$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json) Hash identifier: 19x042pslJBs39HF6/9SHjxkzJhQ3ZjmrUr+rcBDkvM= Subject key identifier: 5C:12:43:90:82:F4:F5:D7:10:F0:AB:1A:DA:16:83:81:E7:7F:87:C5 Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft Manifest number: 05DD Signing time: Sat 27 Apr 2024 00:01:00 +0000 Manifest this update: Sat 27 Apr 2024 00:00:59 +0000 Manifest next update: Sat 04 May 2024 00:00:59 +0000 Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: rS6krl6GDToQxokjJcB4I72YY6U7lE9BfJtY48NfZOo=) 2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: iVNlEEUpkQ4pO3sAlYnoK5SGYjCiJx3jecw+Vffe23I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 00:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Validity Not Before: Apr 27 00:00:59 2024 GMT Not After : May 4 00:00:59 2024 GMT Subject: CN=662c403c-e175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:0e:38:b0:f4:c1:c2:85:aa:75:9f:b4:68: b2:98:4e:0f:09:2b:4e:24:4a:a2:4a:de:86:4c:83: 70:6f:ed:f8:e6:e1:dd:29:56:35:da:8f:82:e3:99: a0:13:9f:95:33:b2:3f:30:ef:cc:0c:8f:f7:95:79: 54:45:99:ba:d5:c5:6a:07:ad:29:35:2f:0d:f8:d3: bd:9c:19:3a:00:7d:20:b3:96:9d:cd:40:fd:c8:8f: 65:60:4b:39:63:06:06:cb:de:d5:db:14:72:ac:3d: 8b:93:03:52:84:ea:04:35:c8:83:aa:eb:f8:d6:cd: d9:4f:bf:50:17:e4:42:d8:09:9a:a5:70:c2:a4:f0: a6:c8:d4:bc:6a:55:0d:ba:eb:6d:e0:60:84:d5:67: 80:7a:de:d3:3b:56:69:e3:42:5c:08:f6:17:f7:98: b6:21:43:8e:f8:67:0c:c0:bb:23:f2:de:ea:df:9b: ca:53:c7:5c:59:85:b1:b7:20:62:1e:fd:38:da:eb: 3f:7a:e2:ff:90:a6:f3:57:7f:94:7a:22:03:94:db: dd:cb:ba:ba:6c:93:d0:25:d2:3c:e9:fe:ad:de:ad: ca:f8:ca:e6:44:53:77:ab:4d:f5:ef:aa:ab:6c:d1: 3a:ec:3d:fe:bc:99:b0:d8:4e:79:99:95:59:8d:ae: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:12:43:90:82:F4:F5:D7:10:F0:AB:1A:DA:16:83:81:E7:7F:87:C5 X509v3 Authority Key Identifier: keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:54:fe:75:69:96:e9:6d:ce:22:93:29:1c:7d:65:b7:31:f0: c6:5f:86:c3:48:f3:e4:e3:bd:cc:83:6a:7f:dc:db:d1:a3:d1: e1:94:74:34:14:a7:69:83:04:59:db:5c:53:58:53:76:b3:c1: 05:f8:a9:cb:01:d2:e5:06:ec:b0:59:42:4e:70:63:83:42:5b: 40:49:8b:28:c2:b6:03:45:94:8b:b0:2d:99:4c:99:78:b1:a2: 5a:d6:d6:70:a8:ce:1e:42:d6:30:cf:10:cc:7d:b0:25:9e:1a: cd:f9:bc:73:8a:2f:3c:19:a4:ec:62:e0:d0:83:e7:2b:56:f2: 9e:13:ca:3a:0b:d4:6c:bf:d9:7d:76:ff:14:d2:b1:68:c3:a2: c7:79:d6:67:0d:04:c0:38:11:2b:1e:87:f0:4a:cd:c6:76:32: 66:5f:df:78:51:24:a1:d4:6d:b0:ca:5f:34:73:cc:82:41:f5: 8c:9e:d7:4c:08:72:1b:e5:33:5e:25:af:53:fa:31:6c:92:5c: 57:95:c4:cb:76:e7:8a:47:a0:9e:50:82:61:5c:4a:0c:d0:f6: 16:4c:fa:0c:af:6a:cd:d2:0a:12:83:52:13:ae:62:80:f4:7c: b5:6e:aa:9a:41:b8:07:b3:f1:9c:aa:c9:8f:88:26:03:6b:fa: bc:a8:ee:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF OTA5Rjk1NDQwHhcNMjQwNDI3MDAwMDU5WhcNMjQwNTA0MDAwMDU5WjAYMRYwFAYD VQQDEw02NjJjNDAzYy1lMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF8OOLD0wcKFqnWftGiymE4PCStOJEqiSt6GTINwb+345uHdKVY12o+C45mg E5+VM7I/MO/MDI/3lXlURZm61cVqB60pNS8N+NO9nBk6AH0gs5adzUD9yI9lYEs5 YwYGy97V2xRyrD2LkwNShOoENciDquv41s3ZT79QF+RC2AmapXDCpPCmyNS8alUN uutt4GCE1WeAet7TO1Zp40JcCPYX95i2IUOO+GcMwLsj8t7q35vKU8dcWYWxtyBi Hv042us/euL/kKbzV3+UeiIDlNvdy7q6bJPQJdI86f6t3q3K+MrmRFN3q03176qr bNE67D3+vJmw2E55mZVZja7INQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwSQ5CC 9PXXEPCrGtoWg4Hnf4fFMB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2 MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOVP51aZbpbc4ikykcfWW3MfDGX4bDSPPk473Mg2p/3NvRo9HhlHQ0 FKdpgwRZ21xTWFN2s8EF+KnLAdLlBuywWUJOcGODQltASYsowrYDRZSLsC2ZTJl4 saJa1tZwqM4eQtYwzxDMfbAlnhrN+bxzii88GaTsYuDQg+crVvKeE8o6C9Rsv9l9 dv8U0rFow6LHedZnDQTAOBErHofwSs3GdjJmX994USSh1G2wyl80c8yCQfWMntdM CHIb5TNeJa9T+jFsklxXlcTLdueKR6CeUIJhXEoM0PYWTPoMr2rN0goSg1ITrmKA 9Hy1bqqaQbgHs/GcqsmPiCYDa/q8qO6B -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:37 2024 by rpki-client on console-ams.rpki-client.org