$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: RYVYWvwSgHAjxfbHO6XYhRq++bAWI6r0PW/S5Le9dlY= Subject key identifier: D1:A3:74:46:60:9D:8D:79:86:73:35:88:20:FB:16:6A:3A:85:78:63 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 083E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 0838 Signing time: Sat 18 May 2024 21:43:36 +0000 Manifest this update: Sat 18 May 2024 21:43:35 +0000 Manifest next update: Sat 25 May 2024 21:43:35 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: n7JAZgdgw9teKes2+uzpaojuowq9Xlv0Tp/Qwqq58tU=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: LJTye2A8+UyEDVtUA1P1h2s5ynNht6/dnZPTBhtQ7ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2110 (0x83e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: May 18 21:43:35 2024 GMT Not After : May 25 21:43:35 2024 GMT Subject: CN=66492108-86f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:85:fd:c7:13:17:69:d1:cc:c7:5a:cf:5f: a9:fa:9b:04:f4:3c:4f:96:61:b2:02:8d:3b:9e:db: 76:dc:32:a9:16:b3:b7:22:d7:16:10:80:ee:6a:0c: 1b:a1:3c:ea:92:16:f0:c0:46:00:9c:24:47:bd:d5: 14:bd:1a:3b:06:0c:8c:af:76:24:71:97:ad:76:56: 54:34:74:21:61:fb:a2:83:b8:1d:aa:19:4f:15:24: f8:c7:3f:e7:e0:15:27:a2:96:f4:a0:12:79:47:4c: 5c:a3:69:b0:9f:1d:d5:79:0b:7f:55:d1:ed:94:ea: 2b:5d:00:d8:d9:77:79:01:03:2f:3b:88:cc:7e:ed: 2f:ee:5b:1d:ae:05:6e:f1:b7:b1:a4:96:40:69:29: 03:62:20:d8:45:b0:cc:dc:a2:39:82:49:ce:de:40: 8b:92:c9:b2:d3:73:28:8b:c8:3f:d7:cd:59:6f:9f: 2c:76:51:5f:01:0c:72:8f:64:54:9c:01:cf:bf:ad: 83:1f:8e:fe:21:d1:2d:4b:40:bc:1e:6c:80:67:53: 0b:2e:d4:a3:65:38:e0:d9:13:37:1a:7b:95:d5:cf: e3:96:9a:b8:a6:73:a8:1c:2f:dd:bc:52:90:c4:54: a5:5b:8a:36:80:a9:67:52:72:64:7e:ad:fc:ea:bf: f1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A3:74:46:60:9D:8D:79:86:73:35:88:20:FB:16:6A:3A:85:78:63 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:36:de:c6:16:2b:ad:7b:81:3e:d6:98:cf:79:b2:0d:5c:c4: 0a:92:15:39:38:3c:d6:28:e5:81:8a:26:d5:bd:26:ee:3c:55: f4:6a:19:ff:90:f8:9d:f5:a8:67:b1:b7:97:3c:e8:ca:24:2d: 55:60:6c:af:b2:78:67:cb:01:8e:cd:9a:1d:ca:29:ab:d9:db: 77:f6:1c:86:33:e2:15:16:e6:72:bb:63:1f:16:e7:c2:c8:c6: 71:6c:2c:90:6c:a2:3e:1c:59:9f:40:8a:9a:a1:58:db:e7:71: d8:0f:cf:00:ca:c4:fa:99:f4:9a:61:60:56:4f:ad:35:2f:95: cf:63:bc:7e:ba:0a:8e:74:a4:54:18:5d:41:e0:b8:d1:69:ab: 56:03:b8:45:65:d7:bd:04:e3:92:60:d0:85:6f:65:1e:72:7d: 49:ab:47:40:2c:56:ce:09:c7:66:3c:46:e2:38:04:c5:a9:d8: 12:cb:8f:14:0a:65:da:11:ee:04:75:cd:8a:5d:7a:00:93:a6: eb:90:b9:22:ba:b4:ca:9a:2d:4d:b6:d9:11:be:23:5f:87:ba: f8:63:0f:09:93:4d:93:89:c3:68:c7:b8:54:b3:ae:2c:18:36: d9:b9:40:a8:a3:78:eb:67:6e:b0:76:4d:23:c7:9e:22:f8:8e: ac:75:74:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjQwNTE4MjE0MzM1WhcNMjQwNTI1MjE0MzM1WjAYMRYwFAYD VQQDEw02NjQ5MjEwOC04NmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WCF/ccTF2nRzMdaz1+p+psE9DxPlmGyAo07ntt23DKpFrO3ItcWEIDuagwb oTzqkhbwwEYAnCRHvdUUvRo7BgyMr3YkcZetdlZUNHQhYfuig7gdqhlPFST4xz/n 4BUnopb0oBJ5R0xco2mwnx3VeQt/VdHtlOorXQDY2Xd5AQMvO4jMfu0v7lsdrgVu 8bexpJZAaSkDYiDYRbDM3KI5gknO3kCLksmy03Moi8g/181Zb58sdlFfAQxyj2RU nAHPv62DH47+IdEtS0C8HmyAZ1MLLtSjZTjg2RM3GnuV1c/jlpq4pnOoHC/dvFKQ xFSlW4o2gKlnUnJkfq386r/xcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGjdEZg nY15hnM1iCD7Fmo6hXhjMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxNt7GFiute4E+1pjPebINXMQKkhU5ODzWKOWBiibVvSbuPFX0ahn/ kPid9ahnsbeXPOjKJC1VYGyvsnhnywGOzZodyimr2dt39hyGM+IVFuZyu2MfFufC yMZxbCyQbKI+HFmfQIqaoVjb53HYD88AysT6mfSaYWBWT601L5XPY7x+ugqOdKRU GF1B4LjRaatWA7hFZde9BOOSYNCFb2Uecn1Jq0dALFbOCcdmPEbiOATFqdgSy48U CmXaEe4Edc2KXXoAk6brkLkiurTKmi1NttkRviNfh7r4Yw8Jk02TicNox7hUs64s GDbZuUCoo3jrZ26wdk0jx54i+I6sdXRg -----END CERTIFICATE-----Generated at Sat May 18 22:28:01 2024 by rpki-client on console-ams.rpki-client.org