$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json) Hash identifier: sBPVnK0RvUzr6E66+WMOvpVg725wmfa3VmFGLyvO6T4= Subject key identifier: 91:BE:DB:41:04:71:93:30:A1:A7:C3:E2:86:2C:0F:C0:21:D6:92:7E Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft Manifest number: 0825 Signing time: Mon 06 May 2024 21:53:06 +0000 Manifest this update: Mon 06 May 2024 21:53:05 +0000 Manifest next update: Mon 13 May 2024 21:53:05 +0000 Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: eCi7hxbZrZ9FaPWNLD9Tgm0b2hlOwJBAkPjTPS0/fFc=) 2: E04ADD7CB2E511EAA94E5634C4F9AE02.roa (hash: 0Vwi3dV76YkUx0RLq3epBcAdHFd1u3zQCBlRnPFM9c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 21:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Validity Not Before: May 6 21:53:05 2024 GMT Not After : May 13 21:53:05 2024 GMT Subject: CN=66395141-f847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:3f:0f:34:d5:f4:aa:f1:2a:fe:2a:0a:59: 8e:db:69:06:7a:0c:af:16:2e:72:86:1a:e6:fd:a7: 29:31:48:04:2f:d3:4f:1b:59:f9:4f:9b:f5:77:3a: c1:9e:1d:cc:b5:87:e4:9b:0e:de:67:95:ee:2b:6a: 01:4c:b6:80:29:69:ad:47:07:a6:cb:b8:74:4c:31: 8d:c3:ce:cc:8c:aa:c5:05:b1:99:16:a1:44:03:b8: 98:bc:7a:49:6a:dd:aa:f2:48:ad:32:d2:9a:e7:4e: a7:50:3a:ea:86:6d:b1:13:59:19:4d:a0:2e:d4:97: a6:97:d3:9e:00:e5:50:da:1f:6b:a5:a4:32:f7:9f: 0c:8a:7a:3c:98:01:1b:cc:23:cd:21:55:69:31:95: 8a:40:f1:ff:e9:4c:b4:23:14:b2:ad:3a:16:c1:c4: 95:6c:ad:dd:26:22:3d:71:d5:69:4e:72:95:1c:13: 8c:e0:45:4e:9f:5e:20:02:d4:17:2e:e7:d7:fd:e3: ec:82:2a:7c:e4:6d:68:f8:8e:e9:d8:e2:c4:ff:74: 47:39:22:69:23:86:0f:91:f3:66:58:b2:d0:61:0b: 12:aa:d2:28:73:bf:80:02:97:c7:eb:ee:c0:65:25: 93:5e:00:7c:64:b8:32:28:70:b3:40:8d:8a:88:7f: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:DB:41:04:71:93:30:A1:A7:C3:E2:86:2C:0F:C0:21:D6:92:7E X509v3 Authority Key Identifier: keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:65:ba:0c:4c:f7:b8:b5:1e:d6:77:ae:93:b8:19:73:d7:cc: 3a:01:de:72:f1:e4:98:8b:11:de:29:a2:4d:f5:65:d2:9f:8a: 13:4f:5d:3e:69:30:f7:d1:69:eb:cb:7e:57:ab:59:3e:05:6e: c9:1e:93:95:9d:07:94:c6:62:32:d9:87:4e:52:af:62:6b:8f: db:a9:7c:a1:37:d7:cf:f0:e7:06:ad:4c:45:c4:24:da:92:db: 0d:e1:08:af:d6:9d:18:df:c9:36:8d:97:15:6d:79:08:be:12: 2a:4c:f8:9d:e5:91:42:90:03:fa:f1:e7:f4:20:f4:de:1c:12: 2c:3b:d5:bc:51:5c:cc:b2:08:86:0a:bb:4f:42:15:f4:a4:35: a5:58:7a:87:79:a8:85:a0:c6:fa:a1:df:27:4c:88:d6:cf:2b: 73:5c:ca:86:ad:50:ef:97:83:ec:e7:92:d4:f7:8e:c8:6a:a7: 91:a2:d9:ee:9e:7b:ae:37:ea:4d:9e:4f:8e:5f:60:0b:2d:fd: 05:a4:e6:78:28:93:05:f7:6e:3c:6d:94:89:bf:c9:b4:df:c1: 49:fb:aa:36:19:76:df:b9:7a:48:24:62:83:07:f4:37:89:13: f3:b4:ad:cc:fb:a2:09:05:42:8c:e2:77:0b:1f:19:a1:7d:5e: 96:36:7a:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBOUMxMTAvBgNVBAUTKDM2N0UxRkFGNzUyQzYzMUZDNDNEODcyMDk4MjQwRTgw MzIxNTc1QzcwHhcNMjQwNTA2MjE1MzA1WhcNMjQwNTEzMjE1MzA1WjAYMRYwFAYD VQQDEw02NjM5NTE0MS1mODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8k/DzTV9KrxKv4qClmO22kGegyvFi5yhhrm/acpMUgEL9NPG1n5T5v1dzrB nh3MtYfkmw7eZ5XuK2oBTLaAKWmtRwemy7h0TDGNw87MjKrFBbGZFqFEA7iYvHpJ at2q8kitMtKa506nUDrqhm2xE1kZTaAu1Jeml9OeAOVQ2h9rpaQy958Mino8mAEb zCPNIVVpMZWKQPH/6Uy0IxSyrToWwcSVbK3dJiI9cdVpTnKVHBOM4EVOn14gAtQX LufX/ePsgip85G1o+I7p2OLE/3RHOSJpI4YPkfNmWLLQYQsSqtIoc7+AApfH6+7A ZSWTXgB8ZLgyKHCzQI2KiH+fvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG+20EE cZMwoafD4oYsD8Ah1pJ+MB8GA1UdIwQYMBaAFDZ+H691LGMfxD2HIJgkDoAyFXXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE5Qy8yQTI5NDg0Q0FC QTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4X0VQWWNnbUNRT2dESVZk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05uNGZyM1VzWXhfRVBZY2dtQ1FPZ0RJVmRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4 X0VQWWNnbUNRT2dESVZkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjZboMTPe4tR7Wd66TuBlz18w6Ad5y8eSYixHeKaJN9WXSn4oTT10+ aTD30Wnry35Xq1k+BW7JHpOVnQeUxmIy2YdOUq9ia4/bqXyhN9fP8OcGrUxFxCTa ktsN4Qiv1p0Y38k2jZcVbXkIvhIqTPid5ZFCkAP68ef0IPTeHBIsO9W8UVzMsgiG CrtPQhX0pDWlWHqHeaiFoMb6od8nTIjWzytzXMqGrVDvl4Ps55LU947IaqeRotnu nnuuN+pNnk+OX2ALLf0FpOZ4KJMF9248bZSJv8m038FJ+6o2GXbfuXpIJGKDB/Q3 iRPztK3M+6IJBUKM4ncLHxmhfV6WNno3 -----END CERTIFICATE-----Generated at Mon May 6 23:05:39 2024 by rpki-client on console-fra.rpki-client.org