$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: vnANmiI8iWEXHi948LX/1XCqkWSbw8701A7UNgC5T1A= Subject key identifier: 8F:77:C2:82:F8:65:86:AA:A9:3C:73:4F:E7:6F:EE:63:AF:08:6A:53 Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 09A3 Signing time: Fri 31 May 2024 21:30:54 +0000 Manifest this update: Fri 31 May 2024 21:30:53 +0000 Manifest next update: Fri 07 Jun 2024 21:30:53 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: NNkNtYCPuPuAHx1zl847ykk3VYu4HZjYL6HjfwymCR8=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: UvQSMfDXUem5+lf8IaHOf0vTqXsFnLhPIDxXf3hulrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: May 31 21:30:53 2024 GMT Not After : Jun 7 21:30:53 2024 GMT Subject: CN=665a418e-af68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:15:33:02:0a:3a:53:c4:b4:fd:9d:ed:ba: c8:31:5e:83:70:cc:bd:f7:c8:8e:15:61:d5:ef:50: f8:4d:7b:77:5a:3b:e6:99:7c:9e:a8:b7:ac:2a:f9: 3f:89:0d:77:ce:a4:3d:07:d1:c9:a8:8c:fe:8e:61: c2:21:a5:00:1d:11:f6:44:19:d8:62:fe:24:fc:0a: fa:b6:f0:70:22:0a:04:f6:3f:dd:a9:e9:4a:59:2e: 9b:39:cf:f8:f2:5a:a5:fd:1d:8e:91:ff:6e:6f:ae: 0c:66:21:80:51:db:c2:6b:ec:53:47:b1:4a:96:2a: 4c:54:56:df:c8:bb:e6:6d:7d:cb:b4:f5:9e:0b:51: 47:49:4d:cd:40:96:3c:cf:27:c1:c4:63:56:6c:ba: f3:0e:94:ba:6b:32:c4:87:ad:3a:05:3b:8d:a1:e5: 6d:16:ed:39:fb:64:c5:27:bf:2b:d7:3d:01:98:cc: 7f:ed:1f:2a:a6:0d:33:8a:a5:87:15:36:79:d0:22: 85:e3:9f:f6:59:ac:86:08:2c:30:e5:03:52:38:32: d7:61:55:11:e7:fd:8f:65:4a:78:be:14:39:54:1a: ff:0a:c6:7a:1c:a3:44:b7:ea:41:7d:08:5f:9e:22: e1:b1:8e:32:95:43:a3:ba:51:5b:5c:98:27:49:da: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:77:C2:82:F8:65:86:AA:A9:3C:73:4F:E7:6F:EE:63:AF:08:6A:53 X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:87:de:8d:d2:12:57:13:a5:50:19:b2:3d:57:60:93:aa:6d: 06:c3:0e:24:cb:98:3e:db:86:b5:47:3b:f5:93:1d:12:69:5f: 55:d1:7b:5f:b2:53:60:4c:d0:bb:5c:61:a0:3f:46:b2:a4:3e: f1:86:ac:9d:1a:fd:b7:8e:aa:d1:cc:b8:2a:8d:27:c4:be:67: 7b:1e:67:6f:41:d9:93:d2:21:f8:b7:00:ab:c2:bf:bf:a6:26: cf:2c:9d:37:c8:41:07:c6:66:f5:9d:ea:72:39:7c:59:90:74: 87:b8:4f:04:a7:9a:54:ec:04:d1:08:23:16:4d:95:f2:b9:64: 91:a4:ec:7e:01:41:c8:d8:29:e3:9b:5c:62:ee:f3:ea:9a:d5: 31:ff:09:c0:74:b9:91:55:8a:14:ea:b8:1f:64:c2:03:f0:0a: 71:e2:cb:6b:41:aa:32:7a:c3:cc:10:30:51:dc:c9:af:c6:ec: 5d:f8:0e:8e:27:15:b3:84:03:84:a3:1c:c0:28:d8:de:74:2a: fc:17:96:f0:07:e6:39:69:4e:4a:7e:f2:d1:44:f8:b1:f3:9b: 36:10:98:ed:f6:9d:d2:27:65:72:54:db:98:a3:1f:cb:2c:5f: 2c:83:66:67:70:93:83:83:75:b1:65:84:a4:32:e6:1b:10:ad: 4b:82:f0:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjQwNTMxMjEzMDUzWhcNMjQwNjA3MjEzMDUzWjAYMRYwFAYD VQQDEw02NjVhNDE4ZS1hZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN8VMwIKOlPEtP2d7brIMV6DcMy998iOFWHV71D4TXt3WjvmmXyeqLesKvk/ iQ13zqQ9B9HJqIz+jmHCIaUAHRH2RBnYYv4k/Ar6tvBwIgoE9j/dqelKWS6bOc/4 8lql/R2Okf9ub64MZiGAUdvCa+xTR7FKlipMVFbfyLvmbX3LtPWeC1FHSU3NQJY8 zyfBxGNWbLrzDpS6azLEh606BTuNoeVtFu05+2TFJ78r1z0BmMx/7R8qpg0ziqWH FTZ50CKF45/2WayGCCww5QNSODLXYVUR5/2PZUp4vhQ5VBr/CsZ6HKNEt+pBfQhf niLhsY4ylUOjulFbXJgnSdrOFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI93woL4 ZYaqqTxzT+dv7mOvCGpTMB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCh96N0hJXE6VQGbI9V2CTqm0Gww4ky5g+24a1Rzv1kx0SaV9V0Xtf slNgTNC7XGGgP0aypD7xhqydGv23jqrRzLgqjSfEvmd7HmdvQdmT0iH4twCrwr+/ pibPLJ03yEEHxmb1nepyOXxZkHSHuE8Ep5pU7ATRCCMWTZXyuWSRpOx+AUHI2Cnj m1xi7vPqmtUx/wnAdLmRVYoU6rgfZMID8Apx4strQaoyesPMEDBR3Mmvxuxd+A6O JxWzhAOEoxzAKNjedCr8F5bwB+Y5aU5KfvLRRPix85s2EJjt9p3SJ2VyVNuYox/L LF8sg2ZncJODg3WxZYSkMuYbEK1LgvDd -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:10 2024 by rpki-client on console-ams.rpki-client.org