$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft File: Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json) Hash identifier: 9ie9HlOrgUq+2Ed6OqsovsPSK5AR205uAeBXhfvjMm8= Subject key identifier: 47:90:E2:D4:29:FB:39:C1:AC:5A:B3:F0:33:10:FF:A9:83:E8:42:82 Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 Certificate issuer: /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft Manifest number: 1DBF Signing time: Thu 16 May 2024 16:36:51 +0000 Manifest this update: Thu 16 May 2024 16:36:50 +0000 Manifest next update: Thu 23 May 2024 16:36:50 +0000 Files and hashes: 1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: DfxjQtOohF/rbTEqPVWC9m5XeyUIFfBl+p/qFS54NgU=) 2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: PL+MdMpe7QWO0nJJsSHMp4qiIEiznAficRKoTm9IDLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2 Validity Not Before: May 16 16:36:50 2024 GMT Not After : May 23 16:36:50 2024 GMT Subject: CN=66463622-cee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:7d:2a:5b:00:e2:5d:ce:c1:2f:8d:76:fb: dc:04:2d:63:a1:ff:5e:da:1f:62:74:ec:14:07:88: ba:b4:ba:01:12:16:82:14:65:9b:c7:ee:62:7a:a0: 3e:2b:35:97:ce:d4:ee:5e:5a:0b:8c:5c:e5:d1:77: c4:c9:5e:ec:45:40:3e:fd:eb:35:41:47:5a:fa:8f: 4c:f2:00:33:61:b2:a4:c4:9f:75:f6:39:3d:03:db: 52:3f:db:4e:05:81:7b:96:9c:8d:25:fc:05:18:ce: 2c:95:39:ec:88:cf:ba:50:56:c0:76:87:63:76:72: 1a:48:f1:9a:43:b0:a6:a6:23:15:81:35:e5:e4:44: 07:50:dc:f3:d4:0a:e4:1d:9a:db:cb:52:70:0e:41: 77:d6:18:93:bf:de:8b:c0:1d:86:a5:98:64:bb:cd: 19:73:12:f3:55:40:95:3b:fe:1b:8b:5e:49:1f:22: 7b:5b:4f:e3:87:47:da:cf:7f:ce:89:0c:69:08:ec: 5a:5e:9f:73:e1:28:50:e7:2e:11:ae:7f:5f:d5:34: bd:c4:43:73:16:46:fe:e0:5f:bd:f2:22:0f:a5:03: e8:42:19:1f:c3:9f:db:e2:52:c0:d5:5f:c8:32:8a: 7d:3d:1d:c4:ac:fa:1a:52:30:ed:cf:20:bc:15:56: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:90:E2:D4:29:FB:39:C1:AC:5A:B3:F0:33:10:FF:A9:83:E8:42:82 X509v3 Authority Key Identifier: keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:e8:1c:a5:f8:1c:07:db:5a:08:61:7e:43:a5:dd:20:81: f3:03:df:74:ad:0e:b2:21:f1:5b:37:74:6b:2e:2e:06:1c:9d: 70:e8:b3:79:95:22:12:bd:54:72:28:b7:d1:a9:82:40:0c:99: ef:d8:36:30:4e:63:7c:20:ef:db:fa:d8:f6:d7:f7:c2:2c:1c: 34:c5:73:9e:1a:a2:d2:ed:c1:42:46:a1:7e:3a:51:17:9e:3c: 8b:51:d5:f1:e4:79:59:64:d0:bc:84:43:dd:d1:b8:68:86:fa: 2e:a4:fe:7c:09:44:cf:2d:bc:41:bc:4d:36:bb:5d:fd:82:24: ac:04:02:b2:5f:a0:47:de:2b:52:2a:ab:c2:a7:f9:76:e1:a8: 11:16:25:0f:32:c0:50:a5:98:1c:a7:76:ee:92:37:b1:1e:83: c5:57:6b:46:de:8f:77:0c:43:63:09:09:91:18:ac:59:c3:77: 25:ab:86:cb:4f:d7:4b:c0:04:3f:ae:60:c3:9f:51:78:c0:52: 01:07:aa:a3:bf:ca:83:47:ee:3d:57:a4:a3:14:56:e0:9e:78: f3:05:b4:f3:1d:97:97:0a:91:52:56:49:e8:2b:e2:f5:bc:cd: 0c:d9:87:0c:ce:10:5a:51:56:f9:6d:e9:e0:d2:80:31:87:57: 22:fc:3b:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyRUExMTAvBgNVBAUTKDM3MkYxQzc3NjFCMUREQzgzMjhDNTBCQUQwRUVFRENE OTlGMkU0RjIwHhcNMjQwNTE2MTYzNjUwWhcNMjQwNTIzMTYzNjUwWjAYMRYwFAYD VQQDEw02NjQ2MzYyMi1jZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz599KlsA4l3OwS+NdvvcBC1jof9e2h9idOwUB4i6tLoBEhaCFGWbx+5ieqA+ KzWXztTuXloLjFzl0XfEyV7sRUA+/es1QUda+o9M8gAzYbKkxJ919jk9A9tSP9tO BYF7lpyNJfwFGM4slTnsiM+6UFbAdodjdnIaSPGaQ7CmpiMVgTXl5EQHUNzz1Ark HZrby1JwDkF31hiTv96LwB2GpZhku80ZcxLzVUCVO/4bi15JHyJ7W0/jh0faz3/O iQxpCOxaXp9z4ShQ5y4Rrn9f1TS9xENzFkb+4F+98iIPpQPoQhkfw5/b4lLA1V/I Mop9PR3ErPoaUjDtzyC8FVY+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeQ4tQp +znBrFqz8DMQ/6mD6EKCMB8GA1UdIwQYMBaAFDcvHHdhsd3IMoxQutDu7c2Z8uTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDJFQS9GNTMzMkQ3RTg0 QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNjZ3lqRkM2ME83dHpabnk1 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055OGNkMkd4M2NneWpGQzYwTzd0elpueTVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDJFQS9GNTMzMkQ3RTg0QzMxMUU2Qjk4MjFBODFDNEY5QUUwMi9OeThjZDJHeDNj Z3lqRkM2ME83dHpabnk1UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5AOgcpfgcB9taCGF+Q6XdIIHzA990rQ6yIfFbN3RrLi4GHJ1w6LN5 lSISvVRyKLfRqYJADJnv2DYwTmN8IO/b+tj21/fCLBw0xXOeGqLS7cFCRqF+OlEX njyLUdXx5HlZZNC8hEPd0bhohvoupP58CUTPLbxBvE02u139giSsBAKyX6BH3itS KqvCp/l24agRFiUPMsBQpZgcp3bukjexHoPFV2tG3o93DENjCQmRGKxZw3clq4bL T9dLwAQ/rmDDn1F4wFIBB6qjv8qDR+49V6SjFFbgnnjzBbTzHZeXCpFSVknoK+L1 vM0M2YcMzhBaUVb5beng0oAxh1ci/Dvx -----END CERTIFICATE-----Generated at Thu May 16 17:51:17 2024 by rpki-client on console-ams.rpki-client.org