$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft File: nzVmCVwLDAIx0LuWkl4DidHCbFc.mft (raw, json) Hash identifier: nF0r9L8r6L3WVl+ML4+mTJa7FDjBQnxlGklMn1ARHUg= Subject key identifier: AB:34:32:18:8D:2E:49:09:21:44:DF:24:C3:F8:7A:52:50:BB:AA:C7 Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft Manifest number: 0364 Signing time: Tue 07 May 2024 02:49:53 +0000 Manifest this update: Tue 07 May 2024 02:49:52 +0000 Manifest next update: Tue 14 May 2024 02:49:52 +0000 Files and hashes: 1: nzVmCVwLDAIx0LuWkl4DidHCbFc.crl (hash: xR3qlpgydgaxPE+En8Y7yPr6ODo6RoTPpMTaxLb5o48=) 2: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (hash: hiz8orQvD2O6/cswN3b9tybf+/qTphdbwHRPLrZEniY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57 Validity Not Before: May 7 02:49:52 2024 GMT Not After : May 14 02:49:52 2024 GMT Subject: CN=663996d1-c639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a1:6c:c6:15:82:bf:b4:b7:d2:08:12:be:9b: ed:fb:54:9d:82:75:73:c1:37:29:ec:e8:3c:91:87: 5d:2a:2b:69:36:77:0b:8f:20:e8:4a:35:db:cd:6c: 97:b5:6f:98:3a:c2:cf:f5:a6:fd:a0:d3:96:d9:c3: 15:2e:3c:fd:4f:1f:8b:1f:09:fa:34:0a:99:65:61: a8:35:00:04:9e:c1:a6:82:e8:d0:e8:6a:30:eb:b4: 2e:32:70:8d:13:4d:75:bb:54:bd:23:74:be:ed:05: e6:b9:5c:f6:a8:ed:96:34:2f:3e:e1:8f:c5:81:ab: a3:4a:84:9f:cd:ac:c0:fd:2e:fa:f2:0c:2b:51:f7: b6:94:3b:a0:4c:d0:fc:0d:ef:fe:5c:a6:07:e2:50: 53:c8:a6:32:4d:4e:c1:2e:7c:da:9f:6b:88:ce:54: f2:2c:50:e7:bd:1d:f2:7b:25:18:bd:7c:fd:93:a4: c5:4e:5a:5d:2f:ac:71:76:79:90:b5:1e:69:1d:6c: 56:17:68:ab:34:c4:30:5c:2d:e4:fd:bc:71:ca:aa: 02:7e:0f:19:60:ae:59:28:7f:4c:b5:39:8f:c3:5e: 4d:9f:ef:f4:09:21:85:e2:30:42:6e:d2:d7:18:e4: bf:af:d9:54:09:76:02:6f:bc:ef:44:ff:6a:a9:b4: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:34:32:18:8D:2E:49:09:21:44:DF:24:C3:F8:7A:52:50:BB:AA:C7 X509v3 Authority Key Identifier: keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:71:00:da:1c:d5:c4:3a:27:2d:54:ab:41:ec:d8:31:5a:00: 09:91:ee:a0:de:b3:9a:9a:0b:b9:5c:bb:57:63:5e:d7:56:06: 47:b7:de:bc:db:11:bb:4a:8f:ce:c4:7b:33:21:bc:0e:e9:ad: fa:b1:03:5c:b4:0a:26:75:bd:65:61:b2:b4:b7:2f:38:21:fa: de:32:23:d2:2e:62:4f:7f:29:26:f0:53:00:4d:58:e5:df:44: 70:37:7c:47:e3:0a:96:24:c5:ad:8c:91:50:da:b0:27:75:4b: cf:c1:ae:c0:68:36:b2:ec:18:a7:e9:aa:78:fa:ef:49:0a:cc: f7:ed:c9:5c:57:16:03:18:b0:41:1d:64:41:e1:e9:b8:76:7f: c0:cd:3c:6c:88:93:41:53:a9:13:e0:d5:f4:90:db:82:09:03: c6:11:68:58:9b:ca:cc:2b:aa:ea:f9:5c:07:72:d7:20:73:8a: 8f:72:db:41:08:2b:bb:a2:e0:6d:b3:91:30:f2:88:71:a6:db: b5:d1:36:4a:b3:1d:78:d0:fe:fa:7f:49:87:ea:a0:5d:39:41: 58:19:e4:a3:7a:9b:2c:e8:39:57:9c:3b:ee:58:86:c8:bc:eb: e8:4d:2a:3b:68:b2:4c:db:70:49:db:55:4f:81:4b:32:50:b8: a5:b5:29:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwM0IxMTAvBgNVBAUTKDlGMzU2NjA5NUMwQjBDMDIzMUQwQkI5NjkyNUUwMzg5 RDFDMjZDNTcwHhcNMjQwNTA3MDI0OTUyWhcNMjQwNTE0MDI0OTUyWjAYMRYwFAYD VQQDEw02NjM5OTZkMS1jNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqFsxhWCv7S30ggSvpvt+1SdgnVzwTcp7Og8kYddKitpNncLjyDoSjXbzWyX tW+YOsLP9ab9oNOW2cMVLjz9Tx+LHwn6NAqZZWGoNQAEnsGmgujQ6Gow67QuMnCN E011u1S9I3S+7QXmuVz2qO2WNC8+4Y/FgaujSoSfzazA/S768gwrUfe2lDugTND8 De/+XKYH4lBTyKYyTU7BLnzan2uIzlTyLFDnvR3yeyUYvXz9k6TFTlpdL6xxdnmQ tR5pHWxWF2irNMQwXC3k/bxxyqoCfg8ZYK5ZKH9MtTmPw15Nn+/0CSGF4jBCbtLX GOS/r9lUCXYCb7zvRP9qqbQ+hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs0MhiN LkkJIUTfJMP4elJQu6rHMB8GA1UdIwQYMBaAFJ81ZglcCwwCMdC7lpJeA4nRwmxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDAzQi80QUE3NEI3NDYy REExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERBSXgwTHVXa2w0RGlkSENi RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL256Vm1DVndMREFJeDBMdVdrbDREaWRIQ2JGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDAzQi80QUE3NEI3NDYyREExMUVDQjM3MUM3NjdDNEY5QUUwMi9uelZtQ1Z3TERB SXgwTHVXa2w0RGlkSENiRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpcQDaHNXEOictVKtB7NgxWgAJke6g3rOamgu5XLtXY17XVgZHt968 2xG7So/OxHszIbwO6a36sQNctAomdb1lYbK0ty84IfreMiPSLmJPfykm8FMATVjl 30RwN3xH4wqWJMWtjJFQ2rAndUvPwa7AaDay7Bin6ap4+u9JCsz37clcVxYDGLBB HWRB4em4dn/AzTxsiJNBU6kT4NX0kNuCCQPGEWhYm8rMK6rq+VwHctcgc4qPcttB CCu7ouBts5Ew8ohxptu10TZKsx140P76f0mH6qBdOUFYGeSjepss6DlXnDvuWIbI vOvoTSo7aLJM23BJ21VPgUsyULiltSlt -----END CERTIFICATE-----Generated at Tue May 7 03:49:56 2024 by rpki-client on console-ams.rpki-client.org