$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft File: nryww05Pd_InjbFcWeHtrH5VdW4.mft (raw, json) Hash identifier: orA5kUBpDuw2yxlcMV/wS821M7bq3pm7jJ8jVuPIYFQ= Subject key identifier: 7D:D5:5A:DA:97:83:31:E2:FE:55:D6:E5:42:13:8B:E0:02:BA:CA:8E Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E Certificate issuer: /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft Manifest number: 2A Signing time: Wed 15 May 2024 08:39:27 +0000 Manifest this update: Wed 15 May 2024 08:39:26 +0000 Manifest next update: Wed 22 May 2024 08:39:26 +0000 Files and hashes: 1: nryww05Pd_InjbFcWeHtrH5VdW4.crl (hash: vlVG+KG6wGZp+xmSfuLU8mhLDqc6qrOlijzTdB5FYk0=) 2: B999A66AD54E11EE842E2F58C4F9AE02.roa (hash: lawsYWPU6sG/zSMNJA9UvzdkRGaYJkKdFnUsUbkU8/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E Validity Not Before: May 15 08:39:26 2024 GMT Not After : May 22 08:39:26 2024 GMT Subject: CN=664474be-5ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0f:9e:40:56:24:48:bf:f3:4d:b7:6f:50:d0: 23:44:3b:93:55:e4:ea:58:2a:3e:50:67:b9:6f:dd: a2:17:8f:49:3a:50:0a:ee:ac:24:29:12:30:3e:2b: b3:e3:ed:54:d6:a6:e4:6b:bd:1a:19:4f:0f:ad:4c: b4:bb:4b:38:44:dc:b4:05:0e:c0:46:21:92:06:2e: 51:e6:f6:ee:d4:04:0b:2c:41:4c:82:81:02:9b:5f: 9a:b4:81:9c:42:13:93:d1:4b:46:03:37:72:59:3c: eb:88:52:6f:55:15:1d:9f:50:ec:fe:e7:a9:35:a5: 2a:b5:a7:a1:20:5d:ba:bf:fd:e0:88:51:b7:63:3c: c0:f5:ea:ff:91:15:fc:9a:2b:ab:21:aa:32:59:4f: 5d:25:64:db:64:64:53:2a:22:38:0a:c6:21:6d:1c: 4a:e1:25:e5:c8:64:90:3b:00:bb:93:af:e3:2b:5a: 3f:70:58:26:60:ca:1e:e7:2b:50:19:42:82:64:78: a8:f9:98:90:c8:4f:40:51:87:0b:b4:65:d3:a8:2e: 17:f1:4f:9e:cf:b9:b5:cd:2e:03:2d:6d:74:15:15: 4c:bf:bf:7e:99:45:8f:03:22:fc:2c:a4:45:a6:89: 9d:f3:dc:83:a7:c6:3e:e8:a8:ac:54:15:6a:aa:b4: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D5:5A:DA:97:83:31:E2:FE:55:D6:E5:42:13:8B:E0:02:BA:CA:8E X509v3 Authority Key Identifier: keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:98:5c:b8:7f:ac:1d:3b:32:48:89:05:ae:54:6b:6f:c2:df: e7:ba:03:e4:80:4f:70:77:26:24:5b:4f:e5:52:58:e8:eb:86: d7:63:47:6b:a2:db:c9:c2:8b:11:c6:3d:f2:69:b7:86:d4:dc: 19:16:88:30:b3:78:c3:66:ef:af:0a:10:f8:0c:0d:6d:0d:8a: e3:7b:5f:de:89:d3:78:5f:9e:28:78:a7:99:d5:8b:91:6a:ff: 28:6c:2a:23:c3:26:12:cd:4e:bf:6d:a5:9f:81:c2:91:ff:63: 99:a7:03:c0:2b:f0:6c:1e:98:21:68:cd:b7:a7:de:3a:36:4c: ef:47:e2:1a:8b:20:29:6b:d7:3e:5d:aa:83:26:83:58:3c:7d: 43:5f:de:91:c8:0f:75:e3:f2:d2:bd:e6:c8:1e:20:8f:4a:89: 18:93:3f:ec:16:3d:76:51:e4:ff:31:ca:12:e2:97:e9:82:b4: 32:a8:a8:63:35:32:73:35:48:70:29:4f:1c:97:e7:de:ce:08: 88:15:3f:f4:27:17:78:ac:4d:87:76:c9:ae:54:80:65:37:bf: 31:4c:42:60:35:05:9c:7e:0d:1d:6e:0e:4d:36:b5:cb:e3:a0: c1:00:91:8c:bf:ab:96:af:07:b7:76:18:a2:3a:02:0f:29:a6: 0f:92:c4:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTgyMTExMC8GA1UEBRMoOUVCQ0IwQzM0RTRGNzdGMjI3OERCMTVDNTlFMUVEQUM3 RTU1NzU2RTAeFw0yNDA1MTUwODM5MjZaFw0yNDA1MjIwODM5MjZaMBgxFjAUBgNV BAMTDTY2NDQ3NGJlLTVlYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlD55AViRIv/NNt29Q0CNEO5NV5OpYKj5QZ7lv3aIXj0k6UArurCQpEjA+K7Pj 7VTWpuRrvRoZTw+tTLS7SzhE3LQFDsBGIZIGLlHm9u7UBAssQUyCgQKbX5q0gZxC E5PRS0YDN3JZPOuIUm9VFR2fUOz+56k1pSq1p6EgXbq//eCIUbdjPMD16v+RFfya K6shqjJZT10lZNtkZFMqIjgKxiFtHErhJeXIZJA7ALuTr+MrWj9wWCZgyh7nK1AZ QoJkeKj5mJDIT0BRhwu0ZdOoLhfxT57PubXNLgMtbXQVFUy/v36ZRY8DIvwspEWm iZ3z3IOnxj7oqKxUFWqqtNJDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfdVa2peD MeL+VdblQhOL4AK6yo4wHwYDVR0jBBgwFoAUnryww05Pd/InjbFcWeHtrH5VdW4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxODIxL0FCMjJFQUM0RDU0 OTExRUU5NDk3RDg4MEM0RjlBRTAyL25yeXd3MDVQZF9JbmpiRmNXZUh0ckg1VmRX NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnJ5d3cwNVBkX0luamJGY1dlSHRySDVWZFc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx ODIxL0FCMjJFQUM0RDU0OTExRUU5NDk3RDg4MEM0RjlBRTAyL25yeXd3MDVQZF9J bmpiRmNXZUh0ckg1VmRXNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKaYXLh/rB07MkiJBa5Ua2/C3+e6A+SAT3B3JiRbT+VSWOjrhtdjR2ui 28nCixHGPfJpt4bU3BkWiDCzeMNm768KEPgMDW0NiuN7X96J03hfnih4p5nVi5Fq /yhsKiPDJhLNTr9tpZ+BwpH/Y5mnA8Ar8GwemCFozben3jo2TO9H4hqLIClr1z5d qoMmg1g8fUNf3pHID3Xj8tK95sgeII9KiRiTP+wWPXZR5P8xyhLil+mCtDKoqGM1 MnM1SHApTxyX597OCIgVP/QnF3isTYd2ya5UgGU3vzFMQmA1BZx+DR1uDk02tcvj oMEAkYy/q5avB7d2GKI6Ag8ppg+SxHY= -----END CERTIFICATE-----Generated at Wed May 15 11:17:40 2024 by rpki-client on console-ams.rpki-client.org