$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: WqL4TF8d+IIIchdrCSayupuQQSP8g0vYb4t02p728PI= Subject key identifier: 99:AA:9A:0A:27:13:B0:B4:CF:6E:DF:CB:75:64:01:7E:CC:CE:D1:6E Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 7D Signing time: Sun 19 May 2024 07:16:17 +0000 Manifest this update: Sun 19 May 2024 07:16:17 +0000 Manifest next update: Sun 26 May 2024 07:16:17 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: 0oOr+2FjOwrczMgXbQ1vmOXYkHzR/wDXvg20wgTN5C0=) 2: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: zorl3bhT2t8kjQkDKO0Jc1GFbzSjIhooaYDJGOfO/go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: May 19 07:16:17 2024 GMT Not After : May 26 07:16:17 2024 GMT Subject: CN=6649a741-6174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:9d:d5:87:63:f0:30:1c:cd:36:dd:ec:ee: 62:67:29:17:aa:fe:a6:a6:32:4a:67:21:fb:24:95: 20:78:25:85:6c:57:26:9e:4a:8c:e6:89:c0:44:20: 02:62:61:ff:2e:f1:da:82:98:fe:17:3b:d7:ee:4b: dc:b8:65:46:01:7c:66:bf:24:b3:fd:3e:3f:22:fc: 74:1d:38:8c:7c:c4:0f:4a:eb:19:77:5c:9e:ee:9f: 2b:d1:39:95:46:a1:27:88:0c:21:1f:ef:61:38:3b: e7:f9:1c:91:bb:38:3b:a3:fb:83:37:ed:67:05:38: e9:54:a1:23:e6:b3:88:d4:5c:7f:87:c3:65:7b:02: 8a:e5:1f:e9:fe:6c:cc:e2:be:54:a3:cf:9a:b2:9a: c0:b7:d9:a6:67:f4:cc:d7:ba:81:2a:5c:4f:53:88: b1:ff:00:80:c4:97:9b:f7:d1:b3:33:75:f9:8b:d5: 75:4c:c4:be:b5:14:d9:a2:07:bc:19:b1:50:b0:4d: f5:9b:f8:8e:8c:a7:fe:59:9c:4e:1a:df:1f:9f:ce: a6:e3:b1:97:56:24:0d:6d:21:34:5d:65:1e:ef:76: 08:57:74:2d:d1:f7:18:96:8b:37:cb:81:a0:0c:d2: 18:3d:14:91:98:35:59:62:85:ea:09:fa:82:96:fd: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AA:9A:0A:27:13:B0:B4:CF:6E:DF:CB:75:64:01:7E:CC:CE:D1:6E X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:10:ca:7d:69:a3:b8:de:7e:03:94:a0:78:0b:a7:64:a5:c0: 1c:85:e1:d1:77:2c:43:fb:fb:76:26:cf:75:04:60:db:6c:91: 28:b3:82:88:22:d7:94:24:6f:ab:b0:de:61:22:e2:19:50:c8: 66:b5:8f:4c:71:2c:3a:3a:10:83:75:a0:4e:c1:75:ce:c3:8f: e9:7f:c8:96:ec:7e:80:48:a5:9b:4e:0c:ac:0b:d0:ca:b1:94: b4:40:49:c8:39:53:6e:59:e1:a0:8c:a0:69:98:ed:4a:5c:5a: 36:7b:4d:c9:f5:26:05:4e:aa:51:05:87:16:5c:21:62:fe:e0: d8:59:d2:87:a3:22:fc:ab:e6:29:33:4e:e0:2e:ae:a3:47:f0: 5c:61:ab:83:f7:30:aa:67:b1:23:07:1c:be:d2:24:4f:35:54: 3b:48:07:c0:1e:4d:d6:70:2e:7c:43:52:7c:e0:7a:74:6e:64: 2d:a1:3a:b8:8e:fa:99:ac:ab:32:1e:00:2e:58:1c:73:5a:d5: 27:73:92:ac:a1:5b:79:a6:c3:4b:f0:f1:4a:13:cc:77:50:47: 1b:b8:c7:8f:c7:e2:fe:0a:94:d9:46:f0:32:09:a4:94:21:0e: b6:73:d9:75:b7:e9:43:97:21:f0:45:6d:a9:0f:63:cd:be:e4: ec:21:1b:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkMxQzExMC8GA1UEBRMoMzY0NUNEOTBFM0Y0M0MwMTJEQUIzQkYzOTcyRTg2QkM5 NERERDQ1NDAeFw0yNDA1MTkwNzE2MTdaFw0yNDA1MjYwNzE2MTdaMBgxFjAUBgNV BAMTDTY2NDlhNzQxLTYxNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDREJ3Vh2PwMBzNNt3s7mJnKReq/qamMkpnIfsklSB4JYVsVyaeSozmicBEIAJi Yf8u8dqCmP4XO9fuS9y4ZUYBfGa/JLP9Pj8i/HQdOIx8xA9K6xl3XJ7unyvROZVG oSeIDCEf72E4O+f5HJG7ODuj+4M37WcFOOlUoSPms4jUXH+Hw2V7AorlH+n+bMzi vlSjz5qymsC32aZn9MzXuoEqXE9TiLH/AIDEl5v30bMzdfmL1XVMxL61FNmiB7wZ sVCwTfWb+I6Mp/5ZnE4a3x+fzqbjsZdWJA1tITRdZR7vdghXdC3R9xiWizfLgaAM 0hg9FJGYNVliheoJ+oKW/W8RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmaqaCicT sLTPbt/LdWQBfszO0W4wHwYDVR0jBBgwFoAUNkXNkOP0PAEtqzvzly6GvJTd1FQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQzFDLzNDMTQyQjE2NTdG RTExRUVBQTU1MzA2MEM0RjlBRTAyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFG US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTmtYTmtPUDBQQUV0cXp2emx5Nkd2SlRkMUZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QzFDLzNDMTQyQjE2NTdGRTExRUVBQTU1MzA2MEM0RjlBRTAyL05rWE5rT1AwUEFF dHF6dnpseTZHdkpUZDFGUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA0Qyn1po7jefgOUoHgLp2SlwByF4dF3LEP7+3Ymz3UEYNtskSizgogi 15Qkb6uw3mEi4hlQyGa1j0xxLDo6EIN1oE7Bdc7Dj+l/yJbsfoBIpZtODKwL0Mqx lLRAScg5U25Z4aCMoGmY7UpcWjZ7Tcn1JgVOqlEFhxZcIWL+4NhZ0oejIvyr5ikz TuAurqNH8Fxhq4P3MKpnsSMHHL7SJE81VDtIB8AeTdZwLnxDUnzgenRuZC2hOriO +pmsqzIeAC5YHHNa1SdzkqyhW3mmw0vw8UoTzHdQRxu4x4/H4v4KlNlG8DIJpJQh DrZz2XW36UOXIfBFbakPY82+5OwhGzk= -----END CERTIFICATE-----Generated at Sun May 19 08:25:08 2024 by rpki-client on console-ams.rpki-client.org