$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: 8LepuajvQGx12fHZLPGb3kklzrOLi8ZNaHcHTu0VxfA= Subject key identifier: DB:5A:9A:10:0D:46:59:C3:0E:52:87:94:86:E5:25:75:0F:CA:62:0F Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 0746 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 073C Signing time: Fri 31 May 2024 23:14:14 +0000 Manifest this update: Fri 31 May 2024 23:14:13 +0000 Manifest next update: Fri 07 Jun 2024 23:14:13 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: vCys8mBbkEsdbzo7MV8EEZTWhKOFeE6TCrOsFfA9uoU=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: B/DuXQToKy4NJJ+8lbA6TjX/A2qM6LHM64/A3YRX7ts=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 5FYn5QVSBhm0XZoV+j+o/nzPJ0WO1FJiMFnDtdxaDwM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: May 31 23:14:13 2024 GMT Not After : Jun 7 23:14:13 2024 GMT Subject: CN=665a59c6-ccbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:c0:df:6a:f9:ad:a7:84:24:91:9b:8e:de: 62:e9:71:0e:40:35:64:63:76:7f:9f:48:8a:be:36: e7:20:42:1f:76:01:8e:dd:13:a8:79:99:87:eb:37: 49:59:72:a7:aa:4d:19:61:00:8a:6f:1d:d2:32:ee: fb:01:1c:a7:29:6c:4f:8a:94:5f:88:93:1d:75:2d: 7b:ca:ca:78:12:f9:94:bc:b9:72:f5:d4:58:0d:1a: f5:7f:fe:b7:64:e7:01:6e:64:49:b1:f3:06:52:a4: 26:f1:4e:f2:e9:10:9a:67:9e:59:d6:fc:df:e5:33: d8:76:32:2c:30:53:1d:06:df:fa:ba:0a:e2:6f:05: f4:5e:c0:53:d7:38:a5:69:d6:41:63:e0:96:ff:64: 81:a6:f9:67:42:4b:d9:db:e9:eb:b7:bf:8c:21:02: b0:18:36:e5:19:9b:8d:78:95:39:3a:31:7f:25:47: 21:ac:05:2b:6f:e9:4f:4f:ad:6d:ed:0d:87:c9:3c: b8:6a:a4:84:0b:b9:c9:a9:33:5d:a1:de:c4:bc:90: 4c:27:60:87:76:a5:07:7f:c2:6f:3d:b5:2d:e9:53: 06:2b:1e:c3:a6:6e:a8:29:00:b8:8b:9e:4f:f5:d9: ea:21:c4:e6:35:65:10:9c:c5:58:85:a1:c9:41:5b: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5A:9A:10:0D:46:59:C3:0E:52:87:94:86:E5:25:75:0F:CA:62:0F X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4e:a4:76:ac:ac:3a:7f:56:16:d9:69:04:51:34:a0:08:61: 8b:01:bb:08:25:e4:ce:a5:5a:91:88:f8:6b:e6:7c:de:bd:c9: 9b:88:21:e9:4a:95:12:de:b7:1d:de:0e:38:93:45:a7:c7:cb: fe:dc:c9:72:22:88:06:20:21:e5:6a:72:86:72:66:8e:df:c0: 0b:ca:ca:0e:2d:00:55:20:a8:2a:16:08:05:a3:ee:f1:3d:95: a8:9f:16:d3:eb:db:d1:db:e6:d8:1e:5e:b4:45:d8:f0:9b:3d: f6:d3:9c:4c:0d:02:14:67:78:06:6f:74:9e:55:78:a6:49:5a: f7:f4:0f:51:8b:61:8b:38:e0:67:f0:34:78:23:b7:23:d1:90: 4e:92:b8:a6:9b:3d:24:2a:3f:15:1b:be:8e:8a:15:74:08:f5: 62:2d:f9:64:0d:e6:d9:93:58:11:28:0e:21:0f:19:97:b4:16: 50:8e:9a:9a:96:c0:79:3a:f5:ef:1a:a1:e4:a1:b2:ea:33:91: 7e:4e:ac:a6:7d:f3:3b:ba:d0:20:54:54:c5:c5:59:2b:21:63: c2:5d:c5:84:ae:c4:b8:3a:6f:fa:71:b2:b1:09:20:d2:1a:af: 5d:29:ca:21:e3:15:06:aa:dc:b2:7f:8f:89:3e:bb:e1:76:46: 97:ca:ab:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjQwNTMxMjMxNDEzWhcNMjQwNjA3MjMxNDEzWjAYMRYwFAYD VQQDEw02NjVhNTljNi1jY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ijA32r5raeEJJGbjt5i6XEOQDVkY3Z/n0iKvjbnIEIfdgGO3ROoeZmH6zdJ WXKnqk0ZYQCKbx3SMu77ARynKWxPipRfiJMddS17ysp4EvmUvLly9dRYDRr1f/63 ZOcBbmRJsfMGUqQm8U7y6RCaZ55Z1vzf5TPYdjIsMFMdBt/6ugribwX0XsBT1zil adZBY+CW/2SBpvlnQkvZ2+nrt7+MIQKwGDblGZuNeJU5OjF/JUchrAUrb+lPT61t 7Q2HyTy4aqSEC7nJqTNdod7EvJBMJ2CHdqUHf8JvPbUt6VMGKx7Dpm6oKQC4i55P 9dnqIcTmNWUQnMVYhaHJQVuGWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtamhAN RlnDDlKHlIblJXUPymIPMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaTqR2rKw6f1YW2WkEUTSgCGGLAbsIJeTOpVqRiPhr5nzevcmbiCHp SpUS3rcd3g44k0Wnx8v+3MlyIogGICHlanKGcmaO38ALysoOLQBVIKgqFggFo+7x PZWonxbT69vR2+bYHl60Rdjwmz3205xMDQIUZ3gGb3SeVXimSVr39A9Ri2GLOOBn 8DR4I7cj0ZBOkrimmz0kKj8VG76OihV0CPViLflkDebZk1gRKA4hDxmXtBZQjpqa lsB5OvXvGqHkobLqM5F+TqymffM7utAgVFTFxVkrIWPCXcWErsS4Om/6cbKxCSDS Gq9dKcoh4xUGqtyyf4+JPrvhdkaXyqvO -----END CERTIFICATE-----Generated at Fri May 31 23:53:08 2024 by rpki-client on console-fra.rpki-client.org