:a0: 13:7e:f1:cb:90:d9:4b:cf:3a:8e:96:f7:15:de:77:0c:fd:ae: 35:95:3a:7f:f2:a0:d0:b4:f0:80:3f:d6:92:57:03:93:53:e0: 62:f0:66:16:d8:90:92:3a:99:25:5f:2f:0b:93:a8:7b:b0:f1: b5:c6:95:25:9b:73:bb:f8:59:98:0b:0e:6a:12:ed:77:b6:35: e3:5a:c4:c3:97:48:26:e0:77:ca:96:90:56:9e:86:54:e0:19: 80:2b:ed:18:2c:9c:0a:c8:07:a8:c0:6f:87:df:4e:dc:10:5f: a5:f4:c8:92:35:e9:25:ff:b6:8d:95:d2:f4:22:17:38:7b:8c: 39:17:aa:5e:04:95:8b:b6:bf:33:0a:5d:f9:57:1d:e4:a4:b4: f7:8b:07:09:19:fb:55:81:be:f6:1e:f6:92:66:e3:c1:df:30: 76:2d:b8:94:1d:06:84:26:fc:87:82:4e:31:a0:e2:7a:2c:0b: f3:63:c0:b4:8b:2e:43:82:74:a0:f2:fe:7e:21:c4:f4:d6:b4: f0:70:a0:0c:b5:53:a7:a4:86:40:f4:2f:bb:fa:b1:d3:78:cb: cb:dd:dc:90:ba:1d:cc:7b:43:59:37:69:1b:0b:ba:26:5a:03: 41:8c:23:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwNjQxMTAvBgNVBAUTKDM0NTMyNDVBRjlFNzY5MDVGNjlBOTBGMUNFQ0Q4NUVB ODgzRkVBMTYwHhcNMjQwNTE4MjMyNDMwWhcNMjQwNTI1MjMyNDMwWjAYMRYwFAYD VQQDEw02NjQ5MzhhZS05MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAbdv8W/UXMfM3GuIMO0y/pS5hLY/6+Kc0a2ebVU+aYFNW9sd8gUtjdJnAQQ qyAMHk0en24wYbEe9/n59o09LfTlyJvZUFmep+sNQPs57G84xQrl5w4najLgpQlK kGI6ubeilBjFDtihGNHXPSc3X36NUbEfLoHB6mI8Aemip/JCehLZRumzdRCvvwrC Qez9tty3QDXKHI0JaxUHktn8XhudDJp0Wui2aDGVfqQk8VYxq4SMfMgBAWULko7f 4XtMKV3013EA82UMaU2Gn7HWzscwDT9+XlWtJZ7DimFQo3JuqGfKYYloQEtJ59gu ovlfBm5o1K5p+zFXmYHAW16DfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTN98xi vJIJFEJk6DOcR9dJKQw/MB8GA1UdIwQYMBaAFDRTJFr552kF9pqQ8c7NheqIP+oW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA2NC81MkZFRjczQTI5 NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFRWDJtcER4enMyRjZvZ182 aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05GTWtXdm5uYVFYMm1wRHh6czJGNm9nXzZoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA2NC81MkZFRjczQTI5NzAxMUVCOTFFOURFNTRDNEY5QUUwMi9ORk1rV3ZubmFR WDJtcER4enMyRjZvZ182aFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAHUAQR1nmnG5aHcDIb9JgIqATfvHLkNlLzzqOlvcV3ncM/a41lTp/ 8qDQtPCAP9aSVwOTU+Bi8GYW2JCSOpklXy8Lk6h7sPG1xpUlm3O7+FmYCw5qEu13 tjXjWsTDl0gm4HfKlpBWnoZU4BmAK+0YLJwKyAeowG+H307cEF+l9MiSNekl/7aN ldL0Ihc4e4w5F6peBJWLtr8zCl35Vx3kpLT3iwcJGftVgb72HvaSZuPB3zB2LbiU HQaEJvyHgk4xoOJ6LAvzY8C0iy5DgnSg8v5+IcT01rTwcKAMtVOnpIZA9C+7+rHT eMvL3dyQuh3Me0NZN2kbC7omWgNBjCO4 -----END CERTIFICATE-----Generated at Sun May 19 00:30:21 2024 by rpki-client on console-ams.rpki-client.org