$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft File: njgJAcx6AZSIf9LW9saTbbKzeWY.mft (raw, json) Hash identifier: 7ilB4nuY2HoLjPsBx0G08s+q3iyWM/OSTqjt3FhVous= Subject key identifier: 82:AA:4E:33:56:5C:42:35:46:EA:2E:41:FE:18:A9:39:53:E1:D7:ED Authority key identifier: 9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 Certificate issuer: /CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Certificate serial: 33BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft Manifest number: 33BF Signing time: Sat 18 May 2024 15:11:00 +0000 Manifest this update: Sat 18 May 2024 15:11:00 +0000 Manifest next update: Sat 25 May 2024 15:11:00 +0000 Files and hashes: 1: njgJAcx6AZSIf9LW9saTbbKzeWY.crl (hash: mYv5125dnjtZrWqfcwRFn2l65wFTu3+R3hF9p5yXJmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13247 (0x33bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCD2A/serialNumber=9E380901CC7A0194887FD2D6F6C6936DB2B37966 Validity Not Before: May 18 15:11:00 2024 GMT Not After : May 25 15:11:00 2024 GMT Subject: CN=6648c504-8a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:c5:46:09:69:b6:a4:74:e8:ed:b8:89:86: be:a0:1a:20:fb:92:09:77:63:50:95:81:40:43:e2: 7e:c5:c1:d4:d4:9d:f1:72:21:b7:91:dd:76:33:2a: 83:ca:a4:26:0a:ba:4b:b8:62:aa:1e:25:ab:c8:1b: 8b:a3:44:44:6b:0a:7f:9b:2a:55:ea:7b:91:cf:9a: 08:88:25:30:8a:9d:b7:79:bd:90:c1:66:75:00:08: 48:55:4a:cf:2d:25:79:1d:b7:13:5c:1a:e8:1c:a7: cd:c8:b9:72:04:26:d1:9a:4b:90:c4:de:51:82:12: 05:0c:b6:f6:86:f2:bc:fb:bc:9f:dc:ba:81:e6:40: d5:93:89:77:52:b4:cf:25:8d:c2:16:a1:a0:fc:6c: ed:42:b5:43:15:c8:75:7d:de:c5:25:5c:7f:fd:45: 60:17:bb:45:d8:df:74:6a:27:c6:e0:4c:e8:8b:b3: 8e:d3:70:8a:5a:93:cd:e5:b1:06:3e:71:f0:d9:bc: 03:15:cb:93:71:46:f4:21:fc:f1:f1:f7:74:ea:2e: e9:53:3d:26:54:19:80:6e:ca:e5:a2:3a:6a:c0:17: df:5d:0f:0d:3f:27:1d:61:1e:fe:1e:f4:92:d7:1c: ad:a4:4a:34:19:a6:32:26:8e:c3:e9:e0:ae:e9:bb: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AA:4E:33:56:5C:42:35:46:EA:2E:41:FE:18:A9:39:53:E1:D7:ED X509v3 Authority Key Identifier: keyid:9E:38:09:01:CC:7A:01:94:88:7F:D2:D6:F6:C6:93:6D:B2:B3:79:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/njgJAcx6AZSIf9LW9saTbbKzeWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCD2A/194703661D9E11E29241C28D08B02CD2/njgJAcx6AZSIf9LW9saTbbKzeWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d9:bb:11:54:07:ac:e7:80:44:53:9e:65:c3:19:e7:7a:1f: 25:21:12:7b:19:12:53:ed:f1:6d:34:73:8e:1e:fd:4d:0f:c3: e7:ae:ad:ab:a0:b7:2f:fb:a4:ea:83:96:21:27:fa:59:43:c0: d1:31:24:3e:8f:5d:07:11:e7:75:5f:a5:5c:d9:18:0c:1f:40: d9:0a:23:60:b6:b4:38:f6:b4:f2:eb:7d:a2:bc:08:8c:87:c9: 89:47:68:e1:d1:c5:8b:15:b2:06:b2:b6:5c:16:64:be:19:6d: 03:cb:a6:65:be:4b:db:1f:97:47:42:e6:d2:72:ef:32:5c:81: 58:80:03:ff:98:7b:c4:6d:5d:80:a6:01:81:22:87:d8:a1:bc: 90:99:39:d9:de:af:0b:c7:86:d3:df:88:11:57:27:bf:6b:a6: 2f:7f:da:9c:b4:31:4d:c4:01:be:45:40:90:5d:8d:e5:c9:8c: 53:ad:fb:b2:45:cc:e4:fc:03:a2:91:b1:9e:51:fb:d2:89:c2: 59:03:b9:c3:47:ab:b0:48:5a:54:c0:e3:66:3a:b8:5f:15:a0: 7a:5f:7d:4c:fa:4b:cc:9c:1d:6f:82:98:98:09:7a:8b:bd:41: a6:5b:b8:12:9f:ff:f3:f0:76:42:2c:0e:9b:0a:f7:20:7c:7b: fa:c8:61:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNEMkExMTAvBgNVBAUTKDlFMzgwOTAxQ0M3QTAxOTQ4ODdGRDJENkY2QzY5MzZE QjJCMzc5NjYwHhcNMjQwNTE4MTUxMTAwWhcNMjQwNTI1MTUxMTAwWjAYMRYwFAYD VQQDEw02NjQ4YzUwNC04YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/7FRglptqR06O24iYa+oBog+5IJd2NQlYFAQ+J+xcHU1J3xciG3kd12MyqD yqQmCrpLuGKqHiWryBuLo0REawp/mypV6nuRz5oIiCUwip23eb2QwWZ1AAhIVUrP LSV5HbcTXBroHKfNyLlyBCbRmkuQxN5RghIFDLb2hvK8+7yf3LqB5kDVk4l3UrTP JY3CFqGg/GztQrVDFch1fd7FJVx//UVgF7tF2N90aifG4Ezoi7OO03CKWpPN5bEG PnHw2bwDFcuTcUb0Ifzx8fd06i7pUz0mVBmAbsrlojpqwBffXQ8NPycdYR7+HvSS 1xytpEo0GaYyJo7D6eCu6bujyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKqTjNW XEI1RuouQf4YqTlT4dftMB8GA1UdIwQYMBaAFJ44CQHMegGUiH/S1vbGk22ys3lm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0QyQS8xOTQ3MDM2NjFE OUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFaU0lmOUxXOXNhVGJiS3pl V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25qZ0pBY3g2QVpTSWY5TFc5c2FUYmJLemVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0QyQS8xOTQ3MDM2NjFEOUUxMUUyOTI0MUMyOEQwOEIwMkNEMi9uamdKQWN4NkFa U0lmOUxXOXNhVGJiS3plV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS2bsRVAes54BEU55lwxnneh8lIRJ7GRJT7fFtNHOOHv1ND8Pnrq2r oLcv+6Tqg5YhJ/pZQ8DRMSQ+j10HEed1X6Vc2RgMH0DZCiNgtrQ49rTy632ivAiM h8mJR2jh0cWLFbIGsrZcFmS+GW0Dy6ZlvkvbH5dHQubScu8yXIFYgAP/mHvEbV2A pgGBIofYobyQmTnZ3q8Lx4bT34gRVye/a6Yvf9qctDFNxAG+RUCQXY3lyYxTrfuy Rczk/AOikbGeUfvSicJZA7nDR6uwSFpUwONmOrhfFaB6X31M+kvMnB1vgpiYCXqL vUGmW7gSn//z8HZCLA6bCvcgfHv6yGEa -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org