$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json) Hash identifier: uXi322c18jvALswUpYV2zYTz9TpdxPJoMQB0whaNeXU= Subject key identifier: 5E:0D:CF:C2:15:EA:38:41:02:2D:1A:E2:06:4C:36:21:47:90:AF:7E Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Certificate serial: 1D5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft Manifest number: 1D26 Signing time: Sat 18 May 2024 16:31:19 +0000 Manifest this update: Sat 18 May 2024 16:31:18 +0000 Manifest next update: Sat 25 May 2024 16:31:18 +0000 Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: bLiB0u2k+Js/gr9k1vpSQxHWCCN9bZKkCOQWNVllh6Y=) 2: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: T96ePwaxRSdFBmc3Y6k58ry+6iGVCBzjCHazC1p/+dY=) 3: 0CE1846A9F5111EA9DED6709C4F9AE02.roa (hash: rOcch6/zR8ixwQuQFoCNSKb2m0W69HbtR3S/DwLEdGk=) 4: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: PZql/d1vwq6a5me1tWglT8kuvqcERq7TMmDMG3CMCJE=) 5: 5381FAB49F4F11EAA7970484C4F9AE02.roa (hash: iPKFtoNgdXrr/TwYdCIYZDEUUCFtCaHoMnbiNfQRNEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7515 (0x1d5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Validity Not Before: May 18 16:31:18 2024 GMT Not After : May 25 16:31:18 2024 GMT Subject: CN=6648d7d7-807b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:79:0e:8b:32:10:ad:75:d8:47:b5:c7:c1:69: 4a:c1:71:32:6d:ea:91:77:7f:63:53:af:f0:95:47: fe:64:dd:26:cd:72:92:12:80:c3:9e:81:a3:48:c2: 62:06:72:dd:86:dd:de:fe:92:08:1a:54:66:88:96: dd:6d:d1:3d:cb:e4:7f:83:a0:96:fb:e2:47:31:5e: 43:a2:5b:cb:a3:2f:c8:dd:12:69:f8:14:04:18:08: 10:3f:9e:c9:eb:1f:68:a9:4a:74:f7:d7:7e:cc:da: 0a:75:a6:83:3e:74:8e:b9:2d:b3:c2:47:d7:a5:f3: 9e:4e:da:86:74:62:87:a7:56:6b:67:6e:57:d1:17: 4e:ee:02:61:0d:fd:99:f4:eb:bd:b6:70:a6:da:e0: 5e:47:a4:9c:c7:b1:d3:38:04:d0:82:b5:cc:40:5d: 57:c3:92:1d:c0:c5:de:5c:dd:28:14:31:4b:8e:b4: 94:17:f9:69:ae:e5:20:22:08:a4:5d:24:ab:11:ca: 92:b9:15:f2:0a:ca:19:71:01:8b:bc:69:2b:0d:17: c2:32:be:92:ca:c8:fb:46:73:c6:f2:a5:4e:19:34: 14:cf:f4:ca:98:9b:98:2b:48:a9:ab:14:5a:d5:13: 50:b6:4a:45:0f:b4:91:63:ae:b8:4b:66:32:2b:43: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0D:CF:C2:15:EA:38:41:02:2D:1A:E2:06:4C:36:21:47:90:AF:7E X509v3 Authority Key Identifier: keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:38:46:1d:dc:e9:27:9b:70:a3:2a:16:d1:72:7d:15:b3:0e: 12:f2:1c:62:e4:95:5c:51:b9:c2:2d:4e:1f:4d:20:69:f2:0c: 78:72:ff:ef:ef:d5:e8:57:4e:47:67:3c:93:b9:b7:35:d7:dc: eb:e4:fa:42:15:b6:e1:82:61:b1:bc:4e:1f:ee:ad:d3:99:ca: 17:fc:32:ac:98:40:f8:52:1f:33:2f:7b:29:82:d5:f6:40:45: 49:34:ed:66:35:37:15:a3:af:bd:e8:cd:86:0a:18:37:d9:cf: 78:d5:49:30:fc:77:29:e8:02:e8:aa:bc:36:32:ba:9d:50:1c: b9:70:58:3d:fb:75:cf:b9:25:72:f5:8d:3d:e1:f1:56:51:cd: dc:46:db:a8:e8:b9:e7:36:5a:62:5c:4c:72:f7:60:32:0e:30: 93:91:2f:54:36:3c:74:93:23:88:bf:bc:dd:c6:da:f2:95:64: 8a:a2:fa:a2:89:e6:65:ac:4b:b5:bf:33:26:97:52:ee:28:9e: fb:30:22:fc:0d:f5:32:7c:8b:6d:fa:fe:67:02:f7:aa:e1:55: fa:92:ef:86:8e:91:bb:9a:d6:76:ea:25:71:ce:7f:3c:bc:3b: dc:8f:5d:8b:db:b6:c9:32:de:b0:83:dc:22:54:cf:7a:fb:89: fd:fa:3a:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz NUIwMDdENTQwHhcNMjQwNTE4MTYzMTE4WhcNMjQwNTI1MTYzMTE4WjAYMRYwFAYD VQQDEw02NjQ4ZDdkNy04MDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HkOizIQrXXYR7XHwWlKwXEybeqRd39jU6/wlUf+ZN0mzXKSEoDDnoGjSMJi BnLdht3e/pIIGlRmiJbdbdE9y+R/g6CW++JHMV5DolvLoy/I3RJp+BQEGAgQP57J 6x9oqUp099d+zNoKdaaDPnSOuS2zwkfXpfOeTtqGdGKHp1ZrZ25X0RdO7gJhDf2Z 9Ou9tnCm2uBeR6Scx7HTOATQgrXMQF1Xw5IdwMXeXN0oFDFLjrSUF/lpruUgIgik XSSrEcqSuRXyCsoZcQGLvGkrDRfCMr6Sysj7RnPG8qVOGTQUz/TKmJuYK0ipqxRa 1RNQtkpFD7SRY664S2YyK0NTGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4Nz8IV 6jhBAi0a4gZMNiFHkK9+MB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0 MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ2QS8wMDUwMDE2NDk0MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxr eGhvejVCMWlROVUxc0FmVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABOEYd3Oknm3CjKhbRcn0Vsw4S8hxi5JVcUbnCLU4fTSBp8gx4cv/v 79XoV05HZzyTubc119zr5PpCFbbhgmGxvE4f7q3TmcoX/DKsmED4Uh8zL3spgtX2 QEVJNO1mNTcVo6+96M2GChg32c941Ukw/Hcp6ALoqrw2MrqdUBy5cFg9+3XPuSVy 9Y094fFWUc3cRtuo6LnnNlpiXExy92AyDjCTkS9UNjx0kyOIv7zdxtrylWSKovqi ieZlrEu1vzMml1LuKJ77MCL8DfUyfItt+v5nAveq4VX6ku+GjpG7mtZ26iVxzn88 vDvcj12L27bJMt6wg9wiVM96+4n9+jrT -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org