$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft File: NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json) Hash identifier: 5LzCJRBXaeXDDBtlU11NuWAoV1EhnQeEsEQPWe66H5Q= Subject key identifier: 48:A5:FF:C1:4B:88:52:CA:5E:98:F3:06:C4:D1:6C:00:0D:EF:4E:45 Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft Manifest number: 04C5 Signing time: Sat 01 Jun 2024 02:24:18 +0000 Manifest this update: Sat 01 Jun 2024 02:24:17 +0000 Manifest next update: Sat 08 Jun 2024 02:24:17 +0000 Files and hashes: 1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: 4dLAYG/DUOGe+Lr6jk0zbeeKlqShwCTqso5LghG3nA4=) 2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: 7adejz/nC+5zIuDRAPjPO4hjJwlSFKceHGTUyN/0ypE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Jun 1 02:24:17 2024 GMT Not After : Jun 8 02:24:17 2024 GMT Subject: CN=665a8651-c92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:57:12:6b:fd:fc:6b:c0:36:85:c2:26:60: 3e:f4:b2:77:52:89:23:15:9d:d1:ec:5e:f0:7c:27: 4f:08:16:a7:e9:79:6f:cc:02:06:f7:3e:7e:18:a4: d0:97:e4:88:ff:b6:ee:e0:3d:d1:88:f4:fc:23:2c: 80:e8:34:5a:f7:47:24:0a:f5:a5:fd:76:c8:42:87: 13:d8:cb:8b:c0:cd:10:2f:5e:c2:90:62:eb:8a:39: 30:90:3c:d0:0f:5c:e0:9e:cd:c8:ee:a3:f1:48:cd: f6:9f:21:b8:91:ec:54:aa:ab:8c:83:1b:d4:0a:8a: 69:84:a3:eb:c0:64:09:b1:84:d5:25:74:4e:2a:f1: 42:43:07:96:87:fa:1e:ca:72:8e:76:4e:26:fe:50: a7:c5:01:52:3c:c2:35:2e:a9:14:d5:96:e7:cc:9a: e9:d4:8f:78:6f:88:fd:f8:ca:7c:5f:b3:40:ec:d2: 7e:0a:f7:1e:35:6f:13:e5:7d:c5:d5:62:15:9d:ae: 58:45:f1:62:fd:c6:a0:42:b0:5d:09:6a:e6:2c:92: 97:17:11:4c:c2:38:64:36:5d:a2:e5:78:b9:6d:70: ec:6d:c1:d4:a2:78:81:25:15:8e:8a:f9:a8:92:4d: b6:19:28:0b:b0:6f:d9:d9:cf:be:65:29:6c:f9:78: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A5:FF:C1:4B:88:52:CA:5E:98:F3:06:C4:D1:6C:00:0D:EF:4E:45 X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ad:9c:62:a3:c6:42:6a:41:9f:6d:7f:5f:05:fc:b3:e0:29: f7:f8:de:0c:c6:02:ab:c4:aa:0e:6c:68:0b:87:0b:60:39:1c: 37:91:2f:7e:6f:a9:03:fa:02:2a:7f:82:1c:0a:79:00:10:a0: 60:71:8a:27:da:ee:cc:f7:ea:68:25:aa:fa:46:ab:e0:c8:4d: f5:86:e3:4e:f4:88:b8:8b:83:68:a2:8f:82:ae:18:f6:74:ac: 3b:92:68:54:48:b9:71:64:45:56:ad:a0:6d:0c:7e:28:9f:31: 44:77:50:10:c0:29:a2:eb:ef:20:63:b0:8e:d8:9e:f1:25:de: 51:8f:d9:a4:e3:6d:00:f1:d9:03:f3:88:d2:f8:b5:8b:12:f6: 36:d4:53:29:ed:04:f1:b3:f0:57:f1:39:f1:99:25:01:4c:de: 1f:c5:7f:84:ea:73:3e:c6:f8:a1:54:01:95:6e:5c:0e:27:5d: 6e:9b:59:2d:48:64:7f:70:36:59:13:98:97:58:46:a2:45:b1: 0e:e5:fd:09:74:06:37:6b:a6:0a:55:d2:0f:1e:18:fd:73:f1: c6:38:dd:60:9f:86:e8:cd:60:d6:57:88:ed:f4:ea:50:df:f2: 1c:31:3a:04:43:a8:42:50:49:b5:b1:f5:92:93:52:43:8a:72: 86:4b:f0:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjQwNjAxMDIyNDE3WhcNMjQwNjA4MDIyNDE3WjAYMRYwFAYD VQQDEw02NjVhODY1MS1jOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCtXEmv9/GvANoXCJmA+9LJ3UokjFZ3R7F7wfCdPCBan6XlvzAIG9z5+GKTQ l+SI/7bu4D3RiPT8IyyA6DRa90ckCvWl/XbIQocT2MuLwM0QL17CkGLrijkwkDzQ D1zgns3I7qPxSM32nyG4kexUqquMgxvUCopphKPrwGQJsYTVJXROKvFCQweWh/oe ynKOdk4m/lCnxQFSPMI1LqkU1ZbnzJrp1I94b4j9+Mp8X7NA7NJ+CvceNW8T5X3F 1WIVna5YRfFi/cagQrBdCWrmLJKXFxFMwjhkNl2i5Xi5bXDsbcHUoniBJRWOivmo kk22GSgLsG/Z2c++ZSls+XgYjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEil/8FL iFLKXpjzBsTRbAAN705FMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3 SnVSMVZldXNVZGpnb3JPNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0rZxio8ZCakGfbX9fBfyz4Cn3+N4MxgKrxKoObGgLhwtgORw3kS9+ b6kD+gIqf4IcCnkAEKBgcYon2u7M9+poJar6RqvgyE31huNO9Ii4i4Nooo+Crhj2 dKw7kmhUSLlxZEVWraBtDH4onzFEd1AQwCmi6+8gY7CO2J7xJd5Rj9mk420A8dkD 84jS+LWLEvY21FMp7QTxs/BX8TnxmSUBTN4fxX+E6nM+xvihVAGVblwOJ11um1kt SGR/cDZZE5iXWEaiRbEO5f0JdAY3a6YKVdIPHhj9c/HGON1gn4bozWDWV4jt9OpQ 3/IcMToEQ6hCUEm1sfWSk1JDinKGS/DB -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:20 2024 by rpki-client on console-ams.rpki-client.org