$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json) Hash identifier: IYiS6jnDvGN9d5UgRCK+iQCpbYNiW89jA41nW44uBdo= Subject key identifier: E3:47:42:28:C4:72:42:62:A5:BA:48:65:92:5E:A3:35:99:EA:E4:84 Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft Manifest number: 0597 Signing time: Sun 19 May 2024 00:24:06 +0000 Manifest this update: Sun 19 May 2024 00:24:06 +0000 Manifest next update: Sun 26 May 2024 00:24:06 +0000 Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: ArlhzKS7RH4RezvRmH1y5BKVhFK7WQoPPEz64+AFQrA=) 2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: PQJByZBGE3MnE5Wg6g2SxEnErRgCFkemg+ns/ocZaL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Validity Not Before: May 19 00:24:06 2024 GMT Not After : May 26 00:24:06 2024 GMT Subject: CN=664946a6-44f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0f:2e:af:43:73:1e:53:77:d4:38:32:bb:f3: b7:e8:3a:d4:1a:23:a6:88:8e:b3:4c:80:21:ac:40: 04:d8:d9:ad:44:24:c1:db:0f:1a:cc:c8:f7:28:92: 2e:33:a7:37:0e:01:83:f7:85:47:9f:7a:54:ca:1c: 48:dc:12:44:73:e6:6c:a3:e0:36:c9:64:20:9a:d6: 5d:2a:0f:99:87:a1:e1:57:e5:f2:01:5a:1e:d2:46: 8e:a6:c3:07:ca:e4:18:e8:88:32:67:09:9f:25:ac: 14:05:1f:18:1f:83:17:55:7c:34:d5:4c:18:53:11: 73:3c:d1:34:1c:23:81:5b:45:44:87:ae:a4:40:78: b8:2a:9b:6b:76:30:51:76:98:c5:3f:b9:94:71:4a: 06:06:d1:22:75:29:53:f8:35:d9:08:a4:2f:e8:a5: 63:f8:a7:cb:66:eb:fe:09:82:46:35:8d:48:7a:54: 8b:a8:18:f9:2c:9d:8f:11:25:f4:f2:d1:4d:8c:0b: 3a:73:ed:83:f3:8a:37:f5:d0:c8:08:ce:28:64:a3: e1:bc:30:39:29:83:e9:a7:ef:34:f5:34:ee:b9:85: 5e:49:ff:36:3d:47:e0:cf:32:bf:f3:e9:7c:bc:83: 20:43:d3:cf:11:a9:60:37:05:82:3d:b4:3e:4d:76: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:47:42:28:C4:72:42:62:A5:BA:48:65:92:5E:A3:35:99:EA:E4:84 X509v3 Authority Key Identifier: keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b4:77:e3:af:fd:e8:f2:1d:16:e7:4b:7e:cf:e0:a6:46:e0: 66:ad:ba:47:e7:2b:72:e4:59:f0:9d:55:d2:6a:d4:6b:ab:99: b2:c7:c6:9c:fe:5f:c9:eb:d5:6e:66:57:4a:0c:95:e3:f9:b8: 85:c8:b6:4b:94:8b:38:58:52:6e:1d:bc:05:49:65:5e:f8:e6: 67:12:7a:51:5a:e3:22:2e:dc:1b:4f:4b:af:c1:2e:21:48:78: d9:50:50:f1:a0:58:c1:ba:cc:8a:c7:7f:3c:da:92:a3:26:b4: 78:ca:9d:77:2a:a7:38:7f:7c:63:8f:83:8c:55:82:83:51:6f: fe:27:b8:ca:3c:8f:60:47:f8:2d:a9:fd:fa:83:2c:56:ce:af: 05:fd:48:8f:e7:49:f3:b5:08:be:f0:1b:9f:35:e7:20:1a:e6: ea:9b:32:33:64:a1:fc:44:6a:75:e2:8c:b4:dd:88:ca:81:df: cf:c5:60:3e:06:f5:04:31:13:a7:e0:7d:65:83:2d:7f:76:d0: c7:14:2a:5c:8a:0e:66:8a:b5:62:eb:28:2f:d9:e7:44:3f:3b: 54:0b:80:12:ab:d4:03:84:4b:09:18:8f:87:aa:04:f1:2a:93: da:4d:d2:7a:a2:a1:46:15:d3:3b:74:6c:41:51:86:85:ec:91: cd:af:9a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC QkZDMUE3M0IwHhcNMjQwNTE5MDAyNDA2WhcNMjQwNTI2MDAyNDA2WjAYMRYwFAYD VQQDEw02NjQ5NDZhNi00NGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7A8ur0NzHlN31Dgyu/O36DrUGiOmiI6zTIAhrEAE2NmtRCTB2w8azMj3KJIu M6c3DgGD94VHn3pUyhxI3BJEc+Zso+A2yWQgmtZdKg+Zh6HhV+XyAVoe0kaOpsMH yuQY6IgyZwmfJawUBR8YH4MXVXw01UwYUxFzPNE0HCOBW0VEh66kQHi4KptrdjBR dpjFP7mUcUoGBtEidSlT+DXZCKQv6KVj+KfLZuv+CYJGNY1IelSLqBj5LJ2PESX0 8tFNjAs6c+2D84o39dDICM4oZKPhvDA5KYPpp+809TTuuYVeSf82PUfgzzK/8+l8 vIMgQ9PPEalgNwWCPbQ+TXYFwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONHQijE ckJipbpIZZJeozWZ6uSEMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1 MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFk RUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAatHfjr/3o8h0W50t+z+CmRuBmrbpH5yty5FnwnVXSatRrq5myx8ac /l/J69VuZldKDJXj+biFyLZLlIs4WFJuHbwFSWVe+OZnEnpRWuMiLtwbT0uvwS4h SHjZUFDxoFjBusyKx3882pKjJrR4yp13Kqc4f3xjj4OMVYKDUW/+J7jKPI9gR/gt qf36gyxWzq8F/UiP50nztQi+8BufNecgGubqmzIzZKH8RGp14oy03YjKgd/PxWA+ BvUEMROn4H1lgy1/dtDHFCpcig5mirVi6ygv2edEPztUC4ASq9QDhEsJGI+HqgTx KpPaTdJ6oqFGFdM7dGxBUYaF7JHNr5qa -----END CERTIFICATE-----Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org