$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: JM7ZEDK/0JJAaW2lCq/67Bs1X8nJbL+giLzdCTCoCj4= Subject key identifier: 58:62:44:01:AD:AA:F3:39:C2:80:A9:CE:01:35:17:6E:B2:49:2B:1B Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 83 Signing time: Sat 01 Jun 2024 08:39:40 +0000 Manifest this update: Sat 01 Jun 2024 08:39:40 +0000 Manifest next update: Sat 08 Jun 2024 08:39:40 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: bjwyJWOrNBXkcq3uH8wMQOWqOuKO0hFXxjacnlpW/XU=) 2: 51F4389061F911EE8421531BC4F9AE02.roa (hash: ElcRY+S+6W0DsXuDNCrFH+TYlEEUjp7N4csWW7ZwkFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Jun 1 08:39:40 2024 GMT Not After : Jun 8 08:39:40 2024 GMT Subject: CN=665ade4c-ee8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:62:0e:97:16:f3:e1:88:5b:f1:03:b6:f7: e7:f1:fc:4d:19:6a:59:2c:de:5b:4a:af:e9:70:9f: e2:17:2b:6c:e7:89:5a:41:b2:34:33:99:bb:e5:b4: 76:37:33:de:3b:a3:33:01:23:ab:38:57:a8:d0:07: d1:0f:66:2f:c8:ed:97:ba:a7:9c:0f:e0:36:34:6a: c0:b6:92:36:5b:7f:bb:29:b5:29:8f:1d:37:26:e6: df:28:53:89:e5:97:da:0d:ad:2f:f1:84:c6:07:39: 2b:25:0e:a4:bd:9d:14:4f:77:39:10:51:61:7b:7f: 44:85:a1:a9:ed:09:d3:0b:39:58:72:d9:9b:03:a3: 98:59:36:87:27:ac:55:77:36:57:06:1c:7e:76:6a: 78:d9:aa:55:4f:08:87:16:02:ae:88:66:ba:e9:a3: 4c:2a:33:a8:02:3e:ca:0c:19:d1:8d:5e:3c:50:50: 89:95:b2:1b:cb:06:13:d4:79:16:bb:1d:a0:0d:26: c2:0c:c2:f9:bb:a3:bb:af:fd:7e:01:de:a1:c4:3b: 65:17:d3:9c:6f:30:d7:0e:c4:e0:5d:fa:2a:de:d3: ab:02:9c:0c:ab:f5:30:f3:a8:8c:77:5c:04:a1:1c: fc:34:71:3a:b9:b1:38:7c:cb:f0:5e:3c:83:86:65: 53:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:44:01:AD:AA:F3:39:C2:80:A9:CE:01:35:17:6E:B2:49:2B:1B X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:cf:16:d4:1b:9a:88:bd:0c:b3:b3:4b:73:26:f9:88:62:61: dc:aa:6a:e0:d4:55:c4:14:a8:d6:0d:2d:73:15:5c:7a:a0:26: 76:fd:df:8f:ee:dd:e5:0f:08:1c:f7:a2:e6:dc:4f:7c:b9:2a: c4:82:98:5e:2f:7b:7b:a8:05:33:a4:d3:18:c5:a6:40:9a:b3: c0:f7:4e:e0:f5:68:09:1d:5a:92:28:d6:8a:1d:2a:6e:c3:6d: a6:15:c4:b2:6a:df:d2:c8:34:fd:74:29:e2:35:3b:34:9a:2f: af:7b:4f:38:b5:ae:81:c2:44:f7:29:91:1c:6a:64:0e:5e:5d: 3e:aa:fd:9f:88:8b:9f:39:3c:8d:af:63:c7:f7:ae:98:71:bb: 12:7b:de:6f:87:35:e8:87:ed:88:93:2f:e1:96:94:81:3b:1a: 2f:0c:46:3a:45:f4:b7:dd:65:2b:f3:1d:5b:c4:29:72:cb:78: 51:f6:dd:cc:0e:3e:6b:ab:7b:22:fd:04:14:f5:8b:2f:fc:b7: 7d:dd:57:44:8a:76:1d:ea:34:30:46:9c:32:d5:50:ab:86:cb: 7e:4c:04:67:28:c2:7e:5d:ca:66:6b:7a:b1:9f:93:bf:2e:22: 11:bf:11:e7:65:8c:f4:17:23:02:a7:a9:86:07:47:b2:85:96: 66:28:5d:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjQwNjAxMDgzOTQwWhcNMjQwNjA4MDgzOTQwWjAYMRYwFAYD VQQDEw02NjVhZGU0Yy1lZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxURiDpcW8+GIW/EDtvfn8fxNGWpZLN5bSq/pcJ/iFyts54laQbI0M5m75bR2 NzPeO6MzASOrOFeo0AfRD2YvyO2XuqecD+A2NGrAtpI2W3+7KbUpjx03JubfKFOJ 5ZfaDa0v8YTGBzkrJQ6kvZ0UT3c5EFFhe39EhaGp7QnTCzlYctmbA6OYWTaHJ6xV dzZXBhx+dmp42apVTwiHFgKuiGa66aNMKjOoAj7KDBnRjV48UFCJlbIbywYT1HkW ux2gDSbCDML5u6O7r/1+Ad6hxDtlF9OcbzDXDsTgXfoq3tOrApwMq/Uw86iMd1wE oRz8NHE6ubE4fMvwXjyDhmVTLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhiRAGt qvM5woCpzgE1F26ySSsbMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnzxbUG5qIvQyzs0tzJvmIYmHcqmrg1FXEFKjWDS1zFVx6oCZ2/d+P 7t3lDwgc96Lm3E98uSrEgpheL3t7qAUzpNMYxaZAmrPA907g9WgJHVqSKNaKHSpu w22mFcSyat/SyDT9dCniNTs0mi+ve084ta6BwkT3KZEcamQOXl0+qv2fiIufOTyN r2PH966YcbsSe95vhzXoh+2Iky/hlpSBOxovDEY6RfS33WUr8x1bxClyy3hR9t3M Dj5rq3si/QQU9Ysv/Ld93VdEinYd6jQwRpwy1VCrhst+TARnKMJ+Xcpma3qxn5O/ LiIRvxHnZYz0FyMCp6mGB0eyhZZmKF2h -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:39 2024 by rpki-client on console-fra.rpki-client.org