$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json) Hash identifier: xDo9xigmdQ1vZC0CgO1ONllDVpDS3VOylH24qcmPEPc= Subject key identifier: 6F:EE:D6:F1:81:F5:62:32:B0:B9:A8:EF:EC:7A:FA:E8:B4:AB:92:C7 Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Certificate serial: 0B34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft Manifest number: 0B29 Signing time: Fri 26 Apr 2024 19:47:36 +0000 Manifest this update: Fri 26 Apr 2024 19:47:36 +0000 Manifest next update: Fri 03 May 2024 19:47:35 +0000 Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: +vgcB/N2qJdJSDj09SLR5S4mTKC8DV8qsaJhyLqDpbI=) 2: 554D5B96098B11EE8E1F3382C4F9AE02.roa (hash: NNFk73eup6xDD5/Xe8XjuQFVJp+1cwXSTmmDOM53J3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Validity Not Before: Apr 26 19:47:36 2024 GMT Not After : May 3 19:47:35 2024 GMT Subject: CN=662c04d8-d4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:4f:76:82:96:ab:b2:71:ea:c3:ef:f4:e8: 52:f2:7b:2b:e0:89:f8:f1:aa:16:c7:50:21:af:31: 18:f6:10:8d:f3:0f:70:ae:82:f9:1a:3f:35:c9:7d: 88:6f:6a:9e:17:24:94:45:8c:9d:74:75:f8:8d:65: 58:1e:40:e5:fc:ab:21:8e:c5:5f:79:6e:36:d4:0f: e5:36:f1:12:2e:8b:3e:1b:e2:86:37:bd:9d:15:49: d0:d8:95:52:70:22:37:23:61:c4:29:61:c9:dc:7c: f7:6f:65:3c:11:59:19:c1:b4:44:da:91:ee:b0:1f: 22:92:7f:4a:81:38:a0:41:d7:ac:39:a3:18:34:61: 06:d9:e1:c0:82:a0:67:58:2b:eb:d4:e0:6c:2f:3d: 47:e0:0e:ab:04:52:e2:f1:a9:db:b5:67:d5:6a:be: a6:25:75:43:55:f2:3d:26:e4:20:83:42:20:a1:b6: ef:b9:61:b9:d4:4a:7c:ea:cb:a4:02:f6:e5:d2:c6: 22:1b:65:4d:6f:9b:5c:6c:b6:1a:f3:71:d9:84:a4: 53:f9:a6:bd:08:55:3d:5e:20:ef:98:74:dd:d6:ec: ab:75:57:0a:9e:3b:ca:5a:a2:9f:62:1d:dd:11:e3: 71:56:49:ab:2b:34:6b:4f:ec:81:2b:0c:7b:14:56: 15:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EE:D6:F1:81:F5:62:32:B0:B9:A8:EF:EC:7A:FA:E8:B4:AB:92:C7 X509v3 Authority Key Identifier: keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:93:7a:f1:4e:21:5a:63:ec:8b:38:5f:ed:df:93:5e:04:a2: 89:ef:38:89:4c:9e:38:ea:76:24:46:00:39:2d:9f:b8:ac:cb: b5:d5:4b:c9:23:dc:da:b8:1b:5c:2f:9b:72:8c:de:30:de:0f: fc:cf:37:b6:a9:50:ec:28:ac:33:f6:6b:8a:c3:84:e6:fd:92: da:b3:3a:f7:52:42:6f:9a:50:2e:0c:e1:50:b7:fb:d2:7f:67: 1c:b9:76:9e:71:2f:e4:74:35:2a:3f:ee:a4:4e:25:d5:9b:3a: 99:98:d2:57:61:b6:b8:b9:ee:6a:50:19:44:60:22:0f:92:5d: 1f:04:66:0c:4e:f0:e4:77:c0:f2:e9:39:28:99:5b:5e:01:11: 7d:79:d2:55:e6:de:c6:ee:32:71:a2:a0:69:ef:4c:46:9c:ce: fb:e6:03:15:66:90:af:5d:11:59:dd:6d:e3:aa:1c:d2:c5:65: 4e:05:a5:95:31:1e:f9:47:a8:0b:86:39:17:f9:dc:e4:8d:54: c1:02:16:77:77:23:47:9e:0a:a1:38:93:8c:73:20:04:0c:55: 76:11:e8:1f:d2:e3:53:f5:c3:b2:61:00:11:ba:bb:6e:35:6e: 8a:3a:2e:28:5e:68:26:b0:8e:9a:4f:1a:ab:38:ec:1e:72:e6: 6a:ce:83:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD QkYxRDI3NTYwHhcNMjQwNDI2MTk0NzM2WhcNMjQwNTAzMTk0NzM1WjAYMRYwFAYD VQQDEw02NjJjMDRkOC1kNGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApz9PdoKWq7Jx6sPv9OhS8nsr4In48aoWx1AhrzEY9hCN8w9wroL5Gj81yX2I b2qeFySURYyddHX4jWVYHkDl/KshjsVfeW421A/lNvESLos+G+KGN72dFUnQ2JVS cCI3I2HEKWHJ3Hz3b2U8EVkZwbRE2pHusB8ikn9KgTigQdesOaMYNGEG2eHAgqBn WCvr1OBsLz1H4A6rBFLi8anbtWfVar6mJXVDVfI9JuQgg0IgobbvuWG51Ep86suk Avbl0sYiG2VNb5tcbLYa83HZhKRT+aa9CFU9XiDvmHTd1uyrdVcKnjvKWqKfYh3d EeNxVkmrKzRrT+yBKwx7FFYVRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/u1vGB 9WIysLmo7+x6+ui0q5LHMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0 RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU3OS8yRDJGNDM3NDE0RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVp NkF5NWRjX2t6c25MOGRKMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdk3rxTiFaY+yLOF/t35NeBKKJ7ziJTJ446nYkRgA5LZ+4rMu11UvJ I9zauBtcL5tyjN4w3g/8zze2qVDsKKwz9muKw4Tm/ZLaszr3UkJvmlAuDOFQt/vS f2ccuXaecS/kdDUqP+6kTiXVmzqZmNJXYba4ue5qUBlEYCIPkl0fBGYMTvDkd8Dy 6TkomVteARF9edJV5t7G7jJxoqBp70xGnM775gMVZpCvXRFZ3W3jqhzSxWVOBaWV MR75R6gLhjkX+dzkjVTBAhZ3dyNHngqhOJOMcyAEDFV2Eegf0uNT9cOyYQARurtu NW6KOi4oXmgmsI6aTxqrOOwecuZqzoNV -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:38 2024 by rpki-client on console-ams.rpki-client.org