$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: aO7IqjMvZ/F9UCfFBjnIN/XJQYWsxr00u5PMQJRINTE= Subject key identifier: 33:05:57:DC:D4:D3:50:69:4C:0E:4C:B0:65:03:27:DB:07:85:50:BA Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2936 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 2930 Signing time: Sat 18 May 2024 14:25:15 +0000 Manifest this update: Sat 18 May 2024 14:25:15 +0000 Manifest next update: Sat 25 May 2024 14:25:15 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: Sq0rLtUlzu/1eo25kqUTHzYn0LRjp3zHR0I8qrS5adA=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: 1Cfdy1pxa+dsaSYkDY6rlZlIF9Xum+DTbSMYUwIZIIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10550 (0x2936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: May 18 14:25:15 2024 GMT Not After : May 25 14:25:15 2024 GMT Subject: CN=6648ba4b-b3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:dd:b3:23:41:22:a8:58:bb:39:43:83:be: 91:58:19:6c:40:b4:3d:b7:2d:c8:47:fb:18:a1:eb: 6f:7e:cb:18:e7:19:5b:ee:a2:20:2b:69:60:0f:b1: 42:8b:c4:c5:c9:53:8e:1e:5f:24:64:d1:5e:88:91: 67:cb:41:0d:59:68:af:9e:37:c5:55:f9:ea:c3:0b: 94:e9:1e:48:e8:4f:c6:89:74:b3:a2:cc:ea:a0:70: 2d:41:0a:92:9a:2c:f3:d8:e2:83:20:b4:2e:f8:17: 17:35:37:a5:cd:5f:e1:ef:13:63:9a:1f:20:21:9b: 27:10:ed:1a:f6:2f:25:b2:94:00:9b:e9:4f:8d:ff: e4:b0:de:cf:5e:4e:4c:04:b4:57:dc:08:09:ad:19: 66:2f:fd:58:1d:ff:cd:52:0b:72:61:86:2e:7d:4f: 32:01:d0:d3:07:1d:d9:84:1c:50:36:6f:40:03:aa: 6e:f6:46:0e:b6:33:93:44:42:39:09:4d:15:8b:58: d7:a3:6c:28:78:a3:24:7d:75:c3:12:97:4d:0f:a7: 54:37:ca:ea:a8:b8:91:66:9f:db:02:6c:df:f4:fd: 64:4b:b8:6d:cc:47:42:28:91:50:60:99:6b:76:db: df:d7:84:29:cc:4d:5f:49:2b:1d:5b:80:29:53:43: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:05:57:DC:D4:D3:50:69:4C:0E:4C:B0:65:03:27:DB:07:85:50:BA X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:94:17:6f:32:52:d0:23:e6:ed:55:bb:45:c5:1a:dd:86:56: ba:b8:b8:be:73:2f:b1:e1:07:0e:e3:e8:e7:57:1b:37:4e:71: 1d:cd:ea:6c:39:66:6d:24:78:d1:6d:b0:fe:20:e3:1a:95:ee: 12:63:70:34:95:7f:c5:68:5b:d6:0b:94:41:94:76:19:55:e5: 68:6d:f8:24:79:48:7a:01:80:0a:9d:69:8e:93:14:e4:55:e6: 61:95:fd:4a:b0:28:1d:b6:2a:25:f9:5b:69:16:4c:ee:4f:db: 64:aa:4b:f2:26:69:15:88:43:09:0b:c1:ba:37:3a:b8:8e:72: 0b:6e:19:8b:2e:b0:90:a3:d4:d8:22:24:82:6f:37:1a:90:72: 26:09:96:74:25:46:96:29:9d:46:3c:b3:72:fa:d8:96:df:6a: 2f:4e:c0:d0:1b:ad:63:e7:b6:3b:ae:56:5d:fc:90:aa:06:47: 8e:a2:73:8f:b9:e3:00:90:e8:16:ec:e7:39:64:21:d7:8b:15: aa:f3:af:60:a6:ac:e6:ed:ed:67:d5:74:d2:e2:18:8a:e6:2d: 65:ae:f7:71:78:35:ec:10:bf:bf:1f:74:71:58:1f:c0:06:4a: ed:7b:55:68:ce:5c:c7:bc:6f:ed:13:82:c1:17:e2:1e:87:5f: ee:30:61:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjQwNTE4MTQyNTE1WhcNMjQwNTI1MTQyNTE1WjAYMRYwFAYD VQQDEw02NjQ4YmE0Yi1iM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmndsyNBIqhYuzlDg76RWBlsQLQ9ty3IR/sYoetvfssY5xlb7qIgK2lgD7FC i8TFyVOOHl8kZNFeiJFny0ENWWivnjfFVfnqwwuU6R5I6E/GiXSzoszqoHAtQQqS mizz2OKDILQu+BcXNTelzV/h7xNjmh8gIZsnEO0a9i8lspQAm+lPjf/ksN7PXk5M BLRX3AgJrRlmL/1YHf/NUgtyYYYufU8yAdDTBx3ZhBxQNm9AA6pu9kYOtjOTREI5 CU0Vi1jXo2woeKMkfXXDEpdND6dUN8rqqLiRZp/bAmzf9P1kS7htzEdCKJFQYJlr dtvf14QpzE1fSSsdW4ApU0PA2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMFV9zU 01BpTA5MsGUDJ9sHhVC6MB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAplBdvMlLQI+btVbtFxRrdhla6uLi+cy+x4QcO4+jnVxs3TnEdzeps OWZtJHjRbbD+IOMale4SY3A0lX/FaFvWC5RBlHYZVeVobfgkeUh6AYAKnWmOkxTk VeZhlf1KsCgdtiol+VtpFkzuT9tkqkvyJmkViEMJC8G6Nzq4jnILbhmLLrCQo9TY IiSCbzcakHImCZZ0JUaWKZ1GPLNy+tiW32ovTsDQG61j57Y7rlZd/JCqBkeOonOP ueMAkOgW7Oc5ZCHXixWq869gpqzm7e1n1XTS4hiK5i1lrvdxeDXsEL+/H3RxWB/A Bkrte1VozlzHvG/tE4LBF+Ieh1/uMGH6 -----END CERTIFICATE-----Generated at Sat May 18 15:58:27 2024 by rpki-client on console-ams.rpki-client.org