$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json) Hash identifier: I7O/6htenosaYvaNnTY+D699fonmyiAou9EByvHXK6w= Subject key identifier: 75:9D:66:A2:AC:F7:2E:62:DE:80:3B:2A:D1:12:ED:67:EC:88:9B:3F Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Certificate serial: 2674 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft Manifest number: 2674 Signing time: Thu 02 May 2024 15:59:46 +0000 Manifest this update: Thu 02 May 2024 15:59:46 +0000 Manifest next update: Thu 09 May 2024 15:59:46 +0000 Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: iSYPhCS55KdBUG1fRyO3jzaVLLtaMsRJDSBV6Alt9+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 15:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9844 (0x2674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Validity Not Before: May 2 15:59:46 2024 GMT Not After : May 9 15:59:46 2024 GMT Subject: CN=6633b872-5107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:27:cd:58:34:ad:b8:a5:63:1a:32:3e:b3: e6:a8:3e:72:76:da:8f:ec:40:5f:f7:41:55:df:93: 48:5e:f4:ae:bf:db:47:5f:6b:42:35:29:32:bb:b5: d9:56:01:14:89:51:0f:a2:54:1b:1e:c2:7c:12:ce: 74:25:28:fa:ad:81:75:16:aa:e4:18:88:d4:6c:a3: f7:3a:45:78:42:05:8c:53:26:6d:ac:98:7c:78:9e: 4d:ff:7a:64:7f:50:2b:e2:dc:91:47:2d:21:ce:39: 8c:00:ce:fc:df:ea:34:4f:92:e0:98:31:16:61:75: 7b:25:2c:38:0c:bd:0a:b6:63:c9:d7:ae:cd:7a:e0: fb:22:91:c3:1b:b5:b8:25:a7:bc:6e:b1:98:dc:a8: 56:50:18:e3:ec:c3:91:db:65:a6:49:84:e3:ab:ff: 94:1f:9f:af:8f:43:c4:59:fa:1f:4a:e0:c7:43:98: 13:16:15:e6:f7:91:e6:a5:4c:87:e3:e9:0a:96:c5: 28:59:29:c7:a2:89:7a:da:48:72:06:3b:54:64:ac: f2:a7:39:09:bf:f3:04:f5:ff:fc:8f:e7:5f:1e:c4: b9:75:ce:59:31:9b:45:06:9a:bc:2c:17:73:1b:51: 3d:1b:df:6d:11:9b:6f:ef:00:5c:64:56:07:f1:87: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9D:66:A2:AC:F7:2E:62:DE:80:3B:2A:D1:12:ED:67:EC:88:9B:3F X509v3 Authority Key Identifier: keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:7d:4c:e7:40:ee:cc:5c:d3:ab:8a:0c:29:ba:67:3f:84:e5: 51:7c:b5:27:00:87:af:f3:58:4b:d4:d6:b5:57:24:61:86:fe: 80:fe:b5:b9:28:90:ca:ca:76:4b:bd:ea:a9:1f:f9:97:7c:78: 1f:21:2d:81:ae:1b:1e:43:eb:20:9e:e7:cf:d3:7a:6e:94:ea: c9:f0:66:8d:32:de:b1:b2:16:b5:ae:bf:7c:cc:5c:d1:16:d3: a5:b9:49:8c:2e:84:f5:3a:fa:0b:8c:89:c1:d9:93:b7:3b:fc: 4c:34:8a:f7:31:17:aa:2e:00:d8:cb:2d:7d:fc:d0:23:42:5e: 0e:92:58:de:14:77:fe:56:01:c9:18:a3:1d:9e:2f:c8:d4:b9: 2f:31:bd:db:01:12:db:35:eb:3c:e9:51:e8:1f:69:e4:ff:9d: c9:6c:9d:11:5a:ee:d7:17:da:ca:20:47:7f:4f:64:b2:ae:cd: c1:2c:37:b5:18:58:1d:e3:03:4b:cf:2d:35:b7:a5:b5:d8:18: 6a:37:ff:b4:5c:43:b9:6e:60:ea:50:4b:a1:58:c0:a6:34:cf: b0:b5:ab:ba:31:f4:a3:f9:98:d9:5f:71:6f:7b:9f:d9:c1:3a: c4:b2:75:88:43:0f:15:c5:4d:c3:5e:be:0c:84:38:9c:c8:63: 1b:8d:d3:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0QzMxMTAvBgNVBAUTKDM2MEFEQUZFODYxQzQ4M0FCNkQ1NEFBMzQwRkI4NEQy NEJBQkYyMUIwHhcNMjQwNTAyMTU1OTQ2WhcNMjQwNTA5MTU1OTQ2WjAYMRYwFAYD VQQDEw02NjMzYjg3Mi01MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmt8nzVg0rbilYxoyPrPmqD5ydtqP7EBf90FV35NIXvSuv9tHX2tCNSkyu7XZ VgEUiVEPolQbHsJ8Es50JSj6rYF1FqrkGIjUbKP3OkV4QgWMUyZtrJh8eJ5N/3pk f1Ar4tyRRy0hzjmMAM783+o0T5LgmDEWYXV7JSw4DL0KtmPJ167NeuD7IpHDG7W4 Jae8brGY3KhWUBjj7MOR22WmSYTjq/+UH5+vj0PEWfofSuDHQ5gTFhXm95HmpUyH 4+kKlsUoWSnHool62khyBjtUZKzypzkJv/ME9f/8j+dfHsS5dc5ZMZtFBpq8LBdz G1E9G99tEZtv7wBcZFYH8Ye47QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWdZqKs 9y5i3oA7KtES7WfsiJs/MB8GA1UdIwQYMBaAFDYK2v6GHEg6ttVKo0D7hNJLq/Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8xOEVEMzgyOEI4 QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NEcTIxVXFqUVB1RTBrdXI4 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05ncmFfb1ljU0RxMjFVcWpRUHVFMGt1cjhocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRDMy8xOEVEMzgyOEI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NE cTIxVXFqUVB1RTBrdXI4aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7fUznQO7MXNOrigwpumc/hOVRfLUnAIev81hL1Na1VyRhhv6A/rW5 KJDKynZLveqpH/mXfHgfIS2BrhseQ+sgnufP03pulOrJ8GaNMt6xsha1rr98zFzR FtOluUmMLoT1OvoLjInB2ZO3O/xMNIr3MReqLgDYyy19/NAjQl4OkljeFHf+VgHJ GKMdni/I1LkvMb3bARLbNes86VHoH2nk/53JbJ0RWu7XF9rKIEd/T2Syrs3BLDe1 GFgd4wNLzy01t6W12BhqN/+0XEO5bmDqUEuhWMCmNM+wtau6MfSj+ZjZX3Fve5/Z wTrEsnWIQw8VxU3DXr4MhDicyGMbjdMA -----END CERTIFICATE-----Generated at Thu May 2 17:43:06 2024 by rpki-client on console-fra.rpki-client.org