$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft File: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft (raw, json) Hash identifier: gJhNd0OXbW1GQ4QNkYhTN8x3nSstsE4XZOX0N/l76mo= Subject key identifier: 7B:28:F3:3E:43:AC:8D:EC:64:D5:EB:5A:12:6B:84:12:99:B2:FB:29 Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft Manifest number: 0187 Signing time: Tue 07 May 2024 04:45:26 +0000 Manifest this update: Tue 07 May 2024 04:45:25 +0000 Manifest next update: Tue 14 May 2024 04:45:25 +0000 Files and hashes: 1: NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl (hash: 1pkhu8cxYzacczl5lSH5ACIMoJgd7U2yTrlQdD7jDaA=) 2: 134B439A91B611ED8BA25C80C4F9AE02.roa (hash: R6cxuKyJt5TX4itbVsaYIcRMQZ4Yj3JH6cPeKm7IwwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD Validity Not Before: May 7 04:45:25 2024 GMT Not After : May 14 04:45:25 2024 GMT Subject: CN=6639b1e5-fa19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:f1:af:ee:f4:50:b2:91:b8:0a:cc:01:35: 56:87:cb:39:03:2b:2c:2e:bb:c2:a8:b9:21:74:55: 73:e5:d7:ca:20:2a:f3:6d:9c:6a:bf:70:e4:4c:99: 56:b1:21:c6:42:9c:eb:29:73:0b:a4:ea:bd:99:70: f8:1e:0b:f5:08:5f:38:35:4a:e9:09:6f:11:eb:30: e7:74:c0:11:99:b9:ab:30:5a:81:10:6c:10:56:df: 0d:6b:97:12:3e:f9:86:29:ab:e6:82:d2:6e:a0:d4: 3a:6d:5d:52:36:d5:3d:50:cf:d5:c8:43:c1:88:a4: 56:b3:cc:d1:b7:5c:a2:4c:75:96:9f:93:46:f8:bf: 66:3a:ea:0b:37:6a:5e:8c:db:fd:b1:7b:c9:72:6b: b0:b7:2e:a0:84:91:22:bc:cc:84:c1:b8:1a:cd:e7: d4:49:cb:a0:c7:de:dc:9f:63:b4:d5:9d:3e:08:0c: e6:94:fc:2c:fe:76:fc:5d:a5:8f:ad:9f:34:d1:fe: 55:11:b5:d4:b3:51:47:e9:0a:ef:a5:32:3a:7c:f4: f5:e1:ff:c9:7e:bc:03:62:23:e6:3a:f7:64:da:51: 8a:9c:7e:4f:04:a1:8e:77:85:eb:50:69:6b:35:db: ff:06:52:61:ae:eb:41:76:e7:a6:eb:9f:dd:7c:37: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:28:F3:3E:43:AC:8D:EC:64:D5:EB:5A:12:6B:84:12:99:B2:FB:29 X509v3 Authority Key Identifier: keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:0b:91:20:07:36:d4:d2:94:0d:3f:07:5b:9d:8d:98:66:3c: f0:be:38:3a:c4:63:09:6f:c8:fa:35:14:8b:f4:fa:8d:eb:ac: 4b:f3:21:0c:d7:b1:fa:bd:9c:31:81:3b:dc:4f:1c:5a:b2:4d: f6:86:60:c8:b3:9b:fe:ef:fd:ee:0e:7c:96:43:84:37:27:64: a3:c7:37:61:8f:44:8d:d5:8f:31:85:63:a5:47:8d:2c:f2:9c: 9a:b8:29:c4:63:10:3f:18:a3:ea:c1:d0:d8:f8:e9:0f:b5:cc: 13:8c:8e:4a:bc:61:b2:6d:02:2a:e2:38:c4:1f:ae:e7:03:2a: 8d:d6:ec:69:c1:ad:79:21:5d:77:72:79:88:9b:de:5b:3d:c4: a9:81:73:de:79:8c:0f:fa:32:b6:1f:79:e1:65:66:18:8f:b5: cf:9d:98:19:39:fc:14:95:f7:58:ae:74:54:62:79:a6:4a:48: 7d:46:82:07:82:fb:68:af:1a:d0:6c:6b:74:8a:91:f6:2f:fd: 7a:57:5d:81:1c:7a:d4:75:61:1a:4d:7d:03:cf:e1:d9:84:e1: 45:b6:8c:17:2f:10:1c:c4:bc:ac:8d:4d:de:f6:9d:29:30:84: 92:2c:60:31:46:f7:e2:ee:85:53:36:73:eb:b3:f0:07:4c:da: e5:00:03:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzMzMxMTAvBgNVBAUTKDM2NDA4QzExQzU0NzJCODIyNDhBRkZFQkVFREJCMjBF M0UwN0E2Q0QwHhcNMjQwNTA3MDQ0NTI1WhcNMjQwNTE0MDQ0NTI1WjAYMRYwFAYD VQQDEw02NjM5YjFlNS1mYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYnxr+70ULKRuArMATVWh8s5AyssLrvCqLkhdFVz5dfKICrzbZxqv3DkTJlW sSHGQpzrKXMLpOq9mXD4Hgv1CF84NUrpCW8R6zDndMARmbmrMFqBEGwQVt8Na5cS PvmGKavmgtJuoNQ6bV1SNtU9UM/VyEPBiKRWs8zRt1yiTHWWn5NG+L9mOuoLN2pe jNv9sXvJcmuwty6ghJEivMyEwbgazefUScugx97cn2O01Z0+CAzmlPws/nb8XaWP rZ800f5VEbXUs1FH6QrvpTI6fPT14f/JfrwDYiPmOvdk2lGKnH5PBKGOd4XrUGlr Ndv/BlJhrutBduem65/dfDfYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHso8z5D rI3sZNXrWhJrhBKZsvspMB8GA1UdIwQYMBaAFDZAjBHFRyuCJIr/6+7bsg4+B6bN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjMzMy9ERUNCNjVBNDIz OTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0SWtpdl9yN3R1eURqNEhw czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rQ01FY1ZISzRJa2l2X3I3dHV5RGo0SHBzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjMzMy9ERUNCNjVBNDIzOTgxMUVEOTA2NzIyNkZDNEY5QUUwMi9Oa0NNRWNWSEs0 SWtpdl9yN3R1eURqNEhwczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFC5EgBzbU0pQNPwdbnY2YZjzwvjg6xGMJb8j6NRSL9PqN66xL8yEM 17H6vZwxgTvcTxxask32hmDIs5v+7/3uDnyWQ4Q3J2Sjxzdhj0SN1Y8xhWOlR40s 8pyauCnEYxA/GKPqwdDY+OkPtcwTjI5KvGGybQIq4jjEH67nAyqN1uxpwa15IV13 cnmIm95bPcSpgXPeeYwP+jK2H3nhZWYYj7XPnZgZOfwUlfdYrnRUYnmmSkh9RoIH gvtorxrQbGt0ipH2L/16V12BHHrUdWEaTX0Dz+HZhOFFtowXLxAcxLysjU3e9p0p MISSLGAxRvfi7oVTNnPrs/AHTNrlAAMy -----END CERTIFICATE-----Generated at Tue May 7 05:39:51 2024 by rpki-client on console-fra.rpki-client.org