$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft File: nb0ycj1x0bhWzIRJBDf78NpVJWo.mft (raw, json) Hash identifier: 7YKY1l5vCidbyVp0ISWXEJuUARMjYm0kATN51bnl0Pw= Subject key identifier: 9A:5D:6A:AF:62:93:22:7D:52:8A:DD:F2:1A:3B:80:7B:2A:6A:22:AC Authority key identifier: 9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A Certificate issuer: /CN=A9165B41/serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A Certificate serial: 0E71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft Manifest number: 0E6B Signing time: Fri 26 Apr 2024 18:23:00 +0000 Manifest this update: Fri 26 Apr 2024 18:22:59 +0000 Manifest next update: Fri 03 May 2024 18:22:59 +0000 Files and hashes: 1: nb0ycj1x0bhWzIRJBDf78NpVJWo.crl (hash: +Sbe9qzlLQzUXRLkGdHAT8kfXEo+HcQdcMLrBZnuxLo=) 2: B0DA9FC46FDD11E9BC194664C4F9AE02.roa (hash: 6i4BCEHjBFl2ANCm8cheTUA6wt1Z3/s71HG8N+bGYPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 18:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3697 (0xe71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B41/serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A Validity Not Before: Apr 26 18:22:59 2024 GMT Not After : May 3 18:22:59 2024 GMT Subject: CN=662bf104-d265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:7e:7e:fc:86:90:9f:0f:af:2c:1b:f6:21: 04:ce:ff:c9:53:8b:e8:93:47:95:9c:ff:af:f2:12: 83:b4:45:f4:85:71:41:3c:6e:9f:bf:9a:a0:b6:3c: 5f:1e:e6:4e:26:76:fc:eb:f6:24:f4:9b:ce:90:39: c1:06:c4:2e:db:29:09:cf:c0:10:6c:30:d0:71:06: 04:9f:70:bb:5a:98:1c:f8:38:3e:94:05:61:a9:c6: ab:51:c0:f6:0c:57:43:0b:85:cc:8d:45:a3:a1:b4: 39:1e:50:e1:bb:a8:21:b1:6f:71:ad:ee:5d:71:41: 5c:60:57:e2:b1:61:cd:92:bc:c4:ae:5f:7c:ff:ef: c7:b0:5d:1d:56:e2:91:0b:e1:b4:99:b3:5b:90:4f: 2f:6b:bf:df:66:e7:22:5b:31:d5:b1:cc:ab:4b:8b: 66:08:fe:2b:86:e9:50:f0:f4:78:60:33:5f:ed:67: ff:c5:de:4c:78:b6:54:66:50:0c:50:32:78:a5:2c: b4:89:ef:ed:e9:ac:37:48:3b:2d:c6:99:1c:65:49: ad:ab:87:0c:65:81:cb:33:be:47:b7:56:23:88:8d: 06:d1:87:50:24:29:48:8e:47:6f:ca:b6:d3:c8:3f: b8:11:4d:5a:32:6a:15:ee:e4:e2:56:03:ef:32:e6: e2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:6A:AF:62:93:22:7D:52:8A:DD:F2:1A:3B:80:7B:2A:6A:22:AC X509v3 Authority Key Identifier: keyid:9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:90:0e:35:60:25:d3:1d:aa:ba:3f:09:56:68:a4:fb:57:aa: 7b:be:bb:80:8e:2c:2e:58:73:e4:85:23:a5:b9:9b:a5:cc:83: 22:46:c9:33:f0:11:5a:65:49:a4:f3:fc:6a:46:5d:5a:dd:75: 70:c0:d2:92:be:cf:91:23:ba:86:03:3e:ee:70:94:6d:b1:31: 86:84:20:af:38:eb:1c:67:e7:a0:0c:ef:3b:92:a4:12:9f:2a: 7e:f4:03:c5:c2:d1:7e:ec:83:f6:d9:f3:20:dc:1e:cb:fc:c1: 74:99:3b:35:7b:71:3e:9f:34:60:49:96:0a:69:01:2a:ea:aa: 0e:01:ce:18:e5:be:39:2b:50:0a:5f:9b:b2:f9:c9:08:3d:40: 2b:d2:ff:e6:33:17:ba:31:d7:f4:9d:ce:0c:4e:e0:95:c6:72: 54:19:3e:55:d4:25:bc:5f:74:fb:0a:f6:8b:aa:cc:49:10:31: c7:da:6c:e9:eb:a9:6c:67:42:5f:76:18:b5:ff:87:26:38:0f: 4a:38:0f:a5:fb:4a:53:25:b2:38:62:95:cf:62:4b:b5:b0:f7: 4d:b2:d3:58:53:af:77:e9:d4:9b:99:2e:c9:05:13:d3:78:f6: c9:c0:85:99:a1:63:46:8f:db:02:b3:a9:99:49:8b:35:26:dc: d4:21:aa:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCNDExMTAvBgNVBAUTKDlEQkQzMjcyM0Q3MUQxQjg1NkNDODQ0OTA0MzdGQkYw REE1NTI1NkEwHhcNMjQwNDI2MTgyMjU5WhcNMjQwNTAzMTgyMjU5WjAYMRYwFAYD VQQDEw02NjJiZjEwNC1kMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QB+fvyGkJ8Prywb9iEEzv/JU4vok0eVnP+v8hKDtEX0hXFBPG6fv5qgtjxf HuZOJnb86/Yk9JvOkDnBBsQu2ykJz8AQbDDQcQYEn3C7Wpgc+Dg+lAVhqcarUcD2 DFdDC4XMjUWjobQ5HlDhu6ghsW9xre5dcUFcYFfisWHNkrzErl98/+/HsF0dVuKR C+G0mbNbkE8va7/fZuciWzHVscyrS4tmCP4rhulQ8PR4YDNf7Wf/xd5MeLZUZlAM UDJ4pSy0ie/t6aw3SDstxpkcZUmtq4cMZYHLM75Ht1YjiI0G0YdQJClIjkdvyrbT yD+4EU1aMmoV7uTiVgPvMubijwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpdaq9i kyJ9Uord8ho7gHsqaiKsMB8GA1UdIwQYMBaAFJ29MnI9cdG4VsyESQQ3+/DaVSVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUI0MS8zM0QyNTMxNjZG REIxMUU5QTZFNkJENURDNEY5QUUwMi9uYjB5Y2oxeDBiaFd6SVJKQkRmNzhOcFZK V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iMHljajF4MGJoV3pJUkpCRGY3OE5wVkpXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUI0MS8zM0QyNTMxNjZGREIxMUU5QTZFNkJENURDNEY5QUUwMi9uYjB5Y2oxeDBi aFd6SVJKQkRmNzhOcFZKV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFkA41YCXTHaq6PwlWaKT7V6p7vruAjiwuWHPkhSOluZulzIMiRskz 8BFaZUmk8/xqRl1a3XVwwNKSvs+RI7qGAz7ucJRtsTGGhCCvOOscZ+egDO87kqQS nyp+9APFwtF+7IP22fMg3B7L/MF0mTs1e3E+nzRgSZYKaQEq6qoOAc4Y5b45K1AK X5uy+ckIPUAr0v/mMxe6Mdf0nc4MTuCVxnJUGT5V1CW8X3T7CvaLqsxJEDHH2mzp 66lsZ0Jfdhi1/4cmOA9KOA+l+0pTJbI4YpXPYku1sPdNstNYU6936dSbmS7JBRPT ePbJwIWZoWNGj9sCs6mZSYs1JtzUIarU -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:04 2024 by rpki-client on console-ams.rpki-client.org