$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json) Hash identifier: fc075JDrwGYFtGELA1RbBJ+8Lq77ebGc0D+Tw92zJIE= Subject key identifier: 9E:65:16:4B:D2:03:79:3B:AC:6B:1F:B5:88:81:CA:D2:7D:A6:99:63 Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft Manifest number: 18C1 Signing time: Sat 18 May 2024 17:38:59 +0000 Manifest this update: Sat 18 May 2024 17:38:58 +0000 Manifest next update: Sat 25 May 2024 17:38:58 +0000 Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: /g2PFI1og06fiocdtJnL2/fQ0n2F4eTSu/lcvII0w2k=) 2: FFFE92D29CE611EE883A672FC4F9AE02.roa (hash: Kf1M3R61MFcIHrcxRj+dAedpIik9nmlYZYIYC6Z+R54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Validity Not Before: May 18 17:38:58 2024 GMT Not After : May 25 17:38:58 2024 GMT Subject: CN=6648e7b2-0941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:9c:99:e2:9f:ea:d7:bc:d9:f8:01:4e:98: d9:76:fb:9c:15:f6:48:e6:e7:04:f6:a4:c6:0d:02: 1c:53:52:71:93:63:9b:f5:75:2e:23:5b:9a:17:7b: 2f:b4:e9:cf:43:1a:15:3f:35:b1:cf:d6:5b:5d:93: ec:7e:99:cf:1e:93:c0:bf:09:39:5f:bc:00:ef:7e: 08:bb:4d:d5:c2:eb:0a:e2:de:ed:aa:92:8b:93:6b: 2c:da:7f:0d:9e:b1:1f:8e:95:a6:d0:a4:e2:d4:d1: 56:5e:95:6b:22:f6:ff:c1:41:45:3b:aa:d0:91:31: a4:7b:5e:5b:93:36:65:69:95:d8:4d:09:a6:bd:5c: f0:21:d2:1f:96:e0:68:a2:49:77:e2:26:dc:6e:ae: 50:a6:d1:36:2f:a7:6b:fd:0a:0d:35:fa:0f:d2:0f: be:bc:dc:5d:ea:ad:9c:2b:a6:df:b0:33:95:55:a4: a1:fb:db:a7:9c:4b:ed:93:85:6f:fa:65:6e:02:9c: fd:e0:f9:d1:17:5c:63:bb:6e:71:11:85:da:fa:74: fa:33:1b:02:49:09:00:f5:86:c2:6e:89:29:4f:b3: 71:29:f4:6f:80:74:1d:04:cb:74:30:94:be:ad:5f: 72:d8:59:f4:99:0a:c0:25:a7:27:38:3a:59:25:78: fc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:65:16:4B:D2:03:79:3B:AC:6B:1F:B5:88:81:CA:D2:7D:A6:99:63 X509v3 Authority Key Identifier: keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:b3:5c:b4:d8:4d:44:17:9b:ad:76:a1:e4:04:24:2c:5e:23: ff:ee:da:67:87:c8:fd:7b:b5:eb:f5:d4:b5:be:26:a0:93:16: 9c:2c:0c:88:d2:7e:9c:23:38:b6:d6:71:df:95:18:8e:12:ab: a8:0a:16:0e:6e:89:8e:45:66:77:46:3b:e9:54:05:d7:d5:eb: 95:d5:ce:4d:88:94:b8:75:6d:04:f6:d7:a9:d3:05:9d:b4:b5: ce:86:ae:40:73:89:db:54:11:44:af:a6:28:5f:55:50:30:e3: a8:30:38:80:f7:59:90:19:c3:e3:3c:cc:f5:fa:de:e0:65:8e: 3c:b6:3c:6f:20:76:1c:1c:c5:98:96:ff:26:cb:b3:d3:77:81: ba:e5:0f:88:95:08:cd:83:89:b2:4c:f6:01:b1:69:f2:32:53: 2a:9c:28:61:d5:0c:c7:af:54:d6:3e:71:58:aa:68:a6:3e:34: d1:7c:d9:85:a1:94:e6:2c:ea:01:7e:e2:3d:63:51:6c:61:e0: e0:27:87:4b:2b:6f:4b:3b:c2:4b:5c:12:7b:43:53:37:6a:49: f0:20:dd:17:c6:0f:8c:ed:d9:3a:ca:62:b1:d5:28:24:df:27: 1f:ce:a2:95:fd:99:e3:77:60:c2:28:5f:c5:89:15:35:ad:83: da:99:55:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3 NERFRDQ2NkUwHhcNMjQwNTE4MTczODU4WhcNMjQwNTI1MTczODU4WjAYMRYwFAYD VQQDEw02NjQ4ZTdiMi0wOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q+cmeKf6te82fgBTpjZdvucFfZI5ucE9qTGDQIcU1Jxk2Ob9XUuI1uaF3sv tOnPQxoVPzWxz9ZbXZPsfpnPHpPAvwk5X7wA734Iu03VwusK4t7tqpKLk2ss2n8N nrEfjpWm0KTi1NFWXpVrIvb/wUFFO6rQkTGke15bkzZlaZXYTQmmvVzwIdIfluBo okl34ibcbq5QptE2L6dr/QoNNfoP0g++vNxd6q2cK6bfsDOVVaSh+9unnEvtk4Vv +mVuApz94PnRF1xju25xEYXa+nT6MxsCSQkA9YbCbokpT7NxKfRvgHQdBMt0MJS+ rV9y2Fn0mQrAJacnODpZJXj8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5lFkvS A3k7rGsftYiBytJ9ppljMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq UFRub2NDSTRWbFYwM3RSbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8s1y02E1EF5utdqHkBCQsXiP/7tpnh8j9e7Xr9dS1viagkxacLAyI 0n6cIzi21nHflRiOEquoChYObomORWZ3RjvpVAXX1euV1c5NiJS4dW0E9tep0wWd tLXOhq5Ac4nbVBFEr6YoX1VQMOOoMDiA91mQGcPjPMz1+t7gZY48tjxvIHYcHMWY lv8my7PTd4G65Q+IlQjNg4myTPYBsWnyMlMqnChh1QzHr1TWPnFYqmimPjTRfNmF oZTmLOoBfuI9Y1FsYeDgJ4dLK29LO8JLXBJ7Q1M3aknwIN0Xxg+M7dk6ymKx1Sgk 3ycfzqKV/Znjd2DCKF/FiRU1rYPamVWR -----END CERTIFICATE-----Generated at Sat May 18 18:21:39 2024 by rpki-client on console-ams.rpki-client.org