$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: qkG7vLsIfa9pipTq1oSw4hZmnU6WMC4re7KhbgqEFtU= Subject key identifier: FE:77:24:5D:31:CC:7C:A3:BA:3B:4A:25:AC:15:87:63:17:CD:96:E7 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 030B Signing time: Fri 03 May 2024 03:15:39 +0000 Manifest this update: Fri 03 May 2024 03:15:38 +0000 Manifest next update: Fri 10 May 2024 03:15:38 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: tZCppe2z35ckAlrLtWxLjEX7ggfNsbu1933uSvzbK3s=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: G5cP10McaNsWgX++K6VbOwUXyhRQx2zZSuivkEv06WI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: May 3 03:15:38 2024 GMT Not After : May 10 03:15:38 2024 GMT Subject: CN=663456da-9b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5a:ce:44:ee:92:c8:f2:85:e6:a3:03:4a:f3: 73:b7:e1:fb:67:db:25:2e:1d:86:a1:55:06:bb:8a: 5b:e7:78:1e:a4:d0:4c:dd:a6:f1:a4:a0:bc:74:99: 2e:aa:46:a5:9e:a0:96:55:fc:56:92:ef:00:95:cf: 9a:0d:7c:91:a0:e6:79:c6:b6:0c:19:bc:29:6e:75: 2d:e3:7c:7f:8c:d4:5e:d1:1a:3a:0d:12:14:4c:b4: 81:f6:f4:87:64:87:3c:f2:ed:1a:54:ca:64:3f:8d: 0d:10:fd:6f:b3:ab:18:50:20:18:96:c2:1b:08:71: 20:34:64:80:be:00:7f:3a:c7:61:93:b7:43:60:6e: 9e:94:a4:c3:0f:30:97:b4:78:f9:00:4b:08:12:a1: e4:05:4a:8e:0b:4e:24:81:7a:07:bb:d2:55:ef:06: 22:51:e1:ae:e8:3a:53:ad:33:1d:6c:76:1c:be:2e: 7a:99:0e:08:a6:6e:bb:76:de:8c:26:13:4e:f4:79: 51:05:f0:82:e2:63:6a:00:0d:1a:e8:ef:37:08:90: dc:cc:54:19:c7:cc:5c:6e:8c:83:dc:e3:1d:6b:f1: 44:d5:16:0b:60:fd:fd:60:ee:69:5d:42:17:71:fc: ef:56:d9:2e:6f:f5:72:95:6b:65:95:fa:a1:3b:ad: da:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:24:5D:31:CC:7C:A3:BA:3B:4A:25:AC:15:87:63:17:CD:96:E7 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:38:32:58:d7:dd:d0:ce:71:cf:c1:e4:92:4c:3b:90:c1:69: 19:96:fd:d4:69:c9:f2:6c:c2:b8:d2:73:5a:54:fe:3c:4b:83: 8d:63:bf:f6:e7:1e:c4:d1:9a:c9:ba:79:e7:19:48:3f:d5:19: c3:5a:3d:a0:ee:6e:fb:a8:55:da:87:75:42:b3:0e:c7:4f:0f: 6d:f2:61:36:40:de:36:61:cd:23:c1:f7:7f:4c:5e:82:30:73: 37:09:e0:45:b8:b7:4d:8c:5a:36:a3:4e:18:6f:94:fd:d3:dd: 73:c3:05:0c:ee:47:29:4d:51:d2:d5:ca:ce:88:d2:33:f9:ac: 71:f3:2a:60:0b:e8:6b:a6:3e:eb:31:86:6f:f7:ae:50:76:ac: af:1c:5e:f3:14:dc:5b:95:13:53:05:dc:38:82:b2:5e:c1:88: 5c:5a:30:1d:f4:4b:08:2e:35:65:f2:77:66:ba:5e:e4:40:0c: ba:aa:49:f6:34:8f:bc:16:1b:2e:c1:4e:5c:21:55:37:3f:7f: 7f:c2:15:cd:b0:9a:86:73:b2:50:72:e1:fd:ff:a5:65:ba:d0: 1a:f5:36:b5:d9:3c:62:f0:6f:fd:91:f3:71:6e:e5:00:07:d5: 8e:44:11:8f:38:fc:50:14:0e:1c:a2:6e:db:7c:ad:c5:04:ab: e3:fa:b0:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjQwNTAzMDMxNTM4WhcNMjQwNTEwMDMxNTM4WjAYMRYwFAYD VQQDEw02NjM0NTZkYS05YjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VrORO6SyPKF5qMDSvNzt+H7Z9slLh2GoVUGu4pb53gepNBM3abxpKC8dJku qkalnqCWVfxWku8Alc+aDXyRoOZ5xrYMGbwpbnUt43x/jNRe0Ro6DRIUTLSB9vSH ZIc88u0aVMpkP40NEP1vs6sYUCAYlsIbCHEgNGSAvgB/Osdhk7dDYG6elKTDDzCX tHj5AEsIEqHkBUqOC04kgXoHu9JV7wYiUeGu6DpTrTMdbHYcvi56mQ4Ipm67dt6M JhNO9HlRBfCC4mNqAA0a6O83CJDczFQZx8xcboyD3OMda/FE1RYLYP39YO5pXUIX cfzvVtkub/VylWtllfqhO63aiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP53JF0x zHyjujtKJawVh2MXzZbnMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIODJY193QznHPweSSTDuQwWkZlv3UacnybMK40nNaVP48S4ONY7/2 5x7E0ZrJunnnGUg/1RnDWj2g7m77qFXah3VCsw7HTw9t8mE2QN42Yc0jwfd/TF6C MHM3CeBFuLdNjFo2o04Yb5T9091zwwUM7kcpTVHS1crOiNIz+axx8ypgC+hrpj7r MYZv965QdqyvHF7zFNxblRNTBdw4grJewYhcWjAd9EsILjVl8ndmul7kQAy6qkn2 NI+8FhsuwU5cIVU3P39/whXNsJqGc7JQcuH9/6VlutAa9Ta12Txi8G/9kfNxbuUA B9WORBGPOPxQFA4com7bfK3FBKvj+rAT -----END CERTIFICATE-----Generated at Fri May 3 04:36:46 2024 by rpki-client on console-ams.rpki-client.org