$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft File: nPMspRGaIvijMFkQ1ANfaLP8IUw.mft (raw, json) Hash identifier: epiiML9pxDC2YaeBD0+2u1NkZ9RiKXPcG45rnnRuUwU= Subject key identifier: A6:30:09:66:3F:1C:70:F9:1A:43:21:60:13:74:67:D5:A9:FE:46:76 Authority key identifier: 9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C Certificate issuer: /CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft Manifest number: 0424 Signing time: Sat 27 Apr 2024 01:57:50 +0000 Manifest this update: Sat 27 Apr 2024 01:57:50 +0000 Manifest next update: Sat 04 May 2024 01:57:50 +0000 Files and hashes: 1: nPMspRGaIvijMFkQ1ANfaLP8IUw.crl (hash: uUHqbWL23DR2oClSMzifvurLjcaDaN8ZujM8F/Qrw3w=) 2: 55D5848813E411EC9BE4C87FC4F9AE02.roa (hash: rjPTaqBCALBS5ueFZ1eHOMEzETeUStL1WJkcYwwBOe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E79/serialNumber=9CF32CA5119A22F8A3305910D4035F68B3FC214C Validity Not Before: Apr 27 01:57:50 2024 GMT Not After : May 4 01:57:50 2024 GMT Subject: CN=662c5b9e-4bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:16:2c:f8:fe:31:47:f9:b9:a9:cd:18:49: 32:b5:80:02:ec:c1:d3:7f:c2:e2:6a:cc:21:17:e0: 4c:99:9d:92:26:59:6c:36:c8:10:3c:91:3e:ce:3f: 2a:52:14:90:db:97:d5:b6:f7:bc:eb:aa:c0:b7:c7: 70:bb:12:d1:79:e9:b8:78:42:3f:9e:0d:be:6c:c8: 9f:f2:89:24:a0:09:3d:27:b6:71:fb:27:1e:07:2c: ca:1c:b0:4e:ec:51:fe:43:b4:cf:65:2d:95:dc:5d: 2d:0a:e4:7b:d9:5d:0c:de:49:86:8a:40:c6:1b:31: f9:28:62:5c:d1:f8:fb:5d:ad:63:66:4d:72:fc:10: 09:7e:ac:54:51:dd:a9:c0:7f:9f:27:7f:65:15:6a: 28:5b:7f:24:08:05:96:2b:26:7a:59:81:d0:34:fc: 4f:45:30:57:49:77:5a:c8:e3:46:03:97:30:83:10: e1:fd:ab:3e:da:36:61:a8:c1:ee:f3:09:25:7a:fb: 32:c7:c4:ad:78:01:70:03:b2:b6:e7:c4:8b:a1:7e: 7c:6e:a0:99:63:ba:37:a3:63:8b:49:51:6c:de:e8: de:e4:a9:8f:79:61:53:69:4f:dd:18:99:e3:d1:65: 0a:41:c9:87:d1:01:9e:01:f7:84:5b:3f:71:18:24: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:30:09:66:3F:1C:70:F9:1A:43:21:60:13:74:67:D5:A9:FE:46:76 X509v3 Authority Key Identifier: keyid:9C:F3:2C:A5:11:9A:22:F8:A3:30:59:10:D4:03:5F:68:B3:FC:21:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPMspRGaIvijMFkQ1ANfaLP8IUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E79/11154DDC13E011EC977E4178C4F9AE02/nPMspRGaIvijMFkQ1ANfaLP8IUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4c:2c:20:c6:9c:18:41:66:fd:22:33:3e:ad:94:8b:29:95: df:b7:3a:c8:4d:4d:aa:cb:7c:64:bb:7d:60:f5:90:87:c7:1d: 99:9f:ff:b0:b8:64:aa:96:01:18:a3:bf:0c:6c:4c:d1:2e:ec: 19:ed:65:a9:c7:7e:cc:11:5f:aa:fe:67:00:5c:b9:ad:09:f9: ff:0a:8e:2c:da:d6:89:e0:72:8c:9d:0b:07:73:cd:a2:7e:83: 35:9d:3f:2a:12:2f:f2:98:a1:43:3a:45:24:69:47:26:7e:14: e4:86:cb:14:e1:ec:34:d6:ef:a0:cb:be:d2:ad:c9:8d:55:4b: e0:f6:3a:63:14:43:39:6a:cf:86:96:79:d2:e8:a6:4a:68:db: 1c:c5:26:44:93:91:68:a2:73:4f:ce:ad:3a:2d:97:cc:e4:c8: 50:d7:27:5f:a8:f3:42:e3:40:25:d8:63:4b:88:c0:5b:7e:9a: 64:c2:42:1a:56:97:f7:e0:e2:d9:f9:cf:5b:57:fc:de:bc:ca: 8a:b9:7b:d4:8b:7a:6f:9f:46:61:1f:95:16:db:9b:8e:0e:6a: 0b:e2:dc:26:36:95:01:dd:87:00:26:2a:86:eb:99:b0:6b:89: e1:46:0f:98:4e:ef:6b:bc:5c:d7:82:fe:cf:b8:9e:93:11:14: 4a:0c:07:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFNzkxMTAvBgNVBAUTKDlDRjMyQ0E1MTE5QTIyRjhBMzMwNTkxMEQ0MDM1RjY4 QjNGQzIxNEMwHhcNMjQwNDI3MDE1NzUwWhcNMjQwNTA0MDE1NzUwWjAYMRYwFAYD VQQDEw02NjJjNWI5ZS00YmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvwWLPj+MUf5uanNGEkytYAC7MHTf8LiaswhF+BMmZ2SJllsNsgQPJE+zj8q UhSQ25fVtve866rAt8dwuxLReem4eEI/ng2+bMif8okkoAk9J7Zx+yceByzKHLBO 7FH+Q7TPZS2V3F0tCuR72V0M3kmGikDGGzH5KGJc0fj7Xa1jZk1y/BAJfqxUUd2p wH+fJ39lFWooW38kCAWWKyZ6WYHQNPxPRTBXSXdayONGA5cwgxDh/as+2jZhqMHu 8wklevsyx8SteAFwA7K258SLoX58bqCZY7o3o2OLSVFs3uje5KmPeWFTaU/dGJnj 0WUKQcmH0QGeAfeEWz9xGCTPKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYwCWY/ HHD5GkMhYBN0Z9Wp/kZ2MB8GA1UdIwQYMBaAFJzzLKURmiL4ozBZENQDX2iz/CFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0U3OS8xMTE1NEREQzEz RTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2aWpNRmtRMUFOZmFMUDhJ VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QTXNwUkdhSXZpak1Ga1ExQU5mYUxQOElVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0U3OS8xMTE1NEREQzEzRTAxMUVDOTc3RTQxNzhDNEY5QUUwMi9uUE1zcFJHYUl2 aWpNRmtRMUFOZmFMUDhJVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJTCwgxpwYQWb9IjM+rZSLKZXftzrITU2qy3xku31g9ZCHxx2Zn/+w uGSqlgEYo78MbEzRLuwZ7WWpx37MEV+q/mcAXLmtCfn/Co4s2taJ4HKMnQsHc82i foM1nT8qEi/ymKFDOkUkaUcmfhTkhssU4ew01u+gy77SrcmNVUvg9jpjFEM5as+G lnnS6KZKaNscxSZEk5FoonNPzq06LZfM5MhQ1ydfqPNC40Al2GNLiMBbfppkwkIa Vpf34OLZ+c9bV/zevMqKuXvUi3pvn0ZhH5UW25uODmoL4twmNpUB3YcAJiqG65mw a4nhRg+YTu9rvFzXgv7PuJ6TERRKDAfH -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:23 2024 by rpki-client on console-ams.rpki-client.org