$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json) Hash identifier: i684o2oNNk3ZCvoGNIVF1x8eSG2aECHo6999ULdX6yk= Subject key identifier: E2:E8:07:02:A8:45:3B:8E:60:A9:D3:9A:9A:B4:86:02:60:97:BD:B1 Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 15F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft Manifest number: 15EB Signing time: Tue 28 May 2024 17:19:15 +0000 Manifest this update: Tue 28 May 2024 17:19:15 +0000 Manifest next update: Tue 04 Jun 2024 17:19:15 +0000 Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: qjzEu5OVGuDqCEo1goMK+9SVBRixMXk5CBLBHOZ3caw=) 2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: u8ortcT9MVFR9wLoP95O/siQb9jiYn8AeoW1F/za0m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 16:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5619 (0x15f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: May 28 17:19:15 2024 GMT Not After : Jun 4 17:19:15 2024 GMT Subject: CN=66561213-5993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:0e:77:84:dd:5e:1c:f8:a5:60:ae:9f:ad: f2:5d:77:15:18:e7:c0:c5:57:59:5c:4a:47:da:f2: 33:72:b8:3a:78:f9:94:c9:61:e2:c7:e0:d1:93:0b: c9:73:bf:70:ed:b1:02:96:dc:f4:6b:98:26:4f:24: 75:25:8d:21:d4:3a:4d:29:bb:43:d0:88:49:f8:a3: d9:c0:90:bc:a2:da:1d:37:ce:70:74:38:98:51:1f: 85:18:30:75:d9:88:1b:70:da:ca:03:0b:02:d2:e5: 0f:1b:f1:16:b4:d9:df:33:ed:9a:c4:41:dc:5a:f3: ed:e1:82:c9:bc:a5:77:33:82:a3:3b:91:25:e2:05: b6:fd:60:27:a9:c5:be:bc:b8:8f:00:12:33:3c:58: 21:d7:e9:17:23:52:c9:a6:77:98:d1:5a:d2:0c:2d: 1d:51:6d:0a:44:91:45:00:ed:da:07:e8:d1:81:d0: 7d:14:10:f0:70:d1:22:a1:33:c6:7f:79:d2:86:35: 5a:b4:ef:ea:4c:9f:5b:7e:3a:16:74:dd:71:4a:65: f0:8b:c6:9a:53:25:15:38:10:59:08:9f:03:ad:10: c1:b4:0b:61:09:b5:ec:40:06:20:87:32:01:31:f1: 1b:77:d2:cd:11:46:fd:98:0e:72:fe:e2:42:25:e3: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E8:07:02:A8:45:3B:8E:60:A9:D3:9A:9A:B4:86:02:60:97:BD:B1 X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a0:ed:93:09:be:58:ef:04:e2:23:fb:07:58:9f:a2:e0:6e: 92:54:f8:da:19:a6:39:2b:11:a0:a8:f1:43:30:95:ea:0a:ba: 17:ce:76:b2:a0:d7:93:cf:7a:a0:73:30:3f:5f:b1:07:20:af: af:f2:5f:70:4d:7c:84:3f:b7:7a:22:61:b5:6d:08:15:a7:0d: 09:0d:a7:0c:9c:08:83:81:6f:70:b7:70:14:7b:64:8b:13:75: 42:ad:44:cb:23:5e:27:f3:0c:ff:58:1f:d0:4a:f8:e7:63:f2: 3e:3f:df:c2:ab:7d:72:05:c1:c4:9e:42:63:20:7b:d0:fc:9f: c6:85:de:d0:ce:35:e7:16:89:ca:b4:9e:59:bf:bf:92:b1:46: c7:84:f5:f2:6d:b0:60:07:01:26:d8:52:a7:42:28:63:dc:3d: 74:50:f1:a8:ba:69:10:09:d4:57:3d:d6:28:8f:6b:98:6a:ce: 34:cc:32:28:aa:18:bd:71:82:1a:a6:8e:c4:c9:68:d6:53:c9: 0f:59:54:9e:c9:24:63:9e:c8:d5:f7:9a:ff:17:94:02:64:61: 92:47:9f:60:66:92:f2:11:26:10:0d:c5:ed:ac:73:46:7d:38: ea:74:f2:2b:f7:79:e7:2b:07:82:20:dd:9c:f2:da:a2:46:f6: 9a:e5:31:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjQwNTI4MTcxOTE1WhcNMjQwNjA0MTcxOTE1WjAYMRYwFAYD VQQDEw02NjU2MTIxMy01OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx4Od4TdXhz4pWCun63yXXcVGOfAxVdZXEpH2vIzcrg6ePmUyWHix+DRkwvJ c79w7bECltz0a5gmTyR1JY0h1DpNKbtD0IhJ+KPZwJC8otodN85wdDiYUR+FGDB1 2YgbcNrKAwsC0uUPG/EWtNnfM+2axEHcWvPt4YLJvKV3M4KjO5El4gW2/WAnqcW+ vLiPABIzPFgh1+kXI1LJpneY0VrSDC0dUW0KRJFFAO3aB+jRgdB9FBDwcNEioTPG f3nShjVatO/qTJ9bfjoWdN1xSmXwi8aaUyUVOBBZCJ8DrRDBtAthCbXsQAYghzIB MfEbd9LNEUb9mA5y/uJCJeOZxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLoBwKo RTuOYKnTmpq0hgJgl72xMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZoO2TCb5Y7wTiI/sHWJ+i4G6SVPjaGaY5KxGgqPFDMJXqCroXznay oNeTz3qgczA/X7EHIK+v8l9wTXyEP7d6ImG1bQgVpw0JDacMnAiDgW9wt3AUe2SL E3VCrUTLI14n8wz/WB/QSvjnY/I+P9/Cq31yBcHEnkJjIHvQ/J/Ghd7QzjXnFonK tJ5Zv7+SsUbHhPXybbBgBwEm2FKnQihj3D10UPGoumkQCdRXPdYoj2uYas40zDIo qhi9cYIapo7EyWjWU8kPWVSeySRjnsjV95r/F5QCZGGSR59gZpLyESYQDcXtrHNG fTjqdPIr93nnKweCIN2c8tqiRvaa5TGz -----END CERTIFICATE-----Generated at Tue May 28 17:50:52 2024 by rpki-client on console-fra.rpki-client.org