$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft File: NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft (raw, json) Hash identifier: 90KDaqukK/mLOkU8oLcvpqRLhJm/X2ebHJeLejdB4lA= Subject key identifier: E9:12:1B:30:6C:E5:BF:74:AB:FC:E2:81:5E:54:10:97:65:45:4B:83 Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft Manifest number: 010C Signing time: Sun 19 May 2024 05:28:55 +0000 Manifest this update: Sun 19 May 2024 05:28:54 +0000 Manifest next update: Sun 26 May 2024 05:28:54 +0000 Files and hashes: 1: NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl (hash: yIgxDYbQ4EIx4Mro+8FK0902vYauETvE9yi+sQbSLkU=) 2: AC270A727D0711ED8181DA7FC4F9AE02.roa (hash: TV2ETZpSfJsFD1ONe5ZtFObX2m18pq7S4p/BI/BJVc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Validity Not Before: May 19 05:28:54 2024 GMT Not After : May 26 05:28:54 2024 GMT Subject: CN=66498e17-de34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8f:73:b8:f3:44:f9:11:d1:26:b9:26:0f:3e: 28:41:ba:6b:e0:cd:7b:6c:b6:eb:b8:9d:17:b4:19: a7:14:98:b3:5f:9a:60:6c:4d:00:8e:80:48:63:fb: 49:bd:72:67:67:36:e6:9b:ef:db:3f:a1:48:19:60: ba:89:93:7d:a4:00:16:13:5d:60:23:18:91:ca:6b: 10:66:83:29:9b:46:91:53:de:43:08:89:ce:23:59: 61:3b:b6:db:05:d2:19:fb:3e:95:2f:61:a8:5d:6c: 4a:fb:bf:90:f4:c3:79:6e:1a:84:b4:16:9c:14:f3: 0d:e0:77:cd:c0:6e:eb:56:46:20:d5:28:98:f1:d8: 99:c4:81:3d:b9:b6:80:ae:16:8c:b8:f3:48:3d:fb: 74:04:2f:e9:e0:c6:28:5a:f6:60:12:51:23:19:44: ef:40:18:9e:b5:43:27:4a:4d:06:96:2b:4d:1f:6c: 67:b0:bb:c0:66:21:93:0f:05:77:e6:d0:7c:e8:cf: 4f:8d:f0:54:93:13:a1:a5:94:ef:32:9b:00:82:03: 7d:4c:63:97:f6:e1:7c:88:54:87:f1:ac:4e:06:28: fe:29:5c:aa:db:8f:36:1d:b2:87:52:ae:f5:44:39: d5:7f:c7:6b:29:d7:6d:c3:ae:43:88:b3:b0:c5:81: 82:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:12:1B:30:6C:E5:BF:74:AB:FC:E2:81:5E:54:10:97:65:45:4B:83 X509v3 Authority Key Identifier: keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:6b:d9:77:21:46:bf:84:4b:86:81:df:c6:f4:76:3a:92:2b: 22:21:ef:2b:6e:1e:f0:7d:4a:d3:43:fe:bb:2d:aa:1b:4b:c2: d8:c4:7f:a9:98:10:38:69:ca:83:2d:75:2f:c0:f4:fc:a0:54: 53:c6:98:73:db:c6:09:2a:e9:7c:bc:2e:00:c4:78:fa:a3:10: c7:ad:f2:ca:8a:32:8c:0e:42:a6:1a:0b:5b:4d:63:26:d1:8d: cb:88:47:04:07:ce:0e:74:35:72:74:f8:fe:e0:fc:a5:b4:8a: a0:db:12:7d:94:31:88:18:4b:8e:45:3f:ab:98:bb:e8:6e:d4: 1b:08:0d:4f:55:41:ba:b7:d0:46:a0:21:dd:9b:b1:f6:39:04: 17:52:40:eb:56:c9:df:b5:57:66:18:99:2e:bc:26:bb:c8:98: f7:23:02:da:07:00:f2:1b:d8:ea:a1:21:76:26:12:c0:4e:93: da:23:4b:c5:c7:fe:02:19:96:f7:c5:90:fe:7c:d7:16:a2:d7: 43:31:ef:bf:8f:47:ff:bf:ad:78:4b:19:a0:68:36:f5:32:a3: 1c:31:84:3c:63:1f:9d:28:6b:a6:64:c3:9f:94:5c:f4:25:7e: 10:89:45:bc:e8:dc:59:1d:eb:7b:67:3b:bf:b4:e2:93:e5:1a: 5c:78:45:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0 RjQ3OUIwQ0QwHhcNMjQwNTE5MDUyODU0WhcNMjQwNTI2MDUyODU0WjAYMRYwFAYD VQQDEw02NjQ5OGUxNy1kZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Y9zuPNE+RHRJrkmDz4oQbpr4M17bLbruJ0XtBmnFJizX5pgbE0AjoBIY/tJ vXJnZzbmm+/bP6FIGWC6iZN9pAAWE11gIxiRymsQZoMpm0aRU95DCInOI1lhO7bb BdIZ+z6VL2GoXWxK+7+Q9MN5bhqEtBacFPMN4HfNwG7rVkYg1SiY8diZxIE9ubaA rhaMuPNIPft0BC/p4MYoWvZgElEjGUTvQBietUMnSk0GlitNH2xnsLvAZiGTDwV3 5tB86M9PjfBUkxOhpZTvMpsAggN9TGOX9uF8iFSH8axOBij+KVyq2482HbKHUq71 RDnVf8drKddtw65DiLOwxYGCQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkSGzBs 5b90q/zigV5UEJdlRUuDMB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEYzNi8yNDlGNDE0NjdEMDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExY eUhGQzZmNWNmcnhQUjVzTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMa9l3IUa/hEuGgd/G9HY6kisiIe8rbh7wfUrTQ/67LaobS8LYxH+p mBA4acqDLXUvwPT8oFRTxphz28YJKul8vC4AxHj6oxDHrfLKijKMDkKmGgtbTWMm 0Y3LiEcEB84OdDVydPj+4PyltIqg2xJ9lDGIGEuORT+rmLvobtQbCA1PVUG6t9BG oCHdm7H2OQQXUkDrVsnftVdmGJkuvCa7yJj3IwLaBwDyG9jqoSF2JhLATpPaI0vF x/4CGZb3xZD+fNcWotdDMe+/j0f/v614SxmgaDb1MqMcMYQ8Yx+dKGumZMOflFz0 JX4QiUW86NxZHet7Zzu/tOKT5RpceEVc -----END CERTIFICATE-----Generated at Sun May 19 06:14:37 2024 by rpki-client on console-ams.rpki-client.org