$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: hI2iJ/Dt3Cs9tAPCIJ/BX1IkX78Lw54uf7HpNXJBeFc= Subject key identifier: 3D:6E:77:47:D3:F4:97:A7:BD:B3:12:CD:90:12:5D:9E:84:55:36:BB Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 29C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2985 Signing time: Sat 04 May 2024 15:54:07 +0000 Manifest this update: Sat 04 May 2024 15:54:06 +0000 Manifest next update: Sat 11 May 2024 15:54:06 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: 99OFcRa0Hrrp9iXf5GlgMyHGcArJ2U5gnPXiXfk0S7Y=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: 3ztfW4qkk8fdSuI1tpML+BV21ktLaGOQVbvnK7tDfio=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: WrHJMHrfmwXer8MYeRSCkBLBrLygk4/ZZ/f4skJIziE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 15:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10689 (0x29c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: May 4 15:54:06 2024 GMT Not After : May 11 15:54:06 2024 GMT Subject: CN=66365a1f-13fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:ab:4d:15:ee:fd:db:ae:80:68:ac:76:ce: 45:9d:ef:89:2d:1d:4a:bd:2b:a8:a6:ef:4e:b0:ed: ee:7b:04:ce:43:a3:bf:a9:5e:f0:30:b1:54:58:e2: 86:28:b2:dc:62:eb:7c:70:4d:c4:84:f7:89:36:51: 86:f2:1e:e2:7b:52:b7:dd:56:d6:32:b7:ce:16:88: 4e:c5:39:0f:c6:17:81:76:8b:a2:0a:5a:00:7f:5e: d2:18:da:e1:3f:e4:0d:51:de:af:1a:da:9d:1b:9d: 34:e9:4d:f1:18:17:c4:cd:dc:77:5d:24:34:72:f5: 9e:81:d3:a9:1c:8a:0d:9d:26:b6:f0:fa:a2:1c:5f: 3b:93:db:74:b4:a4:64:2f:84:c6:18:0b:8c:8c:75: 7c:c0:7c:27:81:2b:8d:9f:e9:c1:e9:60:89:ac:23: b4:fc:3e:f0:41:e1:23:1d:ff:b4:3a:6f:dc:b4:c5: 41:3c:09:21:e5:d9:08:3a:55:60:b9:0d:70:e7:98: bd:96:1b:3f:f4:66:06:f1:16:a0:9c:de:49:99:f0: 81:eb:95:17:cd:dd:50:e9:28:82:89:a7:86:fe:87: 7c:ff:2b:cb:5b:46:44:93:e5:20:fc:57:0d:f0:2b: 32:8c:dd:19:4b:b8:9c:c7:b2:c8:af:b2:19:f8:67: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6E:77:47:D3:F4:97:A7:BD:B3:12:CD:90:12:5D:9E:84:55:36:BB X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ae:c0:8e:d9:1a:b7:e9:2f:5f:52:9e:5b:f6:15:af:d8:50: 16:50:a5:88:be:2b:ee:ec:e7:06:05:81:0c:89:f6:6c:97:3d: 7d:2c:83:d5:57:81:f4:ff:96:fc:6e:a8:a1:6f:1f:a9:7b:17: 7f:9d:55:0d:07:5e:1f:37:38:68:cd:3f:1b:41:4a:b8:22:c5: f4:fc:be:1a:7f:67:6c:42:7c:cb:7f:83:25:a3:3c:68:ca:a3: ca:00:b1:38:02:6f:c2:33:07:5d:98:58:5a:8e:3b:da:57:5c: 3c:d0:fc:31:59:f9:7c:33:b4:75:13:08:fb:87:47:68:a4:13: d0:ce:a7:e4:a5:d5:e5:5d:9e:e7:cf:c7:30:63:4a:0b:8f:bb: 41:55:03:c9:c3:c9:2c:f9:02:83:85:ff:0c:1b:ed:e4:f0:5e: 8b:d6:6a:90:e8:0b:33:60:e1:83:3b:78:92:a9:d4:e1:7b:1b: 2c:42:10:5e:3b:71:51:cb:71:ab:9d:fe:1c:b4:c3:b3:15:a2: f5:46:40:ef:1f:a3:8b:05:71:b4:7b:18:ee:00:9b:91:b5:9e: 52:5b:26:5f:d6:66:e1:ec:6a:c3:a1:aa:e0:79:0f:27:96:e0: 5e:91:54:b9:d2:97:03:82:57:5a:09:da:38:3c:fa:aa:f4:ee: 44:22:77:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjQwNTA0MTU1NDA2WhcNMjQwNTExMTU1NDA2WjAYMRYwFAYD VQQDEw02NjM2NWExZi0xM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WCrTRXu/duugGisds5Fne+JLR1KvSuopu9OsO3uewTOQ6O/qV7wMLFUWOKG KLLcYut8cE3EhPeJNlGG8h7ie1K33VbWMrfOFohOxTkPxheBdouiCloAf17SGNrh P+QNUd6vGtqdG5006U3xGBfEzdx3XSQ0cvWegdOpHIoNnSa28PqiHF87k9t0tKRk L4TGGAuMjHV8wHwngSuNn+nB6WCJrCO0/D7wQeEjHf+0Om/ctMVBPAkh5dkIOlVg uQ1w55i9lhs/9GYG8RagnN5JmfCB65UXzd1Q6SiCiaeG/od8/yvLW0ZEk+Ug/FcN 8CsyjN0ZS7icx7LIr7IZ+GdewQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1ud0fT 9JenvbMSzZASXZ6EVTa7MB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8rsCO2Rq36S9fUp5b9hWv2FAWUKWIvivu7OcGBYEMifZslz19LIPV V4H0/5b8bqihbx+pexd/nVUNB14fNzhozT8bQUq4IsX0/L4af2dsQnzLf4Mlozxo yqPKALE4Am/CMwddmFhajjvaV1w80PwxWfl8M7R1Ewj7h0dopBPQzqfkpdXlXZ7n z8cwY0oLj7tBVQPJw8ks+QKDhf8MG+3k8F6L1mqQ6AszYOGDO3iSqdThexssQhBe O3FRy3Grnf4ctMOzFaL1RkDvH6OLBXG0exjuAJuRtZ5SWyZf1mbh7GrDoargeQ8n luBekVS50pcDgldaCdo4PPqq9O5EInc/ -----END CERTIFICATE-----Generated at Sat May 4 16:48:40 2024 by rpki-client on console-ams.rpki-client.org