$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft File: NhKQaSiZCCzeI_UEU6QVXgqreXg.mft (raw, json) Hash identifier: 7yXOD6hW1FrYttJcy9zJwZuIeMNX+ew9inAlU+LGhE8= Subject key identifier: B8:5C:D8:CC:1C:8C:8C:27:99:A1:DF:01:6A:4D:BF:05:0C:97:7F:2F Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 2591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft Manifest number: 2580 Signing time: Thu 02 May 2024 16:02:58 +0000 Manifest this update: Thu 02 May 2024 16:02:58 +0000 Manifest next update: Thu 09 May 2024 16:02:58 +0000 Files and hashes: 1: NhKQaSiZCCzeI_UEU6QVXgqreXg.crl (hash: GhnNnVcLNXz8MBjrzF0V5tAEeMV+xjY2/q+8BtyomGk=) 2: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (hash: gDPmhuG/wdMnafUf5dBasLWrj/x8i3ETlWBwiJtNRys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9617 (0x2591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: May 2 16:02:58 2024 GMT Not After : May 9 16:02:58 2024 GMT Subject: CN=6633b932-70d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:3f:d9:e7:f4:ae:20:0a:50:82:8a:f5:b8: 21:ea:45:cb:6f:3d:1a:99:ac:90:4b:a6:41:e1:09: e6:1e:48:6b:0c:b5:9f:9e:d8:ef:b4:aa:5c:4a:2e: 26:21:95:b8:11:b4:be:d6:d5:f8:0f:96:99:a0:56: ca:06:2b:cf:a6:46:3f:e6:9c:bb:e7:1a:3b:2e:2d: 22:6b:9d:03:1b:91:83:65:9e:fe:e9:c8:95:e5:60: 74:ff:d9:99:bc:66:4a:37:47:41:82:7f:12:25:57: d7:ce:e9:d0:c9:f8:1a:20:18:51:1b:6f:2b:d0:a0: e0:15:58:22:18:f2:ca:12:21:c5:f2:2a:77:d8:3b: 27:cc:64:11:1b:bc:46:77:54:7c:4f:24:ee:42:f1: 1f:2f:08:d7:ab:a7:3b:da:36:08:2e:78:e5:3a:ca: 79:46:da:cd:94:d7:31:9b:a4:58:7c:20:74:f6:37: d5:b6:4f:4a:d0:92:29:ac:2b:44:6c:09:59:9a:a2: 08:39:61:35:28:37:91:d7:b8:40:d7:a0:bb:ea:88: a9:eb:f8:13:ed:b2:e3:9d:14:9c:21:bd:37:f2:b3: 00:47:c1:63:1b:a6:f3:8a:3b:10:6e:ce:ce:5b:39: f4:af:bd:2f:f8:8d:a3:fe:32:11:bb:6f:1e:3b:ba: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5C:D8:CC:1C:8C:8C:27:99:A1:DF:01:6A:4D:BF:05:0C:97:7F:2F X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:5a:fb:dd:d8:5e:d9:0d:25:d1:aa:ff:38:b0:06:e3:16:06: c0:4d:10:17:ff:3f:a2:c6:7e:fc:a3:47:52:21:f2:37:56:95: e5:41:2b:1a:c8:db:4c:a0:63:01:ed:6d:c3:c3:00:56:88:c1: 15:a8:0a:d7:ed:fa:0d:f0:0c:ce:00:1d:e0:7a:e6:fd:22:8c: 28:ba:84:b6:4b:2d:e3:b5:aa:c3:86:03:f8:19:d1:cc:a9:67: c0:1d:c3:0a:89:e6:20:2c:a8:8a:d0:95:8f:4e:02:17:42:96: 35:8b:dc:d5:28:09:66:dc:67:8b:1c:e1:c5:c8:23:75:57:2c: b1:a6:50:d6:60:41:a1:a7:6e:0e:7e:69:6b:a2:c6:7b:85:06: 36:d1:b1:f5:ee:4e:45:dc:82:42:14:00:f4:23:c0:b8:eb:b3: 12:eb:b7:54:5b:ec:3f:46:c4:f1:25:aa:58:3b:64:ee:8e:d6: 6a:a4:06:aa:8f:f7:db:5f:b1:9a:7b:ec:af:31:49:41:bf:97: e3:94:e4:01:5f:b8:e4:09:f3:24:9f:3c:c1:d7:ad:d2:54:ab: cf:30:62:19:67:79:02:ff:a7:07:64:14:51:e3:1d:a2:6d:79: 9b:b6:08:a8:0a:46:79:38:6c:87:99:76:4c:9b:31:98:cc:d5: 9c:b7:78:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjQwNTAyMTYwMjU4WhcNMjQwNTA5MTYwMjU4WjAYMRYwFAYD VQQDEw02NjMzYjkzMi03MGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dc/2ef0riAKUIKK9bgh6kXLbz0amayQS6ZB4QnmHkhrDLWfntjvtKpcSi4m IZW4EbS+1tX4D5aZoFbKBivPpkY/5py75xo7Li0ia50DG5GDZZ7+6ciV5WB0/9mZ vGZKN0dBgn8SJVfXzunQyfgaIBhRG28r0KDgFVgiGPLKEiHF8ip32DsnzGQRG7xG d1R8TyTuQvEfLwjXq6c72jYILnjlOsp5RtrNlNcxm6RYfCB09jfVtk9K0JIprCtE bAlZmqIIOWE1KDeR17hA16C76oip6/gT7bLjnRScIb038rMAR8FjG6bzijsQbs7O Wzn0r70v+I2j/jIRu28eO7pQbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhc2Mwc jIwnmaHfAWpNvwUMl38vMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODk0Ri85NjNDRjBDRUVDNUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkND emVJX1VFVTZRVlhncXJlWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAWvvd2F7ZDSXRqv84sAbjFgbATRAX/z+ixn78o0dSIfI3VpXlQSsa yNtMoGMB7W3DwwBWiMEVqArX7foN8AzOAB3geub9IowouoS2Sy3jtarDhgP4GdHM qWfAHcMKieYgLKiK0JWPTgIXQpY1i9zVKAlm3GeLHOHFyCN1VyyxplDWYEGhp24O fmlrosZ7hQY20bH17k5F3IJCFAD0I8C467MS67dUW+w/RsTxJapYO2TujtZqpAaq j/fbX7Gae+yvMUlBv5fjlOQBX7jkCfMknzzB163SVKvPMGIZZ3kC/6cHZBRR4x2i bXmbtgioCkZ5OGyHmXZMmzGYzNWct3i9 -----END CERTIFICATE-----Generated at Thu May 2 17:43:02 2024 by rpki-client on console-fra.rpki-client.org