$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: Api8FfMqzW1Qmts+b2JQiyKQ1lr/fU7bsj/5ahdpzPQ= Subject key identifier: 87:49:8D:C0:93:D4:30:E7:C5:4D:B3:E5:76:2F:DC:B7:CE:54:F5:26 Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 063B Signing time: Thu 02 May 2024 23:51:43 +0000 Manifest this update: Thu 02 May 2024 23:51:43 +0000 Manifest next update: Thu 09 May 2024 23:51:43 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: bOB/yCKsFe4HPDThdXJWh7uqiFKjCzgtBpeEje3yb2o=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: UVWZxjhQwVPDFy3VbmeOiO4yarjkR3sA0bGxj31r7PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: May 2 23:51:43 2024 GMT Not After : May 9 23:51:43 2024 GMT Subject: CN=6634270f-b303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:97:89:45:3a:5e:a1:43:91:c7:ee:88:35:f5: cb:db:39:f2:cb:69:4b:e4:be:ef:ae:f3:2d:46:cb: 8e:ca:72:b5:c0:1e:08:1c:a5:4d:e4:16:35:70:fe: f8:32:e1:74:5a:c7:6c:ec:e1:ed:d2:f3:9f:7f:0f: 32:58:37:f0:07:15:60:91:99:9d:24:47:e0:1c:ff: bc:62:70:22:4d:41:04:4a:a3:36:e8:f9:05:67:92: 4a:2a:10:c1:51:98:c2:d1:29:69:49:1a:e8:09:ab: cf:a0:08:4f:4d:21:a9:76:30:19:dd:e3:cd:b4:c5: 24:c3:bc:d4:18:0d:59:0b:0d:85:04:9b:8d:82:02: 6b:b4:d1:2e:8f:5a:43:a1:59:01:a7:a6:55:2c:45: 5f:b3:58:ff:0b:a1:f1:4b:53:7b:66:31:cf:36:41: 40:b1:0e:84:ef:cb:3d:7f:63:d8:7a:b3:46:3f:04: e7:d9:ad:e3:ca:90:91:67:cd:f0:ae:be:59:0b:0d: 76:30:85:de:49:9d:fa:95:0e:88:bd:2b:18:41:66: 57:a8:bf:d4:5a:68:91:16:7d:45:0a:d4:79:5a:b2: 67:a3:4f:42:d2:0c:cb:70:9c:40:0e:7e:dc:52:53: ba:56:bf:e7:cf:66:43:94:a1:91:f4:c7:ed:07:67: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:49:8D:C0:93:D4:30:E7:C5:4D:B3:E5:76:2F:DC:B7:CE:54:F5:26 X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:40:0c:dc:e5:e6:e6:97:0a:14:a8:a5:b6:9b:c4:9e:a2:28: ff:28:7b:9e:d4:06:b6:03:f1:a3:0f:c3:7f:1e:f3:d1:98:2b: b7:3b:e7:9c:c3:d3:0f:a9:fb:21:a2:13:39:45:b7:66:e2:98: f9:57:70:a7:ab:cc:c9:de:f1:c6:24:ec:8a:d2:d3:e1:15:4f: a4:a5:ca:e9:5a:01:4e:2d:3e:27:89:b8:ca:4d:dc:1b:25:b5: fe:12:82:8c:db:92:c2:bd:fa:08:fa:58:6b:ab:4e:0f:ae:0c: 8a:59:eb:c1:ce:47:b7:60:b4:8f:d3:84:81:28:65:f0:a3:37: e4:04:22:01:34:1b:29:7a:f0:ff:e2:4c:fa:81:36:79:79:f1: 12:c5:b7:cb:69:9c:93:cb:59:35:17:d2:a7:c8:ae:ed:5d:dc: 59:f2:1b:d5:1c:6a:68:12:c7:70:8c:d1:39:f5:66:0c:f2:22: 42:3d:33:7c:b6:3a:6e:58:43:78:39:9c:66:15:94:3c:d3:65: 25:5c:fa:82:38:d1:f9:6e:22:f1:af:ab:49:b5:57:da:17:06: e3:37:3f:e2:e5:89:c8:34:dd:7c:d4:a5:71:d2:ab:14:73:f1: b4:26:e5:5b:0f:02:bd:eb:ed:66:aa:e5:a1:5d:aa:84:f8:40: 50:05:1d:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjQwNTAyMjM1MTQzWhcNMjQwNTA5MjM1MTQzWjAYMRYwFAYD VQQDEw02NjM0MjcwZi1iMzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/peJRTpeoUORx+6INfXL2znyy2lL5L7vrvMtRsuOynK1wB4IHKVN5BY1cP74 MuF0Wsds7OHt0vOffw8yWDfwBxVgkZmdJEfgHP+8YnAiTUEESqM26PkFZ5JKKhDB UZjC0SlpSRroCavPoAhPTSGpdjAZ3ePNtMUkw7zUGA1ZCw2FBJuNggJrtNEuj1pD oVkBp6ZVLEVfs1j/C6HxS1N7ZjHPNkFAsQ6E78s9f2PYerNGPwTn2a3jypCRZ83w rr5ZCw12MIXeSZ36lQ6IvSsYQWZXqL/UWmiRFn1FCtR5WrJno09C0gzLcJxADn7c UlO6Vr/nz2ZDlKGR9MftB2dazwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdJjcCT 1DDnxU2z5XYv3LfOVPUmMB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3QAzc5ebmlwoUqKW2m8Seoij/KHue1Aa2A/GjD8N/HvPRmCu3O+ec w9MPqfshohM5Rbdm4pj5V3Cnq8zJ3vHGJOyK0tPhFU+kpcrpWgFOLT4nibjKTdwb JbX+EoKM25LCvfoI+lhrq04PrgyKWevBzke3YLSP04SBKGXwozfkBCIBNBspevD/ 4kz6gTZ5efESxbfLaZyTy1k1F9KnyK7tXdxZ8hvVHGpoEsdwjNE59WYM8iJCPTN8 tjpuWEN4OZxmFZQ802UlXPqCONH5biLxr6tJtVfaFwbjNz/i5YnINN181KVx0qsU c/G0JuVbDwK96+1mquWhXaqE+EBQBR10 -----END CERTIFICATE-----Generated at Fri May 3 00:48:28 2024 by rpki-client on console-ams.rpki-client.org