$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: VZZcYBxCVL71Vqa/tS+xSiyl4whUGGKUqU9XS0zJlfw= Subject key identifier: AA:49:C4:4E:E0:DB:FC:8F:6F:A0:4E:07:B5:58:EC:A8:9C:C8:D5:1E Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 161E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 1612 Signing time: Sat 18 May 2024 17:12:11 +0000 Manifest this update: Sat 18 May 2024 17:12:11 +0000 Manifest next update: Sat 25 May 2024 17:12:11 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: IcyByHijNGaVhnmEGqFW4RY1iJNNIXVoy7jybqJk69w=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: zo25YC/oPN7LoCYNy9rkqq5CmjGFDNR2L9SiYpUiaJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5662 (0x161e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: May 18 17:12:11 2024 GMT Not After : May 25 17:12:11 2024 GMT Subject: CN=6648e16b-d309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:ee:0f:ba:b6:05:45:95:31:6d:30:8c:bf: 02:00:e3:3f:93:cb:c5:0a:45:0a:19:8e:2f:97:f9: 6e:48:45:73:d6:8a:83:aa:60:d8:70:a5:44:2d:a3: af:7f:ad:2f:a8:6b:09:6c:88:33:be:e5:64:06:cc: ae:95:eb:c6:72:8c:71:58:d7:c8:d4:92:ab:1f:dd: c4:af:f4:a5:b8:a0:53:d0:4e:04:e4:9e:0f:59:f5: f8:5f:d7:d7:7c:da:7d:05:3d:ce:f7:99:fb:4f:07: c6:0c:76:a2:72:19:6c:a0:f0:47:32:30:fa:19:35: 46:93:00:49:b0:43:c1:e0:73:76:89:f0:e8:7d:52: e0:22:8e:1b:b2:b4:0d:ca:e3:33:82:29:05:d0:e4: df:6e:3a:e6:4b:9e:03:a3:30:1a:c5:ff:4d:d6:62: de:52:b9:7d:76:51:b1:d4:5c:e0:c2:85:2f:2c:57: c0:91:f2:20:a8:ea:98:c1:e5:d4:d6:ea:30:08:54: 7d:86:6b:ec:eb:21:2a:d8:17:ad:6a:6f:75:7c:aa: cd:41:d4:11:9e:24:17:b4:c6:26:88:13:b4:66:0a: 81:d6:68:a6:24:eb:2d:60:a6:e8:ed:41:dd:d3:6a: 32:36:db:29:3a:2e:25:a7:b3:1c:b4:ce:06:87:ba: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:49:C4:4E:E0:DB:FC:8F:6F:A0:4E:07:B5:58:EC:A8:9C:C8:D5:1E X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:07:82:90:41:20:ff:c5:58:05:63:3b:de:d2:3f:10:42:4b: 64:91:12:86:a9:75:4d:90:93:57:24:f0:52:bb:f6:af:f8:cc: 66:aa:e5:60:57:9c:a5:df:59:6b:69:b5:eb:9f:2b:e0:e3:4d: 58:a4:bd:c5:ea:38:57:a5:71:57:80:da:be:c5:ca:42:f2:89: a6:25:87:8c:a3:03:c9:a9:8e:c1:d8:50:a0:e4:b6:d0:98:cb: 1a:27:4f:9f:72:78:97:4a:8e:a2:8e:e6:97:02:e1:fc:eb:44: 5c:59:f3:18:4f:d9:87:34:e5:0d:42:d5:89:2c:27:c6:a4:79: d4:c3:4b:1a:34:06:0e:80:7d:27:d3:88:0c:92:20:c0:50:51: c3:1a:26:ad:8e:af:9b:0e:d6:ca:5a:14:c4:d2:bd:7f:14:f4: 32:77:eb:ac:87:c9:12:89:8b:c9:d9:26:14:ae:99:48:fe:55: 4b:d6:3c:11:8b:66:28:d9:aa:61:b7:c7:1d:21:65:d6:01:4d: b8:f5:46:46:22:e9:f7:60:b7:93:91:c9:ef:98:29:1f:ee:ae: b1:8f:b3:c6:10:9c:46:08:5e:9a:5d:e3:94:d1:4d:a3:ec:e3: d3:32:b1:ec:df:84:33:c0:0e:e3:00:b5:50:dc:79:94:4c:c4: 18:cc:c8:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjQwNTE4MTcxMjExWhcNMjQwNTI1MTcxMjExWjAYMRYwFAYD VQQDEw02NjQ4ZTE2Yi1kMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhzuD7q2BUWVMW0wjL8CAOM/k8vFCkUKGY4vl/luSEVz1oqDqmDYcKVELaOv f60vqGsJbIgzvuVkBsyulevGcoxxWNfI1JKrH93Er/SluKBT0E4E5J4PWfX4X9fX fNp9BT3O95n7TwfGDHaichlsoPBHMjD6GTVGkwBJsEPB4HN2ifDofVLgIo4bsrQN yuMzgikF0OTfbjrmS54DozAaxf9N1mLeUrl9dlGx1FzgwoUvLFfAkfIgqOqYweXU 1uowCFR9hmvs6yEq2Betam91fKrNQdQRniQXtMYmiBO0ZgqB1mimJOstYKbo7UHd 02oyNtspOi4lp7MctM4Gh7qAXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpJxE7g 2/yPb6BOB7VY7KicyNUeMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrB4KQQSD/xVgFYzve0j8QQktkkRKGqXVNkJNXJPBSu/av+MxmquVg V5yl31lrabXrnyvg401YpL3F6jhXpXFXgNq+xcpC8ommJYeMowPJqY7B2FCg5LbQ mMsaJ0+fcniXSo6ijuaXAuH860RcWfMYT9mHNOUNQtWJLCfGpHnUw0saNAYOgH0n 04gMkiDAUFHDGiatjq+bDtbKWhTE0r1/FPQyd+ush8kSiYvJ2SYUrplI/lVL1jwR i2Yo2apht8cdIWXWAU249UZGIun3YLeTkcnvmCkf7q6xj7PGEJxGCF6aXeOU0U2j 7OPTMrHs34QzwA7jALVQ3HmUTMQYzMiB -----END CERTIFICATE-----Generated at Sat May 18 17:37:34 2024 by rpki-client on console-fra.rpki-client.org