$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: jNJhclsBARvv3btFCzPO939W6K0w+xu6eNJNwBKhA2Q= Subject key identifier: 72:63:9D:10:3C:AE:DB:7A:FB:E3:02:4C:79:4E:88:A4:AE:0E:34:C7 Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 60 Signing time: Wed 15 May 2024 07:46:35 +0000 Manifest this update: Wed 15 May 2024 07:46:35 +0000 Manifest next update: Wed 22 May 2024 07:46:35 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: hIVHYgPZIU/kInAPDV2jo8QPxt+iIf0DPcQaPdgMAxs=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: N3pngW2F3xkXcHjMPhnn8/90mI3hL53wBBuSYsPJujA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: May 15 07:46:35 2024 GMT Not After : May 22 07:46:35 2024 GMT Subject: CN=6644685b-9750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:b8:33:16:48:55:5f:5b:8f:89:90:3e:b5: 06:df:65:ea:44:ed:3c:f2:78:af:8e:87:3c:40:5f: 37:30:4a:a2:af:0f:5b:a4:ff:2f:e9:87:dc:d1:70: fd:42:1e:1b:21:b8:34:21:a0:93:2d:86:f9:7e:c7: eb:75:f8:8c:cc:f7:a9:9b:fe:03:d4:a0:5f:ed:58: 45:fc:0c:da:71:5d:82:1a:50:67:b9:42:0e:2c:0b: 8f:1f:bb:c7:a7:8a:71:e4:9f:90:87:82:a9:06:5e: 88:0f:24:67:73:59:45:eb:31:d6:6d:56:67:4f:dc: 09:db:55:a0:e4:6c:9d:3c:8e:10:21:3d:2e:56:6b: 3d:72:1b:d5:96:81:02:98:a2:7e:65:1e:84:cb:70: 56:6f:97:38:c5:9c:40:29:05:f2:41:87:1e:28:8c: f4:f9:f2:cf:b4:00:02:19:f9:cf:d8:4d:3d:2c:ea: b1:e4:f2:84:e7:f4:c3:7b:42:9f:30:61:9c:7c:b8: d4:60:08:d0:82:17:8e:da:ee:4a:08:83:2f:0c:b4: 4a:f5:13:0b:72:f0:c7:36:d4:e2:1d:59:56:d0:22: e4:65:94:b3:cf:51:f5:e2:7c:a9:73:a2:01:1a:52: 92:d6:57:fb:a4:9e:7b:04:ec:b3:fd:6c:11:76:e0: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:63:9D:10:3C:AE:DB:7A:FB:E3:02:4C:79:4E:88:A4:AE:0E:34:C7 X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:cb:b2:c7:ba:6d:c9:45:6c:2e:57:51:4e:fb:ca:f7:93:aa: 8f:88:f1:c6:eb:e7:c4:73:12:1c:96:fb:ad:f7:5d:fa:d7:9b: 12:6d:e2:7c:01:26:50:1d:e4:c4:4d:7d:50:78:e0:0c:27:55: bb:87:ae:6e:d5:d3:77:53:0d:13:a2:1c:2d:35:67:a6:cb:2c: 67:79:20:58:5a:47:8e:90:62:e6:47:90:00:50:0d:c2:a4:0d: 4a:3c:c5:d8:9f:82:3e:e1:66:35:4d:7e:80:5f:69:1f:d9:e6: 12:d1:43:bd:fe:20:d2:20:9f:9c:17:ff:4e:8d:58:3d:fb:9c: 31:52:f6:65:84:00:34:dd:57:71:41:3b:73:5b:db:9e:05:86: 6f:d1:c2:3b:86:17:0d:59:c2:26:3c:82:9a:24:10:02:d0:45: 2e:09:a2:5e:02:07:70:72:58:cb:b6:c2:4e:39:59:75:c9:f5: c6:1e:64:f8:8a:4e:24:2d:5c:a6:5f:dd:80:da:02:f5:4d:19: c9:06:5a:a5:dc:07:3b:60:07:5e:63:02:bc:39:87:5d:70:37: 3c:e3:af:fd:53:a7:d6:ce:7f:39:2d:0f:af:2d:4c:96:2b:47: eb:df:0a:b0:15:0f:81:d9:2b:01:fb:97:f9:24:d1:80:86:c9: ee:2a:5e:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkNBQzExMC8GA1UEBRMoOUNCRTEwRDdDMURENDRCN0U1OTBCNTA3OEJGQzRGODZD RjhEQjI1QTAeFw0yNDA1MTUwNzQ2MzVaFw0yNDA1MjIwNzQ2MzVaMBgxFjAUBgNV BAMTDTY2NDQ2ODViLTk3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGZrgzFkhVX1uPiZA+tQbfZepE7TzyeK+OhzxAXzcwSqKvD1uk/y/ph9zRcP1C HhshuDQhoJMthvl+x+t1+IzM96mb/gPUoF/tWEX8DNpxXYIaUGe5Qg4sC48fu8en inHkn5CHgqkGXogPJGdzWUXrMdZtVmdP3AnbVaDkbJ08jhAhPS5Waz1yG9WWgQKY on5lHoTLcFZvlzjFnEApBfJBhx4ojPT58s+0AAIZ+c/YTT0s6rHk8oTn9MN7Qp8w YZx8uNRgCNCCF47a7koIgy8MtEr1Ewty8Mc21OIdWVbQIuRllLPPUfXifKlzogEa UpLWV/uknnsE7LP9bBF24FuFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcmOdEDyu 23r74wJMeU6IpK4ONMcwHwYDVR0jBBgwFoAUnL4Q18HdRLflkLUHi/xPhs+Nslow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCQ0FDLzAxNTIyNThFODJG NDExRUU5RUQxRjYxMUM0RjlBRTAyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkw0UTE4SGRSTGZsa0xVSGlfeFBocy1Oc2xvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC Q0FDLzAxNTIyNThFODJGNDExRUU5RUQxRjYxMUM0RjlBRTAyL25MNFExOEhkUkxm bGtMVUhpX3hQaHMtTnNsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJLLsse6bclFbC5XUU77yveTqo+I8cbr58RzEhyW+633XfrXmxJt4nwB JlAd5MRNfVB44AwnVbuHrm7V03dTDROiHC01Z6bLLGd5IFhaR46QYuZHkABQDcKk DUo8xdifgj7hZjVNfoBfaR/Z5hLRQ73+INIgn5wX/06NWD37nDFS9mWEADTdV3FB O3Nb254Fhm/RwjuGFw1ZwiY8gpokEALQRS4Jol4CB3ByWMu2wk45WXXJ9cYeZPiK TiQtXKZf3YDaAvVNGckGWqXcBztgB15jArw5h11wNzzjr/1Tp9bOfzktD68tTJYr R+vfCrAVD4HZKwH7l/kk0YCGye4qXtU= -----END CERTIFICATE-----Generated at Wed May 15 09:04:08 2024 by rpki-client on console-ams.rpki-client.org