$ rpki-client -vvf rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft File: rNBOSci3K74B41N1Wc9MlHMO1d8.mft (raw, json) Hash identifier: jV8bFI5TkKeZMmy8FComiCJd4ATtQ4XJbUAGpBS2Lp4= Subject key identifier: D6:D1:D8:5A:AE:37:B0:1A:6F:91:74:14:84:B3:79:26:BE:0C:77:98 Authority key identifier: AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF Certificate issuer: /CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft Manifest number: 0B30 Signing time: Tue 30 Apr 2024 20:10:21 +0000 Manifest this update: Tue 30 Apr 2024 20:10:20 +0000 Manifest next update: Tue 07 May 2024 20:10:20 +0000 Files and hashes: 1: rNBOSci3K74B41N1Wc9MlHMO1d8.crl (hash: CyjBVFaRNXD0c2CyF+UxvS6Z2EwwPKSEso9naL9qlns=) 2: 4FE2CBA0F74C11EEA9368831C4F9AE02.roa (hash: wUtWWtOblDmN2oZ3l5tp2ZFVmOtLMYWVgUpV6mOP4KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411B3/serialNumber=ACD04E49C8B72BBE01E3537559CF4C94730ED5DF Validity Not Before: Apr 30 20:10:20 2024 GMT Not After : May 7 20:10:20 2024 GMT Subject: CN=6631502d-5ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:cb:a1:34:69:a1:bd:9c:57:a6:72:61:a1: 83:15:95:31:e8:37:c0:ee:62:c6:3a:b4:e2:c4:09: 55:32:e6:74:e7:e7:83:24:8a:6c:16:8b:76:cf:fb: ea:9d:cc:43:9e:d5:95:db:ab:7d:2a:23:8e:0b:f1: f5:ee:67:ca:31:cc:68:8b:7e:59:2a:b2:93:c8:e0: e6:fe:ae:76:af:8f:c4:d2:be:e1:d3:91:46:5e:22: b6:0f:89:3d:05:ad:df:be:6c:9b:01:58:8a:37:cb: e5:8d:48:b2:a6:96:3a:22:99:5c:8b:f7:c4:24:ec: f1:73:ce:3c:e8:3a:75:57:90:9d:02:8d:61:ef:3a: f9:7b:f6:ad:2d:75:7a:2b:1c:70:69:47:22:32:cc: e2:55:b9:e2:ee:d6:fb:10:e8:c1:49:d3:b7:13:62: 08:a8:a8:61:b2:0e:59:af:b3:1f:a3:e2:35:d4:7b: 41:bf:70:83:57:32:17:90:3d:47:9e:f0:d2:8e:cf: ee:d9:3d:52:25:78:09:41:9d:2e:30:00:7b:5c:4f: 6a:b7:8d:06:c3:64:d0:be:e1:45:17:0d:a3:08:c2: fd:97:a5:ce:3b:4a:ad:a1:dd:53:50:7e:85:9d:cc: 0d:25:b3:f9:80:7d:fb:33:a8:85:f2:7f:54:b4:78: 59:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D1:D8:5A:AE:37:B0:1A:6F:91:74:14:84:B3:79:26:BE:0C:77:98 X509v3 Authority Key Identifier: keyid:AC:D0:4E:49:C8:B7:2B:BE:01:E3:53:75:59:CF:4C:94:73:0E:D5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBOSci3K74B41N1Wc9MlHMO1d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411B3/C6DA292C184611EA9B842F27C4F9AE02/rNBOSci3K74B41N1Wc9MlHMO1d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:87:b4:7c:5b:63:cb:fa:5b:0c:ef:8c:bc:b4:0f:6e:7a:97: 60:b5:85:9b:78:65:55:27:a2:2d:0e:56:04:2b:57:be:06:e5: b5:4e:08:b8:3d:72:8d:b0:2b:83:f7:51:21:8e:72:8a:7c:46: d6:dd:98:ec:6d:31:a7:be:11:38:35:f2:48:08:1a:76:83:9e: c2:c7:d5:91:82:75:36:9a:3c:f8:63:6f:11:d8:b6:47:d3:61: 07:b2:de:8e:b8:6f:87:42:32:15:fd:72:09:8c:93:c2:fe:57: 56:27:1d:a5:fd:5a:1b:00:fb:b9:54:b8:03:93:5c:92:91:94: 23:05:6c:e0:e9:8b:5c:96:e7:e7:03:2f:74:74:ce:a2:3a:ed: e3:fc:75:81:c8:66:81:f9:0b:57:a1:3f:e6:f1:2b:4d:4c:e6: 7d:b9:f8:70:bd:9c:37:f6:3a:e0:b5:02:e3:a9:1c:f0:8f:f9: 47:e3:e9:63:fe:f0:45:01:b6:cd:0d:73:80:3f:01:b4:fb:93: 44:cd:c0:f2:c9:16:90:16:41:f0:e6:a3:8c:ee:3c:3c:9e:63: 7b:bc:fc:a8:ea:dc:10:20:07:fd:34:60:1c:0c:30:de:de:ce: 43:18:1e:ca:d0:e4:7e:df:9b:5d:b8:80:65:6e:59:42:9d:93: 9c:b9:74:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQjMxMTAvBgNVBAUTKEFDRDA0RTQ5QzhCNzJCQkUwMUUzNTM3NTU5Q0Y0Qzk0 NzMwRUQ1REYwHhcNMjQwNDMwMjAxMDIwWhcNMjQwNTA3MjAxMDIwWjAYMRYwFAYD VQQDEw02NjMxNTAyZC01YWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaXLoTRpob2cV6ZyYaGDFZUx6DfA7mLGOrTixAlVMuZ05+eDJIpsFot2z/vq ncxDntWV26t9KiOOC/H17mfKMcxoi35ZKrKTyODm/q52r4/E0r7h05FGXiK2D4k9 Ba3fvmybAViKN8vljUiyppY6Iplci/fEJOzxc8486Dp1V5CdAo1h7zr5e/atLXV6 KxxwaUciMsziVbni7tb7EOjBSdO3E2IIqKhhsg5Zr7Mfo+I11HtBv3CDVzIXkD1H nvDSjs/u2T1SJXgJQZ0uMAB7XE9qt40Gw2TQvuFFFw2jCML9l6XOO0qtod1TUH6F ncwNJbP5gH37M6iF8n9UtHhZDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbR2Fqu N7Aab5F0FISzeSa+DHeYMB8GA1UdIwQYMBaAFKzQTknItyu+AeNTdVnPTJRzDtXf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFCMy9DNkRBMjkyQzE4 NDYxMUVBOUI4NDJGMjdDNEY5QUUwMi9yTkJPU2NpM0s3NEI0MU4xV2M5TWxITU8x ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQk9TY2kzSzc0QjQxTjFXYzlNbEhNTzFkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFCMy9DNkRBMjkyQzE4NDYxMUVBOUI4NDJGMjdDNEY5QUUwMi9yTkJPU2NpM0s3 NEI0MU4xV2M5TWxITU8xZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOh7R8W2PL+lsM74y8tA9uepdgtYWbeGVVJ6ItDlYEK1e+BuW1Tgi4 PXKNsCuD91EhjnKKfEbW3ZjsbTGnvhE4NfJICBp2g57Cx9WRgnU2mjz4Y28R2LZH 02EHst6OuG+HQjIV/XIJjJPC/ldWJx2l/VobAPu5VLgDk1ySkZQjBWzg6Ytclufn Ay90dM6iOu3j/HWByGaB+QtXoT/m8StNTOZ9ufhwvZw39jrgtQLjqRzwj/lH4+lj /vBFAbbNDXOAPwG0+5NEzcDyyRaQFkHw5qOM7jw8nmN7vPyo6twQIAf9NGAcDDDe 3s5DGB7K0OR+35tduIBlbllCnZOcuXQZ -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:52 2024 by rpki-client on console-ams.rpki-client.org