$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json) Hash identifier: N8KqW1jbzAjeEtA6ngu/uF4LSu1aTfzzFuo2P9oI7ys= Subject key identifier: 67:6F:13:1E:87:99:C3:50:2B:14:BC:61:A3:C6:8B:63:80:83:62:11 Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Certificate serial: 18A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft Manifest number: 188E Signing time: Thu 02 May 2024 16:56:50 +0000 Manifest this update: Thu 02 May 2024 16:56:50 +0000 Manifest next update: Thu 09 May 2024 16:56:50 +0000 Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: B74vrZl0fqVcreDsSxB+3xoQfp/v3+zK4YnBEkvZCds=) 2: 83F0DA5C75D611E88AFEBA28C4F9AE02.roa (hash: QeyDbJ6OTfo080++JHFd/sKbD2PNdiS1v00T1rGC3TE=) 3: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: bfEyE4TKNgU0AD+tkKBBuSGzHfWsXEW2X9m2trp7DNs=) 4: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: 20iP3pEYmx1LQftxITgL2F8BGz/7YfseYms8iV/1g3Q=) 5: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: o5SO9tKeP7v01iWZOT6KVzpN6EM1lVisy9/tFg9OhXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6311 (0x18a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Validity Not Before: May 2 16:56:50 2024 GMT Not After : May 9 16:56:50 2024 GMT Subject: CN=6633c5d2-754a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:9e:75:eb:fc:38:41:a9:aa:56:92:6a:64: 53:f8:05:58:80:9f:c9:c8:a3:9c:33:d7:e9:6e:87: 57:4c:b9:25:d0:bf:e7:e2:28:bb:02:08:f8:f4:a5: fb:74:ea:67:f8:9c:ed:c7:1e:24:f1:4d:ca:7b:1e: 43:64:05:30:ef:0f:d0:ad:fb:81:c3:ff:ad:54:3d: 21:9f:c9:7a:6a:fb:fd:3d:a0:51:7d:7a:df:99:f1: 43:7f:b5:53:e2:7d:e0:15:40:b4:83:ef:aa:ae:29: 4c:4b:80:8a:0f:af:c4:3b:9c:92:a2:ff:03:c1:c7: cd:be:d7:98:44:cf:5b:81:9f:7a:c0:b7:d3:63:07: 14:79:02:63:f7:b5:94:98:ea:b7:0d:be:fd:da:01: 5e:b3:00:71:25:e0:d8:34:2d:c0:9d:47:62:8e:ee: 8c:1f:24:36:c8:f7:af:af:57:59:f0:e7:b1:c4:5a: 70:d9:c8:f6:50:dc:95:57:f2:7b:df:c4:7d:cc:3d: 57:63:1b:69:de:d9:50:2b:a7:64:31:33:b0:d4:b2: a0:bf:e3:23:ac:66:b6:32:d3:f3:76:3c:42:87:e3: ec:17:c2:0a:f8:50:4a:b6:7d:7b:0c:7f:15:4a:73: 13:2d:b2:62:56:86:38:5b:ff:40:7c:57:ae:49:ae: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6F:13:1E:87:99:C3:50:2B:14:BC:61:A3:C6:8B:63:80:83:62:11 X509v3 Authority Key Identifier: keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d3:de:0c:79:b8:ec:b2:bc:e8:70:07:c4:9f:05:32:80:73: 94:7e:41:30:cb:a1:9f:fc:73:59:4c:67:0c:d2:b7:71:41:ac: fc:4c:eb:2e:25:ab:7c:68:cd:4a:62:52:f7:c3:14:4b:52:e6: 74:2c:48:97:26:6a:44:c5:ef:16:31:72:d6:ca:c0:31:6b:a8: e8:8e:a4:d6:77:7d:9e:e2:08:45:bf:a7:24:b3:bb:da:8b:7e: 89:fe:73:9d:78:45:a2:8c:66:69:37:87:0b:39:18:33:9b:7f: 7a:e4:c2:a2:ce:30:d5:05:b4:e2:09:ce:fe:a0:fa:2e:bb:46: b5:df:57:6c:34:85:0e:36:0d:71:57:33:70:8e:6e:7a:82:1d: fd:14:a4:75:db:25:c0:00:d8:ba:72:9c:85:19:f6:44:83:97: 4a:02:b4:f7:58:59:c7:51:fd:23:62:94:d5:d5:95:20:ef:fe: 4e:43:4d:73:3d:ee:cc:e9:13:31:90:89:24:fe:de:bf:eb:8a: c1:3e:2c:55:3a:91:1a:3a:27:53:6f:80:67:20:ed:0e:c9:50: a7:de:05:71:99:6e:03:5f:4b:89:90:b3:26:be:ba:29:b0:ed: a0:82:90:d1:df:c9:ec:82:b8:c4:be:9e:bb:a4:df:8a:d8:1c: 4e:f4:0c:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew MzVFMjBERUEwHhcNMjQwNTAyMTY1NjUwWhcNMjQwNTA5MTY1NjUwWjAYMRYwFAYD VQQDEw02NjMzYzVkMi03NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y6edev8OEGpqlaSamRT+AVYgJ/JyKOcM9fpbodXTLkl0L/n4ii7Agj49KX7 dOpn+Jztxx4k8U3Kex5DZAUw7w/QrfuBw/+tVD0hn8l6avv9PaBRfXrfmfFDf7VT 4n3gFUC0g++qrilMS4CKD6/EO5ySov8DwcfNvteYRM9bgZ96wLfTYwcUeQJj97WU mOq3Db792gFeswBxJeDYNC3AnUdiju6MHyQ2yPevr1dZ8OexxFpw2cj2UNyVV/J7 38R9zD1XYxtp3tlQK6dkMTOw1LKgv+MjrGa2MtPzdjxCh+PsF8IK+FBKtn17DH8V SnMTLbJiVoY4W/9AfFeuSa7McQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdvEx6H mcNQKxS8YaPGi2OAg2IRMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx Z3RDLUJNYlllam9EWGlEZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL094MebjssrzocAfEnwUygHOUfkEwy6Gf/HNZTGcM0rdxQaz8TOsu Jat8aM1KYlL3wxRLUuZ0LEiXJmpExe8WMXLWysAxa6jojqTWd32e4ghFv6cks7va i36J/nOdeEWijGZpN4cLORgzm3965MKizjDVBbTiCc7+oPouu0a131dsNIUONg1x VzNwjm56gh39FKR12yXAANi6cpyFGfZEg5dKArT3WFnHUf0jYpTV1ZUg7/5OQ01z Pe7M6RMxkIkk/t6/64rBPixVOpEaOidTb4BnIO0OyVCn3gVxmW4DX0uJkLMmvrop sO2ggpDR38nsgrjEvp67pN+K2BxO9AyO -----END CERTIFICATE-----Generated at Thu May 2 20:04:27 2024 by rpki-client on console-ams.rpki-client.org