$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft File: NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft (raw, json) Hash identifier: CvPDPKv7mZtGkXYwaBz4ygicuvnPXyM3iQXtyLn/tcM= Subject key identifier: 7D:18:17:A9:3B:8B:D4:49:93:43:A3:47:CC:15:D7:39:CF:92:25:AD Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27 Certificate issuer: /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft Manifest number: AF Signing time: Sun 19 May 2024 06:36:36 +0000 Manifest this update: Sun 19 May 2024 06:36:35 +0000 Manifest next update: Sun 26 May 2024 06:36:35 +0000 Files and hashes: 1: NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl (hash: G5XrlJD3rRUs5FqWChrfHHMKHQu+k8S3+35i/q84CSI=) 2: CDB8866E0BCF11EE8FB8EE16C4F9AE02.roa (hash: 3Gab0tar+DbE6VYwqMTHVdYIYHtJEMldQy3rlsPG4vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327 Validity Not Before: May 19 06:36:35 2024 GMT Not After : May 26 06:36:35 2024 GMT Subject: CN=66499df3-42f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:18:47:9d:72:eb:2d:ac:0a:68:ef:3a:c3:b4: f1:b4:73:f9:95:46:1b:7f:d7:89:4a:5a:01:fd:07: f7:26:af:17:9b:28:47:e0:25:c0:21:95:b6:f0:8c: 68:f0:6c:d8:93:ba:fd:38:2d:a8:cc:6d:46:c6:3a: 1e:46:bc:ba:d7:de:98:53:a7:97:ec:c7:b2:82:02: 4d:23:27:fc:8a:01:d7:fb:e6:ba:19:94:1b:33:02: aa:0f:92:d8:8b:e9:3f:0e:ec:66:50:19:4f:63:c9: 80:c9:f0:98:01:6d:0a:ec:e2:76:a3:77:41:dc:9a: f9:c3:05:e6:56:05:77:62:6a:bb:68:55:c2:e2:23: 59:c2:21:8b:aa:e5:84:e4:ee:4c:2d:42:22:d9:96: 3c:32:f0:1f:5c:78:62:d1:48:8b:1f:f0:08:69:e0: 23:e7:cc:bc:c8:fb:42:f2:9d:c8:98:c5:7f:c4:b2: 75:a7:92:7d:e1:79:11:3d:42:3d:64:d7:e3:5e:ad: 5c:e8:59:f5:e1:6f:a5:63:9d:2d:25:72:96:b1:9a: 7b:69:4d:bd:00:bb:b3:a8:a6:96:21:13:8a:05:5e: e1:29:60:ce:9d:90:ac:03:53:fa:ae:1c:a4:94:52: a1:0a:c6:16:ee:ab:d3:64:76:af:9f:a6:d1:db:3e: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:18:17:A9:3B:8B:D4:49:93:43:A3:47:CC:15:D7:39:CF:92:25:AD X509v3 Authority Key Identifier: keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ac:91:0d:9c:e1:2f:8b:5f:47:22:4a:c0:78:d2:c0:df:02: 13:b1:74:26:8a:ff:72:ad:0d:91:e7:eb:58:d3:2b:69:59:9c: 22:52:a6:83:f5:cb:58:18:eb:03:ac:e4:88:2e:ec:a1:ad:af: 3a:68:a5:3f:0b:e4:db:b0:19:a4:40:c1:98:ad:c0:c1:98:5a: a9:19:b5:e5:fb:22:0a:05:74:dd:39:3e:ef:a0:e3:8e:a3:6f: 2c:fe:c3:a6:bd:7e:09:27:5a:38:5d:f9:38:8f:be:a0:ab:35: a6:30:64:f0:06:2b:de:11:f5:c1:23:46:81:ae:47:f7:19:a4: df:ac:ae:db:dc:ca:8d:3c:6f:61:94:2d:d3:bb:2e:37:e9:ca: 0c:84:b0:a5:a7:05:f1:8a:b7:d6:f5:8f:92:fa:78:1d:6f:c2: 23:b3:53:f4:a5:db:0a:2f:74:14:90:83:b7:05:23:d8:58:d7: 35:ad:53:54:88:5e:ca:9d:4b:01:12:1e:45:42:b4:70:ff:fd: be:c8:00:75:bc:4a:f5:90:e9:7e:5f:ac:e2:ed:dc:bf:7b:fc: 68:1e:31:42:9a:d7:38:91:10:da:c0:11:3e:da:36:5a:73:0e: e1:c7:fe:7a:36:e6:17:26:f2:64:7a:7c:38:23:5f:ae:bf:f9: f2:0e:ee:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NjIxMTAvBgNVBAUTKDM0MEY4MTM0MzM3MTlBNzYwRTNCRkUyMTkzMzY4NzI2 MTE3OUMzMjcwHhcNMjQwNTE5MDYzNjM1WhcNMjQwNTI2MDYzNjM1WjAYMRYwFAYD VQQDEw02NjQ5OWRmMy00MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhhHnXLrLawKaO86w7TxtHP5lUYbf9eJSloB/Qf3Jq8XmyhH4CXAIZW28Ixo 8GzYk7r9OC2ozG1GxjoeRry6196YU6eX7MeyggJNIyf8igHX++a6GZQbMwKqD5LY i+k/DuxmUBlPY8mAyfCYAW0K7OJ2o3dB3Jr5wwXmVgV3Ymq7aFXC4iNZwiGLquWE 5O5MLUIi2ZY8MvAfXHhi0UiLH/AIaeAj58y8yPtC8p3ImMV/xLJ1p5J94XkRPUI9 ZNfjXq1c6Fn14W+lY50tJXKWsZp7aU29ALuzqKaWIROKBV7hKWDOnZCsA1P6rhyk lFKhCsYW7qvTZHavn6bR2z68AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0YF6k7 i9RJk0OjR8wV1znPkiWtMB8GA1UdIwQYMBaAFDQPgTQzcZp2Djv+IZM2hyYRecMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Mi8yNjU3RjczRTBC QzkxMUVFOEY3OUJCNURDNEY5QUUwMi9OQS1CTkROeG1uWU9PXzRoa3phSEpoRjV3 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BLUJORE54bW5ZT09fNGhremFISmhGNXd5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Mi8yNjU3RjczRTBCQzkxMUVFOEY3OUJCNURDNEY5QUUwMi9OQS1CTkROeG1u WU9PXzRoa3phSEpoRjV3eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwrJENnOEvi19HIkrAeNLA3wITsXQmiv9yrQ2R5+tY0ytpWZwiUqaD 9ctYGOsDrOSILuyhra86aKU/C+TbsBmkQMGYrcDBmFqpGbXl+yIKBXTdOT7voOOO o28s/sOmvX4JJ1o4Xfk4j76gqzWmMGTwBiveEfXBI0aBrkf3GaTfrK7b3MqNPG9h lC3Tuy436coMhLClpwXxirfW9Y+S+ngdb8Ijs1P0pdsKL3QUkIO3BSPYWNc1rVNU iF7KnUsBEh5FQrRw//2+yAB1vEr1kOl+X6zi7dy/e/xoHjFCmtc4kRDawBE+2jZa cw7hx/56NuYXJvJkenw4I1+uv/nyDu4B -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org