$ rpki-client -vvf rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft File: NUCGnt82N-2YjCC9q68feDKpJ5s.mft (raw, json) Hash identifier: tEHHJr/camHphrePNrL2QbDdF0Agvm40qk4uAOxsyDM= Subject key identifier: 58:A7:C1:97:3A:6F:E7:74:77:7D:85:78:F7:79:41:F0:C2:D7:D3:64 Authority key identifier: 35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B Certificate issuer: /CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft Manifest number: 6A Signing time: Wed 15 May 2024 07:40:09 +0000 Manifest this update: Wed 15 May 2024 07:40:08 +0000 Manifest next update: Wed 22 May 2024 07:40:08 +0000 Files and hashes: 1: NUCGnt82N-2YjCC9q68feDKpJ5s.crl (hash: JRnejn65OvDBEzDm3fCqSETzojNLQrCmwQaOSuo/jPQ=) 2: B301332073DF11EE9DFE0B56C4F9AE02.roa (hash: N2i2agjUsHeAH/r62Q8YVpeahgIj+1qwNN91iqqJ1uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E847/serialNumber=3540869EDF3637ED988C20BDABAF1F7832A9279B Validity Not Before: May 15 07:40:08 2024 GMT Not After : May 22 07:40:08 2024 GMT Subject: CN=664466d9-4f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:e6:5d:25:1b:28:ae:96:91:07:60:98:5d: d2:bc:ed:23:e7:a0:62:21:f8:b7:8f:b1:0e:65:16: c9:41:89:b9:c7:9d:4e:15:f9:1e:93:0d:e9:9f:9b: 60:21:1e:64:66:7c:f7:40:85:7b:e3:0f:2b:98:7f: 2a:a7:f0:c9:eb:1b:55:4e:5a:7c:0b:94:31:e7:36: 76:d1:6d:6a:ab:97:ec:5c:9b:c9:30:f4:29:b0:62: 23:28:d2:61:fd:b6:20:2e:89:67:7a:db:b6:77:a7: 48:fe:9f:25:47:2a:a7:ca:60:5a:33:f6:18:ba:a9: cc:ce:ec:a6:a0:9f:07:40:97:58:30:0c:ad:0b:c8: 0f:51:a6:06:37:49:cb:fa:3a:c4:6a:1a:55:cc:f9: cb:92:e6:a5:09:35:ed:68:d8:c0:02:2a:eb:3c:8a: d1:60:1b:60:f6:62:7d:11:a7:44:73:bb:46:6d:13: c5:fc:13:1f:41:45:e4:11:2a:01:9f:4d:9d:13:8e: ff:00:00:64:79:18:a9:5e:a7:0a:7e:c3:90:0f:30: 8e:ab:4c:45:ff:53:36:b2:64:eb:c7:a7:56:50:12: b7:8e:c0:b7:67:13:dd:2c:fe:3d:ed:79:87:a9:8f: 3d:b7:2a:06:45:fd:02:8a:0e:d5:61:9d:07:4e:81: e9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:C1:97:3A:6F:E7:74:77:7D:85:78:F7:79:41:F0:C2:D7:D3:64 X509v3 Authority Key Identifier: keyid:35:40:86:9E:DF:36:37:ED:98:8C:20:BD:AB:AF:1F:78:32:A9:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUCGnt82N-2YjCC9q68feDKpJ5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E847/ED8F1C2E73DE11EEA79AE851C4F9AE02/NUCGnt82N-2YjCC9q68feDKpJ5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:84:53:77:1b:a1:0d:73:21:59:24:f4:8e:1e:b5:8a:b2:bf: 22:fe:4a:79:bc:19:74:3e:af:8c:1b:24:81:f0:6b:a3:ce:ec: 1e:8b:8a:05:d0:24:97:c6:3a:b1:aa:80:a7:86:84:08:61:0d: c1:69:aa:f8:64:39:13:21:e5:cd:b0:82:c5:18:f6:98:65:86: 53:09:c5:ab:2f:7a:80:21:1d:ed:27:94:30:b4:47:99:bc:62: 29:de:a0:b6:04:21:b4:de:d6:9f:ec:4b:88:ae:90:8d:72:98: 8f:72:09:ce:cd:fc:20:53:da:30:54:f4:bd:96:38:30:e7:78: 49:f7:93:ba:24:76:c0:64:80:ef:a4:c3:ae:7b:2f:7b:6c:ba: e6:0b:41:41:1e:42:2d:ab:f2:ef:9c:71:9d:3d:36:a3:00:cb: 5d:56:91:46:00:d0:99:32:97:9d:af:1e:f8:da:4f:c3:d2:d9: f6:58:59:50:fb:d8:71:a2:e3:4e:d8:40:cf:f5:02:f9:d2:15: c2:fe:e9:60:5e:92:ea:41:5e:0e:1c:e0:09:64:d9:09:ad:6d: f2:b4:22:44:5c:31:f2:7a:f3:6a:21:25:32:60:91:4c:cd:6f: 2e:15:d8:23:e4:de:3c:28:09:1f:d1:c6:68:71:4b:00:92:3e: f6:4f:aa:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTg0NzExMC8GA1UEBRMoMzU0MDg2OUVERjM2MzdFRDk4OEMyMEJEQUJBRjFGNzgz MkE5Mjc5QjAeFw0yNDA1MTUwNzQwMDhaFw0yNDA1MjIwNzQwMDhaMBgxFjAUBgNV BAMTDTY2NDQ2NmQ5LTRmNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhnOZdJRsorpaRB2CYXdK87SPnoGIh+LePsQ5lFslBibnHnU4V+R6TDemfm2Ah HmRmfPdAhXvjDyuYfyqn8MnrG1VOWnwLlDHnNnbRbWqrl+xcm8kw9CmwYiMo0mH9 tiAuiWd627Z3p0j+nyVHKqfKYFoz9hi6qczO7KagnwdAl1gwDK0LyA9RpgY3Scv6 OsRqGlXM+cuS5qUJNe1o2MACKus8itFgG2D2Yn0Rp0Rzu0ZtE8X8Ex9BReQRKgGf TZ0Tjv8AAGR5GKlepwp+w5APMI6rTEX/UzayZOvHp1ZQEreOwLdnE90s/j3teYep jz23KgZF/QKKDtVhnQdOgem5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWKfBlzpv 53R3fYV493lB8MLX02QwHwYDVR0jBBgwFoAUNUCGnt82N+2YjCC9q68feDKpJ5sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODQ3L0VEOEYxQzJFNzNE RTExRUVBNzlBRTg1MUM0RjlBRTAyL05VQ0dudDgyTi0yWWpDQzlxNjhmZURLcEo1 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlVDR250ODJOLTJZakNDOXE2OGZlREtwSjVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODQ3L0VEOEYxQzJFNzNERTExRUVBNzlBRTg1MUM0RjlBRTAyL05VQ0dudDgyTi0y WWpDQzlxNjhmZURLcEo1cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEOEU3cboQ1zIVkk9I4etYqyvyL+Snm8GXQ+r4wbJIHwa6PO7B6LigXQ JJfGOrGqgKeGhAhhDcFpqvhkORMh5c2wgsUY9phlhlMJxasveoAhHe0nlDC0R5m8 YineoLYEIbTe1p/sS4iukI1ymI9yCc7N/CBT2jBU9L2WODDneEn3k7okdsBkgO+k w657L3tsuuYLQUEeQi2r8u+ccZ09NqMAy11WkUYA0Jkyl52vHvjaT8PS2fZYWVD7 2HGi407YQM/1AvnSFcL+6WBekupBXg4c4Alk2QmtbfK0IkRcMfJ682ohJTJgkUzN by4V2CPk3jwoCR/RxmhxSwCSPvZPqks= -----END CERTIFICATE-----Generated at Wed May 15 09:27:30 2024 by rpki-client on console-fra.rpki-client.org