$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft File: nkKx9pFGDihG-nHwbcib8sdB25o.mft (raw, json) Hash identifier: v8xFmr1WI4aJrU3eqFM1UmKuYfg4FqwEpjjKoU2qrrY= Subject key identifier: 80:ED:E9:54:82:B5:93:D0:44:BC:F8:FB:B5:B4:26:2F:E0:45:71:5D Authority key identifier: 9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A Certificate issuer: /CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft Manifest number: 5E Signing time: Wed 15 May 2024 07:48:41 +0000 Manifest this update: Wed 15 May 2024 07:48:40 +0000 Manifest next update: Wed 22 May 2024 07:48:40 +0000 Files and hashes: 1: nkKx9pFGDihG-nHwbcib8sdB25o.crl (hash: vRoUzvDhATZ70sXlH2WnY8LEs9RsYLmextORJO/so68=) 2: 5ED417AE869011EEA9011A36C4F9AE02.roa (hash: G380Ha8QJtSqiTvn7fBNSb9egYZP9g7joO+n3Qn27+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCDD/serialNumber=9E42B1F691460E2846FA71F06DC89BF2C741DB9A Validity Not Before: May 15 07:48:40 2024 GMT Not After : May 22 07:48:40 2024 GMT Subject: CN=664468d8-82ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:63:f0:b6:1e:c0:c5:c8:af:9e:23:21:47: 4d:05:10:21:87:f1:36:b5:fd:94:a6:1f:01:3a:2c: dd:90:92:e5:ab:cf:06:13:9f:31:57:88:29:19:95: 07:ba:e7:da:77:67:bd:28:f6:5a:31:9c:3b:28:5d: d7:24:a5:7c:1e:8a:0c:ed:1b:4a:8f:58:4e:a3:1f: be:55:bb:38:b7:8f:0d:20:83:e5:0b:b1:16:23:ea: 3a:85:f8:1c:33:39:fa:45:e6:17:03:b2:93:f0:f2: ca:e9:63:ee:a3:7b:5f:53:de:7e:dc:b4:90:92:6f: 13:77:c8:40:b6:04:78:3e:13:dd:cd:10:c2:8b:03: 0d:53:9d:9b:36:9f:be:c2:62:26:d8:92:13:e8:09: 02:b8:d8:d3:38:71:7c:45:77:00:60:a4:1c:f6:d2: 40:b5:c1:7a:fb:8d:b0:3b:55:9f:f1:d7:28:0a:63: 91:96:b7:82:4b:ad:b0:4c:47:60:72:fc:59:33:25: 8e:28:bc:f9:cd:93:b6:74:56:0b:d5:b5:4a:0a:68: 2d:9e:3e:58:3e:fb:d9:5d:6b:3b:f0:5e:75:e4:a7: 0a:43:74:b0:ef:67:f7:90:b8:cd:f4:27:a2:c3:88: 82:3b:b2:d1:cd:fb:a7:89:b2:b3:f2:97:57:65:1d: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:ED:E9:54:82:B5:93:D0:44:BC:F8:FB:B5:B4:26:2F:E0:45:71:5D X509v3 Authority Key Identifier: keyid:9E:42:B1:F6:91:46:0E:28:46:FA:71:F0:6D:C8:9B:F2:C7:41:DB:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nkKx9pFGDihG-nHwbcib8sdB25o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCDD/348AD8AC861311EEA8C95042C4F9AE02/nkKx9pFGDihG-nHwbcib8sdB25o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:61:7d:c3:59:eb:a7:2d:58:36:f6:fb:48:21:9f:39:56:18: 5b:cc:c6:8b:46:0c:46:1b:c8:c3:0c:ad:1d:d8:4e:cc:58:13: d6:a5:0d:35:c4:73:a9:ce:66:9b:da:b4:05:ce:cd:f9:d8:db: 51:62:22:29:6f:c8:25:34:6b:ee:eb:02:30:c5:96:0f:65:9e: eb:ae:f4:69:ed:30:4a:36:30:5a:93:d6:4b:01:36:5c:bb:1e: 47:5c:7b:c3:df:0d:f4:e4:d8:79:f7:82:02:57:78:fb:bf:3e: 13:72:92:8f:e3:45:94:e5:3f:11:a8:10:2b:58:76:8f:7a:5d: de:92:69:59:60:a8:f8:6a:df:1f:d6:82:93:e9:53:56:e5:03: b4:60:2a:ed:bd:a9:a7:79:c1:c2:98:e4:c6:4d:69:c8:11:9a: c6:12:87:86:aa:9c:d0:c3:59:90:63:bd:07:81:92:67:33:a6: c4:cc:30:6f:7c:8c:0e:55:35:2b:35:70:f4:20:0f:bd:72:ab: 59:c7:a3:72:1e:2f:08:bc:92:65:a9:23:ac:df:6f:de:bf:bd: d7:a3:51:49:b9:c1:9a:6f:40:f8:57:db:09:12:6d:04:7e:9f: cd:1f:01:c7:7d:9e:68:19:08:43:f5:8e:98:ee:b9:fc:9c:88: e7:0f:2d:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkNERDExMC8GA1UEBRMoOUU0MkIxRjY5MTQ2MEUyODQ2RkE3MUYwNkRDODlCRjJD NzQxREI5QTAeFw0yNDA1MTUwNzQ4NDBaFw0yNDA1MjIwNzQ4NDBaMBgxFjAUBgNV BAMTDTY2NDQ2OGQ4LTgyZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/h2Pwth7AxcivniMhR00FECGH8Ta1/ZSmHwE6LN2QkuWrzwYTnzFXiCkZlQe6 59p3Z70o9loxnDsoXdckpXweigztG0qPWE6jH75Vuzi3jw0gg+ULsRYj6jqF+Bwz OfpF5hcDspPw8srpY+6je19T3n7ctJCSbxN3yEC2BHg+E93NEMKLAw1TnZs2n77C YibYkhPoCQK42NM4cXxFdwBgpBz20kC1wXr7jbA7VZ/x1ygKY5GWt4JLrbBMR2By /FkzJY4ovPnNk7Z0VgvVtUoKaC2ePlg++9ldazvwXnXkpwpDdLDvZ/eQuM30J6LD iII7stHN+6eJsrPyl1dlHbHPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgO3pVIK1 k9BEvPj7tbQmL+BFcV0wHwYDVR0jBBgwFoAUnkKx9pFGDihG+nHwbcib8sdB25ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCQ0RELzM0OEFEOEFDODYx MzExRUVBOEM5NTA0MkM0RjlBRTAyL25rS3g5cEZHRGloRy1uSHdiY2liOHNkQjI1 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmtLeDlwRkdEaWhHLW5Id2JjaWI4c2RCMjVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC Q0RELzM0OEFEOEFDODYxMzExRUVBOEM5NTA0MkM0RjlBRTAyL25rS3g5cEZHRGlo Ry1uSHdiY2liOHNkQjI1by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB9hfcNZ66ctWDb2+0ghnzlWGFvMxotGDEYbyMMMrR3YTsxYE9alDTXE c6nOZpvatAXOzfnY21FiIilvyCU0a+7rAjDFlg9lnuuu9GntMEo2MFqT1ksBNly7 Hkdce8PfDfTk2Hn3ggJXePu/PhNyko/jRZTlPxGoECtYdo96Xd6SaVlgqPhq3x/W gpPpU1blA7RgKu29qad5wcKY5MZNacgRmsYSh4aqnNDDWZBjvQeBkmczpsTMMG98 jA5VNSs1cPQgD71yq1nHo3IeLwi8kmWpI6zfb96/vdejUUm5wZpvQPhX2wkSbQR+ n80fAcd9nmgZCEP1jpjuufyciOcPLbU= -----END CERTIFICATE-----Generated at Wed May 15 09:27:27 2024 by rpki-client on console-fra.rpki-client.org