$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: pt8l70XxdspO83h2ySQlT1u7WdP2RWIRzMNuf/bpAAo= Subject key identifier: 70:6E:17:AC:A9:5B:0D:D7:BC:07:75:A8:DA:61:F5:DA:87:07:AF:07 Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1D03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1CF7 Signing time: Fri 26 Apr 2024 16:32:42 +0000 Manifest this update: Fri 26 Apr 2024 16:32:41 +0000 Manifest next update: Fri 03 May 2024 16:32:41 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: HtCuTTNIRBuBX435J+eezrAgZnOqBF8dJy9TBRtKvLk=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: zl57w1TNg6NspawbNa3tDP7qcbUoMTlpy31DBaau4ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7427 (0x1d03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Apr 26 16:32:41 2024 GMT Not After : May 3 16:32:41 2024 GMT Subject: CN=662bd729-5bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:f3:34:2a:44:49:72:59:18:19:7e:48:5c: 44:f6:85:e4:27:62:ac:f8:5d:7e:e9:ff:1a:cf:18: 22:15:21:61:93:bc:b8:00:cb:c8:66:11:39:57:ee: 9a:1d:41:8b:25:91:c0:b3:ed:db:0c:ed:4c:35:14: b6:5d:5f:21:43:34:57:34:fc:5f:66:94:f9:76:d3: ff:7b:84:c9:75:10:f4:1b:c5:45:ff:63:3c:60:07: a8:99:88:9e:b8:57:e7:7a:55:f2:39:f6:36:ba:4a: f9:63:33:23:86:4d:b3:91:ad:71:98:0c:87:80:1e: f7:b5:98:5c:1d:f7:e0:6e:b8:34:a5:a9:c3:e7:b7: 6f:97:e4:1b:fc:85:ea:04:e0:4e:1d:9a:e4:a1:40: d1:02:2c:a1:34:48:0d:e2:97:28:f1:12:a9:90:90: a3:4f:0e:bb:84:c7:65:82:dd:46:20:3d:52:8d:55: f7:de:ff:03:02:68:c7:59:43:17:40:0e:80:eb:a3: fc:fe:d6:8b:ed:8d:e5:9e:21:47:fe:bb:4d:a8:54: e4:0d:c1:dd:fb:ae:98:71:7b:b2:3f:ed:4d:56:56: e7:f5:ae:f6:70:bf:8a:23:0d:fe:6c:25:ba:ac:88: 96:1c:f7:bd:a7:b8:b4:6f:9b:8d:b5:ca:20:aa:15: d5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6E:17:AC:A9:5B:0D:D7:BC:07:75:A8:DA:61:F5:DA:87:07:AF:07 X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:00:7c:3d:f3:6d:51:6d:29:f5:57:88:bf:8e:c2:49:c3:e5: 0a:41:17:ef:ea:65:91:2a:b8:ef:d8:94:f5:b5:70:5a:08:fe: 7c:73:71:7d:5c:45:09:73:b0:54:5d:a5:91:1f:76:3f:a2:00: bc:bc:e9:b3:b1:2c:e4:6d:61:f0:8f:ad:c5:47:85:56:e7:e4: 89:ea:0f:7e:f7:2b:9e:eb:d9:33:aa:a6:77:1d:ab:b5:3b:94: 0f:c4:95:71:ae:a3:c6:39:29:8b:af:9d:01:3e:c3:e4:08:cb: 89:1f:2a:8b:bb:ea:b3:b4:8a:b5:fb:ba:58:cc:52:a7:de:40: d5:77:10:bf:1d:41:36:02:48:fe:8e:4e:57:bd:38:3f:8d:f0: 0e:ee:fa:2c:61:04:92:47:34:1f:72:0f:c4:df:27:f3:66:12: 75:10:2b:95:5c:f2:da:a7:18:66:c3:23:fb:29:22:0e:51:72: c4:12:c9:46:c0:16:e7:50:cb:04:68:24:34:1d:eb:94:06:b3: df:23:2d:3e:73:db:ae:1b:82:72:0c:42:68:04:59:42:37:e8: 40:95:bf:d3:a6:fa:b9:83:b7:66:fe:8a:f6:37:cc:4a:70:1f: 57:58:34:04:ce:20:14:7b:83:a5:a0:93:21:51:62:6a:ee:ae: 11:d7:8b:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjQwNDI2MTYzMjQxWhcNMjQwNTAzMTYzMjQxWjAYMRYwFAYD VQQDEw02NjJiZDcyOS01YmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvbzNCpESXJZGBl+SFxE9oXkJ2Ks+F1+6f8azxgiFSFhk7y4AMvIZhE5V+6a HUGLJZHAs+3bDO1MNRS2XV8hQzRXNPxfZpT5dtP/e4TJdRD0G8VF/2M8YAeomYie uFfnelXyOfY2ukr5YzMjhk2zka1xmAyHgB73tZhcHffgbrg0panD57dvl+Qb/IXq BOBOHZrkoUDRAiyhNEgN4pco8RKpkJCjTw67hMdlgt1GID1SjVX33v8DAmjHWUMX QA6A66P8/taL7Y3lniFH/rtNqFTkDcHd+66YcXuyP+1NVlbn9a72cL+KIw3+bCW6 rIiWHPe9p7i0b5uNtcogqhXViQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBuF6yp Ww3XvAd1qNph9dqHB68HMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjAHw9821RbSn1V4i/jsJJw+UKQRfv6mWRKrjv2JT1tXBaCP58c3F9 XEUJc7BUXaWRH3Y/ogC8vOmzsSzkbWHwj63FR4VW5+SJ6g9+9yue69kzqqZ3Hau1 O5QPxJVxrqPGOSmLr50BPsPkCMuJHyqLu+qztIq1+7pYzFKn3kDVdxC/HUE2Akj+ jk5XvTg/jfAO7vosYQSSRzQfcg/E3yfzZhJ1ECuVXPLapxhmwyP7KSIOUXLEEslG wBbnUMsEaCQ0HeuUBrPfIy0+c9uuG4JyDEJoBFlCN+hAlb/Tpvq5g7dm/or2N8xK cB9XWDQEziAUe4OloJMhUWJq7q4R14s3 -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:37 2024 by rpki-client on console-ams.rpki-client.org